Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft
File:                     3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft (raw, json)
Hash identifier:          sJSJcd1gHokIE/FdNC7GqXPFwXPMBBpedY3oxNPEgLI=
Subject key identifier:   23:3F:2C:BB:9E:0A:65:CF:F5:EE:1E:18:5C:B3:51:BA:DD:40:15:06
Authority key identifier: 3F:BC:83:18:84:25:B1:A0:7D:02:3E:14:C2:E8:A1:EC:C3:DE:51:BE
Certificate issuer:       /CN=3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE
Certificate serial:       779A8A9F6D1052C2A8528CBA4EC723B16772128E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft
Manifest number:          A7
Signing time:             Tue 25 Oct 2022 10:09:39 +0000
Manifest this update:     Tue 25 Oct 2022 10:04:39 +0000
Manifest next update:     Wed 26 Oct 2022 13:56:39 +0000
Files and hashes:         1: 3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa (hash: uW2e36so25ZJIzQGyE9a8gYaC/ynD0Rk1fO+I02UWf8=)
                          2: 3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.crl (hash: uFz3GHXW6uyhhjpXeB47VzsmpwcwiVdneIFoaExMIbo=)
                          3: 323830343a326235343a3a2f33322d3438203d3e20323635313437.roa (hash: fm+wTUUdHRDSkDrQujeOVjy5YxCouESc6ULgTA8HTnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:8a:9f:6d:10:52:c2:a8:52:8c:ba:4e:c7:23:b1:67:72:12:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE
        Validity
            Not Before: Oct 25 10:04:39 2022 GMT
            Not After : Oct 26 13:56:39 2022 GMT
        Subject: CN=233F2CBB9E0A65CFF5EE1E185CB351BADD401506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:5a:e5:5a:83:09:22:22:1b:69:b1:15:66:
                    81:b2:b0:5c:0b:0e:07:26:ba:26:5f:52:f2:24:d9:
                    d1:c0:44:f3:94:14:36:43:b4:1f:be:ab:76:7f:84:
                    2e:18:84:2a:24:c1:c7:4d:33:87:5d:a3:1e:c4:57:
                    53:d9:8f:9f:f6:e8:83:53:3f:fe:dc:a8:9c:14:b6:
                    5c:5d:c5:8d:f8:7c:48:d9:d7:7e:ec:35:9d:34:42:
                    6b:52:91:90:27:53:de:03:06:b0:25:6f:fc:63:20:
                    47:16:4a:a9:34:96:1f:c5:05:36:2d:9f:4f:6e:9a:
                    40:74:a9:b9:d8:cc:65:7e:5f:0a:54:8a:07:06:71:
                    95:e8:28:81:66:e8:ca:95:7e:5f:37:44:96:26:e2:
                    75:1a:fa:9f:ca:49:c6:d8:9d:f3:91:37:fe:87:f6:
                    cd:bf:2d:6f:94:bd:61:92:d4:52:50:ec:25:02:d8:
                    36:28:9b:be:22:dd:44:d3:24:a3:78:74:5b:c4:ba:
                    af:e6:b7:6e:fd:be:ad:9b:c6:0e:76:3b:61:fa:7e:
                    09:88:04:03:89:8e:60:7c:7d:f2:b0:5a:ce:6a:2c:
                    c7:b2:8f:93:0d:e2:d5:a0:03:f4:ad:fe:8c:10:a1:
                    de:c5:ad:f3:3f:49:cc:2c:dc:62:a0:43:8e:53:0d:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:2C:BB:9E:0A:65:CF:F5:EE:1E:18:5C:B3:51:BA:DD:40:15:06
