Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft
File:                     CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft (raw, json)
Hash identifier:          hF0dmjg+N3/33BnVzKBcdM7BTQjDu7KD4h6A4KreIEA=
Subject key identifier:   74:42:FA:76:05:8D:6D:D2:7B:E6:36:A5:6A:47:F8:77:39:F6:F4:EF
Authority key identifier: CE:3F:0D:4F:D7:00:F5:36:DD:BE:79:1E:3B:13:0E:CF:1F:05:BA:A3
Certificate issuer:       /CN=CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3
Certificate serial:       752569CD0D05150556E161AB14BE11CF6A59CA70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft
Manifest number:          01DF
Signing time:             Wed 14 Sep 2022 08:17:06 +0000
Manifest this update:     Wed 14 Sep 2022 08:12:06 +0000
Manifest next update:     Thu 15 Sep 2022 10:55:06 +0000
Files and hashes:         1: 323830343a353964343a3a2f33322d3332203d3e20323638373238.roa (hash: yW8PmorUVotbKmmJHgH+GkSPFg1tYVxd6/aje6l+foc=)
                          2: 34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa (hash: HtHTAuNrHx1yJRUUMU9ynjBhGMdqkEshhkjM9B02F8Y=)
                          3: CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.crl (hash: U2U0Fhh2qzAv695EJpcYlG/EJOi847KjM+UFQUhm4j4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:25:69:cd:0d:05:15:05:56:e1:61:ab:14:be:11:cf:6a:59:ca:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3
        Validity
            Not Before: Sep 14 08:12:06 2022 GMT
            Not After : Sep 15 10:55:06 2022 GMT
        Subject: CN=7442FA76058D6DD27BE636A56A47F87739F6F4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:52:ee:22:c4:62:a0:2a:bf:27:18:23:0f:
                    14:7a:2d:6d:51:18:28:27:6a:78:b2:16:5f:e2:96:
                    81:94:10:e2:d1:c5:e2:20:94:3e:69:88:12:5a:03:
                    f7:8c:0b:d6:c3:2a:f8:dd:33:39:63:ec:35:e9:77:
                    d3:e6:d1:8e:38:dc:5d:f1:02:28:3e:64:3b:09:05:
                    f2:f2:29:da:2f:c1:9c:3f:6a:7b:c4:ac:b5:33:3d:
                    e5:b2:54:ab:e2:a8:e4:ee:d8:80:ed:88:26:b8:24:
                    27:79:76:02:3c:f2:88:c0:2d:c9:26:fb:d1:de:3d:
                    d6:fc:8b:73:83:0e:ae:01:93:cb:8c:7c:90:28:b3:
                    55:97:12:fc:fc:da:00:40:2b:95:63:55:c7:72:31:
                    07:8d:d4:9a:2a:83:05:57:c1:53:79:99:79:2c:64:
                    31:fa:a5:a5:4b:3e:70:85:b7:dc:a2:6a:3b:74:c6:
                    cc:71:da:e0:77:18:b2:4c:7b:e5:ff:b5:f8:64:6b:
                    f4:72:fc:f0:8c:20:dd:c7:8b:05:b1:7e:b7:c6:a3:
                    28:09:9d:ac:91:7e:fd:90:c2:02:67:e5:c8:2e:8b:
                    2f:10:7d:5a:f1:39:3f:29:2e:df:36:ca:8e:98:e7:
                    da:13:65:67:3d:e4:c0:fc:29:3d:b7:82:76:63:34:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:FA:76:05:8D:6D:D2:7B:E6:36:A5:6A:47:F8:77:39:F6:F4:EF
            X509v3 Authority Key Identifier:
                keyid:CE:3F:0D:4F:D7:00:F5:36:DD:BE:79:1E:3B:13:0E:CF:1F:05:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:be:72:f0:ff:12:ac:05:a0:0c:29:24:95:8a:8b:ba:c8:e0:
         13:04:6e:ef:bd:f8:5c:16:3b:19:1b:9d:d8:d1:78:9f:17:4e:
         de:7f:39:e2:d8:72:8a:d4:c3:ae:92:27:e7:14:0e:f8:e8:ab:
         c3:65:eb:b9:0d:36:ff:af:a7:3b:67:3f:95:06:c0:84:2f:54:
         af:40:dd:dd:ad:06:21:b1:3d:e8:66:8a:e7:f5:2b:92:6d:55:
         7c:7c:16:a1:3a:42:33:36:ad:20:31:25:99:5d:02:9e:ce:b8:
         0a:34:3d:cf:5a:0c:e9:5e:59:0d:99:42:04:f3:79:74:15:2c:
         e9:19:51:66:6b:2f:06:1a:4b:3f:28:ea:a8:cf:f0:2d:cf:2a:
         d9:02:c1:dd:f2:f2:9b:53:f0:b6:f2:63:8a:fe:60:7d:5c:3f:
         35:2a:55:61:e1:9e:31:cb:db:7e:b5:b2:2f:16:22:81:43:b6:
         74:e5:ef:d5:fa:07:e5:41:99:4b:f9:5e:14:a1:11:33:0d:11:
         1e:13:03:4b:c7:e4:00:c9:38:a8:4e:0b:74:30:b2:ca:2f:5e:
         39:a9:4a:f3:e1:a8:12:47:1c:89:b0:51:d4:51:60:ff:84:8d:
         fb:e7:cf:d7:21:07:b0:2f:c7:2b:00:db:9e:b7:6f:19:85:83:
         17:22:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----