Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.mft
File:                     CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.mft (raw, json)
Hash identifier:          ahUqVjGs2VVYwYWoYi7lbj30zEh8fXhSAh65kaYOXoU=
Subject key identifier:   3F:7E:BE:65:EF:9A:0C:EC:87:9E:BF:C6:49:44:3B:0F:12:A9:82:14
Authority key identifier: CC:6E:70:A6:C0:EF:F3:DC:2B:52:7B:42:72:2E:C3:84:7F:1A:C3:2D
Certificate issuer:       /CN=CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D
Certificate serial:       5684462FAF239AF4DC7BA5E4FF1CE6B612D55B83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.mft
Manifest number:          19
Signing time:             Fri 15 Jul 2022 13:26:19 +0000
Manifest this update:     Fri 15 Jul 2022 13:21:19 +0000
Manifest next update:     Sat 16 Jul 2022 15:18:19 +0000
Files and hashes:         1: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: F/RkI23X4pt16zj+80+zBi6lotbChwDhoWhw99MLmlY=)
                          2: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: udnCnjPRISBhp8vA061TSYbfa0Ki/P+nu2H/4TSZ+OY=)
                          3: CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.crl (hash: 1E1CpqbGt9Bk/BtTqGCa7MDrz2h8QnmHd6bFUPbiFsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:46:2f:af:23:9a:f4:dc:7b:a5:e4:ff:1c:e6:b6:12:d5:5b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D
        Validity
            Not Before: Jul 15 13:21:19 2022 GMT
            Not After : Jul 16 15:18:19 2022 GMT
        Subject: CN=3F7EBE65EF9A0CEC879EBFC649443B0F12A98214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:4e:71:78:2f:bf:84:06:67:6c:13:89:bf:
                    70:ac:5d:a9:22:02:a7:30:37:9a:04:d3:27:da:d4:
                    02:92:74:15:eb:e3:41:eb:74:59:ba:86:79:ab:29:
                    f7:ab:e7:4c:97:ef:58:0d:ce:7f:da:ca:a7:56:af:
                    8f:51:52:55:9f:e7:05:b7:10:54:6b:cc:0a:ff:e4:
                    1d:af:f3:d7:c3:1f:9a:33:a5:71:5f:72:3c:aa:23:
                    90:93:13:8a:dc:1d:1b:48:63:33:98:1f:b1:47:96:
                    fc:e8:d0:9b:74:bb:97:c4:cf:22:a8:eb:84:dd:0c:
                    2a:48:60:25:1d:12:53:a3:5c:13:9f:3e:d1:d1:7e:
                    3d:38:7a:93:b8:00:94:d0:3b:7b:67:c0:09:96:94:
                    d1:67:b5:52:c0:b8:aa:e6:a2:5f:ff:14:58:fe:ff:
                    f1:24:3a:d1:f8:a5:d1:ad:70:74:c7:c4:a8:50:75:
                    8f:fb:ab:3e:41:07:9a:84:ae:71:0c:d1:e3:8f:b8:
                    9a:db:28:ca:82:60:2c:32:b6:df:37:54:4e:78:3c:
                    cc:6a:d6:46:92:05:ae:30:1a:0d:a1:6d:8e:98:be:
                    a1:2f:36:ad:89:ca:e2:e1:0f:be:a3:1c:f0:81:b3:
                    ea:46:69:85:d7:ab:b2:fe:f1:58:fb:d0:f0:f8:98:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:BE:65:EF:9A:0C:EC:87:9E:BF:C6:49:44:3B:0F:12:A9:82:14
            X509v3 Authority Key Identifier:
                keyid:CC:6E:70:A6:C0:EF:F3:DC:2B:52:7B:42:72:2E:C3:84:7F:1A:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/CC6E70A6C0EFF3DC2B527B42722EC3847F1AC32D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d2:89:3c:99:7b:48:ce:94:1c:25:49:a7:c8:34:73:04:6f:
         71:70:95:35:f1:2f:68:72:d4:db:34:f4:dd:11:b2:37:60:06:
         45:6f:aa:2a:68:04:7c:18:6f:b3:1d:84:24:45:73:27:d9:2e:
         47:0f:00:14:5d:a8:5f:0b:c1:ed:2a:34:39:75:6b:9f:de:dc:
         0d:34:58:e5:16:85:58:9f:1d:79:5b:39:4e:1f:28:da:fd:35:
         ac:f6:23:5e:5e:0c:fc:85:d5:2b:93:b6:52:c5:d9:14:68:c4:
         b7:2a:2d:b9:e7:db:c8:2a:21:b0:76:22:1f:a1:dc:67:89:a1:
         60:bc:4c:16:00:00:d8:96:13:9c:de:17:63:1d:da:36:1c:ec:
         7f:08:31:72:83:d4:00:e5:f2:5e:28:98:ca:08:16:9a:d1:b2:
         51:c7:c3:1f:23:d3:13:35:3a:13:25:e7:34:fe:f0:ab:70:e8:
         56:5c:1a:ae:17:30:e1:08:0a:a4:b3:50:90:dc:bd:b8:4a:19:
         8e:9b:b0:d3:36:95:ab:99:59:bc:e3:e5:ba:11:10:48:af:ea:
         5a:a8:bd:0f:f6:92:72:66:14:6f:85:36:df:b0:72:60:53:43:
         3e:79:54:29:1b:2d:5f:aa:07:54:b0:8d:e9:c2:91:da:e2:e0:
         92:b7:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----