Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.mft
File:                     2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.mft (raw, json)
Hash identifier:          3/u27UW3XtmHTejkrQ1tR1Z6s6KFtjYr5j6eBZMHNeo=
Subject key identifier:   35:52:60:CD:43:B2:10:08:A3:96:CE:62:52:1A:C9:3A:DF:41:9F:FA
Authority key identifier: 2C:3E:A1:00:C3:2B:09:DB:56:8F:55:69:8A:9B:FD:38:A0:7A:CD:FB
Certificate issuer:       /CN=2C3EA100C32B09DB568F55698A9BFD38A07ACDFB
Certificate serial:       2C23D9EFBCB113BD34A3306850AE01A98456A012
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.mft
Manifest number:          1E
Signing time:             Wed 09 Nov 2022 05:57:31 +0000
Manifest this update:     Wed 09 Nov 2022 05:52:31 +0000
Manifest next update:     Thu 10 Nov 2022 07:45:31 +0000
Files and hashes:         1: 323830343a356261343a3a2f33322d3336203d3e20323638383630.roa (hash: QwjJ79pkQCmeBwFVnAYpuu13+scD5skP9jYCHU3UxOA=)
                          2: 2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.crl (hash: NzF8uKz5Iix+GeQukB8exVYmNeuNwY0CZJ5hQ/x0RqI=)
                          3: 34352e3137332e38342e302f32322d3234203d3e20323638383630.roa (hash: HZFeMnDQ6IQgZN96rwTPWL5PENW3pxezOl0Ze+Cq0LM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:d9:ef:bc:b1:13:bd:34:a3:30:68:50:ae:01:a9:84:56:a0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C3EA100C32B09DB568F55698A9BFD38A07ACDFB
        Validity
            Not Before: Nov  9 05:52:31 2022 GMT
            Not After : Nov 10 07:45:31 2022 GMT
        Subject: CN=355260CD43B21008A396CE62521AC93ADF419FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:5a:67:3c:9a:8c:02:30:57:4d:0f:b0:d1:
                    13:9d:85:90:be:a6:ce:96:82:17:8f:cb:36:c6:24:
                    dd:29:8a:9d:69:ac:71:9f:5c:39:e1:08:3d:a9:58:
                    b1:ca:2e:2a:7a:7c:0a:1c:73:7c:03:81:46:58:d3:
                    2e:f6:92:35:07:b6:23:8d:87:06:1b:e4:2d:f3:ab:
                    e2:6b:c8:6c:d0:72:89:61:16:d5:60:cf:0a:38:89:
                    be:7a:42:ca:53:29:6a:fe:4a:39:84:5d:9e:93:9f:
                    ed:ce:a3:bf:69:19:26:e5:d4:9e:ea:56:c8:2e:65:
                    41:5b:8b:d4:41:91:be:17:e7:5c:59:a4:17:9f:0b:
                    e6:c5:54:a2:89:58:99:00:03:52:77:e3:57:56:27:
                    fa:8b:71:8c:58:e7:25:22:f2:54:fc:8c:7d:44:90:
                    f4:9e:10:f7:8e:77:8f:99:2a:54:16:dc:55:f6:5f:
                    f3:9d:aa:ee:71:0c:1e:b4:57:b3:a6:a2:04:e0:bd:
                    7d:7b:e3:1e:33:fa:5f:ea:f3:9d:cf:3b:72:94:0a:
                    22:f3:f8:8d:8a:42:c7:da:96:4f:7f:5d:9e:66:44:
                    d6:f9:7f:1d:e9:92:09:93:7a:c3:e6:b8:d8:fa:bc:
                    a1:84:d1:ad:b9:0f:b1:d8:10:ec:b1:ab:7d:e2:f8:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:52:60:CD:43:B2:10:08:A3:96:CE:62:52:1A:C9:3A:DF:41:9F:FA
            X509v3 Authority Key Identifier:
                keyid:2C:3E:A1:00:C3:2B:09:DB:56:8F:55:69:8A:9B:FD:38:A0:7A:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/2C3EA100C32B09DB568F55698A9BFD38A07ACDFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:09:2b:10:ca:d9:91:b8:1b:71:8d:f1:16:2d:97:b4:31:e6:
         a0:1f:84:6d:42:73:03:4d:61:1d:64:25:cd:33:5d:58:5e:7c:
         6e:64:d9:cf:aa:15:e1:4c:f1:0b:34:a7:75:7e:21:db:21:ab:
         14:e7:3b:ad:5d:48:4b:9c:cc:e5:ba:78:04:82:83:8e:68:30:
         94:20:b0:e2:d1:eb:a1:58:9e:0b:a8:4c:6a:63:7a:fa:b4:ba:
         55:14:91:58:cf:33:1c:c2:91:4d:0e:19:f4:3b:df:fd:c9:27:
         d6:b8:3c:44:d4:93:8c:7c:8b:1e:d7:52:1d:77:28:3a:1f:4b:
         49:b5:fa:58:eb:87:b3:87:a4:3b:19:07:be:e5:32:be:e3:6d:
         29:ea:6c:07:80:74:0a:4e:a3:53:8c:48:4d:31:d3:a3:47:18:
         30:48:85:e0:05:9f:d7:97:8b:80:c0:1f:77:7c:a2:a8:e6:39:
         41:63:64:bd:cd:6c:20:1a:00:80:58:ec:cb:a3:5a:fd:0a:3a:
         5d:f1:1d:58:6e:22:fe:75:91:7c:6b:5f:82:57:25:3a:01:6b:
         2c:b0:51:b5:87:ec:9d:af:c5:28:e0:9f:cb:01:5f:34:8f:91:
         e8:88:42:f1:41:96:c3:7e:93:b0:d5:66:31:96:ea:10:19:d0:
         78:84:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----