Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.mft
File:                     75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.mft (raw, json)
Hash identifier:          aX5EStdRAFKOb27VUWdBEw5uxRTGlcy+b6mBsvGwPV4=
Subject key identifier:   DC:38:48:69:AE:AF:0D:47:49:58:C9:D7:32:29:92:39:18:08:79:5F
Authority key identifier: 75:B7:C7:7C:ED:B8:5D:E1:34:AD:46:DF:92:CA:9D:EB:D0:AB:76:36
Certificate issuer:       /CN=75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636
Certificate serial:       0713F8EDD9B84B69A269EEE797CC29C1DC26FA31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.mft
Manifest number:          0B
Signing time:             Tue 14 Nov 2023 12:04:35 +0000
Manifest this update:     Tue 14 Nov 2023 11:59:35 +0000
Manifest next update:     Wed 15 Nov 2023 15:43:35 +0000
Files and hashes:         1: 34352e352e34302e302f32322d3332203d3e20323636303933.roa (hash: Dg4AsO3CqUfqSj9rKJlh+3uzmj4A6Wrqm8ElfPoVvj4=)
                          2: 323830343a336138343a3a2f33322d313238203d3e20323636303933.roa (hash: ELLMjdSoOZ4MHo9JBHfy/cg5VirE0Qm3KFjUDoXpsBI=)
                          3: 75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.crl (hash: 5Cnp4TPTXgY4+WmzH4ksy6zqGjoG5KB+h4pVOsDeF6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:13:f8:ed:d9:b8:4b:69:a2:69:ee:e7:97:cc:29:c1:dc:26:fa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636
        Validity
            Not Before: Nov 14 11:59:35 2023 GMT
            Not After : Nov 15 15:43:35 2023 GMT
        Subject: CN=DC384869AEAF0D474958C9D7322992391808795F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:8c:ed:07:2a:3d:1d:c4:7c:95:d2:41:77:
                    f2:34:44:da:f0:92:fb:ac:72:8c:ba:9f:bf:0d:df:
                    d7:e0:00:c2:e1:b5:1d:72:37:44:ae:8b:70:d2:7f:
                    48:cf:ad:b1:e5:12:2e:06:c5:ae:35:c6:f8:1c:06:
                    cc:53:e0:70:4d:15:ee:d3:6d:17:4c:e6:d4:ca:33:
                    73:26:40:3e:e6:81:d8:08:b7:e1:9d:57:b6:e2:e0:
                    b6:81:88:79:80:99:9b:a2:20:35:ba:38:45:bd:be:
                    c5:fa:93:4b:96:3f:06:05:07:9d:c8:de:30:e0:da:
                    b0:d6:35:38:59:b4:d7:f2:db:f7:8f:45:05:b9:a7:
                    d2:9b:8c:93:46:ad:04:5b:0d:9f:f8:03:89:51:b2:
                    47:b3:f7:b4:69:d9:d8:ef:06:78:29:ea:43:59:50:
                    06:bf:78:fa:d3:29:fd:e0:25:a4:cf:a3:a5:86:85:
                    0d:f8:d6:88:fa:11:25:6a:9b:c8:0a:5d:45:ae:c7:
                    14:21:70:9f:08:9f:f1:16:53:73:60:32:0b:f8:32:
                    da:8f:72:57:f2:2c:2e:a6:50:4c:4b:8a:44:04:e3:
                    ef:20:67:a2:ca:48:ec:c8:ee:41:b5:09:d7:07:d2:
                    d0:02:db:58:61:a5:6b:37:38:20:78:fd:10:ae:cc:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:48:69:AE:AF:0D:47:49:58:C9:D7:32:29:92:39:18:08:79:5F
            X509v3 Authority Key Identifier:
                keyid:75:B7:C7:7C:ED:B8:5D:E1:34:AD:46:DF:92:CA:9D:EB:D0:AB:76:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/0/75B7C77CEDB85DE134AD46DF92CA9DEBD0AB7636.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f4:b5:49:f4:93:36:9e:43:77:f2:e4:3f:0a:29:8f:d7:1e:
         9f:9e:d5:a3:fc:dc:dc:01:59:b1:3e:aa:ce:49:f6:b2:d2:25:
         1f:6a:30:51:29:54:60:07:50:f2:84:ac:c6:8a:c9:6a:b8:d1:
         a3:73:6a:52:f8:ad:a5:44:f0:b6:ec:af:3d:35:43:27:be:fd:
         96:91:49:5c:c7:50:df:27:2f:ae:a2:c8:65:9d:8f:81:b7:20:
         4e:a5:d2:3d:38:d5:56:2d:47:79:3c:b0:53:86:c7:06:6c:d2:
         bc:0f:a2:0a:d4:ef:1f:bf:e8:6f:e5:b3:18:de:d7:af:71:0d:
         2a:c1:ae:63:f6:5e:56:87:f5:ac:a0:c2:e4:ee:c5:62:59:b0:
         3a:c0:9f:b7:e5:f3:70:de:35:ca:4c:6b:7a:26:6c:10:d5:6c:
         a3:d3:a9:3a:11:c3:3d:7a:48:52:e8:a8:c1:13:04:6e:63:db:
         47:58:b9:5f:a1:a0:da:a6:ac:a0:f3:8d:82:d9:60:5b:b6:37:
         56:f5:f3:2f:1b:9b:5a:25:9d:af:49:59:16:c1:d0:24:3c:20:
         a2:3a:ed:9e:4b:24:a7:3a:4e:6f:d1:97:83:34:fe:22:f2:ab:
         6f:19:c0:47:f0:4c:58:94:b1:bb:d7:dc:1c:3d:2c:4c:ab:d2:
         b4:69:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----