Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft
File:                     9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft (raw, json)
Hash identifier:          d+eE2ojmQ20x18vnfO3s+gRS/5uS0HTeKJ5Ctjnr71U=
Subject key identifier:   37:08:CD:46:38:4E:51:22:F1:9B:CB:F4:EC:49:4B:F1:EB:76:DD:1F
Authority key identifier: 9C:63:B4:14:32:71:91:53:F9:F6:55:F8:B9:BE:6D:FC:AD:47:BE:A9
Certificate issuer:       /CN=9C63B41432719153F9F655F8B9BE6DFCAD47BEA9
Certificate serial:       24E244E75197BA5C212962A0C203F8E33354973B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft
Manifest number:          32
Signing time:             Sun 18 Dec 2022 10:18:16 +0000
Manifest this update:     Sun 18 Dec 2022 10:13:16 +0000
Manifest next update:     Mon 19 Dec 2022 10:34:16 +0000
Files and hashes:         1: 34352e3139302e3133362e302f32322d3332203d3e20323639363437.roa (hash: Z9aSkprjo3d4ExLxDvHcvQcshXB5dCmDDnFozy2rM/Y=)
                          2: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: rzaMdW9qUR8IYiFDHt+JFyxYfPErT6u0SHJKzLnfpVE=)
                          3: 9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.crl (hash: QROGChoOCXar9dbCCBkMqZUjdNOhXQ61X9AFA/ZEetc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:44:e7:51:97:ba:5c:21:29:62:a0:c2:03:f8:e3:33:54:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C63B41432719153F9F655F8B9BE6DFCAD47BEA9
        Validity
            Not Before: Dec 18 10:13:16 2022 GMT
            Not After : Dec 19 10:34:16 2022 GMT
        Subject: CN=3708CD46384E5122F19BCBF4EC494BF1EB76DD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:d4:19:a3:59:33:ac:3e:80:72:94:1c:fe:
                    51:c5:50:53:2c:b5:fc:c2:16:a9:f3:1b:41:a4:7f:
                    63:a4:e9:30:32:c8:66:c2:f0:ae:83:b6:5e:f4:d3:
                    47:d7:9e:fb:ef:81:c8:32:2a:01:1a:fd:b9:a4:87:
                    d7:d7:e2:44:dc:4f:b7:a5:58:0e:34:00:4c:e6:fd:
                    aa:ad:d8:47:98:04:0e:b9:0d:fb:92:4f:a6:84:a1:
                    83:1f:5e:9d:ee:42:9f:43:b8:cb:11:98:72:94:8a:
                    32:5c:c5:64:07:e8:51:d5:fe:aa:a9:ea:ff:46:e6:
                    f9:6f:c9:50:9e:38:b7:8b:5c:30:60:02:77:bc:08:
                    1c:27:06:0a:b9:07:71:20:24:d8:d7:32:ea:c9:97:
                    85:70:dd:42:88:05:bc:2b:7e:f1:13:7d:e3:20:d1:
                    bf:c2:c1:54:01:33:78:a8:35:3c:83:9e:67:a6:77:
                    10:07:45:ed:5c:74:6c:3c:9e:5f:21:85:28:61:58:
                    d0:a1:55:7d:e5:22:73:28:e8:32:3b:81:85:e8:02:
                    42:22:10:3b:b4:b2:1c:1e:a9:23:13:22:f9:6b:26:
                    cc:c2:e2:1e:a4:a5:1e:88:cb:ea:7a:95:22:b5:3d:
                    8b:c1:6c:4b:11:05:78:45:be:98:b8:88:60:43:f3:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:CD:46:38:4E:51:22:F1:9B:CB:F4:EC:49:4B:F1:EB:76:DD:1F
            X509v3 Authority Key Identifier:
                keyid:9C:63:B4:14:32:71:91:53:F9:F6:55:F8:B9:BE:6D:FC:AD:47:BE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:b4:a8:62:63:88:d0:e2:de:97:46:f2:09:3c:3b:4e:be:
         d6:7c:3e:dc:9e:a6:e1:b1:f4:22:c4:6c:6a:57:e2:f3:fc:af:
         63:20:64:80:cf:ed:a1:bc:3b:b8:fc:c6:e9:13:8a:8f:a1:4a:
         a1:4f:42:a7:f6:c0:31:e5:8c:57:cf:ef:fb:b1:17:6f:19:14:
         27:3f:b0:ce:d6:b2:e8:c8:68:b7:cd:be:e9:7a:a8:17:ff:18:
         54:9b:a9:cb:5a:da:9f:a2:2e:4f:3c:42:eb:15:25:1a:75:ef:
         b7:b6:26:db:34:42:18:8e:31:64:a8:e8:96:d0:50:7c:8d:dd:
         7e:72:f7:35:41:00:d7:17:98:3a:f3:91:a6:2e:44:62:c0:26:
         ac:2d:02:93:95:b2:97:12:61:dd:57:e8:8c:8e:f8:2b:39:7f:
         9e:5e:23:f4:16:67:b8:92:29:ba:f1:c4:64:67:9b:bb:2e:c2:
         a8:76:96:59:62:55:32:fc:df:aa:49:55:9c:0a:ad:46:24:f9:
         ee:24:75:95:fc:77:24:5f:21:63:91:75:39:25:3e:28:46:2c:
         f0:49:1f:98:a1:fe:cf:57:60:98:7b:a1:b9:e8:f5:4d:ec:4a:
         74:06:f2:92:2d:db:c9:6c:f3:72:c1:28:d5:35:88:db:88:6b:
         76:90:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----