Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/E240C020F5595238B54B5DB2224534FB0D1406D1.mft
File:                     E240C020F5595238B54B5DB2224534FB0D1406D1.mft (raw, json)
Hash identifier:          KHP5uf1w3KQrZqrL8nK+oJMayosrD60kqis2/RETlwg=
Subject key identifier:   37:12:5B:82:1F:8B:17:1C:64:20:0D:E5:0A:88:21:0F:A7:1E:B2:51
Authority key identifier: E2:40:C0:20:F5:59:52:38:B5:4B:5D:B2:22:45:34:FB:0D:14:06:D1
Certificate issuer:       /CN=E240C020F5595238B54B5DB2224534FB0D1406D1
Certificate serial:       54F140941220F3F502A12AD514FC8A1AE2FFA39A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E240C020F5595238B54B5DB2224534FB0D1406D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/E240C020F5595238B54B5DB2224534FB0D1406D1.mft
Manifest number:          03
Signing time:             Thu 17 Nov 2022 03:19:20 +0000
Manifest this update:     Thu 17 Nov 2022 03:14:20 +0000
Manifest next update:     Fri 18 Nov 2022 05:02:20 +0000
Files and hashes:         1: 323830343a373031303a3a2f33322d313238203d3e20323730373031.roa (hash: 42GBMLUXyiOPlm4PA+MuAI+aY+hM6AdzLhr57HIu7o8=)
                          2: 3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa (hash: mAFbjutnCv/xkFsNbK3Y/1d8CB8tWLw8Kom7K2ZPh0w=)
                          3: E240C020F5595238B54B5DB2224534FB0D1406D1.crl (hash: s5M1aPXM4YzPoUIyNu4fF67SULKriUln9ZFdkuvpYPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f1:40:94:12:20:f3:f5:02:a1:2a:d5:14:fc:8a:1a:e2:ff:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E240C020F5595238B54B5DB2224534FB0D1406D1
        Validity
            Not Before: Nov 17 03:14:20 2022 GMT
            Not After : Nov 18 05:02:20 2022 GMT
        Subject: CN=37125B821F8B171C64200DE50A88210FA71EB251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:8c:d4:84:3a:52:92:89:47:9e:07:63:ac:
                    ee:44:ce:46:be:9b:46:ba:8d:08:38:0c:63:52:ee:
                    c1:78:71:c7:8f:99:25:a2:58:c4:d7:1b:c1:1d:9b:
                    8c:ae:b2:49:e5:f3:55:2a:09:ab:20:bf:58:89:d3:
                    6c:e4:be:bb:22:dd:40:9c:07:f2:d9:f4:f1:7d:c9:
                    b7:a0:64:48:4c:e9:95:b8:27:66:5b:50:fa:78:a6:
                    85:de:cc:d3:4a:b9:4c:ca:a8:c1:d0:ea:1c:03:75:
                    ae:90:fd:c4:d0:ae:c6:f5:a6:bf:4f:b6:9b:fc:07:
                    ca:fc:ed:3e:ee:32:cd:95:5d:56:01:70:d0:3a:ad:
                    ca:99:67:95:0b:75:97:68:06:c4:71:88:1a:cc:d4:
                    a9:05:ff:65:eb:54:00:b2:d5:70:a1:e9:8a:5e:ce:
                    ca:5b:f3:38:fd:98:31:24:d4:23:e8:e1:1a:a2:2c:
                    47:9f:3e:15:bb:d9:df:42:72:58:32:04:d1:ba:10:
                    cf:40:43:e2:40:98:c9:90:d3:b4:b0:05:72:c3:4e:
                    cf:92:83:d4:6c:a3:f7:6d:44:ad:5c:2d:d2:cd:77:
                    84:b5:1f:0f:d8:f6:5f:eb:f0:4f:88:22:d6:02:54:
                    bc:17:db:1d:dc:58:cd:c1:2a:21:94:e1:91:07:e9:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:5B:82:1F:8B:17:1C:64:20:0D:E5:0A:88:21:0F:A7:1E:B2:51
            X509v3 Authority Key Identifier:
                keyid:E2:40:C0:20:F5:59:52:38:B5:4B:5D:B2:22:45:34:FB:0D:14:06:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/E240C020F5595238B54B5DB2224534FB0D1406D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E240C020F5595238B54B5DB2224534FB0D1406D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/E240C020F5595238B54B5DB2224534FB0D1406D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:f1:d6:dd:e1:e9:a4:eb:1c:d6:ee:13:dc:2a:94:8b:40:
         8d:21:8f:a6:a0:63:7c:bc:ae:c4:5d:6f:e7:47:d3:b2:31:dd:
         43:98:9a:8b:11:dc:4b:7e:b0:c0:a6:82:0e:8d:97:68:af:5c:
         55:3d:35:12:d9:73:16:15:7d:e0:7f:65:ea:21:b7:ec:a9:9a:
         3f:dd:14:a8:a7:8e:a3:81:3a:cb:5b:15:60:c9:9d:e0:c4:21:
         82:a9:f1:8e:56:f7:51:e3:21:70:7e:fd:69:58:65:62:ea:ef:
         19:5d:43:b8:30:36:d0:a7:81:62:06:57:00:30:64:61:35:27:
         cd:b9:5e:39:3d:97:f2:2b:57:58:7f:3b:ad:3f:2c:3e:a3:e9:
         24:54:62:69:1e:df:bf:34:a6:5a:12:32:68:5b:e7:e9:e7:e9:
         3a:4f:48:20:a7:c4:25:32:69:db:0e:28:04:46:e0:1b:09:da:
         ac:47:f5:02:ea:8f:f8:2a:e7:e1:b2:b3:9f:80:eb:bb:69:22:
         df:35:7f:70:15:2d:dd:6c:13:2f:77:3f:04:ac:43:27:12:9c:
         fe:4c:9d:37:e9:af:13:60:3a:9e:33:df:4e:f0:dc:5e:c9:88:
         ec:3c:13:a1:5d:fb:54:e6:a1:1c:b9:33:3d:d2:d4:92:a2:e7:
         d4:66:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----