Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.mft
File:                     60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.mft (raw, json)
Hash identifier:          aGcJzdD5mxZQROHvJS6L/pQ3INJGkXPpl0aP6Wqg+7g=
Subject key identifier:   A9:06:2D:FE:75:CE:E2:24:D9:AD:31:95:80:0A:1D:04:8B:68:41:FB
Authority key identifier: 60:AE:48:72:2A:8A:C5:2F:D6:08:C6:E7:EE:C4:16:01:9B:2C:1A:B5
Certificate issuer:       /CN=60AE48722A8AC52FD608C6E7EEC416019B2C1AB5
Certificate serial:       33F4EA6ECE07943FD1BA867AAA414F0D3C05DDD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.mft
Manifest number:          27
Signing time:             Sat 14 May 2022 08:27:55 +0000
Manifest this update:     Sat 14 May 2022 08:22:55 +0000
Manifest next update:     Sun 15 May 2022 11:05:55 +0000
Files and hashes:         1: 34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (hash: VNI0Q1qCH7c2eSaqZ80oMwYYiYDUove18Z0DIkJ5UBs=)
                          2: 323830343a356635343a3a2f33322d3336203d3e20323639303932.roa (hash: AprGerpzM4w2TWprM/lKob0p1rDkqvtf36TtqkwXSAE=)
                          3: 60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.crl (hash: dLB3DzlWn/U8dFvkFTcFXPi3KWMMmV6SuiMSO8qh830=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f4:ea:6e:ce:07:94:3f:d1:ba:86:7a:aa:41:4f:0d:3c:05:dd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60AE48722A8AC52FD608C6E7EEC416019B2C1AB5
        Validity
            Not Before: May 14 08:22:55 2022 GMT
            Not After : May 15 11:05:55 2022 GMT
        Subject: CN=A9062DFE75CEE224D9AD3195800A1D048B6841FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:8a:0a:ae:fe:0b:bb:1c:0f:09:7d:28:e9:
                    f9:1b:6f:4f:65:d5:c1:40:09:e5:59:cc:a6:ff:50:
                    7f:f2:76:cf:72:1b:d9:6e:77:38:54:30:a7:12:16:
                    b4:d6:4f:2c:34:78:d5:39:8f:6c:f4:02:27:16:20:
                    1d:73:01:78:13:8a:49:e6:c9:9b:5f:05:c8:bb:6d:
                    5f:eb:e8:bc:a7:d7:a3:24:89:a4:0b:41:0d:b1:6a:
                    2f:a3:61:82:22:a4:82:eb:ba:3b:28:51:2b:06:2e:
                    ba:a5:85:cd:6d:5a:a2:55:ad:e0:f5:cc:be:38:ce:
                    4d:a3:88:78:6b:99:77:00:35:a7:a5:03:66:14:6e:
                    d4:4f:93:5a:49:87:b5:2b:48:cc:49:5b:ee:09:b0:
                    21:21:5f:cc:72:44:e9:c9:25:3b:cf:08:d3:36:32:
                    01:1e:fe:46:83:76:aa:7f:69:df:43:ec:8b:4c:74:
                    4d:1a:8e:09:e7:3d:ee:fb:f8:d8:7e:2c:97:fd:b9:
                    d6:ab:4e:bd:f9:6a:52:4b:8d:0b:d2:55:38:aa:f6:
                    17:62:fa:22:49:44:72:b0:bc:5a:f1:34:5c:26:15:
                    03:3f:b4:7b:7f:63:84:b7:78:56:ca:8e:b5:a0:ff:
                    94:c1:fb:da:20:fb:24:6b:ee:25:c2:d9:91:05:cd:
                    97:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:2D:FE:75:CE:E2:24:D9:AD:31:95:80:0A:1D:04:8B:68:41:FB
            X509v3 Authority Key Identifier:
                keyid:60:AE:48:72:2A:8A:C5:2F:D6:08:C6:E7:EE:C4:16:01:9B:2C:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/60AE48722A8AC52FD608C6E7EEC416019B2C1AB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:41:b3:7d:f4:5e:7a:4f:76:ad:3e:02:6f:fc:5f:53:c7:
         7f:54:90:48:32:39:e8:f8:a3:9a:1a:f9:d9:6c:af:91:83:9d:
         31:3d:77:fa:f6:0b:88:3b:f3:2c:3d:99:ef:e6:da:dd:e7:cd:
         4b:cd:2e:b8:d4:53:32:3b:72:b6:17:0a:7d:3d:b5:e8:a5:bb:
         cd:73:a6:0a:41:04:81:84:cd:36:2f:42:72:d0:1e:05:a7:da:
         92:e9:10:ec:56:77:6f:45:c4:f9:1a:b6:55:9d:75:ae:d0:e1:
         bc:4b:e9:35:d7:6b:e7:40:a2:ec:1b:38:b3:dd:41:86:86:19:
         0b:02:ab:1c:61:41:11:d3:7b:94:c5:ee:9e:d3:bd:4b:82:5e:
         4b:bc:20:9b:47:09:52:33:d5:6c:9c:11:5e:02:3e:ed:b0:9d:
         4b:71:69:49:0d:87:ed:6b:81:1b:2b:f7:f2:d5:92:b3:c0:d1:
         a6:7f:8e:71:f3:54:78:ab:57:ab:75:67:0f:cb:4c:59:5f:53:
         50:3f:1c:e6:ff:9b:c6:3d:12:7b:e9:fa:9f:f9:10:58:01:9e:
         1c:6b:84:af:eb:bc:c3:4b:e4:6b:9a:13:3a:be:a2:4c:cd:24:
         29:9d:c5:f8:ba:0b:2f:a9:25:4f:04:67:ed:85:e0:84:52:37:
         b3:7d:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----