Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7DBouVt853MCi6UTymPdd2NUUReUKGxBAWzhnYUJYtyx/0/7E9FCE0F9416111430E450295BACD33251F111FB.mft
File:                     7E9FCE0F9416111430E450295BACD33251F111FB.mft (raw, json)
Hash identifier:          GweTA3KhksXZKGMko8fEV42zVaHHYR52wECfVqvsIhg=
Subject key identifier:   11:C3:F1:A8:87:D1:6A:16:B6:6A:F0:F0:57:D1:C8:45:67:C5:00:9C
Authority key identifier: 7E:9F:CE:0F:94:16:11:14:30:E4:50:29:5B:AC:D3:32:51:F1:11:FB
Certificate issuer:       /CN=7E9FCE0F9416111430E450295BACD33251F111FB
Certificate serial:       40F6D618CB85626642D69197E29318162A9475A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E9FCE0F9416111430E450295BACD33251F111FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7DBouVt853MCi6UTymPdd2NUUReUKGxBAWzhnYUJYtyx/0/7E9FCE0F9416111430E450295BACD33251F111FB.mft
Manifest number:          64
Signing time:             Sat 29 Oct 2022 17:53:12 +0000
Manifest this update:     Sat 29 Oct 2022 17:48:12 +0000
Manifest next update:     Sun 30 Oct 2022 20:13:12 +0000
Files and hashes:         1: 323830343a326530383a3a2f33322d3336203d3e20323635333139.roa (hash: ald95VQJmNbKclnvhXBPdlVMV7Z9BZNzssG49NMTIf0=)
                          2: 7E9FCE0F9416111430E450295BACD33251F111FB.crl (hash: wjissauiwN1ZZpa8EkrfN1IQ4BpSJNR2ob60HgdVnto=)
                          3: 3136382e3132312e3138302e302f32322d3234203d3e20323635333139.roa (hash: PxOiUTJ157YhUlJ8SwJzUP3AsGrKjDYP+RyIrqxM7Ro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f6:d6:18:cb:85:62:66:42:d6:91:97:e2:93:18:16:2a:94:75:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9FCE0F9416111430E450295BACD33251F111FB
        Validity
            Not Before: Oct 29 17:48:12 2022 GMT
            Not After : Oct 30 20:13:12 2022 GMT
        Subject: CN=11C3F1A887D16A16B66AF0F057D1C84567C5009C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:f4:a3:69:67:17:59:0d:bc:ae:af:a0:de:
                    2d:38:64:cf:7b:1c:12:0c:50:5a:54:2d:07:b7:cf:
                    8b:39:86:d1:33:e7:ea:93:bf:1a:b8:23:a1:47:b4:
                    9f:4c:fb:86:85:3a:18:2b:74:3c:f4:21:85:48:2f:
                    b7:ac:32:96:4e:78:39:30:18:91:7e:81:de:e0:09:
                    e2:8d:16:09:8a:49:b4:d7:e3:c3:4d:91:5e:77:78:
                    1a:c9:6c:7f:d7:30:47:fa:11:fc:f1:f6:b6:e3:b6:
                    50:f2:b3:90:cd:57:cd:47:f0:d4:ba:95:f7:ac:fc:
                    ea:b4:a2:97:eb:8c:c0:69:0f:ef:c8:9f:d5:8f:79:
                    6c:91:8f:ca:82:ed:a8:57:53:7a:c0:69:4d:1b:7d:
                    3e:74:4d:58:8b:6e:ef:b9:b0:ec:d4:4e:8f:00:09:
                    05:36:5f:35:49:5a:9d:c7:6c:66:45:c3:85:d0:29:
                    6a:4f:9d:21:0c:80:8d:1c:ca:6c:9b:24:6b:5a:60:
                    20:08:6f:5d:8a:de:2c:71:34:4c:be:22:31:86:8d:
                    ae:91:55:49:c3:b2:d1:16:38:7d:64:ff:02:dd:76:
                    85:9a:b8:81:c7:8a:c3:e0:47:d9:8a:f5:01:8c:b7:
                    d4:d1:7a:95:0a:94:74:14:b6:23:50:f2:f3:fe:bd:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C3:F1:A8:87:D1:6A:16:B6:6A:F0:F0:57:D1:C8:45:67:C5:00:9C
            X509v3 Authority Key Identifier:
                keyid:7E:9F:CE:0F:94:16:11:14:30:E4:50:29:5B:AC:D3:32:51:F1:11:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7DBouVt853MCi6UTymPdd2NUUReUKGxBAWzhnYUJYtyx/0/7E9FCE0F9416111430E450295BACD33251F111FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E9FCE0F9416111430E450295BACD33251F111FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7DBouVt853MCi6UTymPdd2NUUReUKGxBAWzhnYUJYtyx/0/7E9FCE0F9416111430E450295BACD33251F111FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:13:4f:32:e4:20:be:88:2f:04:69:f4:d1:3e:57:2a:18:
         00:8e:a3:f1:c6:18:3b:9e:c6:17:00:ae:33:1e:46:92:41:53:
         be:d8:c7:1f:b9:35:71:60:00:99:71:1a:ac:5d:dc:f4:28:1e:
         d8:6a:c7:f3:6b:d2:39:31:1b:c3:71:2c:7b:23:1c:14:2a:85:
         63:d3:f9:c0:f5:6a:af:3e:ff:e2:86:87:b2:f2:2b:43:01:e7:
         97:d8:0e:44:73:79:c9:3e:54:ca:f4:26:28:2f:5b:31:0c:c6:
         03:de:e1:89:41:cc:87:13:38:47:6c:7d:bd:40:ac:9e:a8:e9:
         bc:a7:32:c7:99:20:ba:f9:5b:6c:27:1a:79:56:37:4f:83:42:
         64:fc:a7:f5:70:db:21:c7:fe:69:a8:c5:0f:8e:0e:9a:c5:11:
         60:80:5e:2a:0f:5a:12:48:9c:ac:fd:3c:04:5e:ca:6d:32:78:
         7a:39:a0:31:13:d3:79:cc:c0:34:b3:e7:67:7a:6b:a1:3e:0d:
         8b:da:94:0c:59:81:17:4e:24:97:6a:ee:63:3a:5c:f8:59:9b:
         ca:1c:3d:fb:3b:85:fa:a3:07:07:4e:f1:ab:d0:ad:48:47:af:
         c8:0a:06:d6:44:17:d0:1a:6f:35:b2:da:2f:48:5b:a9:1a:25:
         52:88:d5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----