Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft
File:                     6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft (raw, json)
Hash identifier:          EeKX6qAu8/yA4dbNMxlsCXeB0+3rkVkR9DlocjBlrt0=
Subject key identifier:   D5:1E:2C:3F:6A:64:02:C3:44:08:2A:A5:1F:62:47:A8:50:64:53:A1
Authority key identifier: 6F:EA:3B:FA:55:69:1D:A7:FE:08:75:FC:B0:64:9C:3D:7D:5B:9B:46
Certificate issuer:       /CN=6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46
Certificate serial:       438A2ABBFD0CAC70CC46E07268C787238E4F0D84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft
Manifest number:          72
Signing time:             Tue 12 Jul 2022 07:20:00 +0000
Manifest this update:     Tue 12 Jul 2022 07:15:00 +0000
Manifest next update:     Wed 13 Jul 2022 09:20:00 +0000
Files and hashes:         1: 323830343a336334633a3a2f33322d3334203d3e20323636323032.roa (hash: 67hSy4mBFMURA7dSlfVwV1wvaeunaUYYpYjWTwSYcg0=)
                          2: 6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.crl (hash: w/OfJkR7uGZMIizzfYmUqF3ja01O3dixDCioRCFfUvQ=)
                          3: 3139322e3134302e33362e302f32322d3234203d3e20323636323032.roa (hash: 5i11rCad9rLHfGfDpZUyuleXaBL34ASySL3OMa4tTrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8a:2a:bb:fd:0c:ac:70:cc:46:e0:72:68:c7:87:23:8e:4f:0d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46
        Validity
            Not Before: Jul 12 07:15:00 2022 GMT
            Not After : Jul 13 09:20:00 2022 GMT
        Subject: CN=D51E2C3F6A6402C344082AA51F6247A8506453A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:b4:b7:35:db:12:ea:ec:b7:26:1c:a9:3d:
                    c3:a9:e6:b7:3d:53:b1:be:d8:a6:75:a7:58:34:99:
                    12:b0:d5:0a:5c:66:f8:d1:de:f6:28:0f:30:e4:80:
                    fc:14:62:11:49:66:8f:51:b7:46:61:2b:d3:dd:58:
                    ce:a8:47:84:4b:16:3d:4f:9d:46:86:f8:9f:bc:b7:
                    9c:4d:9e:46:0f:04:08:a4:d6:d6:c3:ab:94:35:24:
                    18:97:26:91:55:d9:93:26:d8:58:3c:4f:b4:75:99:
                    10:8a:3d:dd:19:67:6e:b6:92:53:97:fe:e2:c9:4e:
                    17:7e:e3:66:65:11:eb:22:d6:f3:59:96:9c:d1:ed:
                    98:cb:1f:60:bd:8f:89:07:8e:a3:f6:fc:79:24:f0:
                    54:3d:81:67:f1:39:e5:11:2e:3f:62:13:b6:3e:c1:
                    fd:41:5b:b3:86:f6:20:2f:ac:91:16:58:5c:a3:4d:
                    3e:2a:05:ca:83:25:12:6c:13:9d:6f:9d:e2:64:6d:
                    05:42:b4:ba:f4:9e:f8:b4:b6:87:5e:92:46:9a:4e:
                    9c:a8:2e:db:0a:39:8e:b9:aa:3c:9e:dc:f0:c5:c8:
                    d4:64:69:f2:f4:26:cd:99:c6:67:bb:8f:6b:4f:01:
                    57:9a:76:82:32:80:19:32:7a:f3:28:5a:7d:e4:07:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:2C:3F:6A:64:02:C3:44:08:2A:A5:1F:62:47:A8:50:64:53:A1
            X509v3 Authority Key Identifier:
                keyid:6F:EA:3B:FA:55:69:1D:A7:FE:08:75:FC:B0:64:9C:3D:7D:5B:9B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/6FEA3BFA55691DA7FE0875FCB0649C3D7D5B9B46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:e6:3b:37:ad:74:04:81:f7:ac:b9:bc:de:72:67:db:be:
         9f:d7:31:1b:6f:7f:f7:97:d6:6b:7e:e1:f2:de:da:9d:42:f8:
         67:0d:ea:57:e8:94:d0:73:e2:78:d5:5b:1c:bf:41:be:99:37:
         ad:d7:48:d6:16:3d:d8:b2:da:31:db:8f:59:c3:99:2e:86:fd:
         b7:1d:e9:b4:d1:64:f1:c7:97:5f:1f:61:68:a3:40:e5:1c:fd:
         89:e9:62:5a:cd:42:21:94:03:43:b9:1c:02:ab:82:66:db:e3:
         2f:8d:b3:21:f5:6f:ae:c4:b9:02:59:5b:fa:a7:e4:0d:d4:d4:
         0e:f3:05:7d:99:75:86:fd:b3:e9:81:b6:c1:7f:f7:11:42:6e:
         b8:06:07:c1:d1:09:e0:fc:60:81:76:b8:a9:11:c6:5b:d7:f0:
         43:18:c0:69:5c:66:3c:aa:23:8d:1e:8c:92:77:ad:68:bc:ca:
         e5:1b:c6:3d:ce:ea:ef:cc:77:3c:aa:41:4d:08:71:2a:7e:a2:
         33:ec:25:06:5c:e4:b2:66:3c:14:d2:db:f0:9a:23:88:ff:1b:
         8d:a1:e7:84:64:73:71:52:8d:08:f7:67:96:e8:e9:b2:55:69:
         00:cc:dc:78:f0:67:3f:3f:c3:e0:48:16:4a:b2:97:cb:b7:17:
         bc:cd:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----