Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft
File:                     4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft (raw, json)
Hash identifier:          gtpW2Hl+Ot9gy5x1rA5bnIJYT4yoxAA2EMiXRHkn1K8=
Subject key identifier:   DF:F9:50:B3:43:48:F9:1E:AB:F2:5C:06:4F:32:5F:E3:52:C8:8E:D1
Authority key identifier: 4B:8D:F8:D8:52:CA:CD:55:34:5E:7E:12:5D:D4:A6:D4:5F:21:05:A8
Certificate issuer:       /CN=4B8DF8D852CACD55345E7E125DD4A6D45F2105A8
Certificate serial:       59D222E479BF885C00586E04F3CD4F9568966A99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft
Manifest number:          15
Signing time:             Fri 10 Mar 2023 23:32:25 +0000
Manifest this update:     Fri 10 Mar 2023 23:27:25 +0000
Manifest next update:     Sat 11 Mar 2023 23:56:25 +0000
Files and hashes:         1: 3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (hash: PE7e+IUNJqHIZG2x11JzUGVYWLv/qSA7WzMApKKOmIQ=)
                          2: 4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.crl (hash: 8nbMf3CSxxzFv9f/iU7Ryhgse56AAjq9PHG+x2kF61U=)
                          3: 323830343a313466383a3a2f33322d3438203d3e20323633333632.roa (hash: dyExxnVOm2sV9GHqquVfvPwxYc5BxSSSfw9Z+3gZHZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:22:e4:79:bf:88:5c:00:58:6e:04:f3:cd:4f:95:68:96:6a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B8DF8D852CACD55345E7E125DD4A6D45F2105A8
        Validity
            Not Before: Mar 10 23:27:25 2023 GMT
            Not After : Mar 11 23:56:25 2023 GMT
        Subject: CN=DFF950B34348F91EABF25C064F325FE352C88ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:6e:38:13:3d:aa:03:cb:d1:f7:45:88:2b:
                    27:40:70:ef:10:a6:bc:cd:63:fa:54:ce:10:61:8a:
                    ba:b6:54:1b:ac:8f:a6:d4:03:ec:c4:51:9f:13:48:
                    82:1e:bf:8a:7b:1f:3d:27:ab:73:49:bc:d0:16:c6:
                    e6:d3:17:0b:62:de:8e:1e:e0:f6:ca:b7:5d:18:39:
                    a9:bc:6e:4a:89:88:7b:ea:83:f3:2a:92:1e:42:c0:
                    5b:7c:b7:fd:73:2f:99:2f:6a:88:68:07:96:2a:3f:
                    2e:19:f8:9f:1a:23:e6:ba:dd:0a:fd:48:4b:f4:e0:
                    05:35:74:49:16:fb:64:f8:4d:ec:6f:08:a3:c1:82:
                    ec:5c:51:66:25:a5:ff:91:0f:c8:f9:d0:03:ec:b7:
                    2b:d2:b2:10:a4:da:ae:e5:e4:9d:f9:d1:77:b0:57:
                    3f:1e:b3:eb:c3:63:0a:b8:c3:79:39:08:59:9f:0b:
                    3c:40:0e:a7:86:3c:35:fe:89:38:88:f2:26:91:cc:
                    99:63:c5:6c:a6:b7:18:6c:43:df:c1:29:52:69:49:
                    46:6e:f5:da:ac:b6:18:69:62:9a:41:06:fb:16:9c:
                    ff:4e:5e:e0:fe:c5:09:32:56:67:81:81:b1:ee:e6:
                    a0:a9:2e:0b:4d:fb:1d:07:2d:61:03:53:fa:84:92:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:50:B3:43:48:F9:1E:AB:F2:5C:06:4F:32:5F:E3:52:C8:8E:D1
            X509v3 Authority Key Identifier:
                keyid:4B:8D:F8:D8:52:CA:CD:55:34:5E:7E:12:5D:D4:A6:D4:5F:21:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0e:77:53:a0:72:3e:5d:23:65:e2:44:90:74:c2:73:a2:44:
         6a:0e:fb:50:92:b8:c5:bc:4d:5a:7f:5d:e9:ee:85:ad:e2:a1:
         00:1c:46:83:d6:f4:f9:42:27:d2:cc:9d:2d:96:39:63:df:b6:
         8e:57:8d:24:fc:8e:d2:6e:00:71:43:14:9d:ec:55:6e:7f:dc:
         e6:f9:06:f8:1d:41:e9:ad:23:7b:78:b1:a0:d8:f6:c6:7e:e0:
         e9:59:f8:95:09:08:73:05:cc:8a:b6:1b:85:a3:d8:ab:fc:71:
         80:70:3a:13:33:91:32:3c:e7:3c:f2:3c:fe:c8:2c:11:b0:56:
         f0:9d:73:8e:2d:ba:0b:0b:31:81:94:7e:92:1e:32:bb:ca:08:
         6e:a5:cc:11:a0:f0:3b:55:7f:55:01:51:65:04:71:07:42:ab:
         d2:66:34:8f:6f:08:7f:c7:8b:73:46:54:70:30:62:9d:0a:c4:
         11:af:92:02:ab:84:75:a6:64:f5:0e:56:0e:94:a5:62:d2:44:
         10:96:80:78:1c:4e:1d:63:64:0a:ca:bc:09:7d:01:59:ef:8d:
         90:bc:b3:eb:18:4e:2e:c5:71:23:c0:a4:fc:60:96:cb:6b:c8:
         06:d1:cf:7f:d5:bd:07:4f:f9:fd:d5:36:eb:b9:7c:d2:91:00:
         87:c5:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----