Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft
File:                     95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft (raw, json)
Hash identifier:          GyAaqpko0f6Tdcw7VCVSgmNZisrqQ597+MhfRXs6bCo=
Subject key identifier:   C2:69:86:26:58:C9:74:DE:34:AA:62:88:2C:A0:0C:A1:9C:D2:60:FF
Authority key identifier: 95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78
Certificate issuer:       /CN=95C4CFA6C8BE0845776E681F3793B6CEBBA66A78
Certificate serial:       6D25DC60E6E225146F67E9F5F0E462F1EF8B0FD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft
Manifest number:          7F
Signing time:             Fri 14 Oct 2022 20:43:04 +0000
Manifest this update:     Fri 14 Oct 2022 20:38:04 +0000
Manifest next update:     Sat 15 Oct 2022 21:17:04 +0000
Files and hashes:         1: 3137302e38342e34382e302f32322d3234203d3e20323635303232.roa (hash: mjWQI81VRmOoDxz3vpjeJNoCf4J1It46JVQZLDHC2sU=)
                          2: 95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.crl (hash: KT4DPmK4/+zvvM5rCkY+8DmxB/6+HptRDKKql5GetJ4=)
                          3: 323830343a333138383a3a2f33322d3332203d3e20323635303232.roa (hash: 77y8Fsw21C4z2ihJXK76nIJK1LL+KF7b/JyIr6Vd/UA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:dc:60:e6:e2:25:14:6f:67:e9:f5:f0:e4:62:f1:ef:8b:0f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C4CFA6C8BE0845776E681F3793B6CEBBA66A78
        Validity
            Not Before: Oct 14 20:38:04 2022 GMT
            Not After : Oct 15 21:17:04 2022 GMT
        Subject: CN=C269862658C974DE34AA62882CA00CA19CD260FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:62:b2:95:44:06:94:47:16:ea:e5:6f:d7:
                    cf:82:21:ba:58:d0:06:0d:70:9f:ee:31:0f:b7:e1:
                    b2:b9:15:ea:86:a5:63:fd:3f:0a:4b:1d:5d:9f:7f:
                    ba:19:65:87:f4:27:38:cc:d9:51:16:e4:2b:26:07:
                    30:37:91:c8:58:2d:32:c6:ba:f3:14:9d:92:a2:49:
                    f9:a3:81:31:1e:a8:46:dc:08:b7:12:7b:18:19:84:
                    8a:48:6a:2f:9b:6b:e2:a5:81:2b:bf:a1:9f:66:47:
                    70:75:02:3b:91:a6:c9:4a:f8:2a:3f:1d:07:c0:26:
                    eb:c5:ba:20:c5:53:72:9e:f0:dd:ab:0f:b2:b4:3a:
                    85:f5:86:fd:5f:af:46:50:1f:6c:94:cb:1b:61:18:
                    18:58:c2:6c:0f:55:e6:08:87:f6:55:27:28:fd:ca:
                    1f:0a:69:f5:4f:db:e5:4c:b2:fa:4d:88:26:d8:07:
                    b2:16:dd:10:2e:63:73:0a:aa:a1:1b:39:9c:1f:87:
                    70:4d:6c:bc:7d:c4:f9:89:4d:19:2f:34:3e:f2:9f:
                    90:8d:cf:5a:e7:6e:07:1e:20:cd:95:5b:e4:86:ec:
                    93:6f:f4:89:4a:7e:67:1d:97:b9:fe:28:7b:68:51:
                    62:3b:68:94:2a:c7:54:6f:bd:22:cc:58:9a:c8:88:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:86:26:58:C9:74:DE:34:AA:62:88:2C:A0:0C:A1:9C:D2:60:FF
            X509v3 Authority Key Identifier:
                keyid:95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:ce:20:db:4e:1e:99:44:1a:16:05:9d:e3:b4:78:a7:f0:
         b2:1a:28:b8:00:35:19:f3:90:ec:73:67:7a:ea:0d:ea:21:47:
         50:05:63:56:6b:5c:46:fd:ef:1d:95:83:5f:a4:d7:37:2c:91:
         fd:da:24:5f:2b:b0:d5:91:5c:51:61:5f:a1:d0:c9:e1:e4:15:
         30:1a:7c:11:bb:19:ac:61:6f:6c:17:e6:f6:7e:2f:d7:2a:28:
         52:88:8d:5e:84:bd:21:02:35:aa:98:26:c6:37:d6:c6:7b:23:
         25:ed:4a:85:30:ea:17:e0:dd:22:4a:1c:f7:f7:b8:40:5e:62:
         ff:2f:d4:0e:cd:36:52:c2:c0:25:4b:5f:56:99:89:c8:ad:b5:
         9d:de:ce:b3:3f:65:85:a5:0c:7e:7d:23:99:af:6e:3b:c9:28:
         c6:61:bb:81:61:6b:93:d9:4e:1e:69:c6:cd:f0:f0:74:3f:b7:
         2c:dc:1f:cc:a0:c4:27:76:81:e3:0e:43:73:f2:07:73:60:66:
         04:82:26:eb:da:db:75:01:f8:e4:0a:c1:50:ad:29:eb:f3:d1:
         72:4c:a5:14:94:3f:15:3a:8c:af:f1:ea:30:7d:7f:5f:d8:32:
         f7:37:9c:d2:37:74:4a:b2:5a:6c:df:f7:94:8e:c3:60:78:97:
         d8:2d:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----