Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BLqQJuMQBTSPoSJvLsQXBLvm79pA33uaKaUfV5v3dZbd/0/3D644B0046D65A1325F94EAC08F167BE6B858929.mft
File:                     3D644B0046D65A1325F94EAC08F167BE6B858929.mft (raw, json)
Hash identifier:          5no9JBi+oJINJnILExhzYUrlrLalYaouGhz1UZWedmk=
Subject key identifier:   C6:F9:BA:09:AF:56:13:CB:3B:51:E8:F1:B9:E9:D8:0E:D1:CC:0C:7B
Authority key identifier: 3D:64:4B:00:46:D6:5A:13:25:F9:4E:AC:08:F1:67:BE:6B:85:89:29
Certificate issuer:       /CN=3D644B0046D65A1325F94EAC08F167BE6B858929
Certificate serial:       150A5A9BD763AAA8C77CDD42BE54250BF310BDBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D644B0046D65A1325F94EAC08F167BE6B858929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLqQJuMQBTSPoSJvLsQXBLvm79pA33uaKaUfV5v3dZbd/0/3D644B0046D65A1325F94EAC08F167BE6B858929.mft
Manifest number:          19
Signing time:             Fri 16 Dec 2022 20:51:27 +0000
Manifest this update:     Fri 16 Dec 2022 20:46:27 +0000
Manifest next update:     Sat 17 Dec 2022 23:37:27 +0000
Files and hashes:         1: 323830343a376533383a3a2f33322d3332203d3e20323639353631.roa (hash: IF4wXwaGG+JFLZiV0+DZ9lNc2U6OEi83H+RTKuMCQVo=)
                          2: 3D644B0046D65A1325F94EAC08F167BE6B858929.crl (hash: JUq/qJ689RDFciQqPpARoL+FMLSn8BDRXi8hWl6qe08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0a:5a:9b:d7:63:aa:a8:c7:7c:dd:42:be:54:25:0b:f3:10:bd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D644B0046D65A1325F94EAC08F167BE6B858929
        Validity
            Not Before: Dec 16 20:46:27 2022 GMT
            Not After : Dec 17 23:37:27 2022 GMT
        Subject: CN=C6F9BA09AF5613CB3B51E8F1B9E9D80ED1CC0C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:33:53:29:5b:53:d4:0c:08:48:dc:34:99:
                    60:23:95:ca:9f:65:ef:9e:f3:92:8b:27:72:b7:f4:
                    60:a7:8b:b3:fc:b2:b1:9d:fb:ab:71:e6:f8:e0:bd:
                    f3:cf:68:70:a3:26:c9:c7:7b:59:2f:ab:e1:fc:52:
                    30:f6:ee:81:c1:3d:79:34:6b:bc:13:2a:f1:60:6b:
                    f3:de:c8:f1:d6:34:03:4c:d5:5e:c0:bb:c6:37:8a:
                    20:52:fb:3a:de:7d:67:26:ce:4e:e6:28:bb:ae:78:
                    60:e3:ff:25:43:8e:24:50:e3:d8:57:ae:ba:3c:71:
                    f2:9b:16:a9:fa:09:44:8e:e9:ca:d4:b3:ed:50:d3:
                    30:e2:f0:c6:53:39:a5:c0:bd:03:52:f7:e9:83:a2:
                    8f:97:b8:cd:47:25:f4:c6:c8:71:44:d4:e8:62:4f:
                    72:1a:85:c6:9a:40:c3:74:3e:2c:23:d9:d5:c7:6e:
                    29:cb:67:ab:22:e8:a2:17:9a:f7:dd:82:5b:57:aa:
                    86:ab:60:6e:c8:db:80:09:45:8b:a5:0d:ca:c5:2f:
                    d4:92:8a:39:f9:7d:eb:9d:d6:38:5b:fd:0c:ba:40:
                    4f:44:fc:3d:56:f2:cc:27:ae:0d:66:8f:06:cf:3a:
                    23:0f:00:cb:90:48:17:a6:e3:43:58:74:3f:82:91:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:BA:09:AF:56:13:CB:3B:51:E8:F1:B9:E9:D8:0E:D1:CC:0C:7B
            X509v3 Authority Key Identifier:
                keyid:3D:64:4B:00:46:D6:5A:13:25:F9:4E:AC:08:F1:67:BE:6B:85:89:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLqQJuMQBTSPoSJvLsQXBLvm79pA33uaKaUfV5v3dZbd/0/3D644B0046D65A1325F94EAC08F167BE6B858929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D644B0046D65A1325F94EAC08F167BE6B858929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLqQJuMQBTSPoSJvLsQXBLvm79pA33uaKaUfV5v3dZbd/0/3D644B0046D65A1325F94EAC08F167BE6B858929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:de:fa:3f:e8:55:5f:eb:e7:a0:2a:73:3b:4c:88:e0:a4:51:
         14:4a:01:a9:67:9a:56:16:54:df:a0:7c:b8:e0:17:b6:37:d1:
         6a:d5:e1:b2:58:7d:a9:1a:b1:08:96:5b:fa:6a:f4:f2:cf:e2:
         5a:3b:1f:93:b8:a3:49:a2:f7:0c:0f:a0:ed:a4:e6:10:3d:1b:
         a5:ac:fd:8d:4e:d6:2c:4c:60:aa:4b:18:d8:fa:8f:d9:86:97:
         e7:1e:62:27:52:75:37:b6:24:41:d7:30:84:07:c6:da:80:6a:
         82:6f:94:cb:fa:f9:79:56:fa:6d:74:37:78:2d:9b:08:88:92:
         43:4f:20:4e:3a:78:3d:68:77:97:e8:51:d5:28:f5:69:0c:ef:
         1b:4e:2d:6d:84:7f:b4:83:ec:fa:07:88:b1:b8:71:76:06:fd:
         e1:21:13:53:80:ce:5a:e3:5c:82:02:59:9a:35:ee:c6:18:0c:
         4b:73:8c:4b:95:6b:ef:0e:33:75:35:5b:67:37:7d:94:cd:34:
         62:f8:a7:35:78:9e:b1:7b:ef:86:1d:b9:00:bb:2d:c3:a8:50:
         a9:d1:ed:ff:13:5b:15:87:df:62:93:26:df:93:b4:7f:ed:33:
         64:cf:c2:4d:da:36:1f:c9:41:e4:75:0d:e5:25:b9:7f:46:18:
         ee:9f:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----