Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft
File:                     712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft (raw, json)
Hash identifier:          zofkZWZQDD/Nsld11WxK7mKIh967k8FAMSaKEnCe30M=
Subject key identifier:   EC:47:AF:4F:EF:9A:B8:81:A1:8C:49:BD:DE:81:69:8E:33:B2:DE:EF
Authority key identifier: 71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6
Certificate issuer:       /CN=712143F5591AA8BDBF21E7E0331EC7F5A5049DC6
Certificate serial:       62E1D4A02C8D694C15FFA0252825EA2D6F48E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft
Manifest number:          0267
Signing time:             Thu 12 Oct 2023 00:37:48 +0000
Manifest this update:     Thu 12 Oct 2023 00:32:48 +0000
Manifest next update:     Fri 13 Oct 2023 03:01:48 +0000
Files and hashes:         1: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: bzsa7/+SR1aoY6qlMUlZto9tUJqpbtyrHGYO6mu3e1Q=)
                          2: 712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.crl (hash: 1etvpzhjV0VV0JVa1jSiT+/sxFwUsFi2na0oypbGM3s=)
                          3: 323830343a313634633a3a2f33322d3438203d3e20323633323830.roa (hash: qBLxy7/7fMyMKnulruWXO1KrdRuqEg82KXhaFDB1iK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e1:d4:a0:2c:8d:69:4c:15:ff:a0:25:28:25:ea:2d:6f:48:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712143F5591AA8BDBF21E7E0331EC7F5A5049DC6
        Validity
            Not Before: Oct 12 00:32:48 2023 GMT
            Not After : Oct 13 03:01:48 2023 GMT
        Subject: CN=EC47AF4FEF9AB881A18C49BDDE81698E33B2DEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:73:61:e0:41:79:d4:38:df:5d:5f:5c:b6:
                    72:a5:65:1c:b8:4f:51:83:b6:b5:af:84:fa:45:c9:
                    c1:b4:8f:65:27:25:18:46:6d:7a:10:1e:23:5a:cb:
                    06:7c:95:b7:16:7f:fa:9f:ba:42:51:4e:7d:c2:9e:
                    b7:df:3e:69:7f:da:a3:38:2f:99:39:c5:90:11:d7:
                    b8:48:c0:df:e4:d4:3c:47:12:e4:c7:90:c6:f0:dd:
                    f9:ef:b0:c2:71:1e:39:04:2e:36:4d:e5:45:19:38:
                    fc:1e:2a:7f:49:91:7a:cd:55:7f:cf:fb:0a:60:4a:
                    a1:9a:76:0b:2a:a8:f9:d0:12:f2:42:3e:a0:f3:b4:
                    0e:18:a6:80:a7:f5:73:f4:9b:71:ee:8c:86:d6:d2:
                    30:9c:b6:b5:f6:92:be:1f:db:3e:4a:83:69:b0:3b:
                    9b:bb:db:c5:00:c7:82:89:4a:f4:ae:5b:dd:53:89:
                    e7:d1:2b:9c:25:43:7a:d0:47:00:51:e8:14:e7:55:
                    a1:17:8a:78:ae:8c:4a:f3:6f:b0:6f:bd:3b:45:07:
                    79:b7:61:28:31:eb:c5:38:7e:98:45:0a:3b:79:92:
                    86:6d:ec:9b:6f:66:93:24:bb:be:e5:bb:f0:ff:3c:
                    7f:4e:24:34:fd:e2:c3:13:16:10:43:b7:fb:15:18:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:AF:4F:EF:9A:B8:81:A1:8C:49:BD:DE:81:69:8E:33:B2:DE:EF
            X509v3 Authority Key Identifier:
                keyid:71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:bc:4b:e7:c4:af:35:c4:4a:8b:ef:b9:af:8c:6d:e5:83:
         32:e6:2b:d2:86:c2:21:4e:f9:c5:e4:1d:e4:28:42:c1:df:ac:
         3b:c1:ed:8a:fb:14:78:21:f5:e5:ae:7d:8f:63:7f:6c:0f:c1:
         9c:75:9a:da:70:12:ef:de:6b:70:08:27:e9:7e:6d:93:9d:d1:
         f9:26:6d:50:0e:12:28:97:50:51:93:93:76:81:59:7e:20:11:
         0a:04:15:7b:f1:9b:75:c5:b6:36:9d:4f:99:33:d0:65:5c:57:
         ed:8c:25:d1:25:60:b9:ea:ba:df:54:99:f1:7a:c8:16:5c:43:
         5c:d6:48:04:18:ab:0a:0c:ba:7c:8a:f6:40:f7:47:0f:ed:49:
         dc:4f:0f:75:40:80:ed:26:64:df:ca:5e:12:60:46:4c:db:74:
         f7:93:7a:fd:c4:d2:9b:2d:21:2d:6f:dd:02:6c:b6:76:8b:1b:
         d1:fa:d5:6d:3f:7b:a9:d5:84:ab:1d:8f:ad:6c:2d:00:e6:b7:
         41:79:78:8d:e1:56:ed:06:88:0e:b4:ef:07:31:14:ac:2b:04:
         f4:3a:ce:26:ba:c9:49:ac:04:5a:b1:47:1b:a9:5d:90:da:a5:
         fc:2d:ce:1f:f3:ec:0f:a6:2f:d3:32:cf:6b:cc:0b:4c:21:a7:
         7e:1a:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----