Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft
File:                     CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft (raw, json)
Hash identifier:          81rd2+bAEy78BeZ0I2MKeMXOUMgm5f9uYVUm1/mP0ic=
Subject key identifier:   7A:5C:B7:99:96:BB:4C:98:D6:49:7E:50:C1:F0:91:79:36:38:E2:14
Authority key identifier: CF:F9:A9:38:6A:BE:C5:98:9C:B5:A4:7F:74:A0:E3:7E:F2:FF:0B:4B
Certificate issuer:       /CN=CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B
Certificate serial:       7EAE82C1B103F0CE117015F2A6218F6FCC885903
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft
Manifest number:          03FC
Signing time:             Tue 26 Jul 2022 18:37:20 +0000
Manifest this update:     Tue 26 Jul 2022 18:32:20 +0000
Manifest next update:     Wed 27 Jul 2022 18:43:20 +0000
Files and hashes:         1: 34352e3138392e3232382e302f32322d3234203d3e20323639363132.roa (hash: jNgenL1V1quHO3ERLk0cfqypFqpt4nJcuIIbioZCGAk=)
                          2: 323830343a363733343a3a2f33322d3334203d3e20323639363132.roa (hash: vy1I+qXbIRH/zihvseedMKs1YrYct+m8C0ceGR4j6T4=)
                          3: CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.crl (hash: deRn/hGEiYxRXF6S5zsvUtyfKTfo3MudflJ2tGe4QNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:82:c1:b1:03:f0:ce:11:70:15:f2:a6:21:8f:6f:cc:88:59:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B
        Validity
            Not Before: Jul 26 18:32:20 2022 GMT
            Not After : Jul 27 18:43:20 2022 GMT
        Subject: CN=7A5CB79996BB4C98D6497E50C1F091793638E214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:76:d0:a9:97:be:81:f4:11:99:66:78:a8:
                    62:9f:7b:8c:b5:3a:73:07:0c:99:75:43:c9:66:72:
                    d7:e7:44:e5:fc:f6:41:18:2e:2a:98:d1:be:3d:34:
                    9a:2a:b9:6f:3a:b6:ca:ff:25:e2:e4:70:9a:cf:9b:
                    35:42:53:fd:fd:bb:f6:69:56:35:a9:2b:5f:09:bc:
                    2d:82:c3:0c:2e:d0:78:5c:aa:2a:d9:50:37:b4:9c:
                    a7:5d:f0:18:8a:6c:52:98:42:98:e8:c1:16:4b:13:
                    7d:18:d6:82:bc:41:11:82:0f:ab:99:1f:dc:46:c5:
                    89:b0:52:ef:90:24:91:70:b1:01:2e:00:76:4a:ef:
                    b7:51:cb:c3:e7:69:39:95:0a:d2:7e:a1:2f:0e:c3:
                    0d:89:ee:e7:17:f0:00:06:42:b8:b7:16:69:5d:d4:
                    0c:6f:42:02:82:f2:74:ca:d1:41:97:bd:c6:2f:fd:
                    d4:64:c9:dc:d1:b9:b5:4a:02:2f:5a:91:12:bf:eb:
                    cb:60:bb:cb:aa:bf:16:7c:1e:d4:06:ce:9b:e1:07:
                    ee:81:80:75:28:69:80:fa:01:dd:1c:1c:cc:db:d6:
                    90:9b:03:07:d1:8a:5b:25:45:da:6b:c4:ba:25:e3:
                    3e:e0:28:4f:c2:a3:16:2c:44:1c:5a:a5:69:4b:5d:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5C:B7:99:96:BB:4C:98:D6:49:7E:50:C1:F0:91:79:36:38:E2:14
            X509v3 Authority Key Identifier:
                keyid:CF:F9:A9:38:6A:BE:C5:98:9C:B5:A4:7F:74:A0:E3:7E:F2:FF:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:23:0b:e5:5a:2c:fb:0f:70:19:0d:2c:af:a1:79:fc:ef:
         d5:75:a9:d7:d8:70:8f:ad:e7:b5:74:3b:59:04:d9:9a:e8:8e:
         5a:95:e1:38:b5:d6:a0:b0:7d:7d:e0:fb:eb:b8:59:a3:80:0a:
         a0:db:26:41:97:09:d3:ba:45:62:5b:d3:bd:2f:7c:b1:0d:27:
         7c:c2:3b:e7:e8:ba:ac:06:4e:a2:6e:ce:fb:3b:03:48:9f:c5:
         7f:8d:88:dc:65:91:76:07:e6:8b:1c:89:e6:86:46:33:94:f1:
         0d:26:0b:4a:45:97:19:db:0e:9a:53:03:e0:93:47:86:fa:87:
         1b:f6:8b:11:2f:dc:9a:6f:67:28:8f:7d:3f:a2:94:c7:17:9e:
         15:44:f1:59:c5:74:27:b4:0e:4f:ac:c3:eb:94:1b:7f:3c:06:
         45:f4:5d:72:8b:02:da:b4:49:d2:27:34:16:3a:f1:8f:73:41:
         19:1c:44:6d:77:d5:4f:a4:30:b4:3d:8b:3b:9e:b3:8e:b5:4b:
         3e:28:98:5b:f5:4a:2a:55:f3:e2:95:b3:f7:a9:b8:35:c4:eb:
         86:21:5a:b6:30:09:33:81:b8:5f:34:a3:d8:57:e3:7b:43:d1:
         53:7a:2d:51:63:59:6d:1f:2f:6d:5a:82:dc:37:4c:ab:ce:0e:
         c9:67:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----