Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft
File:                     4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft (raw, json)
Hash identifier:          fmmATkC55XQPtRRjyqB5zTNxgJGFCT8BDvDpfge6iZQ=
Subject key identifier:   D0:79:11:13:25:C7:15:88:B9:4D:60:5F:16:0C:66:59:9D:0C:C0:E6
Authority key identifier: 4B:F0:0F:36:5A:B6:F6:D0:DB:4F:E7:90:40:E8:90:5D:EB:16:FF:DD
Certificate issuer:       /CN=4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD
Certificate serial:       16F69BC02AD2C83D8A2E47D6A0D34F45D4691AAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft
Manifest number:          5A
Signing time:             Thu 23 Mar 2023 22:51:57 +0000
Manifest this update:     Thu 23 Mar 2023 22:46:57 +0000
Manifest next update:     Sat 25 Mar 2023 02:41:57 +0000
Files and hashes:         1: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: R1Ba96/4yo9vwoNinU2r3S7h5svzcdJh05BEESfofaU=)
                          2: 4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.crl (hash: YP8vh3TDSPxmgOHQmjN2m6tN51t+PoNIQZkCc9juL+U=)
                          3: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: APKAp3qrkQdwNLaFZQX6yo9yoWbGVlUomJ7H9S/89i4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f6:9b:c0:2a:d2:c8:3d:8a:2e:47:d6:a0:d3:4f:45:d4:69:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD
        Validity
            Not Before: Mar 23 22:46:57 2023 GMT
            Not After : Mar 25 02:41:57 2023 GMT
        Subject: CN=D079111325C71588B94D605F160C66599D0CC0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:99:16:4e:63:de:30:20:9b:1b:e1:d8:4b:
                    94:d3:05:12:64:fc:bc:6a:90:8d:09:2b:13:15:60:
                    08:d2:5b:e3:2a:72:f6:9a:e3:34:09:62:a4:b0:d2:
                    98:70:4f:3b:92:be:07:fe:d5:76:02:9c:4c:62:70:
                    70:ae:f3:bd:60:4d:8d:bc:71:11:df:21:a3:a4:43:
                    2a:f7:f1:97:d5:10:fd:79:21:9b:9d:b7:03:b5:4b:
                    1a:39:e0:aa:22:c3:aa:88:b4:ba:eb:8e:9d:7b:5e:
                    d8:0d:6b:02:a7:df:a3:69:be:f3:3d:d2:f6:5e:f8:
                    28:da:08:55:7f:78:1e:9f:ed:e3:d9:9e:26:5a:62:
                    46:8c:0a:58:71:54:e3:4b:6c:cf:05:1b:cd:46:76:
                    2a:4c:07:ec:c0:8f:7f:38:c6:63:a7:b1:67:dd:c3:
                    5c:e4:0f:6d:8b:f3:0c:ac:2e:d8:40:7a:74:86:29:
                    3b:b9:9b:3b:53:7a:28:d3:7a:48:bd:fd:69:2c:5e:
                    0c:da:86:c1:16:91:ee:4f:73:87:da:35:ae:da:31:
                    58:cd:44:de:02:bb:5c:33:5c:37:44:f0:52:1a:75:
                    e7:d8:c0:f1:c8:b3:33:b5:9c:b4:87:bf:56:d2:16:
                    71:75:7e:97:09:fe:61:c6:be:c8:c5:e5:97:9c:14:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:79:11:13:25:C7:15:88:B9:4D:60:5F:16:0C:66:59:9D:0C:C0:E6
            X509v3 Authority Key Identifier:
                keyid:4B:F0:0F:36:5A:B6:F6:D0:DB:4F:E7:90:40:E8:90:5D:EB:16:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/4BF00F365AB6F6D0DB4FE79040E8905DEB16FFDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:ae:8a:4f:94:0f:e0:6f:e3:14:c2:ec:a9:a4:46:c4:dc:
         2c:78:6d:3f:bb:04:21:6e:e2:f1:1a:2f:5c:2a:47:2b:3c:1c:
         b6:7d:c3:5e:62:cb:ce:05:7b:b1:9f:44:48:b6:59:51:41:03:
         42:31:09:07:ea:ba:77:3d:a4:84:a4:a1:79:ed:a4:17:27:9b:
         85:0a:b4:a5:06:72:0a:96:ad:cb:49:b6:d9:2c:4c:ae:83:60:
         94:a5:b2:e4:59:11:5d:4f:bb:b8:60:2d:7e:9b:87:35:52:84:
         df:a2:ef:5c:13:9e:cc:6c:a2:5e:f2:ea:b4:8e:4b:03:6d:67:
         a6:1d:ed:2c:24:86:e6:b8:f0:5e:0c:f1:df:dc:17:e2:84:67:
         a4:73:8c:03:41:d6:bf:6b:7c:40:a2:4a:39:83:5e:aa:d1:a0:
         3e:2b:64:6f:45:9c:e8:ef:5b:33:1a:32:93:65:47:9c:2c:10:
         02:05:a5:87:0e:f8:6c:64:66:ec:73:a9:84:75:b0:a7:4a:18:
         06:7b:81:21:f9:9a:58:3a:61:6e:ab:24:38:e6:f7:6a:28:8d:
         1b:18:33:4d:e9:11:d4:64:4a:29:3b:58:84:77:69:e7:73:ac:
         ad:47:19:37:28:6a:ba:7f:24:14:36:64:b8:b9:dc:f4:e4:c3:
         42:60:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----