Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.mft
File:                     176F5430EAF4A89FD89B21007E7E8557D45B6A0B.mft (raw, json)
Hash identifier:          33hgN2j1AYkPzXpngwQg5N5mASMUVeoqXqvNi841YyQ=
Subject key identifier:   00:C9:70:FB:E2:27:61:CC:19:B4:92:B5:2B:A3:81:DD:10:16:17:9A
Authority key identifier: 17:6F:54:30:EA:F4:A8:9F:D8:9B:21:00:7E:7E:85:57:D4:5B:6A:0B
Certificate issuer:       /CN=176F5430EAF4A89FD89B21007E7E8557D45B6A0B
Certificate serial:       1D733A6DBFF11D9675E99282BEEB6913CC88D641
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.mft
Manifest number:          3C
Signing time:             Tue 29 Aug 2023 02:26:00 +0000
Manifest this update:     Tue 29 Aug 2023 02:21:00 +0000
Manifest next update:     Wed 30 Aug 2023 04:48:00 +0000
Files and hashes:         1: 323830343a373332343a3a2f33322d3434203d3e20323730383938.roa (hash: kkKqtn2kY7D2XXa/KuFZ/rIP9yPG5UQeIDKixwh4M1A=)
                          2: 176F5430EAF4A89FD89B21007E7E8557D45B6A0B.crl (hash: cF4J0UqR5bWy9atCy+MsaMFh+UEwi8rLhoHP7tqsCvo=)
                          3: 3137392e3132352e31322e302f32322d3234203d3e20323730383938.roa (hash: LFO5/oxW2lRqJyHRzaIhBMS8VZbGjSuoVa0mzxgPZv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:73:3a:6d:bf:f1:1d:96:75:e9:92:82:be:eb:69:13:cc:88:d6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176F5430EAF4A89FD89B21007E7E8557D45B6A0B
        Validity
            Not Before: Aug 29 02:21:00 2023 GMT
            Not After : Aug 30 04:48:00 2023 GMT
        Subject: CN=00C970FBE22761CC19B492B52BA381DD1016179A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:86:7b:28:07:69:9c:47:82:f8:e8:cc:e8:
                    e5:aa:d0:6a:9c:58:ac:f9:12:d0:56:ba:b8:44:d6:
                    38:ef:15:42:79:b4:00:4f:41:09:6c:42:66:e6:48:
                    88:18:25:79:93:80:71:b8:73:35:ca:a1:4d:45:ed:
                    cb:a0:2d:f1:c7:d6:6a:b9:61:ed:3a:a6:6c:93:b7:
                    83:3b:4a:e7:3f:f0:43:d9:99:50:a4:f1:a4:53:e2:
                    de:b6:20:49:4d:21:02:4c:ef:8d:63:14:be:db:64:
                    d8:3c:97:99:27:7a:51:16:fc:32:e2:6c:6f:0c:ea:
                    cf:a0:7c:8f:79:a3:c9:37:34:df:db:24:05:58:d4:
                    cc:14:87:52:fb:70:4f:96:29:39:56:d9:b4:8f:c7:
                    e7:8a:a1:d4:16:d3:d7:c7:0d:84:bb:c5:fd:d8:e7:
                    7f:7a:10:1d:c4:70:18:02:0e:c3:64:e1:4c:c6:7b:
                    0b:d6:30:58:e2:7b:48:e7:d8:58:bd:d8:45:60:f4:
                    69:a9:16:93:9e:bf:69:4c:5e:49:67:78:cd:bc:a0:
                    f1:93:4d:c0:71:9f:65:74:d0:6e:6d:6e:07:cc:54:
                    f6:2f:61:02:d4:d0:7c:44:95:8a:2f:82:b1:64:0b:
                    cf:75:e9:c7:56:88:05:9f:60:f2:4d:53:81:ed:91:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C9:70:FB:E2:27:61:CC:19:B4:92:B5:2B:A3:81:DD:10:16:17:9A
            X509v3 Authority Key Identifier:
                keyid:17:6F:54:30:EA:F4:A8:9F:D8:9B:21:00:7E:7E:85:57:D4:5B:6A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQzhEmzjbHyj1VEcf7kMGgVSsCERT6GPDwr6QqSxnUBU/0/176F5430EAF4A89FD89B21007E7E8557D45B6A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:88:c6:78:f8:74:a8:c1:42:fe:ac:70:e1:a2:ab:42:b8:
         38:f1:44:6c:9d:81:42:15:77:74:6f:c2:32:cd:5f:73:86:6d:
         01:c8:57:46:c1:81:79:e2:76:17:40:4e:d4:a0:3c:6a:9c:23:
         ce:59:1e:ff:3c:84:ca:4f:0c:df:b4:fd:5a:c1:e9:57:34:73:
         d1:19:53:61:d8:05:44:39:0e:66:46:e9:7e:2f:0a:55:b1:6c:
         fe:db:ee:79:aa:be:19:4d:28:4a:88:c0:0d:a3:86:87:bc:4a:
         91:c1:8a:59:3a:3c:d0:30:58:18:c4:f2:49:67:33:c9:c3:ee:
         8e:00:5f:8d:6d:5e:22:fe:1d:28:ba:35:bf:9c:06:a1:e2:dc:
         6b:f6:0d:31:a0:1e:77:e2:73:08:f8:93:99:26:72:4d:ae:34:
         50:ff:91:9c:86:9a:6b:07:cf:98:1f:24:75:f1:b6:5b:c9:f9:
         2e:83:5e:b8:ae:12:a4:dc:8a:e3:3b:b1:a7:96:d4:4c:c3:aa:
         66:ed:1a:ad:7e:a0:7a:61:15:26:87:73:5b:a5:dc:86:30:8b:
         48:3b:a0:39:34:3b:44:44:08:03:47:96:ae:06:cf:dc:81:a4:
         92:0e:20:99:a8:51:31:e6:17:c3:5b:dd:8d:6f:ab:10:96:9a:
         83:d5:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----