Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft
File:                     DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft (raw, json)
Hash identifier:          lqqRnENNKhbzEhP4XnR+vUTRJN0/jhzjA8GycEi6xC0=
Subject key identifier:   69:9B:B7:34:CA:02:C9:A3:95:78:77:60:D0:6D:2B:B0:D9:3C:29:67
Authority key identifier: DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04
Certificate issuer:       /CN=DF6E46A76D5C40E31D62DB9C29DCB0F24E150504
Certificate serial:       2700E1DC63D3084CC9AB2C1B6453EC0505D573E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft
Manifest number:          5A
Signing time:             Mon 10 Jul 2023 22:31:38 +0000
Manifest this update:     Mon 10 Jul 2023 22:26:38 +0000
Manifest next update:     Wed 12 Jul 2023 01:00:38 +0000
Files and hashes:         1: DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.crl (hash: djmxWCq9tqS7Na42haJ3KrMzp8i3ZUA788dK1HrwMHg=)
                          2: 3230302e37332e3231362e302f32322d3234203d3e20323730343833.roa (hash: DoBbYdNkEPgq9r1h8CK+fIHSfN1OpLGuDS0KBGsH3+w=)
                          3: 323830343a366361383a3a2f33322d3332203d3e20323730343833.roa (hash: pgfZDBMaFjMKPKgtERxYrJfRlZ57oRDC2uFnWkwMX9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:00:e1:dc:63:d3:08:4c:c9:ab:2c:1b:64:53:ec:05:05:d5:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6E46A76D5C40E31D62DB9C29DCB0F24E150504
        Validity
            Not Before: Jul 10 22:26:38 2023 GMT
            Not After : Jul 12 01:00:38 2023 GMT
        Subject: CN=699BB734CA02C9A395787760D06D2BB0D93C2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:ad:e3:2f:59:41:78:2e:af:38:6c:80:8c:
                    bd:4c:39:be:a0:53:fa:f3:e7:8c:cc:63:1e:3b:ae:
                    12:64:44:c6:18:f5:c9:86:69:22:ba:1a:ab:97:e1:
                    fa:27:ef:d7:9b:26:23:aa:40:4d:1d:64:9d:6e:ce:
                    2c:d5:57:42:7a:f2:33:6e:e8:bf:23:60:82:ad:8b:
                    28:bb:93:a0:3e:13:c7:40:c6:42:41:39:9c:74:8d:
                    51:a3:70:e4:00:41:ba:6b:5b:82:42:d8:db:8b:6e:
                    27:66:17:04:fd:20:86:a1:b8:8a:4e:7a:a7:5f:1a:
                    17:6b:25:91:84:35:a6:67:8a:f5:07:dd:97:d2:42:
                    86:6c:2c:72:73:07:ab:28:d4:f9:37:3b:f1:32:c3:
                    34:ac:e1:65:87:27:9d:b4:c5:4b:39:eb:5c:fb:16:
                    a0:6c:63:e2:f8:48:b0:02:fa:dc:9a:f3:ce:72:ed:
                    15:38:cb:9a:85:a8:6b:e9:ff:8c:16:3d:ce:8e:4f:
                    26:82:86:7d:74:b6:98:46:4f:d7:5b:99:20:dc:0f:
                    6c:4d:dd:9d:a3:58:1c:1d:ad:ed:a2:39:96:c5:52:
                    1e:04:8a:3a:23:06:67:cf:2d:7b:49:4d:1b:1c:8a:
                    5b:db:a6:d5:3a:47:ec:e0:1e:51:c7:87:7e:7b:c2:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:B7:34:CA:02:C9:A3:95:78:77:60:D0:6D:2B:B0:D9:3C:29:67
            X509v3 Authority Key Identifier:
                keyid:DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:fb:1f:6a:d8:5d:be:a9:e5:37:b5:f1:4b:3b:f4:a1:4d:
         ca:a4:df:4a:ad:33:8c:e0:c7:6d:67:33:38:8d:30:5b:50:b5:
         71:39:12:74:a7:8a:36:58:96:63:9e:7f:4b:8d:10:e8:f2:c2:
         84:e0:fd:d1:2f:9b:67:b4:84:66:fb:53:0a:58:d8:d7:d5:79:
         4c:b6:65:e5:82:1e:e1:bf:ef:7b:47:3e:ef:fc:33:23:aa:22:
         b4:8a:ca:d0:4b:73:fe:44:e6:80:4d:c2:05:4d:bd:4d:45:0a:
         03:e9:5d:9b:05:cf:ee:ed:4d:30:51:ae:98:32:14:ff:60:b0:
         2f:16:31:30:16:d5:f0:3f:96:51:da:80:6f:67:29:3c:47:3e:
         7f:23:59:17:b6:10:ca:dc:24:a9:e2:84:2d:37:c5:fe:e0:81:
         49:01:1f:8a:c2:45:a5:10:8b:91:c4:9b:7f:44:df:ce:3f:91:
         ae:37:53:ab:34:40:06:69:29:34:ca:bc:3f:08:8b:3b:41:28:
         3a:38:d6:4f:ee:45:30:91:f9:6f:2f:58:35:de:e5:35:d4:c6:
         72:4a:a3:1e:36:28:12:dc:8d:fc:ee:db:93:60:dd:ac:17:cb:
         c5:a2:a9:93:11:21:dd:88:b6:ab:ac:af:ff:46:c7:d6:23:fc:
         91:07:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----