Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft
File:                     20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft (raw, json)
Hash identifier:          USxuqfUM8I7E2amYT5sc9tfFTmY+ZOkVc7RSPOdxs7g=
Subject key identifier:   AD:A5:85:C3:FC:BA:FD:B3:46:05:8F:18:64:DD:13:BF:0E:7C:65:98
Authority key identifier: 20:48:39:86:DF:9B:B3:A6:EA:8D:0E:39:35:5B:79:DC:0F:C5:5E:BA
Certificate issuer:       /CN=20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA
Certificate serial:       29AAE724DAB4A3DA826CD869AD514BD2C71F586C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft
Manifest number:          01D7
Signing time:             Wed 20 Jul 2022 13:05:42 +0000
Manifest this update:     Wed 20 Jul 2022 13:00:42 +0000
Manifest next update:     Thu 21 Jul 2022 16:28:42 +0000
Files and hashes:         1: 20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.crl (hash: VrK7Otkwp5N2oiQXhQz7oiCByKCnpqV9Xl4wtNMoXqU=)
                          2: 3133382e39392e37362e302f32322d3234203d3e20323634313537.roa (hash: 4dE4p7QDKYFbhIuPDV1Gi04+TZohRttsHjGvB+p7q7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:aa:e7:24:da:b4:a3:da:82:6c:d8:69:ad:51:4b:d2:c7:1f:58:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA
        Validity
            Not Before: Jul 20 13:00:42 2022 GMT
            Not After : Jul 21 16:28:42 2022 GMT
        Subject: CN=ADA585C3FCBAFDB346058F1864DD13BF0E7C6598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:21:f3:89:9e:2f:76:e6:02:73:27:c8:9a:
                    5b:2b:61:c1:f6:c5:20:7c:41:a4:f5:06:74:21:d8:
                    5e:b5:b7:c1:e3:5e:1d:e2:0f:df:a6:98:40:7c:6a:
                    f1:94:c5:6c:1d:b6:94:d0:ad:24:14:2f:8d:df:71:
                    3f:5e:54:4a:d7:fa:1e:75:f8:a9:4c:7e:b0:ec:6b:
                    be:dd:7e:d0:1e:2e:ae:f5:05:7c:5f:b2:89:07:ed:
                    e8:53:72:0f:b8:ca:d0:ab:d6:3b:5c:0e:6f:34:98:
                    03:a7:22:ab:72:47:13:09:a0:92:e2:67:fd:c6:eb:
                    57:0d:e0:90:59:7e:e8:af:50:27:77:2a:99:4f:59:
                    83:8f:0c:a6:ac:ca:10:e7:9a:c3:3f:28:d7:7d:44:
                    83:ce:c5:35:0a:de:e8:c1:b0:20:f5:8d:74:aa:7d:
                    29:d2:68:8f:55:56:b0:d1:9b:df:fb:fc:02:6e:f3:
                    81:14:d0:3f:1d:fd:97:05:18:48:ec:1d:b1:56:01:
                    3d:b9:22:31:f2:67:82:56:d0:5c:b1:d7:b4:50:53:
                    e1:26:1b:4b:e3:85:ed:f1:13:64:64:52:74:c0:51:
                    86:d4:d6:94:72:82:35:86:04:9f:0b:d7:7f:3d:48:
                    22:f0:09:36:b4:6f:52:30:f7:87:2e:ab:3e:7f:ec:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:85:C3:FC:BA:FD:B3:46:05:8F:18:64:DD:13:BF:0E:7C:65:98
            X509v3 Authority Key Identifier:
                keyid:20:48:39:86:DF:9B:B3:A6:EA:8D:0E:39:35:5B:79:DC:0F:C5:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/20483986DF9BB3A6EA8D0E39355B79DC0FC55EBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:9b:94:e8:80:84:ec:22:51:c7:01:1f:83:41:63:e7:e7:
         28:a0:53:fe:d8:69:7c:3c:a5:09:c6:2c:a1:a1:fa:21:23:ae:
         88:c5:36:e5:52:86:cc:7a:85:1d:ad:e9:b6:ef:2e:26:95:1e:
         8d:8c:b2:6e:5b:6e:fb:cc:ec:1e:73:91:ae:0a:a7:16:52:93:
         14:30:15:ac:66:23:68:ee:32:89:71:76:63:5a:b4:80:2b:5a:
         f7:6f:55:73:ff:93:70:4b:02:70:38:14:b4:a7:e3:15:a3:d6:
         9b:5c:69:36:4d:47:4a:7b:25:1a:3d:05:ed:8b:04:a0:6e:f5:
         27:c4:86:f4:49:fa:8f:28:33:56:ed:66:d2:14:63:fe:2b:4f:
         d5:e8:20:2f:5a:60:e1:93:73:a5:60:c2:9a:53:a1:e7:0f:bf:
         91:97:8d:e4:de:82:35:e9:0a:c9:4a:ed:94:37:9a:11:17:66:
         19:34:a4:18:c3:f7:6b:ff:c5:ab:71:4e:a6:e6:d7:7d:94:15:
         16:63:c7:f1:62:e3:3c:eb:ad:f3:84:bf:51:b5:da:d6:6d:f9:
         69:88:0e:b7:7f:d4:7f:a8:70:0b:1a:ec:c9:7d:c0:85:c8:ef:
         df:da:49:7e:c1:79:52:3d:ad:b5:f1:29:91:36:4d:21:ba:30:
         03:5e:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----