Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.mft
File:                     28099F655F9326704CA106B9B86F52E88D393F7B.mft (raw, json)
Hash identifier:          yoS8mP2X1dvQrPaIFPyc8utx8vdGbW0IeZlpgtV5v2A=
Subject key identifier:   EA:55:14:D0:EC:68:40:DC:E9:0B:FE:E9:21:DA:EF:35:7B:78:7D:F0
Authority key identifier: 28:09:9F:65:5F:93:26:70:4C:A1:06:B9:B8:6F:52:E8:8D:39:3F:7B
Certificate issuer:       /CN=28099F655F9326704CA106B9B86F52E88D393F7B
Certificate serial:       501890D2231329B84788FDCA306358AE2A7D5CF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28099F655F9326704CA106B9B86F52E88D393F7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.mft
Manifest number:          15
Signing time:             Wed 14 Dec 2022 10:11:31 +0000
Manifest this update:     Wed 14 Dec 2022 10:06:31 +0000
Manifest next update:     Thu 15 Dec 2022 11:39:31 +0000
Files and hashes:         1: 323830343a363533343a3a2f33322d3334203d3e20323639343735.roa (hash: QLwbnySfktyIWZawvx5NrZnEzcbKfvVO3GId7VPiq9w=)
                          2: 34352e3138372e3137362e302f32322d3234203d3e20323639343735.roa (hash: y9teKqEvcZ9fWKzmiYF8rPAkIaLgk+Nbsf7ARnTZRb4=)
                          3: 28099F655F9326704CA106B9B86F52E88D393F7B.crl (hash: QP/CrjPSDj43OAIYwXBa8Gxe3s+4mKJqmHg6nueA2UE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:90:d2:23:13:29:b8:47:88:fd:ca:30:63:58:ae:2a:7d:5c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28099F655F9326704CA106B9B86F52E88D393F7B
        Validity
            Not Before: Dec 14 10:06:31 2022 GMT
            Not After : Dec 15 11:39:31 2022 GMT
        Subject: CN=EA5514D0EC6840DCE90BFEE921DAEF357B787DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:dc:f0:b3:85:6e:16:03:36:f7:a1:c2:ef:
                    8f:7b:61:be:0e:42:00:67:6b:db:70:b5:2c:ce:58:
                    52:12:af:93:4c:cf:4c:f1:58:d8:14:d3:4f:e1:31:
                    4a:e8:a1:e8:dc:34:d9:83:9f:fd:59:1c:eb:b5:9d:
                    a6:e8:21:1d:c8:4e:73:c5:5a:15:16:e9:b4:1d:ed:
                    99:81:40:88:87:ca:9c:09:03:41:fa:4d:50:a7:2e:
                    44:59:a5:51:14:20:8d:3a:63:3a:32:ca:ed:ad:9d:
                    0a:0b:3d:b1:73:61:b5:a1:ad:91:98:ae:a9:84:38:
                    83:1b:d4:b9:5d:14:a2:63:b8:5e:f4:1f:ff:73:36:
                    c2:21:d8:12:f8:e5:61:03:7e:c8:73:b4:06:a2:3c:
                    de:65:02:e4:2e:71:f1:ec:c7:65:67:9f:99:ac:f3:
                    ae:8c:22:f0:b7:f8:e3:f7:4c:ef:c7:4e:f7:d8:51:
                    46:f5:25:71:66:0b:25:50:42:9b:5b:54:eb:7f:d0:
                    6c:35:11:f1:46:30:cf:f4:0a:e5:bf:39:5e:41:7d:
                    46:9c:ef:ae:c2:dc:c6:7c:23:dc:3a:c3:82:d3:c6:
                    59:f1:81:bf:69:81:38:f5:b6:0f:a6:f3:e7:00:85:
                    25:3a:2a:26:a7:70:46:26:db:45:98:fa:ad:cd:70:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:14:D0:EC:68:40:DC:E9:0B:FE:E9:21:DA:EF:35:7B:78:7D:F0
            X509v3 Authority Key Identifier:
                keyid:28:09:9F:65:5F:93:26:70:4C:A1:06:B9:B8:6F:52:E8:8D:39:3F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28099F655F9326704CA106B9B86F52E88D393F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:9e:10:68:df:7f:6b:b7:11:f1:7d:51:01:75:d2:ad:64:
         d7:80:5d:89:b9:4d:28:df:b4:42:b4:b3:8d:f9:c7:b9:91:9f:
         d5:81:52:ec:ec:cf:93:93:e4:6a:ee:5f:a6:34:2d:e9:f3:04:
         2e:c3:fa:43:07:22:c4:3e:47:01:89:83:07:13:04:13:ea:8a:
         5b:07:7b:af:1f:04:4e:67:37:bd:13:f7:e0:ff:23:04:fb:90:
         04:76:eb:8a:24:a1:27:6a:1d:0e:e9:a5:ea:69:04:79:a6:45:
         ba:13:8a:7e:40:ee:9f:87:54:57:b7:9d:72:71:06:21:49:8a:
         52:00:44:c8:13:b7:54:c1:50:3d:b0:e1:81:a3:ff:d0:aa:a2:
         57:96:51:cc:42:f8:8f:03:33:d5:9f:3e:6c:c5:d7:ea:6e:64:
         67:0d:62:23:ea:69:03:d3:b9:5b:ef:68:e8:05:fd:e1:de:ae:
         e0:cd:8e:e7:89:b7:4e:97:8c:59:3b:a3:64:ed:13:c9:3e:f0:
         31:9c:75:e9:b4:88:73:62:7a:92:90:ab:9c:7b:57:69:8b:1b:
         28:10:1e:ba:7d:ff:5c:bc:ef:8e:56:7e:90:65:d4:66:e6:48:
         a8:a0:11:7d:b1:a1:0e:52:8d:01:13:34:ae:ad:45:97:86:4d:
         21:36:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----