Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft
File:                     672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft (raw, json)
Hash identifier:          QUSwk+D5whCIHJJLDevl4VpoVniVDI/gKY+c2XKq/tA=
Subject key identifier:   32:23:06:1A:D8:A1:56:99:F3:62:4A:BE:D8:10:E8:E0:42:05:63:AB
Authority key identifier: 67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7
Certificate issuer:       /CN=672698D7118D3ECE15E8852DCA0F5F04245E94C7
Certificate serial:       345F08B104CA7AE2628287BD37BBF09681D1DC53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft
Manifest number:          01D6
Signing time:             Sun 23 Apr 2023 01:09:40 +0000
Manifest this update:     Sun 23 Apr 2023 01:04:40 +0000
Manifest next update:     Mon 24 Apr 2023 03:24:40 +0000
Files and hashes:         1: 3136302e3233382e3134382e302f32322d3234203d3e20323636353533.roa (hash: tNGPkL9Sxvcg8AL4wsra44fRfx3nTJz7GNpaybtWM2A=)
                          2: 672698D7118D3ECE15E8852DCA0F5F04245E94C7.crl (hash: Ud/aGjud9W6wiXJWUCrqg+QU3kiiYncYsuiU1iSZMAw=)
                          3: 323830343a336463383a3a2f33322d3438203d3e20323636353533.roa (hash: KmW0eKIRt914cJqIp738JBCbbOmZx7n6NxlOMkukgFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5f:08:b1:04:ca:7a:e2:62:82:87:bd:37:bb:f0:96:81:d1:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672698D7118D3ECE15E8852DCA0F5F04245E94C7
        Validity
            Not Before: Apr 23 01:04:40 2023 GMT
            Not After : Apr 24 03:24:40 2023 GMT
        Subject: CN=3223061AD8A15699F3624ABED810E8E0420563AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:6f:54:5c:fb:5f:b3:ea:91:37:d3:b5:6f:
                    25:49:42:51:c6:5b:5a:11:33:77:54:97:22:6a:c7:
                    cd:e3:4d:fd:88:fc:30:01:75:c1:85:35:6c:57:32:
                    84:50:a3:a7:8c:4a:2c:99:12:97:0f:12:db:86:7d:
                    8b:d2:aa:63:40:82:18:55:2f:1b:13:6d:4f:45:1e:
                    0f:32:ed:0b:54:3b:da:79:ff:d5:4f:ec:6d:8b:f2:
                    d3:fb:64:fe:1e:eb:26:48:5e:68:a8:3c:ac:f3:3d:
                    e8:33:13:74:00:67:e0:70:bc:07:41:c1:6c:66:e1:
                    ec:cb:1f:b7:32:fd:a4:a0:c1:f9:45:b3:89:3a:80:
                    0e:87:c0:e8:9d:86:b4:45:7a:19:08:93:12:6c:6a:
                    f2:f7:04:05:94:0b:1f:2e:74:91:93:f3:e4:4c:5d:
                    36:30:dd:e9:9e:5a:4f:52:25:ee:fe:dd:4c:14:59:
                    0b:a0:61:de:ff:09:e3:2d:c2:68:90:91:39:b3:37:
                    12:fe:5c:21:03:9a:72:70:87:a7:45:a3:3f:b8:97:
                    69:97:63:1d:42:86:63:03:7f:6e:f3:16:1c:dc:6e:
                    f9:91:7c:1f:e6:bd:28:8c:c9:c2:9f:5b:c9:b1:bf:
                    7e:97:58:cf:15:64:8e:b2:33:5a:5f:f3:b1:a4:26:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:06:1A:D8:A1:56:99:F3:62:4A:BE:D8:10:E8:E0:42:05:63:AB
            X509v3 Authority Key Identifier:
                keyid:67:26:98:D7:11:8D:3E:CE:15:E8:85:2D:CA:0F:5F:04:24:5E:94:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/672698D7118D3ECE15E8852DCA0F5F04245E94C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:42:e7:af:ee:97:55:6d:8a:e0:86:4d:de:f6:21:93:ba:7f:
         8a:a9:0e:11:3a:96:98:1c:cf:b6:0d:2c:1c:6a:e3:ed:92:90:
         2a:1f:93:b8:97:cb:75:d9:16:b9:80:69:24:24:2c:ad:5b:49:
         43:25:5e:8e:3d:ce:91:f3:b8:33:21:d8:3e:fc:84:11:fb:6d:
         d8:d9:96:64:8b:a1:4e:8c:78:a0:a5:3f:ed:b9:4a:6c:34:2d:
         1b:bf:bb:9d:f9:52:42:7a:63:1b:93:18:e6:4c:6a:38:f7:bb:
         62:26:58:2c:f5:3c:dc:04:ad:eb:a0:39:1c:a4:8b:0c:e5:d6:
         23:c9:d1:06:42:c4:04:db:86:c9:78:b4:22:0a:68:9a:3d:bb:
         ca:17:97:92:fc:95:ac:c4:c1:67:e8:ba:e0:72:d2:50:ff:19:
         ce:42:c9:a7:07:6d:25:51:63:fe:21:23:a5:b1:70:28:56:9d:
         b7:96:54:c8:d0:8d:af:60:3d:f5:01:15:3a:cb:a3:be:b8:c6:
         51:9b:da:2b:71:21:2a:1c:8e:03:ce:31:3d:ce:88:5c:49:27:
         cc:d8:a3:5f:d7:09:f7:83:cc:4c:65:bd:98:cc:88:e9:83:bb:
         e2:de:b5:5d:a4:57:fa:24:f7:89:b3:ce:7e:3b:38:96:dc:e3:
         f1:c3:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----