Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.mft
File:                     AAA918430499F3E9894B3CF0249B298084501D20.mft (raw, json)
Hash identifier:          9tYn5hH8XEFlCuy3iUAcHg5HVZJrcvRiXiBtZ5T7x5Y=
Subject key identifier:   5D:88:86:4B:45:6E:38:74:08:DF:1D:14:42:A0:28:8D:62:A0:4D:C8
Authority key identifier: AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20
Certificate issuer:       /CN=AAA918430499F3E9894B3CF0249B298084501D20
Certificate serial:       5130CAFE5E7B668D5EC7056274DA14669B5866C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAA918430499F3E9894B3CF0249B298084501D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.mft
Manifest number:          45
Signing time:             Tue 23 Aug 2022 10:30:37 +0000
Manifest this update:     Tue 23 Aug 2022 10:25:37 +0000
Manifest next update:     Wed 24 Aug 2022 10:52:37 +0000
Files and hashes:         1: AAA918430499F3E9894B3CF0249B298084501D20.crl (hash: k8s3U3eR3E3HjjyPyJMu8NSH+V/sWyz8PCnYfBrrwP0=)
                          2: 323830343a313236343a3a2f33322d3336203d3e20323633343734.roa (hash: 6HRGl5HVRtd6GN+dGhMdsZfPfscXddbgH6o1pZmvAW8=)
                          3: 3139312e3234322e37322e302f32312d3234203d3e20323633343734.roa (hash: lrtCHBYsWgVpa6VA8prof6ErwuIWvGX76myKjmfyBNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:30:ca:fe:5e:7b:66:8d:5e:c7:05:62:74:da:14:66:9b:58:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAA918430499F3E9894B3CF0249B298084501D20
        Validity
            Not Before: Aug 23 10:25:37 2022 GMT
            Not After : Aug 24 10:52:37 2022 GMT
        Subject: CN=5D88864B456E387408DF1D1442A0288D62A04DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:41:86:5b:87:92:44:02:06:0a:75:b3:58:a4:
                    3f:a4:3a:b6:33:a2:0b:30:04:17:e4:67:35:b8:19:
                    98:5b:a9:55:80:ec:0e:16:94:b2:f9:ab:07:7c:3c:
                    7b:37:b2:b7:61:ae:13:66:e8:dd:8b:4e:90:3a:ef:
                    92:88:9e:29:c4:93:fd:6a:82:97:97:9f:51:ff:04:
                    8c:d7:77:fd:80:56:01:b1:b3:ad:36:6b:ca:98:ff:
                    e7:21:33:b3:73:61:50:00:28:04:ea:f4:6a:a3:4a:
                    ad:c0:a3:0b:ff:8a:88:3b:5d:a9:fd:13:35:a5:00:
                    b7:d8:d8:57:3c:db:05:29:9a:a3:d4:49:22:83:25:
                    74:a8:b2:e4:6f:c4:ad:03:bc:2b:24:25:40:a4:48:
                    08:b7:ad:4f:e6:1d:cf:4c:b7:fd:65:95:4e:a0:15:
                    78:76:89:ce:d3:c0:40:6a:7e:f9:c9:23:7d:a4:61:
                    82:9e:ed:9e:5c:71:9e:2c:49:f6:b5:a2:ce:1f:bd:
                    43:43:a0:46:90:fc:de:e5:52:b5:99:d0:0c:69:6c:
                    64:7c:69:6c:fc:9f:4e:42:0d:6b:fd:a7:ed:e7:7c:
                    5c:46:71:62:3c:85:79:4f:36:98:bd:56:c9:c3:00:
                    0c:01:27:4b:48:09:43:94:65:7b:c6:33:81:40:47:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:88:86:4B:45:6E:38:74:08:DF:1D:14:42:A0:28:8D:62:A0:4D:C8
            X509v3 Authority Key Identifier:
                keyid:AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAA918430499F3E9894B3CF0249B298084501D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:f5:30:33:26:93:bb:fe:22:2c:65:99:88:ab:19:25:81:
         78:66:3d:47:c4:c2:14:c3:cc:49:5b:2c:26:2a:41:52:26:23:
         17:7c:88:36:7e:ec:71:d5:7d:86:a9:ad:fd:bd:2f:96:46:cb:
         ea:87:de:12:b3:b1:52:e5:80:55:ac:5f:8c:cf:9f:63:55:39:
         56:49:3b:46:d5:6c:47:22:05:62:57:3c:59:6d:4a:36:6d:67:
         c6:c2:0a:1c:0b:ee:3c:ad:42:8c:c7:6a:a0:7c:3b:55:2f:8f:
         89:ba:20:a7:55:c2:eb:fe:70:1e:75:f0:51:60:1c:c9:6d:97:
         d5:f7:e9:cf:e2:7f:b3:7a:d2:4e:42:0b:f1:06:c4:ef:a7:a1:
         f8:ed:1a:f3:b0:87:53:cf:ca:57:3d:29:f7:9b:b3:75:37:5f:
         ef:18:b3:a0:1a:67:11:a8:50:3c:b5:c8:3c:00:5d:d4:c0:09:
         c7:e3:12:bc:23:d9:4e:ae:41:bf:74:6e:bc:98:26:78:c4:68:
         55:d9:e5:72:6d:2f:48:54:0a:a4:41:0d:f1:36:04:40:0e:be:
         aa:ce:e7:02:cf:aa:b2:8a:1e:d7:bd:58:4b:02:c3:8b:c1:13:
         d6:fd:59:e7:3a:ad:f5:18:b6:14:91:06:9d:7d:da:f0:f1:bf:
         6c:10:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----