Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/1B3A964413219463C34525D56529E57A0C9DBB1C.mft
File:                     1B3A964413219463C34525D56529E57A0C9DBB1C.mft (raw, json)
Hash identifier:          zA/Gc3hpxm4LuY4DBjViOm3t4rzaAwcPyhpC89H2P5M=
Subject key identifier:   04:42:02:1F:47:B1:4C:14:B0:D1:8C:75:57:7E:BB:DA:20:F7:E8:E2
Authority key identifier: 1B:3A:96:44:13:21:94:63:C3:45:25:D5:65:29:E5:7A:0C:9D:BB:1C
Certificate issuer:       /CN=1B3A964413219463C34525D56529E57A0C9DBB1C
Certificate serial:       3CCA029279D4659C92CCD9A359E6B9F6E001C88C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B3A964413219463C34525D56529E57A0C9DBB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/1B3A964413219463C34525D56529E57A0C9DBB1C.mft
Manifest number:          01DB
Signing time:             Sat 13 May 2023 18:26:01 +0000
Manifest this update:     Sat 13 May 2023 18:21:01 +0000
Manifest next update:     Sun 14 May 2023 22:13:01 +0000
Files and hashes:         1: 3138362e3230392e3138342e302f32312d3234203d3e203533303234.roa (hash: pxSGQLPNVpHsGiF/obFm18TYZy5wv873WOOlo569UpI=)
                          2: 1B3A964413219463C34525D56529E57A0C9DBB1C.crl (hash: hjvGXwDd89qzJTvMLgI1RSjoncnxRrsjVeAGLqxp3bY=)
                          3: 323830343a6464343a3a2f33322d3431203d3e203533303234.roa (hash: +10zoieilZb9YGQqjbzDeubQ+6j8Hy7SJfdkpScDMLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ca:02:92:79:d4:65:9c:92:cc:d9:a3:59:e6:b9:f6:e0:01:c8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3A964413219463C34525D56529E57A0C9DBB1C
        Validity
            Not Before: May 13 18:21:01 2023 GMT
            Not After : May 14 22:13:01 2023 GMT
        Subject: CN=0442021F47B14C14B0D18C75577EBBDA20F7E8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:4d:d7:b8:4f:8d:af:d6:eb:db:53:c8:42:
                    c2:34:8c:ba:57:39:41:4b:3d:2d:39:48:43:7a:2a:
                    c4:44:57:7d:89:2e:31:55:82:3e:19:8b:b9:43:68:
                    c3:b9:fc:fc:e5:a6:df:23:f1:ab:cb:63:a2:a8:3f:
                    65:dc:48:5b:3f:ec:9e:a7:f0:0e:13:f7:84:4c:a1:
                    d6:0b:ab:f4:65:94:b8:bb:26:11:9f:55:c5:8e:56:
                    91:82:d1:41:94:e2:46:e2:db:4f:5a:25:1d:bb:8d:
                    5e:d5:86:ac:ed:ec:dd:9b:c4:c2:eb:65:b1:f3:2a:
                    16:64:f0:79:de:73:a7:73:85:e4:d4:0b:b2:c9:2b:
                    6f:9e:5e:e7:26:04:76:fe:c6:9c:e0:b1:ff:0d:9b:
                    f6:aa:95:51:a0:55:9b:d3:92:98:34:e8:4a:6e:d9:
                    59:48:1f:12:ed:86:f3:d1:5b:a7:fe:ce:67:40:60:
                    ab:db:17:83:92:2c:fd:f6:7f:40:98:c9:f5:15:ac:
                    d5:ca:f7:36:a2:52:c8:e0:2c:5c:7c:6f:36:52:c8:
                    da:ca:b9:f9:89:77:71:e9:e0:de:85:59:65:51:c8:
                    e5:13:69:45:55:65:c8:d9:52:9f:3b:79:10:8d:36:
                    3e:a3:54:8a:b2:ae:85:ff:c9:f2:90:04:5e:b8:d3:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:42:02:1F:47:B1:4C:14:B0:D1:8C:75:57:7E:BB:DA:20:F7:E8:E2
            X509v3 Authority Key Identifier:
                keyid:1B:3A:96:44:13:21:94:63:C3:45:25:D5:65:29:E5:7A:0C:9D:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/1B3A964413219463C34525D56529E57A0C9DBB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B3A964413219463C34525D56529E57A0C9DBB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/1B3A964413219463C34525D56529E57A0C9DBB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:be:64:2c:0c:7b:14:ca:b0:17:72:85:af:03:f1:a2:09:a9:
         df:a5:55:92:34:d8:75:b3:dc:2d:36:d2:3e:5d:fd:74:fe:65:
         6d:12:0b:17:f7:49:fd:8c:29:21:43:9b:8d:a6:30:35:eb:59:
         bd:0c:d1:d7:14:f2:55:80:4a:8c:96:db:30:75:1d:06:7d:da:
         f5:c0:80:4c:37:b6:44:c9:ff:68:05:cb:1b:0d:ba:b0:43:05:
         af:01:28:9f:37:ba:46:96:47:b0:a7:0f:5a:1c:78:a4:03:4b:
         e0:69:de:5a:bc:62:e1:16:c1:4d:7b:a0:d0:b2:84:0b:a8:82:
         1f:2c:b7:fa:a9:01:69:99:82:05:2b:ca:83:82:2d:dc:42:1a:
         47:92:04:14:c0:f9:7a:d3:05:fa:fc:5d:e1:58:21:89:2a:9f:
         f0:97:74:2e:35:43:10:5a:4d:42:38:f2:91:86:a8:dc:d4:46:
         21:60:e3:4d:d0:4f:0d:62:ac:a5:a5:43:34:8d:87:7c:7c:91:
         53:1d:09:b7:ad:b2:e0:bf:0b:b4:53:49:41:98:cd:0f:66:cf:
         60:5c:40:79:c3:b9:c1:d2:bd:be:8a:b9:20:8c:e4:51:69:11:
         99:be:27:3c:78:26:92:ee:db:71:0b:56:bf:2a:5c:3d:ae:5d:
         a9:94:93:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----