Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft
File:                     C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft (raw, json)
Hash identifier:          1CfPYk8UB8ecCK9U8qUmH2TfKMUdf/owhpk4pOvMJ9Y=
Subject key identifier:   CE:35:48:A2:58:13:D1:79:CD:C8:14:91:D6:4E:2D:62:20:D7:D8:76
Authority key identifier: C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37
Certificate issuer:       /CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
Certificate serial:       78A569603CD83E1F2077FA804B840AD8FAAE4527
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft
Manifest number:          C6
Signing time:             Mon 15 May 2023 20:26:30 +0000
Manifest this update:     Mon 15 May 2023 20:21:30 +0000
Manifest next update:     Tue 16 May 2023 21:29:30 +0000
Files and hashes:         1: 323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (hash: moO0/gFln2OKKsw1orISsKUqs4S9cvLQoJ6IJAyVKFw=)
                          2: 3139302e392e3132302e302f32322d3234203d3e20323731353932.roa (hash: /M7HIuAP3rl7zlUH1ZDiv7CYVI1xOob2axGip2JgLek=)
                          3: C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.crl (hash: 0bBxxVKxvNN8/4hBTFAZ9HMnGPIcJJ993TmaHFlZoLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:69:60:3c:d8:3e:1f:20:77:fa:80:4b:84:0a:d8:fa:ae:45:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
        Validity
            Not Before: May 15 20:21:30 2023 GMT
            Not After : May 16 21:29:30 2023 GMT
        Subject: CN=CE3548A25813D179CDC81491D64E2D6220D7D876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:af:86:75:1c:bb:a3:d2:e2:82:24:c0:66:
                    ee:d7:7c:0e:72:31:5d:65:19:76:91:ff:06:8f:be:
                    c2:44:4b:77:b7:77:ed:c6:9b:b2:5c:60:40:6c:84:
                    3e:c5:cf:7d:87:1a:40:38:41:18:b0:cc:66:3d:8e:
                    18:b1:af:47:33:e2:15:85:7f:ee:90:a5:9c:3a:2e:
                    5d:41:df:05:f3:74:d7:fd:f7:18:31:39:2a:80:be:
                    22:c4:fb:a6:06:59:af:37:97:db:b5:0b:24:28:26:
                    a2:c0:08:ba:c8:69:be:c1:e7:be:f5:17:47:2a:6f:
                    82:2e:42:63:43:a6:3e:9b:6f:24:0e:9e:2c:6b:8a:
                    47:aa:09:fc:fe:2d:f0:fe:2a:8e:64:78:bc:7e:4e:
                    3e:06:23:c0:ab:bb:25:77:a8:78:b1:02:00:5a:8e:
                    83:3a:1f:13:d8:f7:50:7e:ed:6a:be:48:44:1b:2b:
                    8d:d5:2f:44:b4:54:5d:4c:5b:3c:84:9d:1b:4f:4a:
                    66:4f:75:3f:cd:cc:39:98:18:96:c8:e3:57:14:ee:
                    aa:f0:2f:56:db:00:97:3c:54:cb:4b:96:76:5d:a5:
                    30:92:18:14:e5:be:d6:5d:37:0c:56:6c:d0:aa:6e:
                    c6:d8:86:33:18:ac:59:0a:5e:51:3f:1c:93:bc:1a:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:48:A2:58:13:D1:79:CD:C8:14:91:D6:4E:2D:62:20:D7:D8:76
            X509v3 Authority Key Identifier:
                keyid:C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:68:b1:e9:86:52:a9:d0:3a:07:25:08:a3:d7:58:19:7c:43:
         bf:e2:6c:6e:69:50:d0:54:7a:3a:50:2c:d0:04:d9:4b:ad:a3:
         d5:0a:02:ae:cf:b5:d5:7b:7c:94:33:b3:c5:76:a9:88:ce:68:
         30:c5:05:a5:14:d7:c9:da:bb:fc:b3:fe:8d:37:5e:cf:c2:15:
         e7:d5:06:64:68:1a:3e:49:6b:3d:7f:3c:87:aa:54:ee:cd:54:
         6e:39:b3:f7:35:a0:50:0b:bc:7f:6d:4f:cd:af:84:ce:b3:87:
         1b:79:1d:97:f1:99:90:bc:e9:93:1b:74:30:40:6a:ce:8b:3a:
         6e:fb:3d:f4:bc:af:31:80:a4:f9:fe:cc:25:94:93:f3:ff:cf:
         b8:37:91:b3:20:ce:c4:f4:1e:0e:6a:48:77:e7:f7:05:0d:56:
         94:91:3d:e8:81:19:a7:04:96:a4:7e:e3:e5:78:e9:5c:d1:71:
         5d:4f:41:ea:8a:a3:aa:b8:41:d0:c3:cd:e3:3f:87:64:2e:a9:
         c3:65:85:bc:50:a7:31:a6:2d:d5:76:a1:a0:fa:8e:10:22:ab:
         3f:22:bb:28:f4:12:ef:d2:1d:6e:a6:7e:e4:45:31:6b:ec:ba:
         de:ca:0f:00:e1:5f:0e:a4:79:97:0b:e4:ed:38:d0:93:15:0a:
         7d:ee:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----