Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.mft
File:                     F19221B3666BF9827B7F3EADFBE1B505850F2BA7.mft (raw, json)
Hash identifier:          rr0navmebgQinZimCSVyhLvAmj94uumq8WQ1aspRLaA=
Subject key identifier:   A9:BB:2E:E5:5B:5B:BB:66:BC:12:22:45:83:82:F8:A4:E8:90:30:52
Authority key identifier: F1:92:21:B3:66:6B:F9:82:7B:7F:3E:AD:FB:E1:B5:05:85:0F:2B:A7
Certificate issuer:       /CN=F19221B3666BF9827B7F3EADFBE1B505850F2BA7
Certificate serial:       34FF715ED79FC3ED729712FE8227DF4F2C5AF599
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.mft
Manifest number:          1E
Signing time:             Mon 23 May 2022 03:52:02 +0000
Manifest this update:     Mon 23 May 2022 03:47:02 +0000
Manifest next update:     Tue 24 May 2022 07:41:02 +0000
Files and hashes:         1: 3230312e34392e3133362e302f32322d3234203d3e20323730353730.roa (hash: iTtHkDCYHm17PaaNMViw2xwx/l70kNwjnRgANsCWxtg=)
                          2: F19221B3666BF9827B7F3EADFBE1B505850F2BA7.crl (hash: 1z4ZAmZywII7VLzRyafGtdlIH29z6iyYL25W6KF1Qmo=)
                          3: 323830343a366530343a3a2f33322d3438203d3e20323730353730.roa (hash: fCSBzZYfMXDGM7JnobwuQDkKxaVxjhuowdcCSFlTYbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ff:71:5e:d7:9f:c3:ed:72:97:12:fe:82:27:df:4f:2c:5a:f5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19221B3666BF9827B7F3EADFBE1B505850F2BA7
        Validity
            Not Before: May 23 03:47:02 2022 GMT
            Not After : May 24 07:41:02 2022 GMT
        Subject: CN=A9BB2EE55B5BBB66BC1222458382F8A4E8903052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:cc:f9:b5:10:f2:79:8f:91:a3:a2:5b:31:
                    75:e6:d4:c3:ae:95:1e:74:6f:ef:89:74:c5:66:50:
                    25:25:2d:58:11:53:82:26:39:51:f5:ea:f9:ca:81:
                    8a:1a:f3:01:6e:43:be:b4:1a:1d:ac:01:40:72:6e:
                    06:7a:da:61:c1:4b:9d:2b:6d:f8:4c:a4:77:f3:28:
                    70:70:69:ae:e5:a5:77:ff:4b:14:c4:28:e5:d6:47:
                    c9:66:d1:d2:f5:cf:41:fe:bf:a3:24:a0:96:c8:73:
                    10:0a:52:85:fb:ae:f2:19:68:a0:8f:09:b2:06:69:
                    c3:b2:1b:bd:c8:15:05:25:23:98:d2:fc:8d:99:a6:
                    7a:b7:93:80:2c:96:25:20:a5:34:a3:5a:da:a6:bf:
                    bb:ca:a0:48:b3:88:ef:8b:9e:f8:2c:42:89:66:0f:
                    56:49:d3:e9:28:ed:f8:c5:a3:2b:c4:26:d9:b5:55:
                    34:9c:18:b9:08:73:c3:90:83:b2:a4:52:26:43:e0:
                    e8:7c:3c:22:0a:fb:70:d8:fe:7a:15:f0:c3:a2:d7:
                    d0:3d:aa:3a:5e:f4:25:44:6a:70:b9:d2:8b:8d:d3:
                    20:ed:bb:1a:b3:38:0c:63:db:71:77:dc:c8:3d:cc:
                    dd:30:43:f1:71:77:1c:4d:33:31:11:8f:90:fa:2f:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:2E:E5:5B:5B:BB:66:BC:12:22:45:83:82:F8:A4:E8:90:30:52
            X509v3 Authority Key Identifier:
                keyid:F1:92:21:B3:66:6B:F9:82:7B:7F:3E:AD:FB:E1:B5:05:85:0F:2B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/F19221B3666BF9827B7F3EADFBE1B505850F2BA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:e1:6d:9a:a2:ff:dd:71:5e:34:7f:72:a9:e6:13:fd:d9:
         a8:c5:7e:3e:e7:d2:8a:03:97:3c:88:ea:1d:7e:2e:fc:0e:36:
         d6:4d:75:41:99:ce:3a:e0:a8:0a:45:07:b8:c1:3e:d8:6b:26:
         6d:8b:41:2d:ea:f3:b3:fc:55:fa:c5:f6:17:25:25:fe:f0:4c:
         eb:10:fe:e2:13:c1:14:ee:56:24:cc:9e:3a:c5:fb:ae:20:70:
         54:d4:56:3a:63:34:e5:66:25:60:b8:43:8e:b9:e0:a7:1d:a2:
         2f:b3:d7:f0:37:31:c8:48:81:65:fd:7b:ae:02:54:1f:78:ba:
         96:e4:88:9f:5e:c8:12:81:cd:03:e8:8f:7d:20:15:f0:26:23:
         da:e9:0a:6a:f0:d8:0b:cb:59:1d:37:cf:ae:ec:83:d9:10:af:
         d2:ab:0d:00:5c:a0:7c:79:b8:d4:d9:34:9b:cd:0d:13:32:b4:
         12:ce:4a:f0:fb:4d:66:58:9c:35:37:80:62:26:18:37:d7:02:
         a3:b1:84:c8:bd:6c:b8:4d:0f:68:84:cc:a7:78:e9:01:66:70:
         b6:ad:65:9a:60:67:0b:8b:f5:27:1d:39:96:d5:b5:cd:3e:33:
         7c:4f:e6:05:c2:a1:49:6e:55:49:cf:93:0c:af:a4:a4:13:27:
         f6:73:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----