Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.mft
File:                     1C4BF13101A0972C35E22F4AC4B097D62C18E890.mft (raw, json)
Hash identifier:          8Pl2YnYvXnrtaf9IXmgaELTG/zwrd+lUOxsnx8yE5tQ=
Subject key identifier:   EB:98:67:9F:6B:A2:01:FE:C1:93:FF:D2:78:3E:14:49:09:BA:A6:7F
Authority key identifier: 1C:4B:F1:31:01:A0:97:2C:35:E2:2F:4A:C4:B0:97:D6:2C:18:E8:90
Certificate issuer:       /CN=1C4BF13101A0972C35E22F4AC4B097D62C18E890
Certificate serial:       5A76385A6C3913492450048E43E079FB6C36844B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.mft
Manifest number:          43
Signing time:             Wed 09 Nov 2022 05:45:48 +0000
Manifest this update:     Wed 09 Nov 2022 05:40:48 +0000
Manifest next update:     Thu 10 Nov 2022 06:41:48 +0000
Files and hashes:         1: 323830343a363430633a3a2f33322d3334203d3e20323639343031.roa (hash: /PXMuT7evhK6i5bZNBy9ho/THdCKeGRa/Hnyi26ZoYs=)
                          2: 34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa (hash: njKHB/+81VU4NXUnL7Kdvjc78z7cHz6bvT+bVX+gJAg=)
                          3: 1C4BF13101A0972C35E22F4AC4B097D62C18E890.crl (hash: puj01tLrLEsYx66yhcSHxlC25adhuNeypp83eHKDL+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:38:5a:6c:39:13:49:24:50:04:8e:43:e0:79:fb:6c:36:84:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4BF13101A0972C35E22F4AC4B097D62C18E890
        Validity
            Not Before: Nov  9 05:40:48 2022 GMT
            Not After : Nov 10 06:41:48 2022 GMT
        Subject: CN=EB98679F6BA201FEC193FFD2783E144909BAA67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:4c:3b:2b:79:79:c9:58:d2:ed:f4:20:17:
                    f4:6c:3a:bb:7d:28:e1:d1:e6:af:3d:ae:21:7d:cc:
                    8b:2a:a0:83:f9:f4:ca:cf:09:b6:b6:06:f2:c2:55:
                    5e:08:bc:74:30:87:c0:23:58:52:e1:4d:99:e8:13:
                    c4:20:4a:b9:fc:92:df:eb:d1:5e:cf:bd:93:90:7e:
                    34:78:05:0a:d8:6c:1b:f9:f1:6c:4f:cf:c4:28:e4:
                    68:37:6c:b8:88:eb:e1:c7:84:38:6f:42:94:e4:f0:
                    83:81:4f:85:ed:31:0e:3d:6e:6b:77:0a:8c:48:b7:
                    ef:20:13:ae:e0:27:6f:ab:71:e0:75:5c:aa:79:10:
                    6b:61:40:9c:f4:38:9c:d7:9c:7b:b0:ff:f1:cc:5d:
                    c5:b0:72:11:4c:90:37:2e:9a:ae:59:81:19:e0:e9:
                    0b:e0:15:22:98:68:78:27:30:ad:f9:74:cd:31:39:
                    2e:8f:9e:e4:a8:ff:ac:5f:bf:1a:23:f7:e9:05:d0:
                    3b:3f:12:e5:bb:93:d5:2b:0e:88:26:69:66:6b:5a:
                    b9:68:04:15:a2:de:30:bb:0e:dd:35:76:3a:e7:0e:
                    33:e6:78:b7:17:e7:a0:28:40:6c:31:81:f3:97:d6:
                    a6:95:3c:8b:3a:a2:6c:35:4d:54:71:ca:ef:bc:21:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:67:9F:6B:A2:01:FE:C1:93:FF:D2:78:3E:14:49:09:BA:A6:7F
            X509v3 Authority Key Identifier:
                keyid:1C:4B:F1:31:01:A0:97:2C:35:E2:2F:4A:C4:B0:97:D6:2C:18:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/1C4BF13101A0972C35E22F4AC4B097D62C18E890.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3c:91:b0:f8:3a:84:ef:da:96:ec:f6:ba:a0:ac:5f:1c:1d:
         71:4a:f3:5c:cf:45:9f:85:3a:26:40:fa:24:17:cf:16:59:a5:
         6d:48:19:47:fe:d6:df:00:e7:0c:2e:43:88:e0:42:75:07:b1:
         c6:4c:f8:a0:ab:92:3c:36:f1:d8:42:09:04:10:d3:fc:97:23:
         f4:29:cb:84:13:11:4a:64:34:36:2f:dc:31:23:0b:d6:fa:95:
         45:1a:1b:5e:62:9d:f4:0e:59:8d:91:1f:a6:b9:af:ab:3e:11:
         72:99:02:b9:22:68:9f:91:39:01:26:88:dc:d6:11:c6:7c:90:
         c1:2b:72:fc:59:7d:c9:6f:d2:15:61:7d:14:91:21:f3:1f:c2:
         79:56:68:b8:8a:47:3a:de:9d:a4:3b:71:cc:fe:f9:d8:5f:c1:
         b0:64:c6:49:b0:78:78:ab:60:b4:41:e7:9b:ce:5c:36:d9:fd:
         bb:c2:49:38:9d:b1:c0:53:95:15:2d:d7:7d:85:8b:ef:d1:2d:
         96:a2:1a:5a:9b:37:3d:59:f8:0b:18:55:50:2b:70:03:d6:46:
         d1:2f:d3:68:a6:2f:b6:a7:b5:40:40:31:ff:e2:83:63:dd:89:
         d0:b1:28:bb:f1:6c:55:3b:ff:51:0c:4e:f7:5c:16:82:5c:e8:
         eb:b7:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----