Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft
File:                     B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft (raw, json)
Hash identifier:          0tDrpA0ZTSzxipTYWBQ4lgkETbFG0K3RLuknexFKtYM=
Subject key identifier:   50:A4:89:B8:F1:71:63:4A:27:2A:AF:BA:15:37:FB:8C:96:EC:28:D3
Authority key identifier: B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62
Certificate issuer:       /CN=B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362
Certificate serial:       438CED01B262C343D30C6A6995056B4D1038AFDF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft
Manifest number:          24
Signing time:             Sat 22 Oct 2022 01:20:46 +0000
Manifest this update:     Sat 22 Oct 2022 01:15:46 +0000
Manifest next update:     Sun 23 Oct 2022 03:27:46 +0000
Files and hashes:         1: 323830343a316361633a3a2f33322d3334203d3e203631363638.roa (hash: nIrLFh8Ca6muK6LGYMaevkOkGiYtNkjbXdn3Ey3rGyQ=)
                          2: B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.crl (hash: xl01EWw+xYldL1lNMwFeFVnIzEhYv1NU1QGE1OJtLzg=)
                          3: 3133312e3130302e3234382e302f32322d3234203d3e203631363638.roa (hash: oxTBlIkY7sO06FktzEUxyrh94j9dH+7tIm0pf/+phSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8c:ed:01:b2:62:c3:43:d3:0c:6a:69:95:05:6b:4d:10:38:af:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362
        Validity
            Not Before: Oct 22 01:15:46 2022 GMT
            Not After : Oct 23 03:27:46 2022 GMT
        Subject: CN=50A489B8F171634A272AAFBA1537FB8C96EC28D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:4b:98:d0:16:1e:23:58:31:ff:36:0d:23:
                    7d:30:e5:18:28:c1:b1:13:3c:34:f2:a7:58:7a:b1:
                    5d:53:2b:b1:1b:f4:ad:91:39:ea:86:8c:e9:51:a1:
                    9d:f3:f5:85:04:88:d4:5a:6f:81:ef:ae:f3:57:bf:
                    ca:b6:0e:8a:44:fa:a4:57:7f:ed:52:b9:a2:e4:c0:
                    77:e0:7c:9c:ef:97:a1:db:72:22:f5:0b:4b:f1:47:
                    74:61:4b:fd:96:f5:84:99:7e:f4:e3:e8:16:0e:eb:
                    a8:2b:a1:f6:c7:ba:e7:93:2f:5d:1c:1d:bd:d4:a0:
                    23:f3:88:71:a3:57:e0:92:33:18:88:db:49:d4:23:
                    90:88:b8:01:0c:5e:1a:41:8d:e1:c1:7b:a5:a8:2c:
                    6f:d3:ec:6b:59:0e:54:b4:58:12:5c:82:38:1e:aa:
                    69:c8:44:d7:a7:33:da:1d:73:90:e4:09:33:ab:32:
                    57:ac:f1:0e:80:40:6b:cc:5a:65:8e:31:2b:35:06:
                    74:28:3d:8e:c2:70:19:e8:b6:f3:ad:4b:63:d6:2d:
                    ff:c6:80:72:d5:af:63:e4:a1:37:d2:d8:d6:93:90:
                    28:ee:ce:f6:10:fd:00:d4:96:38:15:4c:13:41:f4:
                    a0:ea:7a:0c:57:ed:9a:9f:90:5e:f8:bc:2a:d7:38:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:89:B8:F1:71:63:4A:27:2A:AF:BA:15:37:FB:8C:96:EC:28:D3
            X509v3 Authority Key Identifier:
                keyid:B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:83:6a:9d:c2:7b:15:ae:42:a7:f3:c9:88:c9:f4:a4:38:7c:
         f2:2a:05:2e:17:0c:0a:49:da:df:6d:e9:3a:58:c7:e3:18:2a:
         84:d9:d7:22:2e:54:af:62:f8:e0:7e:3b:4f:bd:9f:4f:f6:5e:
         8a:0b:81:3e:cc:f2:29:6b:ff:7e:6f:c7:4b:ec:d6:17:ea:d0:
         14:12:9b:e5:f8:03:33:6c:9c:fc:0f:f5:10:b6:c0:66:f7:4b:
         45:3d:e7:27:05:5a:24:63:bf:93:d3:b8:cb:f9:fc:cf:5e:90:
         36:07:f0:0b:ad:48:8b:5f:28:ab:4b:20:f7:64:03:15:4f:99:
         59:93:bc:e6:09:15:66:48:5a:04:f9:0d:ad:aa:d0:7f:f7:25:
         18:40:63:57:db:b7:1f:67:7b:5e:c4:85:bb:41:5c:f2:dc:09:
         07:ba:d8:d9:7e:ce:66:5b:24:42:b1:d1:fa:60:a0:5e:14:47:
         cc:33:75:a1:e2:e0:61:b8:0b:6e:20:07:38:0c:ac:e5:18:85:
         01:09:06:b0:14:b1:a2:38:4e:9e:72:78:60:7e:6d:b2:c0:db:
         4b:59:4e:81:83:87:d7:6e:20:38:58:3f:d2:b4:98:a8:63:81:
         f5:69:0d:2e:41:87:81:7b:29:e1:8c:cf:47:d2:78:c3:10:e9:
         2c:00:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----