Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.mft
File:                     AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.mft (raw, json)
Hash identifier:          c/YbJXKExgdBiywa2EvP5zFEfwVChxYVVC/V8A+ITmw=
Subject key identifier:   BA:60:14:A5:AC:CF:17:15:E3:1C:F8:22:B8:7A:95:A8:2F:1E:8B:11
Authority key identifier: AE:99:AB:8C:52:DE:DA:8D:FB:0D:A9:95:29:B1:D6:EF:A6:82:0D:05
Certificate issuer:       /CN=AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05
Certificate serial:       0D1BAF2C4C0F6B69F109AEF8413B0690D4459406
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.mft
Manifest number:          14
Signing time:             Mon 12 Dec 2022 15:11:35 +0000
Manifest this update:     Mon 12 Dec 2022 15:06:35 +0000
Manifest next update:     Tue 13 Dec 2022 18:20:35 +0000
Files and hashes:         1: 34352e3233332e3230382e302f32322d3234203d3e20323637333339.roa (hash: 22FxsVMKAVloOpzmCDqrYUMTsUu9Vk72TyZS8usW+s8=)
                          2: 323830343a346266343a3a2f33322d3438203d3e20323637333339.roa (hash: q5rhWr7GEiDRECDpBbfuP6C1LBFs18JN/d1dwnoRp4M=)
                          3: AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.crl (hash: V7UWq2WjzzCcv1eC9K/t3y7CCmfp5kgbmuaxr4UOtXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1b:af:2c:4c:0f:6b:69:f1:09:ae:f8:41:3b:06:90:d4:45:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05
        Validity
            Not Before: Dec 12 15:06:35 2022 GMT
            Not After : Dec 13 18:20:35 2022 GMT
        Subject: CN=BA6014A5ACCF1715E31CF822B87A95A82F1E8B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:c0:09:ec:b1:90:f5:0e:06:f4:39:a8:f9:
                    fa:a0:b5:b1:27:c9:a0:0d:d0:e7:b4:43:1d:bf:4c:
                    c0:93:6a:25:1f:5f:ba:db:2f:62:e4:7e:b6:fc:e3:
                    4e:87:0d:ca:5f:4b:37:03:1c:94:ac:68:51:12:5d:
                    69:36:74:f3:fc:ef:e3:8c:4d:6c:0a:a6:ec:de:0f:
                    31:7b:3e:5d:ae:ef:0b:df:82:25:7b:ac:ae:bf:3a:
                    a6:66:91:ad:47:c0:d5:6b:89:e0:70:ce:f6:f8:7d:
                    17:17:ff:d2:f3:98:5c:60:2b:19:65:9e:02:45:dc:
                    c3:8a:cd:81:1d:ff:93:73:37:b7:2e:98:77:6a:3b:
                    cb:74:a4:a5:91:ea:57:45:ec:1b:58:46:cd:c4:37:
                    ed:f2:82:b0:5d:de:e6:7a:55:7d:e2:65:7b:35:a8:
                    84:bf:ac:e1:d3:64:88:44:fd:d5:84:21:21:37:4f:
                    52:c7:ec:7f:47:09:6f:3a:ba:a9:12:21:64:95:4d:
                    52:cb:59:48:47:12:4d:87:98:01:1d:ee:5e:33:fc:
                    7b:69:55:24:97:08:b8:ab:79:b8:cf:2b:35:46:96:
                    b7:4a:b5:1d:05:7c:46:fd:ae:69:b5:2d:bb:4b:3a:
                    50:6b:a5:0d:79:36:e8:2c:85:30:02:d8:12:50:0e:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:14:A5:AC:CF:17:15:E3:1C:F8:22:B8:7A:95:A8:2F:1E:8B:11
            X509v3 Authority Key Identifier:
                keyid:AE:99:AB:8C:52:DE:DA:8D:FB:0D:A9:95:29:B1:D6:EF:A6:82:0D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/AE99AB8C52DEDA8DFB0DA99529B1D6EFA6820D05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:16:50:73:76:69:09:b0:b4:02:ef:c0:64:15:59:31:8f:
         fd:0b:a7:bf:52:f9:ad:f2:6c:0f:b9:7b:96:e6:cf:7f:76:bd:
         e9:ad:70:c5:06:9d:70:79:5f:fc:04:7b:e4:31:b9:85:23:1c:
         83:f2:30:f3:d1:3b:54:2b:f2:b9:88:cb:75:f6:a1:75:ae:92:
         f4:72:ee:3f:eb:06:11:31:06:07:36:42:00:eb:1e:42:7c:88:
         48:bb:df:9f:12:5e:0f:99:ae:5b:37:cf:a4:93:13:c3:c8:42:
         9b:33:e8:d5:75:b8:3a:f8:c7:7d:ce:6d:20:38:de:8a:2a:1d:
         64:41:b3:e9:d3:c4:17:e9:04:58:1e:61:9f:c3:5d:e7:7b:58:
         b7:ec:31:ad:bf:be:8f:f0:75:08:72:9d:dd:ff:e6:c5:ba:4c:
         48:2c:56:d4:fc:16:9f:d1:13:b4:07:23:37:3b:00:ba:2b:1b:
         16:29:6e:43:15:44:b1:7d:f4:e1:4f:18:6a:80:36:cd:57:21:
         23:7a:ad:d3:2e:a3:9a:d5:3b:eb:5a:25:8e:f7:89:de:5a:d9:
         66:63:b6:d6:d0:dd:c0:09:34:d3:a2:58:22:a6:51:81:8d:a2:
         d1:bb:9e:b8:c2:86:66:f2:a1:71:81:58:cb:d0:5d:fa:22:7b:
         b0:9d:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----