Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.mft
File:                     63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.mft (raw, json)
Hash identifier:          t2WRlj+EsjxFNC5rg9+wdsGhIxOHx3S0l532ilR5pIg=
Subject key identifier:   27:D0:1D:3B:4B:76:0A:BD:AA:06:A6:F7:53:A6:15:6B:2D:85:50:C7
Authority key identifier: 63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E
Certificate issuer:       /CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
Certificate serial:       329B9BA3A73BB2A2E9BCE4E61C89BCE1BD2D20AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.mft
Manifest number:          9F
Signing time:             Fri 21 Oct 2022 11:30:14 +0000
Manifest this update:     Fri 21 Oct 2022 11:25:14 +0000
Manifest next update:     Sat 22 Oct 2022 14:25:14 +0000
Files and hashes:         1: 63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.crl (hash: GwQBXkLiOAwUu4PMUSXs6VrbGszJgZc8xrVF2RY7/G8=)
                          2: 3230312e37312e31322e302f32322d3234203d3e20323730323834.roa (hash: ATdLzMAtOG8PzlA5/EWDuxvkG9rKwqRilcajTgwdwxw=)
                          3: 323830343a363961633a3a2f33322d3438203d3e20323730323834.roa (hash: 7Jcgb0slzDkCrHloI6cejKnjAPTcwhF1XENueGflMPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9b:9b:a3:a7:3b:b2:a2:e9:bc:e4:e6:1c:89:bc:e1:bd:2d:20:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E
        Validity
            Not Before: Oct 21 11:25:14 2022 GMT
            Not After : Oct 22 14:25:14 2022 GMT
        Subject: CN=27D01D3B4B760ABDAA06A6F753A6156B2D8550C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:02:d3:13:87:72:dd:d5:17:be:0a:d9:3e:
                    ce:1c:85:d6:b9:2d:29:90:ba:3b:47:43:04:f8:91:
                    9b:bf:0d:1a:b2:d2:86:31:24:0b:22:08:12:8c:3e:
                    c9:a6:60:10:cf:77:ed:a9:53:d1:f8:63:13:33:bc:
                    22:3a:dc:6b:97:ed:0c:c9:36:32:d3:a6:68:38:cd:
                    a1:d1:38:93:fb:0e:30:59:de:fe:d6:6b:bf:a6:ca:
                    e9:4c:37:e9:06:b6:9c:bf:cf:9b:1c:7b:d6:90:88:
                    06:98:ad:71:30:90:1e:4a:90:da:d2:db:4b:64:55:
                    90:52:dd:87:ea:1a:fb:e6:27:b4:9e:bb:76:8b:ba:
                    30:62:5b:c6:8b:91:22:ee:5b:4f:90:86:e6:3e:37:
                    60:b2:5e:fc:72:0b:64:5c:a4:36:af:9f:46:d7:6e:
                    d4:bd:76:23:2e:52:30:76:bd:bb:13:60:ec:3e:81:
                    1c:29:88:c6:58:d1:7d:ad:f2:9c:cf:d1:11:6b:a0:
                    d2:e8:f8:95:ec:4a:e9:ac:68:e2:4c:64:95:c8:4f:
                    95:5a:35:3e:39:ec:14:bc:3c:e2:5a:ba:ce:c7:32:
                    d7:86:2d:d4:78:72:ee:b4:e7:f9:ac:27:f2:a6:d4:
                    4b:79:d3:17:07:da:bf:34:a8:30:7e:3a:ac:9f:be:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:1D:3B:4B:76:0A:BD:AA:06:A6:F7:53:A6:15:6B:2D:85:50:C7
            X509v3 Authority Key Identifier:
                keyid:63:AC:10:C4:AA:74:CC:32:38:BC:10:B3:EB:A0:1B:8F:C1:16:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCRUvLvswSKz8s2qTwaoKMt88WS2DRMFWcYxB6iyRuGs/0/63AC10C4AA74CC3238BC10B3EBA01B8FC116DB0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:42:75:fd:0a:9a:ca:a5:0a:d0:32:60:6a:06:53:3d:ba:83:
         93:79:48:c1:af:78:49:91:63:af:f3:58:dc:e1:3b:99:e5:ae:
         b3:34:30:5d:d3:f1:42:bb:2b:55:15:5d:fa:4c:ec:05:8e:df:
         40:19:ca:7a:77:4b:a9:b4:50:11:11:43:6d:4a:80:fa:9c:6b:
         84:a4:f8:4a:b9:f1:25:c3:34:57:b2:d0:8b:98:74:d1:7e:22:
         9e:78:66:74:b7:98:88:48:5d:64:2c:5a:f1:25:14:06:63:22:
         f4:c0:74:d9:06:37:d5:4a:f7:98:2d:bd:78:2d:36:40:3c:68:
         3e:a2:1b:59:63:59:bb:82:6b:93:b7:81:c4:78:63:7c:d2:11:
         7f:4c:bc:f1:63:5a:49:54:49:a9:a2:d4:ee:fa:3e:b7:83:21:
         7a:8a:cf:8f:44:32:d9:45:0f:be:bb:a0:06:87:af:8c:1c:80:
         86:92:3e:f6:be:df:d3:eb:0b:4f:50:0e:0d:0c:05:ee:5c:26:
         9f:eb:d8:33:ab:f4:3f:64:22:39:af:f6:cc:eb:b3:2b:43:29:
         ae:94:90:25:b4:22:ba:ff:79:8e:85:92:3a:68:e3:79:3f:81:
         b2:a3:8c:3f:f1:c5:36:cb:2c:08:64:4b:c1:a3:2f:c6:f1:f4:
         3f:cd:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----