Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.mft
File:                     CEBAFCCEF15322A0892946F734E310A76AEB85EF.mft (raw, json)
Hash identifier:          IBXCxPbfzARh8tDhUrqnO5I0vLTBOyDD9jbL9X/d0+I=
Subject key identifier:   E6:67:99:2B:92:A7:E6:E9:F6:A1:32:63:83:07:96:D2:B0:78:01:05
Authority key identifier: CE:BA:FC:CE:F1:53:22:A0:89:29:46:F7:34:E3:10:A7:6A:EB:85:EF
Certificate issuer:       /CN=CEBAFCCEF15322A0892946F734E310A76AEB85EF
Certificate serial:       4C94C4B2635C818DF8CA71621396539197863722
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.mft
Manifest number:          04
Signing time:             Wed 20 Jul 2022 08:03:59 +0000
Manifest this update:     Wed 20 Jul 2022 07:58:59 +0000
Manifest next update:     Thu 21 Jul 2022 09:28:59 +0000
Files and hashes:         1: 34352e3232352e37362e302f32322d3234203d3e20323731303235.roa (hash: bwKYOzfTCKnSRVtmhVvxpjogaZCZuMHxjBXDa8Ll9CE=)
                          2: 323830343a373532303a3a2f33322d3438203d3e20323731303235.roa (hash: Nv6vOhPHlWsFj+K4ndh+H3/3+SQLJOMgeCvCKUFYmpI=)
                          3: CEBAFCCEF15322A0892946F734E310A76AEB85EF.crl (hash: 7TJ6rC/nxq8BlB7N1mVNZQoGbFMFBYNCw3ZFmpo0h3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:c4:b2:63:5c:81:8d:f8:ca:71:62:13:96:53:91:97:86:37:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEBAFCCEF15322A0892946F734E310A76AEB85EF
        Validity
            Not Before: Jul 20 07:58:59 2022 GMT
            Not After : Jul 21 09:28:59 2022 GMT
        Subject: CN=E667992B92A7E6E9F6A13263830796D2B0780105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8c:9d:e1:a2:02:06:c1:bf:f0:87:9f:90:46:
                    74:d3:d0:9d:53:a5:04:87:d2:a2:8b:86:1c:3b:ca:
                    bf:46:3c:d3:0d:f4:86:0b:be:a0:12:a3:7c:fc:1e:
                    46:b0:f1:8f:07:a9:40:bc:d4:d3:d4:a6:73:1e:49:
                    4c:c1:ba:b0:df:05:b0:fa:0b:ea:88:4b:a2:80:ee:
                    e8:d6:0f:53:a8:2e:dd:68:e6:a8:36:6f:71:33:6f:
                    cc:42:ed:39:0b:ce:7d:89:4f:ec:10:38:3e:3a:cc:
                    09:30:63:ec:00:9b:e6:d4:9b:eb:b8:c0:2b:91:86:
                    d4:16:53:0d:0d:02:3f:ae:73:cc:aa:1e:e1:17:67:
                    70:83:45:3b:92:db:48:a0:96:e8:d7:d7:ae:3c:7c:
                    36:0f:50:4e:5a:8d:92:ef:ba:0f:66:b9:ce:4c:4c:
                    cf:65:b0:10:9f:30:77:19:da:06:a1:7d:8a:ef:25:
                    ba:d9:f7:64:63:c7:41:e7:5f:76:92:e5:f5:f8:78:
                    cc:61:50:06:95:fd:f7:20:f2:d1:73:5b:81:de:a7:
                    96:43:4c:34:16:23:7f:70:b2:c6:b8:95:d7:b6:ab:
                    ef:08:38:2e:eb:2f:f1:b3:1a:7e:5c:15:da:ee:fa:
                    d2:2b:14:33:57:a8:06:8e:56:b0:c1:c7:3e:44:fa:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:99:2B:92:A7:E6:E9:F6:A1:32:63:83:07:96:D2:B0:78:01:05
            X509v3 Authority Key Identifier:
                keyid:CE:BA:FC:CE:F1:53:22:A0:89:29:46:F7:34:E3:10:A7:6A:EB:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XyX5Gcz8bhH7juvSoBXx7Ytx96harkmsFMir84U1N3B/0/CEBAFCCEF15322A0892946F734E310A76AEB85EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:19:fb:19:0d:7c:65:23:b3:5d:06:de:2f:1a:79:2d:c7:a3:
         50:7e:a9:99:8c:27:a0:1f:b6:0d:0e:8c:94:67:f3:dd:09:fe:
         bb:c0:25:d3:d4:48:2c:c8:c4:c6:87:01:a6:df:19:9d:35:7c:
         67:3e:ca:8e:ea:3b:e8:a3:ca:99:29:eb:76:0f:c4:3c:57:cc:
         eb:d8:6d:09:1b:5e:d8:60:c5:0c:eb:04:3b:c0:8a:c0:02:e3:
         34:20:23:e9:9e:d4:31:be:62:5a:50:44:f6:72:3c:4a:64:85:
         fc:8c:74:ee:72:78:e1:6c:da:e7:92:40:84:71:04:0b:95:43:
         08:40:38:11:77:ac:80:1b:cf:90:21:e1:d2:a0:e6:a7:b0:df:
         4a:c3:75:12:36:22:53:14:a7:63:43:79:5e:8a:64:64:a8:fa:
         c9:6c:80:f6:9d:9c:5b:54:b8:6c:55:6b:b9:c8:71:c1:71:a7:
         62:ef:60:ff:32:3a:99:a7:2e:57:b2:e0:76:b7:17:1a:0e:09:
         66:ab:64:8a:ad:94:3f:6f:4b:39:9f:cb:19:82:7e:78:93:40:
         b9:fc:62:47:6e:de:62:05:4b:76:1e:8b:dd:e7:0c:09:53:49:
         37:ee:85:30:a1:92:66:5c:05:c0:65:e6:da:ba:68:6c:de:c3:
         b7:fa:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----