Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.mft
File:                     603A82E52EC8F2936B09798AE3876E83B928E5B3.mft (raw, json)
Hash identifier:          JhoUes33oEOj9ttXp44H9AbZg88gXqZjO03XF2L3oL8=
Subject key identifier:   A9:F8:C0:29:53:D9:DA:54:01:D2:3A:B9:94:30:6E:6D:7C:BC:B4:77
Authority key identifier: 60:3A:82:E5:2E:C8:F2:93:6B:09:79:8A:E3:87:6E:83:B9:28:E5:B3
Certificate issuer:       /CN=603A82E52EC8F2936B09798AE3876E83B928E5B3
Certificate serial:       24789FC9732D495B74665F1BDD07EF25039144BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.mft
Manifest number:          08
Signing time:             Wed 16 Mar 2022 16:10:00 +0000
Manifest this update:     Wed 16 Mar 2022 16:05:00 +0000
Manifest next update:     Thu 17 Mar 2022 18:39:00 +0000
Files and hashes:         1: 603A82E52EC8F2936B09798AE3876E83B928E5B3.crl (hash: Ye79Rm9Sfh9/bJzBFqKR7QsTAtdN9ouFSw8w9YiOyoo=)
                          2: 3139302e38392e36382e302f32322d3234203d3e203136393231.roa (hash: GZzjbZ3Wpp/mISVwPmTl7F4XySCjdDk+ybmtm6NH90c=)
                          3: 323830343a366163343a3a2f33322d3438203d3e203136393231.roa (hash: JbsgfVzkxp1L56xh2anSsh5c7cwD19EG9kWm6yCwbT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:78:9f:c9:73:2d:49:5b:74:66:5f:1b:dd:07:ef:25:03:91:44:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603A82E52EC8F2936B09798AE3876E83B928E5B3
        Validity
            Not Before: Mar 16 16:05:00 2022 GMT
            Not After : Mar 17 18:39:00 2022 GMT
        Subject: CN=A9F8C02953D9DA5401D23AB994306E6D7CBCB477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:ea:fa:57:1d:7f:7b:37:f3:6c:5b:21:5d:
                    16:29:71:31:ec:13:cc:cb:23:1b:62:d6:66:4a:72:
                    56:bd:58:b1:73:15:7e:78:61:d7:ca:b7:9b:8c:80:
                    93:de:33:9c:02:28:39:61:57:8a:c5:85:11:15:1a:
                    e0:70:46:ab:d6:d5:0a:77:91:ee:c5:b5:ff:a4:d9:
                    8d:d9:c5:f4:74:66:42:a4:7d:7c:d9:51:12:e4:0e:
                    22:4e:b9:bd:ca:84:0d:8d:c2:1d:35:78:dd:b7:49:
                    dd:af:a5:df:7f:63:3e:e9:10:6a:e4:e7:df:79:c1:
                    60:04:c7:82:8b:38:4a:22:97:5c:d6:49:e0:96:c6:
                    2c:37:6a:6f:43:d3:a3:3c:25:a7:d7:41:30:dc:24:
                    ff:0e:92:01:91:d4:39:91:2d:44:92:9d:65:8f:ee:
                    1b:68:99:c0:3f:47:09:ab:fb:a1:7d:1d:eb:a1:31:
                    f1:3a:d9:91:38:b1:93:3e:f0:46:a8:a8:4f:bf:70:
                    c2:43:e8:c5:e2:e5:d1:f7:75:3e:24:cf:b9:78:80:
                    44:b6:a1:c6:77:18:a7:38:b8:f6:8f:98:74:b2:cf:
                    b1:81:43:59:52:96:6c:79:74:45:f9:6f:70:f9:2c:
                    ca:59:df:fa:e5:4f:fc:0a:1b:80:57:fb:b1:5f:1c:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:C0:29:53:D9:DA:54:01:D2:3A:B9:94:30:6E:6D:7C:BC:B4:77
            X509v3 Authority Key Identifier:
                keyid:60:3A:82:E5:2E:C8:F2:93:6B:09:79:8A:E3:87:6E:83:B9:28:E5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:61:8b:ea:03:3b:e9:dd:0f:cf:a0:03:28:5f:74:ed:df:
         69:ba:fb:16:3e:7c:88:f6:bb:00:ac:ba:3a:9d:5c:e3:b5:aa:
         cc:bf:cc:45:e5:7f:e8:7c:84:15:e9:87:fa:a8:70:2a:b9:bf:
         52:cc:07:0b:73:5d:da:f1:d6:d8:29:31:a5:ab:4a:d9:c2:57:
         0c:13:02:5f:0f:ed:7e:02:bf:d5:e0:9d:02:28:48:a8:d7:21:
         6b:76:93:68:f3:23:aa:5e:91:30:e2:86:72:57:c0:a0:31:40:
         ac:80:21:0d:9e:e4:0a:e1:d8:87:42:9d:a3:a3:47:63:9d:30:
         2a:5f:36:3a:bb:88:ab:d6:9e:44:7c:45:28:17:68:d2:bb:dc:
         db:3e:bb:9e:60:7a:ac:7d:88:52:c5:00:5d:b8:e3:27:16:2b:
         2b:6c:19:56:f5:e0:c3:df:05:71:c3:c3:10:2f:4c:29:c9:e9:
         89:80:36:95:ef:54:fe:97:ba:a6:41:7e:21:c4:b8:c4:f0:6a:
         81:f8:ba:7f:09:54:6e:2d:16:99:38:85:12:2a:0a:41:75:b7:
         76:5d:46:57:7a:dc:e5:10:c4:e5:92:7a:dc:94:fb:69:52:d0:
         10:56:6a:02:96:7c:19:32:79:5c:c8:03:8b:dc:5b:d1:e2:95:
         cf:a2:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----