Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft
File:                     555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft (raw, json)
Hash identifier:          kXr/Ka26yzZwJSTPllgms9Q3N+TzKuYgaxT6y1W81xo=
Subject key identifier:   3C:29:A9:F9:18:AE:9E:1B:CE:B8:30:DE:F6:C1:36:6D:E0:E7:52:B7
Authority key identifier: 55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6
Certificate issuer:       /CN=555ABC2B8E4076A654330E2F947A4CC326D4A1A6
Certificate serial:       C8F1053D07D74DFCFE10107E5886A6044AA226
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft
Manifest number:          9B
Signing time:             Fri 20 Oct 2023 21:00:35 +0000
Manifest this update:     Fri 20 Oct 2023 20:55:35 +0000
Manifest next update:     Sat 21 Oct 2023 22:13:35 +0000
Files and hashes:         1: 34352e3137392e3233322e302f32322d3332203d3e20323639313232.roa (hash: bekxoIgTyoAY8oMae9E21iGoVIuYtKcjlmI1DnoIeWY=)
                          2: 555ABC2B8E4076A654330E2F947A4CC326D4A1A6.crl (hash: KCQWWwDqfPjsG4ZGEIxgWj4xYoR7v7524YFniV2aV0Q=)
                          3: 323830343a356663343a3a2f33322d313238203d3e20323639313232.roa (hash: zFhPrxuL0xusL10unuQUQFOlZ2S+sFIW1cnaoxJABys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:f1:05:3d:07:d7:4d:fc:fe:10:10:7e:58:86:a6:04:4a:a2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555ABC2B8E4076A654330E2F947A4CC326D4A1A6
        Validity
            Not Before: Oct 20 20:55:35 2023 GMT
            Not After : Oct 21 22:13:35 2023 GMT
        Subject: CN=3C29A9F918AE9E1BCEB830DEF6C1366DE0E752B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:53:4f:21:12:29:29:57:a1:b4:76:a0:a2:
                    9e:76:80:57:1c:05:98:d8:36:16:a0:b0:97:d6:eb:
                    60:77:64:3a:fc:44:5c:f6:7f:0a:03:59:a9:17:76:
                    01:41:8a:79:e9:89:ae:1c:4f:cb:34:fe:69:47:bf:
                    c8:ac:10:37:1b:85:2c:36:81:59:43:d3:9e:ec:82:
                    d4:86:1d:36:6e:c7:ce:35:e1:91:07:81:e5:3a:34:
                    41:be:50:31:cc:7b:23:a5:e2:7c:5d:64:90:04:1c:
                    b9:31:c8:d7:c3:57:94:53:b4:1b:3c:ae:2e:5f:02:
                    f9:47:07:fe:a9:07:66:24:19:de:13:f6:cd:c1:3d:
                    3d:08:38:29:94:d3:68:28:f7:30:95:35:65:c2:a7:
                    ad:41:ec:a4:aa:55:ee:18:af:1f:69:09:43:50:e7:
                    a9:ff:c1:d6:ff:ae:eb:12:74:46:fa:46:9c:ea:32:
                    29:41:59:7f:87:29:0d:0f:0c:45:01:98:69:a7:c1:
                    55:c5:1c:38:dd:37:43:a6:a7:2a:07:bf:70:68:8c:
                    9c:1c:f6:14:c6:5e:d9:ab:07:93:d2:27:db:81:87:
                    c7:47:42:ed:c4:c2:4d:35:0e:bd:c2:a7:18:e4:e5:
                    e8:0d:78:f3:e2:24:ef:f4:23:c0:c8:88:d7:3b:31:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:29:A9:F9:18:AE:9E:1B:CE:B8:30:DE:F6:C1:36:6D:E0:E7:52:B7
            X509v3 Authority Key Identifier:
                keyid:55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:8d:63:82:59:1b:12:da:1a:f5:41:12:93:31:6c:94:2a:
         1f:bc:9e:8d:dc:6d:42:3d:e7:45:9d:1a:3d:38:cb:64:6d:0f:
         ce:17:f2:25:8d:94:b1:04:5c:c8:4c:65:5f:55:1f:02:ea:65:
         f2:72:d4:0d:bf:70:47:09:62:c3:db:8d:17:d7:68:75:75:cf:
         c5:dc:65:f8:21:3b:a4:8a:8f:0f:eb:69:d0:ff:ee:0a:76:a5:
         30:c0:96:9b:b5:e7:84:29:94:71:6d:23:15:13:96:a1:0f:3c:
         92:9b:6e:4b:1a:1c:fa:07:61:f3:13:c1:8a:4c:6e:83:67:be:
         c3:9a:fa:88:c6:01:5d:15:78:f2:a5:59:59:60:ca:27:21:74:
         19:a3:8f:4f:4e:68:7d:5f:5f:5f:01:29:62:5c:71:b4:75:d4:
         81:0c:43:8f:56:fb:fd:c7:12:7a:f6:6c:e3:01:4e:1f:d5:f9:
         43:49:cb:a4:4c:7b:19:2f:de:07:2d:9e:c4:eb:55:50:0f:4f:
         1d:ad:2b:a8:fb:6a:48:7e:77:f2:bd:d5:d5:0f:68:f1:b9:cf:
         f9:a0:5f:3f:a8:54:cc:80:5f:d7:03:d2:e6:17:e1:1a:ab:d0:
         39:39:32:cf:4b:72:0b:75:83:9a:de:cb:ed:dd:1e:cd:fb:40:
         5b:b4:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----