Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.mft
File:                     139FB0EB849F0B476AD6C5C981D3853FB7A117A0.mft (raw, json)
Hash identifier:          YJcaCmr4CaeEfEh91+CZpLy+S7gicDhXrkXPDguThxY=
Subject key identifier:   DC:F6:78:D6:1D:DF:D6:FC:8C:67:08:81:A0:C8:6A:6B:C3:C8:B0:B0
Authority key identifier: 13:9F:B0:EB:84:9F:0B:47:6A:D6:C5:C9:81:D3:85:3F:B7:A1:17:A0
Certificate issuer:       /CN=139FB0EB849F0B476AD6C5C981D3853FB7A117A0
Certificate serial:       310687F78690007A4AB21AB20631AE4696241E80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.mft
Manifest number:          B4
Signing time:             Thu 15 Dec 2022 22:01:21 +0000
Manifest this update:     Thu 15 Dec 2022 21:56:21 +0000
Manifest next update:     Sat 17 Dec 2022 01:04:21 +0000
Files and hashes:         1: 139FB0EB849F0B476AD6C5C981D3853FB7A117A0.crl (hash: Hsf7/aP9am2IvPhLs0nziK3sADo7v28+jtJgFM1pxDM=)
                          2: 34352e3233352e36342e302f32322d3234203d3e20323637343132.roa (hash: yB8fXHfnHL2QX2Zuu2jtcBsEQ/GxTih/wLgrxsDdUa4=)
                          3: 323830343a346431383a3a2f33322d3438203d3e20323637343132.roa (hash: PduUTaVewb4v8EoxfXOgtflfynI6j/6SBc5NJ7sLQpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:87:f7:86:90:00:7a:4a:b2:1a:b2:06:31:ae:46:96:24:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139FB0EB849F0B476AD6C5C981D3853FB7A117A0
        Validity
            Not Before: Dec 15 21:56:21 2022 GMT
            Not After : Dec 17 01:04:21 2022 GMT
        Subject: CN=DCF678D61DDFD6FC8C670881A0C86A6BC3C8B0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:8a:7f:9c:24:7b:ad:ba:02:4d:30:74:f5:
                    41:15:a0:c8:01:36:ad:29:cc:5a:ce:f8:d8:3f:26:
                    db:22:b1:ce:11:6b:81:54:df:1e:68:98:70:0c:10:
                    c1:62:ed:e0:5b:42:67:69:47:c0:a4:5f:09:6d:65:
                    87:9d:3b:de:c8:a4:0a:ff:91:1a:59:4b:ca:54:88:
                    ad:6b:50:26:8c:cf:91:50:3d:23:b5:7c:20:92:53:
                    0f:8d:28:f5:f4:3a:e0:98:cc:d7:d9:e0:85:b7:a1:
                    a4:21:e5:9f:10:1c:84:35:26:48:7f:9b:57:5e:f8:
                    29:6d:47:63:bf:29:bb:e6:af:be:6e:c4:74:65:9f:
                    0d:1b:4c:20:cf:b1:8f:37:7a:11:b2:f0:41:21:ec:
                    6a:c7:91:44:57:87:6c:14:de:5b:e2:75:7f:52:ff:
                    5a:0e:80:27:10:ed:47:b2:99:cf:d1:88:35:e3:d5:
                    4f:c3:31:1c:d3:89:21:82:f7:03:01:de:78:15:a3:
                    cb:09:14:3b:04:61:8f:d7:62:cc:cc:26:5f:0c:4f:
                    4b:88:ed:5b:f8:75:ce:cd:5c:cd:e5:ab:63:52:8e:
                    4c:ba:b9:20:70:5d:25:44:e4:c5:9a:55:c7:3a:ff:
                    17:76:c1:27:8a:15:e2:4e:a7:80:90:11:41:c5:64:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:78:D6:1D:DF:D6:FC:8C:67:08:81:A0:C8:6A:6B:C3:C8:B0:B0
            X509v3 Authority Key Identifier:
                keyid:13:9F:B0:EB:84:9F:0B:47:6A:D6:C5:C9:81:D3:85:3F:B7:A1:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/0/139FB0EB849F0B476AD6C5C981D3853FB7A117A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:6c:a3:86:bb:f3:e5:b5:3e:15:24:e9:dd:c1:e1:84:5e:
         f3:8d:b4:ed:73:f3:c5:2a:ae:ba:7f:ae:61:36:44:73:f2:d9:
         2a:2d:ad:99:a7:55:e3:5e:cf:55:bd:f8:9f:2c:42:50:c5:f5:
         71:30:f8:4a:5f:f4:88:fc:e7:97:83:90:d9:29:9d:96:7f:95:
         d6:02:36:9d:11:33:b9:fd:45:1f:40:c5:64:47:41:36:52:c9:
         d2:21:3b:97:ef:22:a6:0e:b8:4c:87:be:04:54:46:e4:56:39:
         0e:9a:99:05:5c:3c:9e:35:8b:da:1e:4e:02:b3:48:e0:18:82:
         24:a5:72:40:4c:da:2b:1c:1f:f1:65:e8:0b:31:43:e6:a5:d9:
         d5:31:4c:72:b0:3b:d2:15:48:05:b0:66:3c:d4:f7:1b:f4:38:
         8a:ef:11:ad:85:0d:b7:13:2b:d4:17:08:b9:fa:ab:09:9a:ae:
         74:04:d1:be:5e:39:d9:21:56:e6:f6:7c:e5:dc:07:9a:65:78:
         b5:6f:fe:16:9f:cb:c7:60:a8:41:08:8c:b1:b0:52:b2:58:dd:
         94:5c:60:a5:ea:b0:66:fe:b1:ee:45:0e:d0:14:20:d7:de:55:
         dc:97:0f:06:58:00:4b:27:00:b2:3f:ad:ab:3f:33:3b:62:d0:
         01:a7:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----