Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft
File:                     97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft (raw, json)
Hash identifier:          1Xrn48SvNrVzdRweFSPqZ1/SEoMab++VmlLvFNqSj7o=
Subject key identifier:   9B:88:11:29:A2:23:EB:C0:11:A6:7C:EE:B3:80:8E:7A:A4:82:DC:C6
Authority key identifier: 97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A
Certificate issuer:       /CN=97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A
Certificate serial:       31CC3DDF69D3BFEBD23110B8DC954A4EE625D9C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft
Manifest number:          23
Signing time:             Fri 20 Oct 2023 00:06:52 +0000
Manifest this update:     Fri 20 Oct 2023 00:01:52 +0000
Manifest next update:     Sat 21 Oct 2023 03:51:52 +0000
Files and hashes:         1: 97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.crl (hash: bVKIYieP1IXqnHcM1qC5AvWQt5RGPKvkTsqV73vz9HM=)
                          2: 34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa (hash: sTCz0kpMz0lcWC8FCzv9ffdY0Nypyv6OZml42/FHgo4=)
                          3: 323830343a353166383a3a2f33322d313238203d3e20323638343837.roa (hash: H8YtzwuRpxjdOAUHbX/2p8vFFN10xFvWSoStZnfH04M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cc:3d:df:69:d3:bf:eb:d2:31:10:b8:dc:95:4a:4e:e6:25:d9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A
        Validity
            Not Before: Oct 20 00:01:52 2023 GMT
            Not After : Oct 21 03:51:52 2023 GMT
        Subject: CN=9B881129A223EBC011A67CEEB3808E7AA482DCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:72:51:fa:0e:8a:20:28:21:bd:c1:79:39:
                    75:a1:27:eb:8e:75:6f:9e:95:4e:7b:87:90:42:3d:
                    d7:67:5b:7e:40:10:6e:f1:f7:ed:8f:73:2f:1b:2b:
                    7c:ba:37:8f:f7:c1:52:4a:af:ae:13:11:12:38:f3:
                    eb:48:2b:20:0b:30:43:76:50:b4:a8:b1:cb:b0:5e:
                    5d:c1:c7:72:37:dd:b6:c0:a7:1d:54:d3:5e:c2:16:
                    f0:5d:9e:60:dc:86:de:a7:ea:47:af:c8:0d:85:f2:
                    0c:80:bd:bf:5d:f0:eb:5a:f8:cc:2c:95:ab:fd:93:
                    81:8b:cc:9f:31:22:b2:8a:83:f4:58:62:10:9e:2d:
                    1f:9e:40:87:d8:65:67:4e:56:09:de:f8:77:a7:79:
                    40:ba:1b:15:09:ce:ba:1d:3f:da:2b:7d:c7:19:de:
                    29:3e:de:87:61:83:41:f1:26:d6:d8:56:2c:b5:29:
                    f8:7c:ce:aa:9d:0e:91:14:9b:13:f6:97:53:37:c3:
                    bf:08:b8:93:a4:c3:87:e1:34:96:ec:86:26:3c:65:
                    d9:62:69:6d:53:ac:4e:c5:10:a6:1e:d3:9b:af:21:
                    97:bc:3a:85:32:fd:dc:e7:8d:da:67:71:d5:e6:7a:
                    aa:71:d8:f5:4c:14:45:44:24:fc:db:d9:90:92:60:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:11:29:A2:23:EB:C0:11:A6:7C:EE:B3:80:8E:7A:A4:82:DC:C6
            X509v3 Authority Key Identifier:
                keyid:97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:c3:61:af:41:55:97:63:12:94:82:0c:d8:be:5e:49:31:
         9e:32:4a:f0:5d:f8:35:9e:72:4d:c3:a5:f6:11:e4:55:23:31:
         ad:31:a3:da:83:8f:8d:b3:e2:50:18:73:f1:1e:49:7d:be:a3:
         f8:74:8f:50:30:54:71:2b:94:0c:b1:9b:b1:21:25:90:9d:9b:
         89:26:a3:0c:73:49:98:b2:d3:d7:d4:e5:4f:16:04:a0:ee:b6:
         dd:2d:47:87:8f:35:f8:9e:f4:a1:c3:9a:bc:4e:93:26:57:50:
         bb:b8:13:9c:41:01:e6:50:a8:0b:2f:c4:9b:e5:cd:b9:ed:f9:
         5c:d7:7c:40:8f:44:12:3a:4e:22:dd:ae:9f:a1:da:90:38:f5:
         11:d9:d2:78:d5:0d:80:07:29:f3:11:e0:70:05:bc:84:b4:67:
         0e:87:44:11:de:fc:e0:fc:bd:ad:cd:8c:f7:ff:ec:91:52:62:
         ad:86:00:25:d8:05:f6:5c:19:6f:e6:ee:76:f2:33:42:63:69:
         18:82:2d:f3:0c:d2:b2:2b:d2:08:c3:96:33:c5:44:a5:45:b5:
         21:e6:0f:73:61:f2:87:e2:c1:0e:38:df:20:02:7f:1c:cc:de:
         eb:09:da:b9:51:d5:3c:39:22:29:9e:64:67:bd:4a:fa:f9:eb:
         c0:63:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----