            X509v3 Authority Key Identifier:
                keyid:3F:BC:83:18:84:25:B1:A0:7D:02:3E:14:C2:E8:A1:EC:C3:DE:51:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:b2:d4:15:5f:f6:41:ac:1a:4c:0c:25:ed:d4:b9:98:dc:
         33:86:6d:db:1a:24:62:51:72:b8:3b:ec:43:a5:6d:52:0c:2a:
         9b:ec:09:ba:9a:5a:ad:8b:f8:db:66:93:5d:36:65:64:51:95:
         fe:03:f5:6d:be:e6:9b:18:2f:1e:e5:f1:96:96:ad:a1:85:ed:
         8b:0f:57:88:79:5f:17:8c:12:a0:97:36:ad:f8:3d:b9:5f:45:
         a8:3c:d0:6a:78:45:8c:57:5d:dc:55:e0:61:c5:c7:e5:df:9c:
         aa:80:4d:d4:e1:17:03:46:2a:91:48:b3:46:62:20:1b:7d:73:
         d8:55:4a:09:79:62:88:8e:a0:40:54:50:37:67:45:92:12:30:
         0f:a3:ba:bd:fd:03:f6:64:c3:78:2b:71:3b:53:ec:75:7e:2d:
         a0:e2:00:d5:ac:ff:72:6a:be:2a:46:bf:4f:e6:fa:97:82:85:
         12:06:67:95:a6:83:21:e8:74:61:0e:ad:b4:e8:a5:aa:35:2c:
         0f:3d:3c:69:d5:fa:44:05:5d:5b:43:42:98:e6:b8:c6:52:1d:
         02:9c:2d:ef:1e:af:cb:f2:41:86:36:00:02:c6:14:ad:bf:55:
         1d:d7:ef:d0:c7:8d:e5:ad:9d:e9:9c:7f:5f:79:8d:72:2a:c9:
         5c:f9:47:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd5qKn20QUsKoUoy6TscjsWdyEo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCQzgzMTg4NDI1QjFBMDdEMDIzRTE0QzJFOEExRUND
M0RFNTFCRTAeFw0yMjEwMjUxMDA0MzlaFw0yMjEwMjYxMzU2MzlaMDMxMTAvBgNV
BAMTKDIzM0YyQ0JCOUUwQTY1Q0ZGNUVFMUUxODVDQjM1MUJBREQ0MDE1MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rVrlWoMJIiIbabEVZoGysFwL
DgcmuiZfUvIk2dHARPOUFDZDtB++q3Z/hC4YhCokwcdNM4ddox7EV1PZj5/26INT
P/7cqJwUtlxdxY34fEjZ137sNZ00QmtSkZAnU94DBrAlb/xjIEcWSqk0lh/FBTYt
n09umkB0qbnYzGV+XwpUigcGcZXoKIFm6MqVfl83RJYm4nUa+p/KScbYnfORN/6H
9s2/LW+UvWGS1FJQ7CUC2DYom74i3UTTJKN4dFvEuq/mt279vq2bxg52O2H6fgmI
BAOJjmB8ffKwWs5qLMeyj5MN4tWgA/St/owQod7FrfM/Scws3GKgQ45TDQT9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIz8su54KZc/17h4YXLNRut1AFQYwHwYDVR0j
BBgwFoAUP7yDGIQlsaB9Aj4Uwuih7MPeUb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2V0U0VHc29OUWNxeWlqMUJ2WXk5eHVnUDV5TXp5RFRBeTg5RW4zVXl1
VUQvMC8zRkJDODMxODg0MjVCMUEwN0QwMjNFMTRDMkU4QTFFQ0MzREU1MUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGQkM4MzE4ODQyNUIxQTA3
RDAyM0UxNEMyRThBMUVDQzNERTUxQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2V0U0VHc29OUWNxeWlqMUJ2WXk5eHVnUDV5TXp5RFRBeTg5RW4zVXl1VUQvMC8z
RkJDODMxODg0MjVCMUEwN0QwMjNFMTRDMkU4QTFFQ0MzREU1MUJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADwOy1BVf9kGsGkwMJe3UuZjcM4Zt2xokYlFyuDvsQ6VtUgwqm+wJupparYv4
22aTXTZlZFGV/gP1bb7mmxgvHuXxlpatoYXtiw9XiHlfF4wSoJc2rfg9uV9FqDzQ
anhFjFdd3FXgYcXH5d+cqoBN1OEXA0YqkUizRmIgG31z2FVKCXliiI6gQFRQN2dF
khIwD6O6vf0D9mTDeCtxO1PsdX4toOIA1az/cmq+Kka/T+b6l4KFEgZnlaaDIeh0
YQ6ttOilqjUsDz08adX6RAVdW0NCmOa4xlIdApwt7x6vy/JBhjYAAsYUrb9VHdfv
0MeN5a2d6Zx/X3mNcirJXPlHsg==
-----END CERTIFICATE-----