Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.mft
File:                     23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.mft (raw, json)
Hash identifier:          5gYbh6fLLj/ykgx0vGjeed+iEeBOWFxBu/jsrEx2GMs=
Subject key identifier:   78:B1:CA:14:A3:ED:E8:E5:EF:CD:A1:6C:AD:AE:E0:59:DD:CE:17:4D
Authority key identifier: 23:83:74:71:C1:2C:1A:7B:60:51:BA:C1:B9:A0:F3:55:EB:AD:9E:73
Certificate issuer:       /CN=23837471C12C1A7B6051BAC1B9A0F355EBAD9E73
Certificate serial:       26038C1B6C8D18B2F888464349D1202101D7F9BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.mft
Manifest number:          16
Signing time:             Thu 29 Dec 2022 21:14:52 +0000
Manifest this update:     Thu 29 Dec 2022 21:09:52 +0000
Manifest next update:     Fri 30 Dec 2022 21:45:52 +0000
Files and hashes:         1: 23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.crl (hash: 6Gjii0mMuQaXLMmqlKUz6ut7apPqWkwi2W0gz+XEHxw=)
                          2: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: RrTefLd/a+3+TWubauRQ2tbjwI3GOhkJLGPC8wW7CdQ=)
                          3: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: CGLMVbwq5WM5O+19ZiQDsjCJcWka6oWWkpgupJKHzuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:8c:1b:6c:8d:18:b2:f8:88:46:43:49:d1:20:21:01:d7:f9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23837471C12C1A7B6051BAC1B9A0F355EBAD9E73
        Validity
            Not Before: Dec 29 21:09:52 2022 GMT
            Not After : Dec 30 21:45:52 2022 GMT
        Subject: CN=78B1CA14A3EDE8E5EFCDA16CADAEE059DDCE174D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:62:c8:07:1c:47:f8:42:ac:7f:58:9c:ad:
                    8c:ef:2d:9f:18:06:fb:19:92:2e:83:35:ff:ee:78:
                    f6:a3:8c:93:c7:a8:b5:01:5c:62:4f:14:38:9f:b0:
                    e3:f5:ec:13:b9:ea:2d:2b:d0:9d:dc:68:34:07:8a:
                    02:89:35:ae:2a:8c:45:aa:3b:ee:4b:08:96:d7:4d:
                    64:36:8d:10:70:6b:b0:69:91:e0:e8:ae:f9:2b:9f:
                    d1:aa:7d:5a:94:e8:17:c9:30:13:f3:18:cd:43:c3:
                    64:68:7f:94:dd:d5:8d:1e:d1:c6:28:e7:4b:6f:0c:
                    63:a1:35:82:2b:78:f5:70:d6:e5:38:65:e9:11:78:
                    04:6b:3a:b0:27:4f:6d:16:aa:4d:df:ad:0c:cc:5e:
                    bc:2a:93:aa:13:b5:a7:47:f2:18:00:db:fb:0e:7e:
                    f5:8a:98:7f:2b:6c:62:f2:f8:64:b2:91:b4:50:e3:
                    68:de:5c:14:a5:ab:ff:cc:21:7f:d5:c4:c6:5f:29:
                    5f:b5:77:6d:0f:53:02:00:56:5f:7e:c1:ee:a3:9b:
                    ad:59:c3:e8:30:a3:6e:44:2a:2f:02:fa:5b:c5:21:
                    a6:e9:e4:9c:d3:23:c9:ba:c6:39:81:2e:11:e2:38:
                    5b:82:64:f9:1b:27:91:55:87:15:90:b3:23:70:ca:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B1:CA:14:A3:ED:E8:E5:EF:CD:A1:6C:AD:AE:E0:59:DD:CE:17:4D
            X509v3 Authority Key Identifier:
                keyid:23:83:74:71:C1:2C:1A:7B:60:51:BA:C1:B9:A0:F3:55:EB:AD:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/23837471C12C1A7B6051BAC1B9A0F355EBAD9E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:86:38:70:24:e0:dc:4f:a0:c0:5d:91:e2:a6:31:13:24:
         d5:46:a7:39:d4:b1:06:90:f4:a4:ae:cd:b3:20:e8:96:78:55:
         0b:da:aa:86:9e:d5:82:38:bc:dc:97:dd:ac:76:98:bc:2e:e3:
         1a:c9:6e:6b:d0:21:28:5e:22:d0:23:bd:6b:02:c8:a7:dc:1d:
         f1:20:75:cc:78:30:3d:07:25:9c:4e:22:b9:5c:82:61:c6:2d:
         1b:f5:a2:1b:1a:51:57:53:d0:66:94:44:b0:17:be:1c:96:61:
         f9:57:b8:14:9d:a9:43:5b:5f:07:48:cb:82:09:7e:4f:51:86:
         02:82:e8:26:5e:6b:e0:6d:6a:6d:e6:e9:58:83:3b:89:7c:be:
         ba:ac:73:27:0c:02:17:ae:0d:e5:7f:6d:59:e8:ca:64:60:c5:
         e0:a1:b4:8e:10:1f:08:a3:00:8d:94:be:39:6a:8d:d2:30:42:
         de:db:06:14:fc:c5:a5:b4:75:00:55:7d:3d:02:c6:90:a8:b7:
         57:e6:2e:86:4f:1d:d1:2f:62:53:a2:3f:b8:bb:f4:62:eb:02:
         04:e9:3b:63:23:88:15:3f:a6:ec:cd:c8:ff:87:09:5a:5c:f8:
         a8:60:92:7a:21:f4:ff:71:e9:98:ac:e2:2b:cd:77:89:f5:5c:
         27:d7:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----