Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.mft
File:                     3425818BECF2C72E357346B2E5AEF74749DCA81E.mft (raw, json)
Hash identifier:          ChAgXYSohwwozDf+NV0kLp9xCrDLFdo5Q03ZqbMrA3Y=
Subject key identifier:   0A:E9:1E:33:D1:35:BC:B0:FF:3D:24:DA:04:A2:6A:2D:39:63:7A:D7
Authority key identifier: 34:25:81:8B:EC:F2:C7:2E:35:73:46:B2:E5:AE:F7:47:49:DC:A8:1E
Certificate issuer:       /CN=3425818BECF2C72E357346B2E5AEF74749DCA81E
Certificate serial:       573CBE106DCFB13DC00C3170CC8F2EF94ECDE078
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.mft
Manifest number:          D9
Signing time:             Tue 16 May 2023 12:10:24 +0000
Manifest this update:     Tue 16 May 2023 12:05:24 +0000
Manifest next update:     Wed 17 May 2023 12:27:24 +0000
Files and hashes:         1: 323830343a316437303a3a2f33322d3335203d3e20323634333638.roa (hash: NHEj6vVM/VSWJug+Z1+qBq1ge3jbQhbPHLmFECZAVMA=)
                          2: 3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa (hash: xcPwNu9rP5ZMdsTH9bb1WjbBwEAD9ladLxnqfVKPaoc=)
                          3: 3425818BECF2C72E357346B2E5AEF74749DCA81E.crl (hash: 2f7UDldQivjXeu9kMyDAvEdr2Tg7kZdPRPF9GVupkvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:be:10:6d:cf:b1:3d:c0:0c:31:70:cc:8f:2e:f9:4e:cd:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3425818BECF2C72E357346B2E5AEF74749DCA81E
        Validity
            Not Before: May 16 12:05:24 2023 GMT
            Not After : May 17 12:27:24 2023 GMT
        Subject: CN=0AE91E33D135BCB0FF3D24DA04A26A2D39637AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:ee:14:87:47:3a:ce:0f:9d:13:ab:10:64:
                    d6:0b:10:b5:ab:b5:27:f8:50:b9:a2:23:d9:55:84:
                    9e:7f:98:ea:37:c9:04:47:ff:fc:48:40:a7:af:fe:
                    6a:83:9b:f1:e0:bf:58:eb:ce:22:40:76:cc:fc:eb:
                    6b:0f:70:2f:bf:34:70:a7:40:05:df:8e:94:99:d1:
                    20:d9:e0:c3:80:12:fd:7e:09:37:09:a2:92:17:31:
                    24:c1:94:8f:65:48:64:18:1b:c1:f7:b6:0a:c0:67:
                    7a:d3:bb:e7:60:9c:c0:83:8b:82:63:94:88:77:4a:
                    b2:d5:b2:bb:2f:8b:92:27:59:95:26:e6:94:c7:b2:
                    d6:53:7e:ac:b3:5d:a0:bb:16:57:60:ca:9b:32:94:
                    00:6b:74:31:40:f7:ed:a2:98:7c:31:73:4f:ee:ec:
                    3c:19:db:5c:8f:78:d3:0b:fb:c4:99:a6:d6:4b:9b:
                    b5:31:9c:47:4f:97:ba:44:26:52:e4:85:fc:57:49:
                    99:af:82:81:a2:69:27:3e:ee:ac:3f:57:8b:02:7b:
                    34:47:4b:eb:ec:e6:59:b2:3b:a1:66:c9:22:04:bd:
                    0d:ee:ef:ee:0d:99:e6:f1:17:fb:a1:fe:28:35:de:
                    c6:47:5b:54:39:30:fe:cf:f4:20:4c:64:71:1d:f0:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:1E:33:D1:35:BC:B0:FF:3D:24:DA:04:A2:6A:2D:39:63:7A:D7
            X509v3 Authority Key Identifier:
                keyid:34:25:81:8B:EC:F2:C7:2E:35:73:46:B2:E5:AE:F7:47:49:DC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3425818BECF2C72E357346B2E5AEF74749DCA81E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:86:64:29:c5:34:c1:91:76:26:84:52:27:95:34:f9:ef:
         ae:43:7d:43:ec:b6:68:5e:a2:0e:2a:ed:ae:a2:5c:cb:f5:95:
         e4:a8:49:63:b8:14:c2:7a:b6:e0:fc:d3:46:58:1b:68:91:4e:
         2a:73:7b:86:98:db:ce:25:6b:03:b1:77:51:74:30:1d:11:67:
         bf:9e:5f:1e:d5:88:88:91:d0:ec:72:99:e3:3b:97:4f:0c:29:
         54:43:4e:02:f2:4f:92:44:60:ca:20:86:1a:96:db:1b:26:42:
         8f:fe:64:b5:48:8f:32:98:05:f6:fa:bb:98:e7:6b:4d:c6:67:
         0a:84:bc:93:b0:e0:5b:17:49:28:9e:6c:69:fe:c4:81:00:f1:
         8d:d1:c7:d4:e2:11:0c:2b:97:65:ed:61:12:81:60:0c:4f:a2:
         41:35:da:cd:40:85:1e:b5:f2:96:c2:61:35:ee:cb:0f:f6:08:
         68:3b:13:d6:fd:bf:97:f0:1d:81:9b:a9:35:fa:dc:dc:a9:2b:
         75:22:b9:63:05:e8:69:fb:41:e0:02:84:ef:da:2e:00:6c:69:
         4b:ce:ec:5f:f4:0a:9e:39:98:e4:85:71:d4:7e:e3:83:ae:7b:
         b8:4f:0b:82:aa:b3:c8:37:fa:f3:bf:e8:27:fe:ab:e4:fb:4c:
         a5:f8:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----