Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft
File:                     F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft (raw, json)
Hash identifier:          PS/PBfwIqVNwIRKwLIjzUroPg/R1LOMmwGNON3P4B3A=
Subject key identifier:   AF:CF:C9:3B:96:7D:BC:36:EF:EF:0C:69:87:85:40:BF:13:90:F1:7E
Authority key identifier: F3:CF:DD:89:68:DF:34:83:D6:AD:86:FE:2B:6A:AF:CA:B6:65:01:17
Certificate issuer:       /CN=F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117
Certificate serial:       1A0AFAB8A1C0444D5559AC592D18102D5032012C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft
Manifest number:          0135
Signing time:             Mon 18 Dec 2023 06:36:56 +0000
Manifest this update:     Mon 18 Dec 2023 06:31:56 +0000
Manifest next update:     Tue 19 Dec 2023 10:26:56 +0000
Files and hashes:         1: F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.crl (hash: waHN+YZ62iYarvUcwoTv8AbS99Kxp/RlVQQKPsBobvc=)
                          2: 34352e3136312e37322e302f32322d3234203d3e20323638343439.roa (hash: zX7KVX/UNfENN3AsMef0+438tPbFNQsKHh7DcR0o6TA=)
                          3: 323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (hash: lu8oV2caRmBQvoIp7coNctlgJyIG/EAyWvHwtz4HA30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0a:fa:b8:a1:c0:44:4d:55:59:ac:59:2d:18:10:2d:50:32:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117
        Validity
            Not Before: Dec 18 06:31:56 2023 GMT
            Not After : Dec 19 10:26:56 2023 GMT
        Subject: CN=AFCFC93B967DBC36EFEF0C69878540BF1390F17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:c3:04:76:3e:f0:79:63:d2:6e:ab:d8:0a:
                    61:06:53:07:f7:01:f4:09:9b:f2:c1:2b:72:e0:14:
                    f7:f5:86:bb:45:5d:b0:fb:76:d7:56:f9:90:3f:a6:
                    d1:83:57:5c:f3:48:03:58:39:0e:22:8b:ff:b1:89:
                    08:d1:56:b1:ea:89:27:c1:28:7f:e1:24:76:e4:1e:
                    0d:bf:3a:c2:a9:3b:10:fe:37:37:59:96:f9:16:35:
                    84:f4:61:1a:36:ca:13:29:cb:f9:2e:dc:9a:2c:a0:
                    0b:1f:51:22:eb:4d:28:99:18:67:7d:be:41:2d:ce:
                    77:ec:52:97:8a:c2:7b:75:5f:e1:28:45:d7:45:8e:
                    f8:6f:7c:48:d8:8a:59:2e:72:87:3a:be:d6:d5:93:
                    e8:d1:e2:fd:3e:75:b9:58:a6:94:7d:98:19:61:1d:
                    9d:36:84:cf:b6:7b:42:f1:09:70:8c:87:4c:9a:ab:
                    34:ee:e6:6d:ff:1d:58:e3:62:b4:ff:68:6c:98:d1:
                    b8:5b:ca:1f:1b:23:04:47:4a:0f:3f:d3:ca:6a:88:
                    c7:52:de:f0:68:16:01:44:55:e8:b0:7f:20:1f:db:
                    6c:f5:e0:32:82:5f:e9:bc:24:02:c3:5b:0d:93:00:
                    bb:a2:ab:8b:39:18:66:fa:a5:eb:ec:ed:d9:8f:c7:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:C9:3B:96:7D:BC:36:EF:EF:0C:69:87:85:40:BF:13:90:F1:7E
            X509v3 Authority Key Identifier:
                keyid:F3:CF:DD:89:68:DF:34:83:D6:AD:86:FE:2B:6A:AF:CA:B6:65:01:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/F3CFDD8968DF3483D6AD86FE2B6AAFCAB6650117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:59:33:9d:51:6d:7a:a3:5a:31:c8:91:98:92:49:5c:10:
         0d:c8:21:51:97:d7:13:b3:8f:92:bf:3d:57:ff:0f:93:af:79:
         20:3c:f1:3d:03:ce:0f:f9:95:98:da:09:7a:dc:ee:40:e1:ae:
         6e:b3:91:f5:ba:7d:70:33:1e:f5:c9:4d:7a:55:c0:3a:e6:6b:
         7f:ec:09:25:26:84:ea:77:a6:b0:dc:e1:18:49:25:ac:11:8e:
         71:bb:23:8b:cb:22:dc:f9:a9:c8:f6:09:9b:17:ca:6c:32:68:
         33:5a:15:9a:63:fa:6a:88:52:ae:f7:f1:7c:ab:8c:e5:07:23:
         c3:56:5c:e6:a4:04:b3:d2:e6:a9:9e:96:34:2a:b7:dd:de:37:
         2c:fa:21:1a:6a:8f:49:a6:e5:e4:2a:c6:40:73:59:41:b1:84:
         41:ae:c9:6c:2f:ad:b2:5d:b7:24:92:93:2c:59:3c:cc:1f:5a:
         e5:ce:0a:7a:58:0f:2d:ec:15:0f:fd:2d:ac:23:0e:20:fa:59:
         75:7a:38:07:bd:0b:dd:a5:dc:47:7f:5c:b0:d5:7e:c6:52:8b:
         8f:de:20:af:69:0c:59:58:72:3e:9e:63:8f:e5:bd:be:12:12:
         da:aa:48:01:27:44:63:a9:f7:e7:c5:73:d9:80:a1:0d:98:32:
         03:a9:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----