Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.mft
File:                     CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.mft (raw, json)
Hash identifier:          Hppm6uEI2liXVSDx2Ooy9WJ13BAmLh5AzhFNGLkfNpI=
Subject key identifier:   41:D9:AD:33:4C:7F:52:5F:C1:B2:CF:0B:02:42:5F:C5:52:6B:3F:FD
Authority key identifier: CA:3D:CE:AB:D1:73:2C:2C:D6:E2:F1:AC:76:15:D0:4F:24:87:DA:9B
Certificate issuer:       /CN=CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B
Certificate serial:       39DA4811E5A7B0A1A30E3562AAEF0C3CC35AE3CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.mft
Manifest number:          022F
Signing time:             Mon 19 Dec 2022 04:54:54 +0000
Manifest this update:     Mon 19 Dec 2022 04:49:54 +0000
Manifest next update:     Tue 20 Dec 2022 07:52:54 +0000
Files and hashes:         1: CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.crl (hash: PfaG3Yt+Sefw613dAQZAVqAYKHpWhKPbH6ZnUmLq7dY=)
                          2: 3137302e3235342e39362e302f32322d3234203d3e20323635313032.roa (hash: XxsFARONJeG33mNA1FYiS4YBB4KSAZqYOFIIgq15Qe8=)
                          3: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: zQLJbwiDZw01kFRt4GAtYq460e90HISLupm2Nx1WmVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:da:48:11:e5:a7:b0:a1:a3:0e:35:62:aa:ef:0c:3c:c3:5a:e3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B
        Validity
            Not Before: Dec 19 04:49:54 2022 GMT
            Not After : Dec 20 07:52:54 2022 GMT
        Subject: CN=41D9AD334C7F525FC1B2CF0B02425FC5526B3FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:25:ac:86:fc:d2:f5:61:14:5b:9e:c6:f4:
                    d7:f0:c3:2c:b3:c7:91:d8:6f:7c:52:8f:91:96:85:
                    43:3c:11:9d:16:ed:d3:81:3d:e8:9c:86:9c:90:c4:
                    ad:8c:c1:2d:33:6e:45:6e:d9:18:23:48:db:46:9a:
                    6c:4d:45:3c:2c:9a:23:9f:49:b9:e2:b9:94:57:3b:
                    c8:14:01:4c:7a:be:e3:6d:74:84:f4:e8:93:40:f2:
                    2a:2f:b4:91:f7:f1:28:f4:84:c9:47:54:8c:2a:9f:
                    84:86:96:4b:c9:70:bb:2f:98:57:3e:a3:32:c1:a8:
                    17:74:3a:bb:87:0b:8a:d2:a7:a1:9e:df:b9:0f:64:
                    f9:b0:41:37:1e:0a:b6:fb:f4:36:7b:79:dc:fd:ba:
                    c1:62:7c:00:a0:d3:5f:e8:ed:44:c7:dc:ae:79:c3:
                    9b:a6:8b:78:83:8b:76:f1:fc:25:11:a7:0a:cf:62:
                    35:41:3c:81:da:5e:79:0e:e2:71:20:0f:b1:0e:af:
                    4c:c7:5c:40:e3:65:e4:d1:bd:41:70:0f:61:b6:87:
                    05:7b:81:3d:6c:3c:7f:23:7e:9a:09:68:dc:bc:ef:
                    3b:6e:28:0b:45:b7:ac:ff:eb:9b:7f:27:37:67:d9:
                    34:42:46:41:ef:2d:a8:1f:38:1d:86:22:81:30:95:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:AD:33:4C:7F:52:5F:C1:B2:CF:0B:02:42:5F:C5:52:6B:3F:FD
            X509v3 Authority Key Identifier:
                keyid:CA:3D:CE:AB:D1:73:2C:2C:D6:E2:F1:AC:76:15:D0:4F:24:87:DA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/CA3DCEABD1732C2CD6E2F1AC7615D04F2487DA9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:c9:cc:27:f6:cd:86:87:e7:5b:39:05:8d:f4:7c:d1:0e:
         8a:fd:46:f5:08:c2:66:05:11:ea:1f:de:7a:b8:cf:e3:2c:e8:
         0a:98:e3:4d:57:05:4f:81:f2:8a:ee:bf:fe:a5:08:2d:f2:6b:
         4a:d3:c1:10:f9:fc:35:74:ab:ff:2a:87:47:fe:8a:8a:b1:57:
         d2:dd:ed:87:41:5b:7b:08:c2:39:7f:e8:25:e1:78:d1:1a:9a:
         90:a5:29:5e:a8:57:c9:6a:65:14:1c:6e:68:3d:90:ec:98:b2:
         7f:b5:9f:67:f7:2e:0d:f9:ce:27:e2:62:c5:fe:ab:4b:82:d5:
         0a:42:cd:90:d8:dc:94:12:d7:dc:84:97:29:04:04:ed:d8:97:
         37:28:72:5c:59:9d:22:5b:b2:d8:31:8a:27:41:b6:6b:6d:6f:
         a5:b5:22:06:78:63:17:52:a1:4d:01:04:e1:17:b5:d3:eb:9a:
         fb:65:9f:1f:5c:7d:12:1f:53:c1:a6:c4:28:66:f2:2e:35:90:
         99:d9:1a:5a:4b:52:ad:e4:d7:e6:1b:2c:4d:8c:8c:61:87:32:
         5b:9a:0c:cc:f7:6b:b6:d1:6f:ca:65:cb:30:7c:76:e2:d2:01:
         5b:a0:8e:32:a9:96:c9:19:4a:39:6f:a1:84:23:e3:d0:46:dd:
         f2:31:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----