Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft
File:                     49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft (raw, json)
Hash identifier:          hbCjcUI0Dk57xNR5blhOxFCFmU7Zllu6s9zmFZ7RTj8=
Subject key identifier:   36:63:DD:19:50:E9:04:C7:FE:D1:A7:65:9C:15:B7:71:51:08:39:A7
Authority key identifier: 49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Certificate issuer:       /CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
Certificate serial:       3FC011D138E5F0CFF094EB05D7CD70BCEE74D4E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft
Manifest number:          0174
Signing time:             Wed 19 Apr 2023 22:53:32 +0000
Manifest this update:     Wed 19 Apr 2023 22:48:32 +0000
Manifest next update:     Fri 21 Apr 2023 02:02:32 +0000
Files and hashes:         1: 34352e342e3230382e302f32322d3233203d3e20323636303836.roa (hash: juJuCMnVTUPrgxmvea4CyZfC/LSbzRSU4RK7MktYHV4=)
                          2: 49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl (hash: E8IbK0C5T16Hnsm70kQgMn3XtFah8mXn863Jg+OGNGo=)
                          3: 323830343a336136343a3a2f33322d3438203d3e20323636303836.roa (hash: UtnkWMyOpTASoRVgevG/V2DqwAId8EehIMrGHfkIuMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c0:11:d1:38:e5:f0:cf:f0:94:eb:05:d7:cd:70:bc:ee:74:d4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Validity
            Not Before: Apr 19 22:48:32 2023 GMT
            Not After : Apr 21 02:02:32 2023 GMT
        Subject: CN=3663DD1950E904C7FED1A7659C15B771510839A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:de:c8:27:d0:35:b2:95:12:6c:9d:58:11:
                    84:6b:71:37:74:f3:80:a4:a7:4e:ee:3c:36:aa:f3:
                    c7:d9:74:a9:c9:79:41:71:85:34:25:90:6c:11:db:
                    d1:f4:50:4f:6c:b5:1f:12:d5:3a:23:eb:8f:70:fe:
                    7a:11:41:e8:c1:d1:f6:44:d0:4c:26:5f:2f:64:4c:
                    19:69:80:68:4c:c4:9a:22:d4:77:5b:d1:2f:e2:c2:
                    cb:52:96:e7:57:46:69:63:25:b2:2a:61:03:de:c1:
                    d8:64:8e:f2:09:98:25:88:b3:73:5e:a2:b1:87:a8:
                    1d:08:62:f2:08:de:d8:37:7b:a2:39:c4:31:ae:15:
                    6e:4b:25:60:b5:a3:a6:5e:f1:f4:2d:96:73:55:37:
                    34:22:67:e1:8d:e0:85:85:55:97:5b:b6:e5:9c:65:
                    4a:1a:f8:ba:7e:b2:29:1e:0b:4d:4b:46:ff:93:76:
                    0d:44:aa:40:01:fc:88:d1:69:49:c0:cd:7c:6b:02:
                    73:31:07:e8:92:40:ac:0a:66:f9:bc:5b:ed:08:fe:
                    a5:c4:91:0c:f7:1e:86:dd:28:4c:d0:17:3c:72:1f:
                    a6:22:2a:1a:26:e0:0a:16:e7:71:e8:eb:57:4a:c2:
                    98:44:9a:ae:2e:f5:15:d2:1e:ff:99:e2:55:a0:a9:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:DD:19:50:E9:04:C7:FE:D1:A7:65:9C:15:B7:71:51:08:39:A7
            X509v3 Authority Key Identifier:
                keyid:49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:23:76:d0:c9:09:3f:02:c6:22:c0:57:ad:c9:3e:79:17:f1:
         57:87:a8:6c:02:a3:3c:9d:32:5c:05:96:0a:2e:bf:91:4b:4d:
         6a:92:fc:2c:7d:37:87:e7:48:a7:95:8f:36:d7:95:a5:33:6e:
         1e:a3:b2:fa:5c:46:60:31:a2:fe:e0:f3:41:74:f1:ee:9e:89:
         7a:bf:8a:8c:38:75:7b:c8:ef:f8:c5:68:5d:70:9a:69:b4:e4:
         1d:9f:7d:4e:23:5a:50:ee:a1:80:ae:70:14:b3:cc:65:f2:6c:
         d8:07:eb:c7:cc:c6:48:f8:a7:9a:ff:ea:a3:25:46:55:1b:54:
         9b:01:1f:0d:cd:45:4c:22:da:c9:f2:a3:04:20:6f:ac:cb:60:
         0c:f1:2a:9e:07:61:2b:03:c7:8b:b6:52:2d:b0:b5:7e:1f:98:
         0a:38:19:10:8c:e8:b6:4e:46:0f:e1:8e:43:14:06:4d:64:ea:
         c6:c8:39:2f:f4:d8:04:a4:50:e5:bf:70:07:5d:3b:05:bb:98:
         f2:65:15:7b:52:ba:9e:f5:c5:78:5b:79:59:cb:fb:41:09:76:
         b3:65:e5:9a:0e:3d:05:10:01:cf:a1:a1:7f:e8:80:b0:fe:57:
         84:c6:38:b3:95:1c:57:2a:de:d4:2f:b6:87:7c:ba:e7:b0:0a:
         c8:ba:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----