Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft
File:                     0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft (raw, json)
Hash identifier:          Og87hIWk7vxvGObESTHL2h7rtNKr2ra3KlDqbkr7z9Y=
Subject key identifier:   33:B7:30:C6:B1:4A:B2:62:15:47:CE:D1:70:B8:B0:8C:D6:92:FB:7E
Authority key identifier: 0C:16:DE:D3:9E:2C:3C:56:CC:D9:FB:D8:35:F8:33:2A:5B:E2:DE:99
Certificate issuer:       /CN=0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99
Certificate serial:       467AAE9F962024704DE877633D9AB9809F864DC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft
Manifest number:          1D
Signing time:             Wed 20 Sep 2023 09:18:09 +0000
Manifest this update:     Wed 20 Sep 2023 09:13:09 +0000
Manifest next update:     Thu 21 Sep 2023 12:34:09 +0000
Files and hashes:         1: 0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.crl (hash: yiddC6Jd116DVST6Cexl0QQqwPlF6QLOwJZqmJYaK48=)
                          2: 34352e3233382e362e302f32332d3233203d3e20323638333038.roa (hash: e/USUtVbgeZ7JqHVrQ691En/zhgC8n2KUZ6VwzKbxbc=)
                          3: 34352e3233382e362e302f32342d3234203d3e20323638333038.roa (hash: A8Skj9+wdGS2c/w0hAgO86TzirE0KfBTCmghFsuF3/o=)
                          4: 34352e3233382e342e302f32332d3233203d3e20323638333038.roa (hash: g8AT2Th/YI6JMfe9Ih3RYwjJjcLW07Tj6NNENF5KLJg=)
                          5: 323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (hash: aGfiuzUVJ4/Qy1mKe5LMBkZhDqUF4rPsCRyUEbhMbik=)
                          6: 34352e3233382e352e302f32342d3234203d3e20323638333038.roa (hash: iUZt10OV5YBtMETUZX1RZyB0MPFZuWn6Du7grwQSD+g=)
                          7: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (hash: ouErr7tb3hV4y2FM565ou+zVnclD6AH7Iy5Ygvk0kHA=)
                          8: 34352e3233382e372e302f32342d3234203d3e20323638333038.roa (hash: ZZridfRBgd4xcA5Frszlc94lzLxSOfnahwPNVupUnho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:ae:9f:96:20:24:70:4d:e8:77:63:3d:9a:b9:80:9f:86:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99
        Validity
            Not Before: Sep 20 09:13:09 2023 GMT
            Not After : Sep 21 12:34:09 2023 GMT
        Subject: CN=33B730C6B14AB2621547CED170B8B08CD692FB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:91:45:51:a9:85:1a:db:f7:9a:82:de:d9:
                    96:5d:e3:4e:00:1f:c2:cf:74:48:d6:fc:19:ac:c4:
                    f4:56:e5:2c:34:c8:c6:b1:de:2e:3a:5d:09:55:0e:
                    6e:2b:1c:30:c8:06:c8:ae:48:2c:f9:52:b6:ff:3a:
                    ff:4d:a2:9e:81:c2:d8:8e:82:d1:34:17:3d:94:ec:
                    20:88:97:7e:d1:5c:f5:16:ac:51:a3:6e:e4:d5:06:
                    8b:7b:23:fa:30:eb:eb:8c:d8:ee:f0:65:20:fd:0a:
                    b8:ec:09:59:25:dd:03:89:1e:6e:d4:3a:d5:ec:fa:
                    c0:d9:17:9c:04:1c:b7:ad:d9:c1:9a:c5:ee:4b:9a:
                    22:24:e1:da:90:31:fb:fc:a7:30:b8:b1:52:f4:25:
                    22:8c:5f:0b:5c:07:e9:cf:a8:dd:02:c7:8f:ab:4a:
                    4b:d5:2f:23:e5:51:a1:9a:19:ea:0d:c3:c9:ac:eb:
                    e9:10:33:1c:a2:2e:ea:a1:02:1d:69:01:aa:88:67:
                    44:2b:17:6b:ec:5b:d1:e6:7b:5f:f6:56:e7:68:40:
                    46:9e:81:13:4e:ce:6e:fe:60:db:3f:3e:8f:42:0e:
                    e5:ab:06:bf:87:ec:12:e4:91:88:30:9a:41:92:e6:
                    91:19:a3:10:da:ad:d5:d1:a4:96:2c:45:96:54:cd:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:30:C6:B1:4A:B2:62:15:47:CE:D1:70:B8:B0:8C:D6:92:FB:7E
            X509v3 Authority Key Identifier:
                keyid:0C:16:DE:D3:9E:2C:3C:56:CC:D9:FB:D8:35:F8:33:2A:5B:E2:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:e4:cf:b8:0b:a9:85:16:e2:4a:d0:7b:1e:20:5b:9c:4c:
         e3:7c:44:cb:74:01:a6:29:ec:84:af:48:93:b5:be:12:4c:60:
         bc:52:5f:b3:1d:83:a4:07:6e:5d:65:08:f7:43:f5:e7:ab:f9:
         d1:3d:cc:d6:54:a1:69:9a:d2:38:29:b0:21:60:be:02:99:d0:
         b0:98:b4:c4:3b:60:5b:9a:03:4a:e9:d1:ec:e2:de:c1:b0:8d:
         f2:d6:50:b1:a4:0e:a9:6d:32:ca:24:96:27:6a:e7:73:39:45:
         3c:33:f3:fb:6e:35:63:fc:3f:34:8d:7c:7a:c1:00:05:2c:ed:
         2f:2c:5a:ca:32:ea:aa:9a:58:bf:a8:07:c2:a0:df:99:a5:92:
         dc:fe:93:39:1b:a1:8c:b6:18:fa:63:18:a9:5b:f6:36:9f:c6:
         1b:15:9b:10:08:be:b2:d3:f7:28:69:d8:22:1b:48:5f:93:a5:
         34:40:7e:b2:38:01:d9:20:ce:30:b2:bf:79:6f:9f:ae:12:af:
         0a:14:a2:f3:be:42:ba:a9:ea:01:de:8e:09:d3:f1:a2:58:50:
         5a:4a:f7:20:9b:f6:2e:01:3a:b9:54:e5:22:c6:15:01:05:ea:
         7d:83:ec:55:bd:e4:4c:3f:c2:93:a4:2f:1f:11:dc:a6:e0:8c:
         2a:d0:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----