Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.mft
File:                     BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.mft (raw, json)
Hash identifier:          XH8xwTfrCSaWhF0uSotadVXozyqC8V2bbChW8M/QPWU=
Subject key identifier:   AC:E7:2C:AE:2A:8E:05:C6:42:14:80:08:9A:22:63:E1:7F:2C:2C:53
Authority key identifier: BC:15:15:0A:F1:EC:12:EA:C7:40:8C:3D:8E:63:DE:A7:A4:5F:3F:2D
Certificate issuer:       /CN=BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D
Certificate serial:       4D1C79D785ED86788E97672C806850609C702B5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.mft
Manifest number:          75
Signing time:             Thu 13 Jul 2023 11:42:23 +0000
Manifest this update:     Thu 13 Jul 2023 11:37:23 +0000
Manifest next update:     Fri 14 Jul 2023 12:58:23 +0000
Files and hashes:         1: BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.crl (hash: DvlAN/qBYmbbWv7MnIUs32V9mAtqdOM3/FwiLvEGYqs=)
                          2: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: JNHBW1G0jqK1wzOyKo6ZuYbWoh3bKxisWWTlEJD3/bc=)
                          3: 323830343a313033343a3a2f33322d3438203d3e20323633363234.roa (hash: QLL1jwTqXre1rHdAjyv/kCJDLlQQYeh+kjRXZUNDqSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1c:79:d7:85:ed:86:78:8e:97:67:2c:80:68:50:60:9c:70:2b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D
        Validity
            Not Before: Jul 13 11:37:23 2023 GMT
            Not After : Jul 14 12:58:23 2023 GMT
        Subject: CN=ACE72CAE2A8E05C6421480089A2263E17F2C2C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:c4:15:8d:41:14:fd:7b:cb:f4:36:70:46:
                    c6:96:23:cf:8f:45:90:1b:72:fd:d4:b3:0d:d1:f0:
                    cd:e0:21:a3:b9:a4:b2:f2:2d:2f:2e:3b:6e:2e:b9:
                    ab:c3:16:1b:9f:e9:d6:04:fd:f3:8c:68:a2:0a:65:
                    01:c7:43:51:2f:9c:29:d2:c9:b0:27:f5:cd:dd:b6:
                    73:64:e5:c0:c5:49:57:ee:59:b7:a5:96:92:44:cc:
                    23:e5:2c:19:91:27:cf:51:47:b2:28:9c:ac:d7:52:
                    38:c1:c6:85:be:6a:5e:7c:05:9f:f2:fe:93:22:33:
                    0e:7d:98:e3:d0:23:07:2a:34:ff:a2:48:5d:f7:f3:
                    43:70:6d:c6:60:08:0f:51:2b:af:5b:1e:10:b2:d7:
                    bb:97:66:d5:80:90:32:e2:7b:2b:31:ea:95:ad:47:
                    21:f8:e5:ab:2c:ad:d6:9f:95:46:92:59:a9:6e:12:
                    6b:28:38:f3:61:b6:61:3b:d0:4f:25:1d:c9:27:bf:
                    e4:d1:15:f5:34:a4:8d:0c:6a:11:2e:94:26:01:04:
                    79:6b:d7:ab:79:2f:6c:b4:58:b6:53:73:6c:ce:09:
                    80:7f:67:ea:52:67:c9:88:cb:d4:6e:68:9c:96:37:
                    3a:3b:f0:0f:96:8a:d6:4f:77:64:b8:9a:78:70:5d:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E7:2C:AE:2A:8E:05:C6:42:14:80:08:9A:22:63:E1:7F:2C:2C:53
            X509v3 Authority Key Identifier:
                keyid:BC:15:15:0A:F1:EC:12:EA:C7:40:8C:3D:8E:63:DE:A7:A4:5F:3F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/BC15150AF1EC12EAC7408C3D8E63DEA7A45F3F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:a0:b4:e5:b6:fe:82:43:e4:d0:eb:c8:f6:f2:7e:fd:84:
         8b:b0:67:3a:ec:1f:98:af:24:9a:c5:24:79:69:d1:b8:92:7f:
         5e:5b:71:1f:ff:7a:40:f6:e4:ea:db:af:cb:21:b7:0a:91:d6:
         30:92:fd:1b:5d:e2:a1:65:48:b9:24:9e:24:67:66:40:80:39:
         be:56:8c:b9:cf:c9:eb:2a:de:f5:5c:3e:fd:8c:a9:a8:b5:c8:
         54:2e:4e:c8:ec:ce:6b:e7:31:56:58:34:c7:59:44:15:97:7e:
         10:d4:4b:43:4d:c2:10:c4:c1:15:a1:61:07:96:fa:b8:06:ff:
         e2:a4:b4:f5:a1:af:de:e3:f0:d1:c7:88:5d:bc:08:e0:d3:89:
         48:35:3f:73:59:32:08:15:59:74:fb:0f:78:55:d9:be:3b:68:
         56:92:03:9b:40:df:fc:69:27:cf:32:1b:3d:34:d4:a3:77:18:
         1c:3e:9b:bb:44:21:81:5c:78:f2:50:6f:dc:4f:d8:e3:65:14:
         28:66:ce:43:f9:db:c1:0a:9a:9f:07:00:7c:a5:1a:48:78:bb:
         1e:ce:20:90:bc:e9:1a:63:c5:ee:57:94:eb:c5:08:57:33:86:
         da:ab:12:67:ce:de:fb:ca:e6:fc:32:32:f8:18:44:bb:59:75:
         cc:6f:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----