Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.mft
File:                     5DD6CB70EB7790A0849B559E532B20968CDD043C.mft (raw, json)
Hash identifier:          VsAUGR43dw/3/MglPTYMsw49zEAZoQSLxeVOps4T5PE=
Subject key identifier:   52:56:E9:D5:66:B9:E1:5E:7A:B7:7F:56:DA:A3:03:19:02:4F:A5:D2
Authority key identifier: 5D:D6:CB:70:EB:77:90:A0:84:9B:55:9E:53:2B:20:96:8C:DD:04:3C
Certificate issuer:       /CN=5DD6CB70EB7790A0849B559E532B20968CDD043C
Certificate serial:       6989EF0BFF38E8E76E93BBF9E38ED05A45491066
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.mft
Manifest number:          9C
Signing time:             Thu 15 Dec 2022 16:48:12 +0000
Manifest this update:     Thu 15 Dec 2022 16:43:07 +0000
Manifest next update:     Fri 16 Dec 2022 18:32:07 +0000
Files and hashes:         1: 323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (hash: +Sc4bkeSmahJDKRdinb/bAPToxgNcHG63Aaji9RFSyw=)
                          2: 34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (hash: a9v2SVyYDl3Fy1+8j0Gdo2AmaKagoWOYasbofXh3yWk=)
                          3: 5DD6CB70EB7790A0849B559E532B20968CDD043C.crl (hash: cM1erVX1zoF6D2Gky16kVmCMMoRFkKfOVKnm4aiRBSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:89:ef:0b:ff:38:e8:e7:6e:93:bb:f9:e3:8e:d0:5a:45:49:10:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD6CB70EB7790A0849B559E532B20968CDD043C
        Validity
            Not Before: Dec 15 16:43:07 2022 GMT
            Not After : Dec 16 18:32:07 2022 GMT
        Subject: CN=5256E9D566B9E15E7AB77F56DAA30319024FA5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:05:05:59:79:97:c7:fb:a6:fa:e9:1d:b2:
                    24:83:c5:10:8c:dc:ce:0d:bd:04:ef:24:3a:a6:30:
                    24:e4:f8:b3:a2:77:20:61:a9:62:58:a3:35:67:b6:
                    d8:a8:9c:a7:5d:26:a8:ce:7b:87:e3:13:5e:e3:3e:
                    0f:47:72:de:6f:1c:00:ba:13:48:f3:76:de:f5:9d:
                    2f:f8:85:83:f3:69:01:fc:6e:fa:f1:2f:98:2c:5d:
                    d2:29:c8:00:e9:69:dd:99:b1:2b:53:ca:e0:4c:bf:
                    b6:01:b7:1e:9c:e4:3a:21:30:df:7c:78:d4:40:58:
                    37:f7:1d:c8:cb:3e:cd:7c:76:48:aa:e1:1b:aa:2f:
                    1e:4b:3e:4f:c2:96:89:1e:d6:ed:6d:6f:34:da:3c:
                    2a:33:0c:37:9e:ef:d4:b8:05:f3:99:9a:52:66:1d:
                    a8:22:ca:1b:42:29:ba:85:75:c3:c8:3d:fa:67:d1:
                    1e:82:f6:65:23:48:3a:21:50:1b:1e:e6:df:73:0a:
                    df:84:23:50:0c:8c:ea:93:8a:f4:16:c1:15:85:58:
                    90:f2:18:e4:c8:3f:d1:20:a8:4b:f9:9e:74:e8:2d:
                    d4:21:45:7d:e0:32:c9:27:6e:a6:46:61:57:3c:21:
                    df:e6:2f:f8:32:90:6f:89:b3:16:9d:4e:3f:7c:bd:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:E9:D5:66:B9:E1:5E:7A:B7:7F:56:DA:A3:03:19:02:4F:A5:D2
            X509v3 Authority Key Identifier:
                keyid:5D:D6:CB:70:EB:77:90:A0:84:9B:55:9E:53:2B:20:96:8C:DD:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/5DD6CB70EB7790A0849B559E532B20968CDD043C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:e2:fd:08:99:22:8c:f5:de:ef:6e:43:6f:e6:97:d5:08:
         e5:f6:65:5f:7c:70:7b:bb:b4:a6:26:cf:43:e7:e1:9c:dd:69:
         7d:0b:a4:5c:26:10:f5:2b:65:bc:b1:18:1c:c4:2f:79:e5:b0:
         16:0f:71:d0:fe:49:a4:0d:60:ff:0f:49:44:33:5e:49:4e:c2:
         77:82:59:90:e0:a7:17:7d:2e:9c:18:5e:ad:24:4d:95:8e:e0:
         db:d5:cd:6b:30:be:e5:62:54:65:62:e1:b9:7b:9a:7a:b8:24:
         64:69:7f:b3:5a:d4:54:1a:c7:f0:09:79:c3:18:95:09:a7:51:
         6d:2c:fc:de:c0:7e:6f:7b:51:44:70:c0:12:79:a5:cc:b9:62:
         ab:71:12:00:9b:9d:5e:5b:f5:88:0d:4e:3d:65:01:04:8b:c5:
         cb:37:0b:7e:f3:a8:76:e6:46:71:02:1e:94:e5:d1:3d:4f:b1:
         c0:2f:5b:f5:bd:d5:b9:48:2c:02:75:3b:61:4f:c9:6e:ae:49:
         29:70:75:3d:e3:2e:4e:e6:9e:e1:fe:8a:dd:5e:ed:3e:3a:b7:
         70:cc:01:34:87:86:24:78:b4:4f:67:88:35:45:95:f7:36:35:
         aa:10:17:a2:1c:39:2e:25:58:6c:ec:55:92:9e:2a:30:f1:89:
         d0:6b:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----