Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.mft
File:                     808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.mft (raw, json)
Hash identifier:          CCzFbxJTo4goEd70j430AEALiRdDMGgPBBLMqYZ4SUg=
Subject key identifier:   E1:E7:D3:5D:44:35:18:4E:33:A0:8D:8E:EE:64:4B:16:32:03:65:FD
Authority key identifier: 80:8A:2A:6B:D7:B8:AC:3A:52:9E:05:1F:09:BB:9B:70:F6:69:A8:5D
Certificate issuer:       /CN=808A2A6BD7B8AC3A529E051F09BB9B70F669A85D
Certificate serial:       713EAEA7AFE5D595B12736238EDB58D647254A4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.mft
Manifest number:          036C
Signing time:             Sat 18 Jun 2022 08:51:54 +0000
Manifest this update:     Sat 18 Jun 2022 08:46:54 +0000
Manifest next update:     Sun 19 Jun 2022 12:34:54 +0000
Files and hashes:         1: 808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.crl (hash: XWO2yOh3H3SU5892EGJRn+N3myB8LJVGXB3yZKClc2Y=)
                          2: 323830343a323538343a3a2f33322d3334203d3e20323634323835.roa (hash: YTdlMefOoZN/geFVV9daXYrF8Aao1BwoAvUg3hjRGCE=)
                          3: 3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa (hash: IpJhoqliTbcECPTHSKGQGS6TRVzVK9nMfpkBCHNHHGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3e:ae:a7:af:e5:d5:95:b1:27:36:23:8e:db:58:d6:47:25:4a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808A2A6BD7B8AC3A529E051F09BB9B70F669A85D
        Validity
            Not Before: Jun 18 08:46:54 2022 GMT
            Not After : Jun 19 12:34:54 2022 GMT
        Subject: CN=E1E7D35D4435184E33A08D8EEE644B16320365FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:9e:45:7a:64:c1:46:7b:13:a9:28:c3:9a:
                    86:0c:e8:1e:82:2c:76:c8:b2:ae:54:9c:21:fd:ae:
                    bc:43:b9:c9:ed:1e:83:d1:5d:8d:a7:31:73:e5:51:
                    b8:a0:9d:ec:19:b3:d5:77:58:ce:f3:6e:0a:8c:01:
                    2f:63:52:34:6e:77:e9:a7:03:1c:a9:73:31:a6:b2:
                    fb:b1:0f:7d:49:ce:29:39:02:2d:ca:15:e9:a2:18:
                    68:26:d9:e7:58:4e:9d:fe:99:61:a8:6e:6e:b9:b0:
                    3d:07:df:7f:d1:41:47:03:48:0b:21:56:5e:2c:91:
                    ba:b6:c8:73:83:4a:e3:13:f6:cb:eb:66:5e:ad:f0:
                    ff:0e:e6:69:b8:30:2a:9d:bd:bd:83:31:4c:96:f4:
                    b0:ef:24:ec:6c:99:f5:d3:96:68:26:d3:28:b2:21:
                    a8:d3:e2:82:c6:50:eb:a8:7c:ce:ac:32:5e:0f:c4:
                    28:f2:77:2d:f5:2e:50:4e:84:fb:e7:16:46:b3:0d:
                    21:e1:50:67:98:b5:82:a0:4b:d6:c0:61:0b:7c:bc:
                    69:a2:bd:0c:04:34:3d:67:f0:be:ab:55:0e:5a:12:
                    88:5c:84:68:02:b5:3b:53:93:37:e1:39:fc:44:c1:
                    70:c2:34:fd:45:ba:99:0b:d7:e3:12:f2:dc:b1:97:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:D3:5D:44:35:18:4E:33:A0:8D:8E:EE:64:4B:16:32:03:65:FD
            X509v3 Authority Key Identifier:
                keyid:80:8A:2A:6B:D7:B8:AC:3A:52:9E:05:1F:09:BB:9B:70:F6:69:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/808A2A6BD7B8AC3A529E051F09BB9B70F669A85D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:fa:77:1e:5d:6b:8a:aa:53:13:98:6d:63:1f:c8:b9:1e:
         48:38:46:91:2a:14:61:0e:1e:9c:d0:8a:17:2f:4d:7f:70:60:
         1a:6d:07:32:d3:f7:8e:2c:37:c0:ae:00:0b:80:5e:3e:42:dc:
         28:b1:c1:ea:84:50:a3:1e:4c:bd:dd:e2:13:8d:a8:90:0f:5d:
         a2:11:b4:7b:d6:57:f1:29:33:84:1b:20:71:0d:6f:71:82:3d:
         06:03:7c:93:00:9c:2e:37:91:15:51:55:3d:d4:a8:ab:ed:b9:
         08:fb:c5:4e:71:d4:84:a6:a5:09:a9:d3:1a:47:9c:b5:0a:9c:
         28:f9:ed:1c:63:66:1d:19:48:11:2d:a7:af:1b:87:f2:87:47:
         39:c9:f7:3f:a2:8f:0d:f9:5b:08:b5:1c:a8:9f:55:b0:53:4c:
         31:33:25:7a:cf:1a:03:55:e7:3e:6f:72:60:9f:eb:50:d3:0b:
         29:bf:d3:ba:bc:6d:1e:25:4e:96:9d:97:a8:c0:ca:f5:8a:12:
         9d:83:7c:a7:01:cc:66:73:67:f9:91:cc:ca:c7:ee:81:82:91:
         1f:ee:b0:38:29:2e:f5:27:5f:3b:79:91:d3:a8:fa:ab:57:81:
         0f:4b:ef:83:3d:28:25:25:1d:c0:02:26:d8:3f:2d:21:21:e9:
         c2:7a:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----