Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft
File:                     331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft (raw, json)
Hash identifier:          0TWq5cI5JNz6tpKtPEUnYO4qWoaphSt0Q2IGnMZwrvo=
Subject key identifier:   9C:99:6E:40:DE:88:3E:FE:F8:33:6F:50:1E:2C:87:73:B7:BC:3D:06
Authority key identifier: 33:1B:AC:3D:AA:6C:6F:9B:A6:1F:C5:64:12:4F:9D:DE:11:DE:17:35
Certificate issuer:       /CN=331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735
Certificate serial:       1636E09609ECC20C7C412B123227B9BE0BE0233E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft
Manifest number:          013D
Signing time:             Mon 11 Dec 2023 22:26:31 +0000
Manifest this update:     Mon 11 Dec 2023 22:21:31 +0000
Manifest next update:     Tue 12 Dec 2023 23:09:31 +0000
Files and hashes:         1: 331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.crl (hash: DzN4F2qTz7EYXMqkuds6dXaTjwfkh/rHu3iTfDVQTPk=)
                          2: 34352e3137392e34302e302f32322d3332203d3e20323639303832.roa (hash: diYQyRDBhJDHLRttrvcXeLthAyf6yBCtVfK+n8Kddk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:e0:96:09:ec:c2:0c:7c:41:2b:12:32:27:b9:be:0b:e0:23:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735
        Validity
            Not Before: Dec 11 22:21:31 2023 GMT
            Not After : Dec 12 23:09:31 2023 GMT
        Subject: CN=9C996E40DE883EFEF8336F501E2C8773B7BC3D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:19:66:df:6e:18:a6:99:9e:db:25:04:e5:
                    7b:56:8f:b6:12:95:f5:35:81:65:94:3f:19:e4:ff:
                    e2:bb:46:79:d3:4f:6e:18:2f:76:28:00:d3:fc:25:
                    11:64:a6:0d:83:94:f4:81:cf:be:69:ae:92:ec:5b:
                    d3:bd:67:f0:a0:05:b7:2d:1c:d3:80:b0:9a:8b:d9:
                    f5:b2:94:fc:60:3d:b9:b9:55:e6:30:f7:e8:4e:87:
                    14:af:36:ad:d0:9d:35:d2:1e:3b:79:67:83:d3:5b:
                    c0:38:e6:f4:cf:87:45:99:50:79:ce:19:0b:d8:22:
                    b0:ac:0e:53:78:6d:1b:34:7a:c2:75:5c:dc:5f:26:
                    be:13:27:d1:04:45:b6:74:41:4e:58:59:73:97:58:
                    35:7c:5f:2b:af:f7:32:ba:3c:e2:43:dc:cf:de:a6:
                    c8:1d:cf:20:34:62:90:7d:06:15:11:5f:d9:e8:cf:
                    76:d4:93:b1:10:11:ad:6f:e7:16:cf:d5:9a:2d:81:
                    9c:7d:81:cd:6d:d9:76:f7:91:62:99:37:2a:57:dc:
                    12:c5:db:ea:6b:49:3f:5f:77:48:9a:f1:fc:05:25:
                    5f:f9:3d:c4:28:a2:64:d9:d3:7a:62:d2:1a:d6:21:
                    44:90:1e:26:06:4e:ac:b6:6e:9c:42:6a:b4:d6:77:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:99:6E:40:DE:88:3E:FE:F8:33:6F:50:1E:2C:87:73:B7:BC:3D:06
            X509v3 Authority Key Identifier:
                keyid:33:1B:AC:3D:AA:6C:6F:9B:A6:1F:C5:64:12:4F:9D:DE:11:DE:17:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:1a:37:e8:b2:7b:f8:13:36:ce:80:7a:2d:9c:66:1a:b1:
         3f:87:c9:fd:c4:51:57:df:9f:35:4f:58:db:19:bc:be:13:59:
         ae:d2:c6:cb:59:9c:38:ca:80:8b:da:0a:dc:b8:75:ec:4d:99:
         59:87:65:24:65:c2:a1:d1:0a:8a:a9:c7:40:5b:2c:4a:6d:97:
         79:fe:04:26:ac:e8:5c:54:c9:8e:d9:4f:80:8e:3d:7a:dd:aa:
         c1:b9:b0:00:5b:11:20:22:f3:76:f6:74:a2:8d:27:a0:f1:5f:
         7d:52:54:8b:d4:b9:ad:44:1e:9e:aa:90:db:c2:19:ea:f1:d7:
         97:da:d5:f8:02:93:79:da:cc:cf:22:a9:f2:12:f6:69:63:18:
         a9:98:30:d9:c8:b1:9d:92:66:19:14:62:a6:37:a1:b2:92:89:
         f5:11:d2:81:ba:b7:7d:77:47:c0:b5:e1:73:72:de:d8:44:77:
         fd:17:b9:c3:16:c1:f7:6e:58:2f:2e:f2:46:b3:8d:07:f2:d1:
         f1:a3:9f:2e:36:a0:e1:97:b9:3a:4f:36:6b:13:d1:27:9a:5f:
         bf:b2:c3:4d:c1:62:82:fb:25:26:d9:fd:f7:6d:b5:01:21:69:
         92:5d:20:dc:cc:4e:2a:e6:0c:fd:26:2b:ec:08:5a:31:49:47:
         ce:15:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----