Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/C407C18FB53D3177A9437F307D6BF0D38290D808.mft
File:                     C407C18FB53D3177A9437F307D6BF0D38290D808.mft (raw, json)
Hash identifier:          nT+g81Z3jsvKOWsASQvTr61h18fEAJp7jB62Hk7lAIs=
Subject key identifier:   50:36:80:B2:92:E9:D5:C1:BF:16:90:30:1D:15:61:F7:A9:66:FC:F0
Authority key identifier: C4:07:C1:8F:B5:3D:31:77:A9:43:7F:30:7D:6B:F0:D3:82:90:D8:08
Certificate issuer:       /CN=C407C18FB53D3177A9437F307D6BF0D38290D808
Certificate serial:       11FDDD1ADFCD256DC3D8A68F7C8023723D4152E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C407C18FB53D3177A9437F307D6BF0D38290D808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/C407C18FB53D3177A9437F307D6BF0D38290D808.mft
Manifest number:          0165
Signing time:             Sun 12 Mar 2023 19:04:07 +0000
Manifest this update:     Sun 12 Mar 2023 18:59:07 +0000
Manifest next update:     Mon 13 Mar 2023 20:23:07 +0000
Files and hashes:         1: 323830343a353036303a3a2f33322d3334203d3e20323638333835.roa (hash: BSK5FboD7TCyq63RPwq2uugFOx+2YdMzUjC7dgxGLCU=)
                          2: C407C18FB53D3177A9437F307D6BF0D38290D808.crl (hash: Qv42R0r9VJNNgw+/2bggbWrXL8wchrnsLsO9D0lH0NU=)
                          3: 34352e3233392e3138302e302f32322d3234203d3e20323638333835.roa (hash: dModNZ1WMB+8KEzhXvqhkjtLuZ9QtSHwhpyJRgLyfnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:dd:1a:df:cd:25:6d:c3:d8:a6:8f:7c:80:23:72:3d:41:52:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C407C18FB53D3177A9437F307D6BF0D38290D808
        Validity
            Not Before: Mar 12 18:59:07 2023 GMT
            Not After : Mar 13 20:23:07 2023 GMT
        Subject: CN=503680B292E9D5C1BF1690301D1561F7A966FCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:7b:cd:f7:8d:44:7f:e3:cb:a6:8a:2c:a2:
                    8d:68:b9:0e:87:38:44:eb:0c:9f:16:b3:e0:fa:c9:
                    f5:fa:b2:6f:7f:2b:54:d7:09:3f:c4:3e:5e:44:4d:
                    4b:05:00:81:cd:42:75:48:87:1e:66:b7:e6:84:01:
                    df:20:4c:8a:da:6c:30:a7:77:e5:a8:01:05:36:92:
                    23:5b:a4:1d:05:d8:e7:1f:3a:5f:ad:27:83:0c:67:
                    7b:d7:ac:8c:39:a2:c1:d3:96:6d:fa:b9:0d:36:4d:
                    75:8a:d8:c8:ee:ca:d7:4d:2b:a7:01:a9:74:f1:bb:
                    05:3e:c9:0c:dc:3b:98:7b:a3:d6:0f:f4:8c:9c:ce:
                    fe:10:47:f6:f9:d4:d8:4e:fe:d9:ac:70:86:65:14:
                    95:e9:bc:bd:49:0a:e5:87:87:2d:2f:f2:bb:b4:a4:
                    93:b4:ef:d6:3c:ed:57:d9:bf:a7:7f:9e:bf:61:d6:
                    a0:24:35:aa:9c:5d:19:86:ee:53:c3:23:77:69:13:
                    8a:b0:3b:9d:d7:b0:21:be:46:38:56:88:33:f3:1c:
                    4e:40:d6:67:f7:fa:6c:b9:b6:d1:ce:6b:2e:ca:8f:
                    0a:c5:f2:bd:ee:42:cb:b1:76:30:66:db:87:c5:c7:
                    36:c4:a4:43:94:a0:0c:4d:78:4c:e1:0b:f1:2c:43:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:80:B2:92:E9:D5:C1:BF:16:90:30:1D:15:61:F7:A9:66:FC:F0
            X509v3 Authority Key Identifier:
                keyid:C4:07:C1:8F:B5:3D:31:77:A9:43:7F:30:7D:6B:F0:D3:82:90:D8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/C407C18FB53D3177A9437F307D6BF0D38290D808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C407C18FB53D3177A9437F307D6BF0D38290D808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/C407C18FB53D3177A9437F307D6BF0D38290D808.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:66:47:bd:2c:5e:1d:c9:b7:87:c2:10:13:24:c5:78:2e:81:
         f7:a5:28:20:30:38:fd:6c:d5:fc:68:c4:2d:48:99:2e:10:4d:
         82:fa:b0:a2:3c:38:86:78:4c:e8:6b:83:2e:1f:99:1a:fe:9f:
         3f:83:fd:8b:02:13:ba:8b:74:ff:d5:1d:26:80:62:cb:e7:82:
         2b:a2:a5:76:72:d0:b5:fe:9a:25:33:42:8e:0f:f7:03:ca:7e:
         bf:22:f4:ec:82:af:75:45:39:41:86:17:bc:4b:a5:7d:b6:00:
         72:bf:26:d7:47:a7:7d:d4:fb:01:00:7d:bb:a0:ec:a8:28:ed:
         f9:80:b9:fb:9b:8e:be:44:9a:52:d8:2b:d2:64:f2:e0:bf:a1:
         0f:bd:b0:ee:e8:f6:9b:b5:59:4f:7c:68:0b:a9:26:9a:48:81:
         34:e3:e0:03:23:b8:ea:18:17:97:ce:1d:b8:78:a9:4b:c7:01:
         7b:45:ed:48:1a:08:22:55:ef:2e:5c:2a:f8:cb:f9:70:92:cd:
         4d:83:84:aa:0f:ee:d6:82:af:ff:bc:66:da:61:0b:80:67:c0:
         ba:86:8b:38:f8:35:e1:7f:dd:3d:f3:0f:08:97:71:a2:a0:a0:
         0b:c1:a0:b2:8c:7e:61:fb:bd:e2:0f:70:1e:ea:a5:0d:2d:d6:
         40:0b:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----