Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.mft
File:                     49EE2C97D87CAD103753E28E1CE5483190375B87.mft (raw, json)
Hash identifier:          rFSE5iQxNL7jGIXyFTihzE6UzbqDmbDsVDvVIH8XA+k=
Subject key identifier:   86:1D:CE:07:6B:9D:59:05:3A:49:50:58:E5:B0:4D:48:7E:95:55:B3
Authority key identifier: 49:EE:2C:97:D8:7C:AD:10:37:53:E2:8E:1C:E5:48:31:90:37:5B:87
Certificate issuer:       /CN=49EE2C97D87CAD103753E28E1CE5483190375B87
Certificate serial:       23CDB7D15CE74094C3B7F5D35E07E2AF9BED3744
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49EE2C97D87CAD103753E28E1CE5483190375B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.mft
Manifest number:          28
Signing time:             Sat 21 Oct 2023 04:21:03 +0000
Manifest this update:     Sat 21 Oct 2023 04:16:03 +0000
Manifest next update:     Sun 22 Oct 2023 08:09:03 +0000
Files and hashes:         1: 49EE2C97D87CAD103753E28E1CE5483190375B87.crl (hash: QMf0PkO56E/Cv8TMahThWQmeAxQeNMHLYNgFjSnS1wA=)
                          2: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: nXvpB3wajyJDHA+eM3SXtCNuHB9IyGftQi1+tuW4O68=)
                          3: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: 5HN2hYhMBxxCqbE3syVl7joUOnNt4MPKivEcwx9rgQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cd:b7:d1:5c:e7:40:94:c3:b7:f5:d3:5e:07:e2:af:9b:ed:37:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49EE2C97D87CAD103753E28E1CE5483190375B87
        Validity
            Not Before: Oct 21 04:16:03 2023 GMT
            Not After : Oct 22 08:09:03 2023 GMT
        Subject: CN=861DCE076B9D59053A495058E5B04D487E9555B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:58:9a:27:bb:a8:42:20:81:af:bc:74:31:
                    7f:a6:a9:f0:13:bd:16:82:df:52:92:5e:f8:d5:2e:
                    6a:fb:ba:fe:aa:3b:5e:be:b1:0f:9b:50:8a:75:5c:
                    af:ac:45:bb:2a:97:68:5e:cd:57:4d:02:12:77:24:
                    3c:b6:50:7e:41:2b:3b:6e:2e:1d:51:d4:9d:8f:cf:
                    69:5c:29:34:01:c0:0b:94:67:d6:d0:96:66:5c:b6:
                    f2:b2:da:9a:a5:89:3c:49:8b:a8:ba:b0:fe:8d:35:
                    f8:02:9e:97:18:2f:fb:ef:24:fa:90:7a:78:38:8c:
                    ec:5b:2c:41:53:ab:d9:90:71:64:94:96:b1:bd:70:
                    35:d0:bb:0c:db:cd:b5:b5:de:7c:42:13:ca:f7:82:
                    3a:f6:7e:f2:fa:f1:a7:64:93:38:27:95:58:e7:bf:
                    7b:d0:eb:ac:6e:5a:00:07:60:1c:e7:12:51:61:87:
                    e8:c8:78:95:0b:09:24:ab:39:ef:c2:81:53:1a:07:
                    33:38:b8:a6:9b:a1:e6:f6:2f:c1:f4:a5:3b:20:e3:
                    80:cd:32:71:b2:0b:69:c2:b0:14:47:8d:43:ac:23:
                    0d:85:77:ed:da:90:ad:68:83:d2:79:75:ec:8f:50:
                    93:79:34:8b:d4:25:0c:29:b3:e7:a6:57:70:bc:30:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1D:CE:07:6B:9D:59:05:3A:49:50:58:E5:B0:4D:48:7E:95:55:B3
            X509v3 Authority Key Identifier:
                keyid:49:EE:2C:97:D8:7C:AD:10:37:53:E2:8E:1C:E5:48:31:90:37:5B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49EE2C97D87CAD103753E28E1CE5483190375B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/49EE2C97D87CAD103753E28E1CE5483190375B87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c7:ba:3d:ff:d9:10:d1:4c:89:40:d5:39:6e:cb:66:f5:6f:
         6c:5f:44:71:d2:98:61:c0:75:22:6e:4b:8f:7d:79:15:ba:97:
         03:72:6a:18:7b:3e:55:43:46:28:02:df:51:aa:a2:ec:d0:bc:
         58:5c:c0:fa:e3:b7:ce:87:4f:4e:1b:d2:1d:16:53:97:18:4c:
         e5:16:2b:75:70:b9:fa:80:e2:b1:0e:c3:a1:58:1e:3c:79:57:
         ec:b7:66:f8:3f:4d:c8:05:d4:80:92:4e:31:90:80:9c:92:57:
         65:37:24:60:7b:27:de:ae:69:65:6d:17:e3:63:05:a8:db:09:
         82:f4:f0:72:7a:99:81:fa:db:09:78:48:19:61:52:3b:13:c5:
         4e:d8:93:b9:3f:9a:07:fc:97:da:bc:e5:e6:61:56:9d:cd:ab:
         df:b2:07:41:cf:8d:92:00:aa:8c:5b:cc:a1:56:86:d8:e4:99:
         b2:42:7d:c3:81:10:05:69:35:97:44:24:22:b7:1b:71:4c:6e:
         8c:f4:ea:de:0a:d6:f2:6d:14:0f:49:a2:64:39:9f:06:51:95:
         56:23:fd:7b:73:c5:40:ff:99:d2:70:e6:6a:f8:ae:54:28:07:
         3a:49:df:3e:d0:ef:42:6a:bf:5d:fd:d3:ef:48:df:d2:f7:79:
         86:e3:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----