Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft
File:                     84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft (raw, json)
Hash identifier:          zMftvE4qNXjNIYKRgdz/xNmCN4vbOEnqnw7qrzAVtqo=
Subject key identifier:   C4:3B:09:3C:9C:D3:BA:BE:DF:4D:DC:66:7F:8F:5B:BA:F7:A8:2B:5F
Authority key identifier: 84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E
Certificate issuer:       /CN=84685401BCE2CBDE0A53CFFED25971B48BB8AD5E
Certificate serial:       7D437BF73F48F700855EEA10B4CF9A9C22FD9B9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft
Manifest number:          3C
Signing time:             Tue 12 Jul 2022 08:36:29 +0000
Manifest this update:     Tue 12 Jul 2022 08:31:29 +0000
Manifest next update:     Wed 13 Jul 2022 11:41:29 +0000
Files and hashes:         1: 84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.crl (hash: H7IEBtdeyTt+T16wK9SxIJZB+8f57oID6DuNxeytKpE=)
                          2: 3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa (hash: ZZ1wDBhWOktFJJfBITqXvurcbgafKRx9EjEQCVERpLg=)
                          3: 323830343a366530343a3a2f33322d3336203d3e20323730353730.roa (hash: C/+1+DTKLsRLH3GljCNEI+L1lO4QybdmbSoxmVDsfcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:43:7b:f7:3f:48:f7:00:85:5e:ea:10:b4:cf:9a:9c:22:fd:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84685401BCE2CBDE0A53CFFED25971B48BB8AD5E
        Validity
            Not Before: Jul 12 08:31:29 2022 GMT
            Not After : Jul 13 11:41:29 2022 GMT
        Subject: CN=C43B093C9CD3BABEDF4DDC667F8F5BBAF7A82B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:e5:e6:82:3e:e9:ad:b3:c4:4b:c1:09:8b:
                    54:a1:11:83:73:2e:47:a7:a7:01:1f:4e:7a:7b:2d:
                    9f:fc:e3:3f:36:26:a6:16:4a:92:17:c2:99:bb:a5:
                    aa:f7:f3:0a:1f:b1:00:6e:ef:aa:cf:a2:2a:d7:af:
                    60:6b:b5:3a:35:19:d2:54:de:22:0f:f1:41:68:9e:
                    44:a7:69:66:88:63:2f:b6:2f:fb:2b:15:96:f6:99:
                    41:63:f6:06:4a:1b:d8:90:4e:73:90:97:2f:53:23:
                    08:78:50:81:bb:f9:71:b1:1b:3b:87:e3:74:7d:9b:
                    c0:72:1c:eb:8c:4e:ad:e9:91:37:bc:47:82:50:29:
                    f2:4d:71:6c:19:52:2a:9b:af:da:5b:c5:76:6f:55:
                    e0:a1:01:8f:86:72:41:11:08:7a:90:65:d4:25:87:
                    67:8c:13:87:45:ea:29:6b:63:b9:ee:f3:fd:3f:53:
                    9b:9c:28:fc:e5:ae:dc:f6:4e:cc:53:a0:47:d2:0f:
                    68:ef:ae:f3:c8:25:da:b9:86:d4:81:c2:03:fc:f9:
                    e3:11:60:d0:49:ea:22:0f:6e:ac:8b:35:b9:a5:3e:
                    76:ad:c0:6d:cb:68:47:48:0d:ba:e4:0d:db:1c:92:
                    d6:6b:bb:b5:17:9e:f5:0c:da:c2:11:70:2d:df:73:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:09:3C:9C:D3:BA:BE:DF:4D:DC:66:7F:8F:5B:BA:F7:A8:2B:5F
            X509v3 Authority Key Identifier:
                keyid:84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:ee:9c:a3:2f:1e:e5:9a:10:06:bb:46:2b:bb:8f:a9:0b:
         90:61:99:6f:e6:9f:61:7c:f9:6d:52:26:da:8a:ae:c5:c3:38:
         8a:2e:94:d3:0f:77:a6:0f:d2:39:d0:2f:51:45:8a:86:99:95:
         7a:f5:69:2d:c3:1d:7d:39:ea:01:2b:dd:36:86:fe:b7:a3:b9:
         8d:77:7e:6d:41:c3:81:b3:2f:54:71:65:41:10:f5:7c:85:3c:
         48:8b:90:af:8d:29:31:79:c4:a4:7e:f6:3a:ce:e4:34:79:e2:
         54:db:34:0c:c2:41:0f:b3:82:5b:27:22:2c:d5:08:58:70:05:
         aa:3c:ad:7f:81:e7:aa:f8:d3:83:08:1c:c9:14:f1:a9:36:33:
         cd:22:fb:07:80:12:91:68:89:6f:d4:d0:89:d1:f4:f5:20:60:
         d1:b1:18:87:bb:ac:63:b5:e3:09:8c:98:9e:9d:3a:df:a1:24:
         2e:3c:d5:0e:c8:2c:82:fd:f4:90:1d:12:63:75:af:60:cf:da:
         bf:3b:6a:88:a7:6c:8e:f1:5d:13:3c:b8:60:31:ea:1b:53:10:
         9b:c8:89:1d:f2:c2:03:cd:58:6e:1e:0c:7c:73:41:20:1e:ac:
         67:1d:18:b9:6e:4c:47:db:6d:4e:59:61:47:89:0e:80:13:a0:
         03:e8:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----