Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/53281898C10D3707BD567F95E5A468CF1E742260.mft
File:                     53281898C10D3707BD567F95E5A468CF1E742260.mft (raw, json)
Hash identifier:          8Klg/3L0RMbSlbQVyyFqx8HM0tVuVi4E+9kz0I7vu0k=
Subject key identifier:   D3:2F:68:9C:D4:49:92:B3:8E:4F:09:F9:0B:C9:D9:65:E2:FF:3E:9A
Authority key identifier: 53:28:18:98:C1:0D:37:07:BD:56:7F:95:E5:A4:68:CF:1E:74:22:60
Certificate issuer:       /CN=53281898C10D3707BD567F95E5A468CF1E742260
Certificate serial:       7C95FFFECE3DF8802A3366E6760CD42C4214B334
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53281898C10D3707BD567F95E5A468CF1E742260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/53281898C10D3707BD567F95E5A468CF1E742260.mft
Manifest number:          2B
Signing time:             Tue 27 Sep 2022 02:50:00 +0000
Manifest this update:     Tue 27 Sep 2022 02:45:00 +0000
Manifest next update:     Wed 28 Sep 2022 03:32:00 +0000
Files and hashes:         1: 323830343a356231383a3a2f33322d3334203d3e20323638383138.roa (hash: A1rKJsZEIwM6B2RZbmaHRcJjLdoEFSmZrKwLv6hvBus=)
                          2: 53281898C10D3707BD567F95E5A468CF1E742260.crl (hash: xnf4ziqfLJjcOc30v/SofW+XXI4WbF7kVo9NYhwSaKs=)
                          3: 34352e3137332e3137362e302f32322d3234203d3e20323638383138.roa (hash: CAMN7rt9zjD+cmgnRLJ1LNzGIk1UX9d8K5A86aPb27g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:95:ff:fe:ce:3d:f8:80:2a:33:66:e6:76:0c:d4:2c:42:14:b3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53281898C10D3707BD567F95E5A468CF1E742260
        Validity
            Not Before: Sep 27 02:45:00 2022 GMT
            Not After : Sep 28 03:32:00 2022 GMT
        Subject: CN=D32F689CD44992B38E4F09F90BC9D965E2FF3E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:02:b0:78:e1:8b:31:fb:11:6d:77:f4:01:
                    11:57:11:ff:18:f1:2e:ea:23:2f:15:20:80:af:e3:
                    9f:32:0e:86:21:5a:f1:5c:69:07:53:f4:eb:c9:f9:
                    e9:85:f8:ec:f5:e1:d2:56:15:00:89:be:f0:ee:60:
                    bb:f2:c9:ca:90:25:6d:ca:2f:82:fd:3c:d3:d5:01:
                    2d:c0:21:59:ab:91:de:6e:7b:d7:a4:49:8d:b6:ae:
                    2f:34:24:7c:90:3d:b7:5b:66:91:42:31:37:5e:7d:
                    10:d6:61:28:96:17:d2:c7:8b:4e:b4:39:56:1b:47:
                    b3:b6:33:53:cf:28:66:d4:b8:fa:a8:9a:ed:b5:49:
                    3c:95:6e:6d:05:47:72:f6:84:1b:27:68:7f:6e:0b:
                    20:8b:9c:86:5e:ee:81:70:5f:f2:9c:8e:cb:61:b4:
                    c9:97:e3:5b:7b:eb:dc:9e:d1:c7:75:62:e0:83:6c:
                    89:c3:8a:be:2c:bc:8e:e6:cb:60:f2:8a:67:e4:6b:
                    db:25:7a:f6:7b:f6:fa:5b:65:7a:8f:a3:35:2e:0d:
                    05:f7:9c:b1:24:d0:96:26:cb:e6:9d:29:da:30:86:
                    6b:1a:dc:c7:dc:b9:05:1d:6a:31:c8:f0:d3:c4:bf:
                    b1:3d:bb:c2:a1:9e:4e:b8:0b:4d:67:c2:6a:56:68:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2F:68:9C:D4:49:92:B3:8E:4F:09:F9:0B:C9:D9:65:E2:FF:3E:9A
            X509v3 Authority Key Identifier:
                keyid:53:28:18:98:C1:0D:37:07:BD:56:7F:95:E5:A4:68:CF:1E:74:22:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/53281898C10D3707BD567F95E5A468CF1E742260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53281898C10D3707BD567F95E5A468CF1E742260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/53281898C10D3707BD567F95E5A468CF1E742260.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:4b:94:0c:70:00:f7:30:d1:f8:53:5f:47:d4:a6:2f:de:
         cc:aa:85:eb:0c:9e:c0:d2:2c:7e:65:8a:32:71:38:41:1e:5e:
         ff:21:1a:04:4d:6b:6c:bd:54:2f:8c:74:32:b5:25:4a:f8:c2:
         74:54:3e:a7:73:97:12:e8:12:d5:bc:5f:d0:5d:f6:dd:38:a3:
         71:0d:12:8c:90:13:71:b4:3b:d6:d0:1a:7a:02:88:1f:6f:f0:
         88:f6:48:77:19:1a:c3:ec:46:31:73:3c:90:72:d7:38:5e:47:
         b7:e4:29:30:3b:2b:92:f1:30:3b:ad:76:3c:06:33:9c:7e:be:
         27:ce:c4:72:04:49:23:ce:1e:01:5c:83:94:24:48:be:37:0a:
         d2:35:50:32:c5:f3:df:26:0e:1c:7c:65:26:df:9f:b1:a2:82:
         8f:c8:0a:44:34:22:b9:04:ee:ac:20:82:a5:27:4d:09:3e:f8:
         f3:7d:1b:88:89:84:a4:69:ca:10:3d:35:00:09:84:87:c2:cf:
         0a:17:d8:54:db:46:a8:46:f4:49:8d:9f:93:44:ed:5a:31:0b:
         ef:05:22:38:1a:41:1e:b1:5a:05:e7:a2:13:e9:0d:c7:bc:3e:
         9c:96:86:10:d9:57:47:86:50:2c:ca:71:84:c7:d3:cf:20:15:
         d3:b7:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----