Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.mft
File:                     F35D59B4B2C4520C44BA036FFA592D6D06F821D7.mft (raw, json)
Hash identifier:          zEM0clUQp62QukmBTyJxieCJi29SA1XUnbaYFrIvJUE=
Subject key identifier:   5A:AD:F3:D8:93:21:0C:C7:48:B8:94:EC:24:28:B2:B0:32:64:1B:79
Authority key identifier: F3:5D:59:B4:B2:C4:52:0C:44:BA:03:6F:FA:59:2D:6D:06:F8:21:D7
Certificate issuer:       /CN=F35D59B4B2C4520C44BA036FFA592D6D06F821D7
Certificate serial:       164B560B043535F638C67764084171767C595AD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.mft
Manifest number:          03
Signing time:             Tue 13 Dec 2022 20:50:18 +0000
Manifest this update:     Tue 13 Dec 2022 20:45:18 +0000
Manifest next update:     Wed 14 Dec 2022 23:37:18 +0000
Files and hashes:         1: 323830343a373764383a3a2f33322d313238203d3e20323731323033.roa (hash: naazbedRGAnyhNZ/b9ybdkcWYCmayqKefYEdLi6+bXw=)
                          2: F35D59B4B2C4520C44BA036FFA592D6D06F821D7.crl (hash: alhbRALCci00BBplX0hfWHz18jUkWF+E852+S3PjZsM=)
                          3: 3137392e34392e3137362e302f32322d3332203d3e20323731323033.roa (hash: MWgCkr2FIfGKaBcAaNf6PT8PrEtYI4dTm0ixhwlFUS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:56:0b:04:35:35:f6:38:c6:77:64:08:41:71:76:7c:59:5a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F35D59B4B2C4520C44BA036FFA592D6D06F821D7
        Validity
            Not Before: Dec 13 20:45:18 2022 GMT
            Not After : Dec 14 23:37:18 2022 GMT
        Subject: CN=5AADF3D893210CC748B894EC2428B2B032641B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:40:89:7d:aa:f7:e2:94:cc:a7:2f:22:14:
                    57:3d:e8:10:3e:b9:cc:2b:2b:f2:26:20:0a:e4:1c:
                    17:3f:bf:97:57:f0:e3:72:ff:2b:6f:07:84:4d:d0:
                    9f:5a:b1:dc:8d:3a:dc:03:87:38:f9:7c:33:48:e6:
                    d0:a2:68:1b:70:6a:b5:4a:4f:dc:19:39:fa:2a:c9:
                    77:18:18:03:6e:c6:06:5c:7a:16:c6:32:5f:76:dc:
                    11:e9:4e:7a:fe:ef:d9:8e:41:e2:df:9a:03:da:cd:
                    bd:67:38:d8:59:25:52:24:74:e5:5c:62:91:14:6a:
                    a5:ff:32:3d:b8:91:5b:e7:da:8d:47:6d:4d:c5:b2:
                    dc:38:33:34:fb:b4:cb:94:19:c0:cf:ac:fe:2b:0a:
                    e8:22:9d:ed:7c:b5:63:00:dc:c6:91:31:c7:50:8e:
                    2a:77:09:b0:41:7f:33:ea:7d:aa:0d:99:5f:ee:ed:
                    dd:19:20:d0:ef:f5:dd:e5:92:1c:92:a3:4e:7b:56:
                    c3:3f:43:9b:cc:78:0c:1c:0e:b5:1e:fe:c3:1a:20:
                    1c:a3:1f:75:eb:81:c5:3e:3b:b8:65:ff:5a:60:be:
                    a7:cb:20:81:cf:df:eb:57:0f:9c:1f:bb:82:ec:0a:
                    e6:f9:10:cf:95:37:72:25:69:18:30:7b:58:ec:25:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:F3:D8:93:21:0C:C7:48:B8:94:EC:24:28:B2:B0:32:64:1B:79
            X509v3 Authority Key Identifier:
                keyid:F3:5D:59:B4:B2:C4:52:0C:44:BA:03:6F:FA:59:2D:6D:06:F8:21:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/F35D59B4B2C4520C44BA036FFA592D6D06F821D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:95:db:29:65:21:c4:38:21:65:84:38:db:f9:fd:bb:14:e9:
         91:fe:3b:83:1f:60:cc:57:3d:94:6e:2d:82:27:e4:36:5f:3a:
         77:52:31:2f:bd:6a:7b:52:6f:b9:46:78:42:76:9b:2b:59:57:
         7a:cd:2a:f4:11:99:a6:b5:7d:1c:66:cf:c8:e2:e4:6b:9a:13:
         d2:ab:0e:4b:55:60:30:5a:3c:06:f4:cf:c4:fa:24:88:98:a4:
         a4:37:44:46:e0:7d:ce:3e:fb:b2:9a:08:74:e4:47:43:b1:75:
         2d:b9:56:e3:1f:4e:86:33:c6:fa:2c:bc:0e:10:d3:82:14:98:
         7e:49:f8:78:00:71:0b:cb:f5:ff:92:84:9f:df:b2:78:f9:29:
         ea:34:bc:7d:b9:01:8f:f4:87:a9:78:4d:c4:f9:32:03:d3:9f:
         ec:18:e6:67:7c:4b:a5:df:a8:d8:7a:88:e8:b9:55:eb:a6:37:
         2e:40:49:b6:22:f7:7d:05:d4:3a:bb:ff:f4:1e:81:0f:43:a6:
         c3:d7:ca:b3:e0:5d:84:cd:c2:84:5e:c8:48:11:e6:ae:6d:b7:
         30:b7:4a:aa:23:1a:4d:77:f2:03:39:6f:56:d0:38:98:9b:2a:
         0b:01:b1:01:38:27:2d:6b:d1:74:58:78:74:48:27:63:4a:e2:
         ef:8c:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----