Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.mft
File:                     D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.mft (raw, json)
Hash identifier:          UUHUrvcpqp+4u8XZPkKwrhfLA4KLikcRFEFXjD55J60=
Subject key identifier:   39:53:AA:8D:0A:20:60:96:6E:CF:5C:FF:67:0E:78:80:86:DF:98:35
Authority key identifier: D3:36:0C:66:B6:A9:CB:FE:83:C3:E3:0E:84:02:01:8E:EF:BF:BA:C9
Certificate issuer:       /CN=D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9
Certificate serial:       07D9DC0BA53F7346BAD3CC1ACC98C1798A6E4D58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.mft
Manifest number:          22
Signing time:             Mon 26 Jun 2023 19:24:30 +0000
Manifest this update:     Mon 26 Jun 2023 19:19:30 +0000
Manifest next update:     Tue 27 Jun 2023 22:01:30 +0000
Files and hashes:         1: D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.crl (hash: IvEpvgBnigwOpF9vKhB+8kxTd8d3uHh+VdAd9EArQnw=)
                          2: 323830343a356134633a3a2f33322d3438203d3e20323638373633.roa (hash: SYOm3fpoZ0cb9F/QSSKf7o9KMZcsJ5m8XZYvKF5brdc=)
                          3: 34352e3137322e3130342e302f32322d3234203d3e20323638373633.roa (hash: fNr2nyDgVrZGAtqCG74KG2++bGSKuJz1TBXCxpc2swU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:dc:0b:a5:3f:73:46:ba:d3:cc:1a:cc:98:c1:79:8a:6e:4d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9
        Validity
            Not Before: Jun 26 19:19:30 2023 GMT
            Not After : Jun 27 22:01:30 2023 GMT
        Subject: CN=3953AA8D0A2060966ECF5CFF670E788086DF9835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:85:1a:f5:f8:62:f9:dd:54:06:d4:81:c1:
                    33:c6:90:3b:d8:ed:0f:9b:1e:bc:5a:72:8a:fd:82:
                    ef:24:3b:73:45:93:ea:92:de:e2:1d:af:f5:ba:0c:
                    01:0a:c9:96:16:c9:64:0c:a0:09:20:98:49:3b:d1:
                    03:86:04:03:bb:a8:d4:5e:6b:0d:a8:8a:45:31:8f:
                    1f:3a:f0:e2:06:49:f3:27:25:f7:0b:cd:b7:bb:c8:
                    f2:51:ef:31:46:76:60:19:ca:35:c3:1d:cc:fa:33:
                    b4:eb:66:63:1d:c1:5a:f6:af:c0:53:61:6f:b8:00:
                    49:ab:1d:69:56:bc:30:b6:3e:68:9b:e8:52:47:cd:
                    01:a5:c9:9f:28:4b:bc:cb:1f:76:a9:53:70:20:41:
                    7d:e5:39:cc:22:da:de:2a:24:98:08:2e:e4:ab:7f:
                    24:8a:78:0d:46:c7:92:bb:bf:7c:7d:ea:d8:9f:85:
                    c8:09:fc:57:69:76:10:14:ed:33:b7:6f:b4:f8:a6:
                    7f:66:d7:d9:9b:86:69:64:40:44:ee:01:25:70:41:
                    92:02:f2:93:e8:78:fc:a4:70:d3:66:82:3e:a6:13:
                    8c:8d:e2:2d:ba:e5:4f:b8:1a:a1:5a:07:bd:ec:d3:
                    03:7b:4d:3d:4c:25:d0:8a:03:32:d1:c7:bc:d6:bd:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:AA:8D:0A:20:60:96:6E:CF:5C:FF:67:0E:78:80:86:DF:98:35
            X509v3 Authority Key Identifier:
                keyid:D3:36:0C:66:B6:A9:CB:FE:83:C3:E3:0E:84:02:01:8E:EF:BF:BA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/D3360C66B6A9CBFE83C3E30E8402018EEFBFBAC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:10:41:d2:18:0b:0e:6f:b5:92:0b:d6:82:1e:da:23:d9:
         b3:0d:67:40:45:00:00:ee:fc:da:45:67:5b:35:9e:77:5c:a0:
         35:6e:ca:0f:37:bb:c5:c3:18:3e:ed:62:fe:4a:18:ba:49:aa:
         f6:18:3f:bd:8b:41:d2:0c:c8:03:a7:38:f5:0b:98:f3:ce:41:
         1f:a1:f4:93:91:64:68:3a:6e:1e:85:76:62:80:78:3e:59:4b:
         70:2b:72:7e:54:60:20:0d:94:a3:4f:4e:b1:07:b9:db:b5:90:
         3b:dd:80:d5:d0:07:15:51:60:56:d8:8d:02:e6:c9:9e:d7:92:
         f8:87:ba:b7:d3:58:73:f6:d4:ef:e0:eb:0a:be:db:c5:78:d1:
         a8:87:6d:18:4b:00:24:f6:f3:80:d7:18:7c:4a:f8:27:bf:2f:
         f0:b6:84:1e:31:a8:29:cf:f4:d1:34:6a:80:03:11:30:2a:66:
         9e:8d:2b:fa:fb:1f:5a:ed:b3:f6:f4:d0:82:c9:ad:ce:9e:11:
         7f:68:97:20:82:e0:88:73:57:ff:f4:a1:8e:80:6d:4a:9c:cc:
         35:d4:57:66:50:c7:20:e5:cc:72:c7:49:0b:93:8a:f1:57:e8:
         d3:e8:f9:ab:ef:b0:60:3a:2c:cb:47:5e:f1:7b:3b:1b:e0:e5:
         96:72:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----