Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.mft
File:                     6A821BD2D07816445594943322E9E101F037181F.mft (raw, json)
Hash identifier:          pkMhNxVXiypZAg6W7myH1JF+mNqpvhRoB7gJUm5PmRE=
Subject key identifier:   C3:D9:DF:EA:54:98:43:A6:C1:16:08:63:2E:D5:00:EF:B0:96:08:E6
Authority key identifier: 6A:82:1B:D2:D0:78:16:44:55:94:94:33:22:E9:E1:01:F0:37:18:1F
Certificate issuer:       /CN=6A821BD2D07816445594943322E9E101F037181F
Certificate serial:       73403ECFE0DB2337F61C7639653EBC761964A116
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A821BD2D07816445594943322E9E101F037181F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.mft
Manifest number:          A7
Signing time:             Wed 12 Apr 2023 11:12:29 +0000
Manifest this update:     Wed 12 Apr 2023 11:07:29 +0000
Manifest next update:     Thu 13 Apr 2023 11:37:29 +0000
Files and hashes:         1: 6A821BD2D07816445594943322E9E101F037181F.crl (hash: NoNbXP6cqTw8+dRJtwBwXoHZWaOebOEo9RHqPiEXPSU=)
                          2: 323830343a373031303a3a2f33322d313238203d3e20323730373031.roa (hash: Y55ZI2C25GXonmRAjVWVAm8r8PbnvqbMgnGm4jLqS38=)
                          3: 3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa (hash: X52sMv38wdPBR1r1aVuAi/rSVg3wolKuXiKUtWuxcGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:40:3e:cf:e0:db:23:37:f6:1c:76:39:65:3e:bc:76:19:64:a1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A821BD2D07816445594943322E9E101F037181F
        Validity
            Not Before: Apr 12 11:07:29 2023 GMT
            Not After : Apr 13 11:37:29 2023 GMT
        Subject: CN=C3D9DFEA549843A6C11608632ED500EFB09608E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:66:63:3a:8b:39:dc:ff:56:47:d2:c3:5f:
                    57:74:76:cc:fc:7a:6b:9e:f0:f1:95:49:f0:22:c0:
                    69:4b:07:a2:c1:84:81:6a:c6:c8:d4:43:89:da:45:
                    46:f9:bd:0e:fd:a5:a1:59:7d:c3:5b:d0:39:73:9d:
                    4a:7b:44:e0:c5:94:4f:c7:75:98:ab:48:98:0d:57:
                    ab:ef:21:2a:71:ce:27:5a:30:f8:16:67:6e:a8:fd:
                    03:89:5d:32:81:e2:30:29:8b:05:8f:9e:ba:98:dc:
                    ab:d5:0e:1f:68:9e:55:7f:bc:3f:7f:7e:2f:ef:b9:
                    e4:37:b7:e4:0a:ac:53:c5:20:45:3b:a2:a7:53:e3:
                    1f:82:31:95:d9:ed:d7:7d:97:4b:b0:c7:c3:58:41:
                    9d:56:1a:d8:1c:a8:b6:a2:2c:8f:df:31:72:5f:0e:
                    2d:0e:0e:f5:7d:9d:f4:1f:63:64:a6:fb:f4:33:ee:
                    13:9e:f2:19:bb:46:73:e7:f4:99:0a:22:d9:24:1d:
                    2b:b2:f8:44:44:64:04:13:19:4c:11:0e:7b:a0:65:
                    6b:8d:2a:4f:a4:97:df:e3:11:4a:2d:ba:d5:01:a6:
                    49:67:16:0a:53:e7:7d:cc:7f:10:87:90:6f:75:4c:
                    7f:bd:d1:a3:b6:d1:20:37:60:7c:f0:08:98:08:0c:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D9:DF:EA:54:98:43:A6:C1:16:08:63:2E:D5:00:EF:B0:96:08:E6
            X509v3 Authority Key Identifier:
                keyid:6A:82:1B:D2:D0:78:16:44:55:94:94:33:22:E9:E1:01:F0:37:18:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A821BD2D07816445594943322E9E101F037181F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/6A821BD2D07816445594943322E9E101F037181F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:40:41:df:b3:ea:bb:b9:dd:16:93:8e:a2:f5:72:44:85:ae:
         98:37:22:64:a1:a2:15:cc:28:e2:43:d4:de:fd:5a:d1:a1:aa:
         72:36:f0:44:18:10:0f:3d:2f:d4:a1:cd:64:76:16:34:f9:7f:
         53:12:81:8a:77:b5:c7:42:f3:aa:f3:43:b1:52:79:d8:71:f7:
         0a:57:0e:a5:60:62:64:59:4e:71:37:5e:19:b7:ff:94:4d:72:
         4d:1f:0c:7c:dc:96:22:75:32:7e:17:2f:dc:a9:20:9d:34:4d:
         80:1f:5b:63:c1:8d:bd:3d:df:3b:79:fa:d3:85:88:31:6c:65:
         16:2b:cf:a2:57:a8:b1:2b:22:d9:a3:56:28:18:74:9d:55:77:
         a6:5b:12:ea:36:bd:d0:e9:ce:94:63:f4:8f:85:e1:db:66:74:
         9f:fc:5e:26:1b:b4:6e:bf:5b:72:8a:55:08:d6:ed:66:c2:2b:
         88:26:88:44:8f:90:31:cd:9b:7c:50:ca:58:3e:3e:0c:f6:54:
         4a:3e:61:bc:c3:fc:89:d3:5f:d8:3e:0e:ce:1f:41:d3:8c:40:
         3c:fd:52:b1:5f:19:f4:53:04:8a:ca:56:4d:78:d9:53:ee:e6:
         d9:f0:9d:28:da:af:41:89:09:f6:ed:7d:ce:43:83:1b:84:e4:
         1c:80:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----