Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/82D3306B319D51ADD7435A945BC56225FA543628.mft
File:                     82D3306B319D51ADD7435A945BC56225FA543628.mft (raw, json)
Hash identifier:          W8+PkcUDUVG9BVLTFZs6A0LTfBbMRTZzOj5MGoove0o=
Subject key identifier:   AA:8A:21:CD:05:73:49:23:24:6A:34:87:BC:2A:2A:48:4B:DE:07:DA
Authority key identifier: 82:D3:30:6B:31:9D:51:AD:D7:43:5A:94:5B:C5:62:25:FA:54:36:28
Certificate issuer:       /CN=82D3306B319D51ADD7435A945BC56225FA543628
Certificate serial:       5C2C262D87FC81BAC27B30867A3AD00D59DF0956
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82D3306B319D51ADD7435A945BC56225FA543628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/82D3306B319D51ADD7435A945BC56225FA543628.mft
Manifest number:          01D3
Signing time:             Wed 20 Jul 2022 12:34:48 +0000
Manifest this update:     Wed 20 Jul 2022 12:29:48 +0000
Manifest next update:     Thu 21 Jul 2022 15:49:48 +0000
Files and hashes:         1: 34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (hash: 3SBeoHMc/vaaK1BC67EDYVafS8QRko+F7HSmEiDcSkA=)
                          2: 82D3306B319D51ADD7435A945BC56225FA543628.crl (hash: t2HpsUJglFrGZvWMVQ1HZUFx2kAyTnInwIZMeNNoTps=)
                          3: 323830343a356565343a3a2f33322d3438203d3e20323639303633.roa (hash: DoCByefsVK//IkdEgo6QmS+LbNlJq77smdipFzS+rCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2c:26:2d:87:fc:81:ba:c2:7b:30:86:7a:3a:d0:0d:59:df:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82D3306B319D51ADD7435A945BC56225FA543628
        Validity
            Not Before: Jul 20 12:29:48 2022 GMT
            Not After : Jul 21 15:49:48 2022 GMT
        Subject: CN=AA8A21CD05734923246A3487BC2A2A484BDE07DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:69:71:81:a7:90:37:6e:23:61:e2:3e:1a:
                    eb:8d:e9:bb:dd:57:b2:4b:49:60:02:fa:2a:3b:8b:
                    6d:ee:63:e1:12:c5:2c:05:50:52:9d:af:75:c6:bd:
                    30:c9:99:57:ca:89:90:c0:35:32:63:6f:b6:f9:94:
                    64:80:3d:ce:a0:34:4a:34:28:d0:d1:88:b7:e7:91:
                    8e:7d:98:c1:8f:3e:61:57:df:2b:2c:6d:c4:58:61:
                    38:8c:9d:29:93:ed:e3:cc:37:88:0d:50:a4:44:e9:
                    fc:f9:cf:7a:bc:f9:0a:bf:5a:21:af:01:db:5d:ff:
                    e7:84:ac:4d:05:f8:8c:de:a4:67:1b:24:39:98:98:
                    83:42:6b:42:10:67:5e:0b:ad:02:20:0d:a3:c9:2a:
                    60:57:89:fd:de:1f:ea:b4:ec:88:2d:03:68:9a:d6:
                    5a:75:43:3a:e0:ff:c7:0a:51:1e:fa:1a:db:e1:5c:
                    f9:9f:4d:11:07:4b:58:a1:3a:5c:5c:43:51:32:59:
                    52:a1:87:a6:1e:37:79:f3:05:b8:20:46:dc:c1:10:
                    f9:ba:99:07:b7:40:d2:b0:28:29:26:03:ec:bc:47:
                    cc:bd:1b:22:31:67:4d:b1:1a:9a:29:af:75:fe:34:
                    56:c7:b3:76:a2:a2:41:65:92:d7:5b:98:c7:90:d3:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:21:CD:05:73:49:23:24:6A:34:87:BC:2A:2A:48:4B:DE:07:DA
            X509v3 Authority Key Identifier:
                keyid:82:D3:30:6B:31:9D:51:AD:D7:43:5A:94:5B:C5:62:25:FA:54:36:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/82D3306B319D51ADD7435A945BC56225FA543628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82D3306B319D51ADD7435A945BC56225FA543628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/82D3306B319D51ADD7435A945BC56225FA543628.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:ad:0a:da:25:9c:6d:d2:9b:82:17:5e:8f:1f:d3:2d:6a:
         41:ce:7b:b8:d8:a8:36:d4:94:a4:f3:d6:c0:9f:2b:59:93:31:
         b7:db:7f:55:b2:40:f0:7f:eb:68:38:dd:04:49:a9:91:dc:30:
         60:6d:fb:28:f0:74:41:c0:9d:2e:60:b6:d3:c8:d0:e1:6a:8b:
         29:40:fb:6c:79:3a:55:65:a9:b7:5a:c6:1e:6b:91:d1:ed:06:
         c1:27:fa:4b:a5:1d:8e:56:25:66:d7:1c:da:d5:c1:29:f9:64:
         15:17:0e:64:cc:ec:de:91:21:d5:09:26:5c:0f:cd:d3:8e:e7:
         68:04:60:f9:5b:1c:5d:3d:96:f8:e6:59:c1:62:0f:21:5d:f2:
         bf:0c:1d:50:87:4f:27:b8:1c:80:1a:85:8a:04:6f:ea:11:b6:
         81:5e:5d:f5:3b:8f:81:65:fa:ea:04:0a:74:8f:d8:f9:55:40:
         1a:0c:e2:80:2d:15:d5:7d:ab:13:4d:f3:ec:5a:a9:92:15:60:
         6b:25:6f:06:37:6a:33:c5:fc:64:66:2b:a1:af:92:0a:ff:e1:
         ba:c8:4d:bb:24:38:a5:47:f1:f4:9b:39:fb:fa:64:57:41:da:
         dd:d0:d8:8a:55:95:be:84:04:b8:91:30:f0:28:60:63:0e:5a:
         7f:e1:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----