Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.mft
File:                     4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.mft (raw, json)
Hash identifier:          Qfw7NF9gPhoQc7tnbP4NJIulGL9Po1uKRmJ9EbiX69M=
Subject key identifier:   62:8C:4E:5F:21:4D:1E:9A:B9:21:61:07:EB:58:47:50:BB:5A:9F:4A
Authority key identifier: 4E:6C:D4:DD:AD:BC:DE:44:E8:D3:0F:1E:B4:95:B9:E1:1B:1E:A7:E3
Certificate issuer:       /CN=4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3
Certificate serial:       5690D555CBFC72A8600FF810BD0513A50A8C863E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.mft
Manifest number:          A1
Signing time:             Mon 14 Nov 2022 00:32:27 +0000
Manifest this update:     Mon 14 Nov 2022 00:27:27 +0000
Manifest next update:     Tue 15 Nov 2022 01:44:27 +0000
Files and hashes:         1: 323830343a353966383a3a2f33322d3438203d3e20323638373337.roa (hash: Ck5g2Rmo8t3vAYuZ5FaNGj3sTjPfONa2MxMbgeMTO8w=)
                          2: 34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (hash: IsbtVnoQjbChMWlTuOuGW30m1Eb8xy5d+FSVaXwu6X8=)
                          3: 4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.crl (hash: nth191lENz3IK19JCI9ej2M6yi6RaL/P/UhDXHMKUkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:90:d5:55:cb:fc:72:a8:60:0f:f8:10:bd:05:13:a5:0a:8c:86:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3
        Validity
            Not Before: Nov 14 00:27:27 2022 GMT
            Not After : Nov 15 01:44:27 2022 GMT
        Subject: CN=628C4E5F214D1E9AB9216107EB584750BB5A9F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:fa:41:8f:cb:45:8d:3e:0f:8c:4e:45:75:
                    1f:0d:19:80:2c:e7:0c:1b:e6:5a:36:d2:d9:c9:59:
                    d1:e5:82:8b:fb:ab:0e:3a:dc:1a:d2:08:82:e7:ce:
                    f4:71:e6:c8:08:e4:c7:9f:0d:e0:98:f6:58:f0:c5:
                    5e:30:40:85:1d:40:a3:6d:f6:08:22:b8:38:36:2a:
                    6d:c9:37:a5:e1:fe:aa:b9:d8:86:b0:0e:7e:02:d2:
                    6c:7e:fe:14:1d:3c:e1:94:78:6f:1c:82:72:03:9e:
                    4b:4a:31:70:a5:f5:31:a8:42:08:89:f4:e9:5d:31:
                    16:a8:a9:2a:31:04:da:cb:11:5c:37:e7:bc:ce:54:
                    8b:ce:fb:76:83:a6:0e:2e:e8:cc:30:70:90:a5:f4:
                    a5:1c:db:34:76:23:02:9c:e4:ca:23:f8:5b:45:72:
                    ed:fa:9d:62:2b:ce:02:63:59:5a:c6:fd:d2:0c:78:
                    25:d7:e4:57:d7:a1:6d:cc:4e:e7:41:85:b5:50:39:
                    f8:0a:1a:aa:d2:4e:88:2f:f4:be:6d:c4:f5:36:b0:
                    ef:d3:da:0e:50:85:86:17:36:09:d8:e9:c3:a4:11:
                    2b:27:59:0e:14:8e:96:c5:d9:dd:f2:94:c9:67:1d:
                    36:96:40:22:eb:15:74:49:7b:78:b7:84:aa:a2:13:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:4E:5F:21:4D:1E:9A:B9:21:61:07:EB:58:47:50:BB:5A:9F:4A
            X509v3 Authority Key Identifier:
                keyid:4E:6C:D4:DD:AD:BC:DE:44:E8:D3:0F:1E:B4:95:B9:E1:1B:1E:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4E6CD4DDADBCDE44E8D30F1EB495B9E11B1EA7E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3c:ff:10:78:51:c2:92:93:11:bd:44:ad:17:18:95:0a:e2:
         f8:7b:4e:81:04:36:21:ac:08:3c:b8:9d:61:cf:55:54:d9:60:
         f5:a9:e8:3f:ba:e4:54:8a:ec:30:85:c9:e0:2f:bf:9f:7e:01:
         23:2a:e9:71:92:cf:d5:47:e8:70:5a:ae:f5:1a:62:4f:ba:a9:
         73:58:9c:6d:e4:4b:aa:2d:5d:66:fa:d0:77:0b:d8:12:89:59:
         f6:b3:57:ef:94:89:9c:9d:e9:17:cc:9b:21:a1:3e:90:0f:74:
         c0:11:b2:2a:44:02:03:68:6f:bb:35:d2:d0:e1:94:93:bc:2f:
         e7:9f:2c:dd:46:63:e4:c2:60:73:f0:93:5f:ee:50:df:20:38:
         20:bb:2a:57:f6:32:37:79:ec:56:d3:a4:ac:3b:17:c2:57:aa:
         27:cd:33:ed:be:48:aa:70:ff:09:91:f3:45:99:fb:b8:e1:93:
         c7:2a:3b:f0:a5:4d:98:ce:bf:cb:3f:af:94:94:b8:6d:14:ec:
         e1:f7:7a:12:7b:cb:e3:e2:94:d6:d5:c4:8b:aa:c0:6e:9d:92:
         bc:7f:96:0e:a9:40:d9:94:20:9d:5e:17:0b:31:84:92:a8:a5:
         97:10:a8:cc:b1:09:5a:d7:92:4c:f2:50:14:f1:41:97:6f:19:
         d9:a7:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----