Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft
File:                     C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft (raw, json)
Hash identifier:          dZ867NqYgoHEu6prapYW8OtoDV4CKQ9URIn2RiL8zq4=
Subject key identifier:   0B:EC:0A:C7:AC:BC:3D:C2:B7:4A:99:57:E6:6F:B0:4B:B9:BD:B4:3C
Authority key identifier: C6:59:ED:35:D6:77:4A:DA:1B:4D:FC:B5:2B:2B:CA:0F:9F:B9:C8:27
Certificate issuer:       /CN=C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827
Certificate serial:       6A825B0ED5520FDB8C2B06AA40869181AA96328C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft
Manifest number:          03
Signing time:             Sun 10 Apr 2022 15:00:00 +0000
Manifest this update:     Sun 10 Apr 2022 14:55:00 +0000
Manifest next update:     Mon 11 Apr 2022 15:10:00 +0000
Files and hashes:         1: C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.crl (hash: 7nkuMddJ4zAPpumDOSJKnR3Q8EibW612bDV7Sy64UzE=)
                          2: 3134332e3235352e32302e302f32322d3234203d3e20323635313335.roa (hash: zcF7CFdfKoT71w+bdEPxE6dXNDfCAa5WB+2dHWrjxv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:82:5b:0e:d5:52:0f:db:8c:2b:06:aa:40:86:91:81:aa:96:32:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827
        Validity
            Not Before: Apr 10 14:55:00 2022 GMT
            Not After : Apr 11 15:10:00 2022 GMT
        Subject: CN=0BEC0AC7ACBC3DC2B74A9957E66FB04BB9BDB43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:f3:6a:48:f2:20:56:17:e6:4b:d3:c2:8b:
                    20:81:74:68:28:d3:8f:f4:25:ac:b5:cb:c4:ff:be:
                    71:21:e5:20:d6:87:ab:20:03:83:ed:68:b6:9c:df:
                    10:e4:ae:fe:35:b8:77:6f:09:35:0c:29:d0:f0:94:
                    c8:c9:59:04:ec:67:be:d2:29:9a:8f:3b:24:55:2d:
                    8f:97:f4:28:bf:c1:2d:22:9c:3f:79:4b:81:e8:04:
                    41:88:8c:36:82:1e:d4:1a:ba:f3:0d:09:2b:ae:c8:
                    89:28:d5:a9:88:66:0d:62:2d:68:1a:1f:ae:c8:72:
                    45:e3:0a:ad:0c:45:33:04:da:c8:a7:9f:74:1c:00:
                    94:e6:a7:20:c8:ce:5f:a9:0a:fb:df:78:00:49:1e:
                    ca:f6:d4:8d:ce:19:f0:16:80:e5:7f:48:4e:8b:6f:
                    73:2b:b2:a1:c2:fd:45:56:b3:81:f6:8d:b9:33:95:
                    5b:22:72:0f:ea:16:ff:5e:66:c7:78:bb:54:78:c1:
                    cd:d3:05:78:d7:95:70:05:1e:61:9c:3c:87:49:a1:
                    9f:c7:07:a2:f7:a4:bf:c6:f9:e4:1d:d6:15:ec:a9:
                    c3:05:38:84:de:be:e8:18:24:de:a8:a9:23:8f:d5:
                    b8:de:ff:83:c1:24:c5:71:35:c4:0e:f3:97:ee:fb:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:0A:C7:AC:BC:3D:C2:B7:4A:99:57:E6:6F:B0:4B:B9:BD:B4:3C
            X509v3 Authority Key Identifier:
                keyid:C6:59:ED:35:D6:77:4A:DA:1B:4D:FC:B5:2B:2B:CA:0F:9F:B9:C8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/C659ED35D6774ADA1B4DFCB52B2BCA0F9FB9C827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:8c:a5:b2:2c:fc:ba:81:04:59:4f:6f:e7:e5:2e:ba:a1:
         9c:21:ee:fb:fa:f1:c4:5a:6e:1f:2f:53:45:5c:c8:87:1b:20:
         ca:e9:85:0f:ef:76:bb:cf:1c:ef:7c:12:23:f5:27:c8:12:ef:
         f4:95:5f:16:5e:cc:bf:0c:13:8c:ad:0e:8b:90:26:95:6d:6c:
         f3:c2:bb:b6:b6:f5:53:4e:a0:b6:ad:ea:8f:cd:3a:47:5f:30:
         8c:60:ed:a7:a2:fd:2a:a1:7c:59:57:48:5d:81:f1:06:b1:c9:
         93:f7:9f:53:47:51:d6:db:15:34:da:37:09:5f:86:54:51:6d:
         c6:26:02:f7:90:3f:47:8e:ba:8b:4a:8e:3d:aa:d5:d0:f8:e2:
         8a:31:96:83:06:87:c8:63:b2:4e:68:52:df:3d:06:88:33:30:
         d7:22:f9:69:80:4a:06:64:61:cd:00:29:81:20:cd:18:f5:34:
         d1:8c:45:dc:6c:84:87:93:e5:d3:92:18:5b:19:49:c2:33:cc:
         1c:48:e0:2a:99:c5:76:6d:3c:de:1a:7a:7f:a2:c7:81:10:0f:
         64:b3:60:1f:18:01:42:ca:2a:6c:48:c0:55:fd:d9:27:5f:3c:
         f4:c0:83:d1:f8:3f:b0:97:1b:6c:6b:9a:f9:12:32:d2:ca:df:
         65:ac:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----