Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.mft
File:                     F48D206A743DF33CF9C200281AFFA7DD5775F9B8.mft (raw, json)
Hash identifier:          uuHs3UocUK7nnb04rkDzMoyZ2GdFqwokdGrQYYkpnZs=
Subject key identifier:   55:40:81:EF:67:AC:16:65:79:D7:72:37:14:AF:D7:43:21:13:20:20
Authority key identifier: F4:8D:20:6A:74:3D:F3:3C:F9:C2:00:28:1A:FF:A7:DD:57:75:F9:B8
Certificate issuer:       /CN=F48D206A743DF33CF9C200281AFFA7DD5775F9B8
Certificate serial:       5D81BA01FE7F5BE5E5D14033EB32A45A788C347E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.mft
Manifest number:          FC
Signing time:             Mon 22 May 2023 03:23:56 +0000
Manifest this update:     Mon 22 May 2023 03:18:56 +0000
Manifest next update:     Tue 23 May 2023 04:18:56 +0000
Files and hashes:         1: 323830343a336234383a3a2f33322d3438203d3e203532353931.roa (hash: r0uhPq403D8cuE3ESDEek4o5eV28VkegMkZ7QSvXIHA=)
                          2: F48D206A743DF33CF9C200281AFFA7DD5775F9B8.crl (hash: k7t6YmHikfYtKpZQA2mNleb51e2d/QDVxwy9K8pWjFk=)
                          3: 3137372e38372e36382e302f32322d3234203d3e203532353931.roa (hash: zJkQM9dF7TegP1l1B6wq7DwMQT9Jl+uOBUhFKa7hpF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:81:ba:01:fe:7f:5b:e5:e5:d1:40:33:eb:32:a4:5a:78:8c:34:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F48D206A743DF33CF9C200281AFFA7DD5775F9B8
        Validity
            Not Before: May 22 03:18:56 2023 GMT
            Not After : May 23 04:18:56 2023 GMT
        Subject: CN=554081EF67AC166579D7723714AFD74321132020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:e7:a7:e4:07:d9:a2:e5:e4:ec:fa:bd:1f:
                    05:e0:b5:0a:c8:f8:13:0d:2b:f4:80:d9:62:8f:94:
                    5b:80:59:da:b0:ec:32:cc:c9:4f:16:1d:2c:7b:4f:
                    bf:7b:6d:bf:e7:57:0e:fe:3f:ad:61:43:6e:31:a0:
                    de:db:52:e6:6b:e7:b5:78:a8:96:21:c5:62:70:dc:
                    79:6e:13:77:8f:7c:7d:e8:a8:f0:af:b5:86:71:82:
                    f3:5b:13:15:24:0d:4a:65:66:49:76:3f:d0:c0:60:
                    5e:e2:3d:3e:15:b4:ec:56:82:64:32:f6:8d:59:37:
                    e6:a8:13:89:96:c6:4a:15:4d:68:0e:87:90:c8:e5:
                    fd:4a:c4:47:5a:d2:43:55:4e:a7:ad:9e:7b:2e:87:
                    92:0b:1b:15:24:5b:53:42:ac:47:6d:7f:cb:47:db:
                    a9:2b:6c:db:11:22:2c:3c:07:89:4f:87:d4:80:69:
                    37:2c:92:38:87:b5:f3:aa:e5:8a:4a:f1:0a:54:13:
                    50:e6:aa:a8:f0:b5:21:d1:2a:4e:54:0d:11:b3:26:
                    bd:6b:ba:07:01:06:b0:f6:16:81:81:31:e1:4f:b0:
                    73:d1:4e:99:70:8d:2c:49:da:61:f0:56:43:d2:bb:
                    00:ec:64:5b:d3:12:1d:07:48:80:da:f8:d6:c3:82:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:81:EF:67:AC:16:65:79:D7:72:37:14:AF:D7:43:21:13:20:20
            X509v3 Authority Key Identifier:
                keyid:F4:8D:20:6A:74:3D:F3:3C:F9:C2:00:28:1A:FF:A7:DD:57:75:F9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/F48D206A743DF33CF9C200281AFFA7DD5775F9B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:67:22:23:4b:ab:6b:f9:d8:0c:15:96:de:1f:ab:d1:33:06:
         a3:1c:bf:8d:05:01:ee:0f:4b:1f:c4:c0:a2:6b:5d:2a:42:9d:
         71:03:6f:7f:9b:24:0c:e5:91:7c:f2:9c:97:52:3d:54:bc:58:
         30:1a:19:c2:fe:6f:97:9c:d9:cc:d5:3d:73:c5:da:ee:5a:f3:
         18:62:4d:c6:c8:f9:dc:9e:a2:ce:96:f0:80:4c:bf:c7:0e:1b:
         08:8e:5c:c7:a2:50:b2:0b:19:fa:19:7e:68:37:02:70:c0:b9:
         73:6f:d0:5a:b1:d3:0a:3f:af:bf:57:0d:87:4d:c2:17:af:12:
         96:89:95:af:02:5b:9b:3d:df:cf:6e:56:d2:50:79:e0:7e:2a:
         01:2e:68:cf:e0:b7:dc:0b:35:62:9f:7b:05:b9:28:8c:c0:d5:
         a3:94:8e:89:ff:25:70:0c:3c:d9:21:03:ae:18:f5:43:2d:59:
         d9:da:a0:a6:f2:dd:d4:9d:01:7d:f2:ee:03:a9:78:6a:e7:ba:
         a2:e1:44:66:a5:a7:b0:c9:f6:ab:d4:33:b9:44:d9:06:2f:b7:
         80:b3:10:d2:79:d8:77:ad:53:ba:26:4a:aa:37:f8:93:e3:34:
         9d:d7:e6:65:0f:13:91:e9:44:01:da:c1:25:89:d2:9c:6f:1d:
         74:92:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----