Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft
File:                     D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft (raw, json)
Hash identifier:          dGYA2ArbInvaGSfVdoDCZi7P2L/lfsij920F4brPEpM=
Subject key identifier:   F6:E7:42:A5:7E:97:B7:89:C8:5D:84:6C:4E:8B:21:07:4F:31:50:F8
Authority key identifier: D9:06:3E:FC:8F:AD:BB:6E:DE:40:B5:D4:A7:34:BB:93:8D:21:B7:7C
Certificate issuer:       /CN=D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C
Certificate serial:       3E61C7E1651E96132F7836213C0915CCD3C18CEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft
Manifest number:          1A
Signing time:             Mon 10 Apr 2023 03:38:08 +0000
Manifest this update:     Mon 10 Apr 2023 03:33:08 +0000
Manifest next update:     Tue 11 Apr 2023 03:38:08 +0000
Files and hashes:         1: 34352e352e3135362e302f32322d3332203d3e20323636313134.roa (hash: kE9s5PM0QBmy3FqdTLl16ZICSMfSI11MdgN/trc1hGI=)
                          2: 323830343a336164633a3a2f33322d313238203d3e20323636313134.roa (hash: GCX6TztM0UXu8xjXovdmhIlaWcpmo+RVmIKdHP74l3A=)
                          3: D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.crl (hash: BC0FbT44VeHqV8NsuKDT++c/fVMF4Dc2H7q5vD6zirI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:c7:e1:65:1e:96:13:2f:78:36:21:3c:09:15:cc:d3:c1:8c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C
        Validity
            Not Before: Apr 10 03:33:08 2023 GMT
            Not After : Apr 11 03:38:08 2023 GMT
        Subject: CN=F6E742A57E97B789C85D846C4E8B21074F3150F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:fc:bc:44:53:0a:de:db:a9:8c:43:65:bb:
                    2f:f7:71:89:05:9c:0c:c2:0d:01:02:69:97:89:1d:
                    74:aa:f6:8f:46:b9:91:4a:05:c2:31:1c:78:df:b7:
                    26:10:c5:c1:1e:2c:f0:d9:41:7c:f4:04:33:1e:d5:
                    55:ef:77:5c:54:d3:ad:7e:d9:01:91:04:53:db:2b:
                    83:14:de:95:51:8f:93:a7:bf:0a:3d:95:33:2f:9f:
                    83:a0:42:98:2c:5b:e9:d5:1e:98:f9:11:c1:48:3f:
                    4b:1c:38:98:fb:82:22:89:0d:c8:b7:cc:7e:6e:75:
                    01:db:7c:92:33:01:47:03:a6:37:b8:b1:a8:1c:24:
                    5d:1b:87:31:0e:6d:7c:fe:07:11:77:1e:b5:d1:d4:
                    ca:74:bd:8f:21:bb:c7:94:2e:d9:85:b4:28:c7:5f:
                    22:8b:70:57:a7:61:1f:28:91:fc:bb:a0:01:1e:c8:
                    82:7c:a5:0d:f1:d7:14:fe:9b:c3:5f:34:24:b8:da:
                    9e:b6:b1:57:38:e4:50:64:e6:5d:9a:a4:fd:fc:e9:
                    59:cb:34:52:32:3b:9f:ca:71:4c:66:8c:7f:fa:ab:
                    d8:d4:a0:f3:0c:50:0c:51:e4:14:a0:d3:b5:e3:5e:
                    26:98:d0:6c:f1:2f:ea:57:61:51:b0:64:6d:73:0a:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:42:A5:7E:97:B7:89:C8:5D:84:6C:4E:8B:21:07:4F:31:50:F8
            X509v3 Authority Key Identifier:
                keyid:D9:06:3E:FC:8F:AD:BB:6E:DE:40:B5:D4:A7:34:BB:93:8D:21:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:f7:d6:1d:1f:8a:a5:20:ed:8f:82:e7:16:d4:66:5b:10:
         ad:8f:68:2d:13:58:fb:6c:b4:d1:07:ed:91:e8:18:d8:4b:2a:
         3c:52:a7:3c:2a:e4:44:48:1f:29:91:4d:10:08:c0:b4:21:bd:
         05:9d:de:b8:3c:5f:14:a9:9e:b7:9d:1c:e0:66:8b:d2:f5:46:
         5b:64:dd:f0:b5:d1:fd:a2:27:35:98:c8:1b:cb:7a:64:20:0e:
         c0:eb:23:41:43:3c:32:e6:38:6a:c7:70:40:d8:14:de:3c:ed:
         29:05:8f:9d:87:0a:df:94:99:bc:86:f3:18:e1:6d:33:9a:dc:
         e4:6e:56:0e:1a:ca:dd:ee:d1:76:10:66:35:48:29:18:9f:49:
         90:c3:36:52:d9:36:46:69:87:85:bb:bb:43:c7:51:7e:10:df:
         c9:06:0a:a6:f2:33:e5:61:f2:22:58:16:dc:3a:72:a5:2f:10:
         1d:b4:7e:34:ab:db:34:78:2b:50:3c:dc:d1:5a:db:25:bc:95:
         e3:eb:75:c3:21:33:2b:21:ea:cc:fd:d3:db:70:f8:43:aa:4f:
         bc:64:a3:9f:ae:4e:82:33:14:0f:5d:f9:d2:0c:02:f7:01:fc:
         79:78:06:4c:52:26:15:da:07:54:17:3f:4a:9c:35:71:29:e0:
         69:94:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----