Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.mft
File:                     231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.mft (raw, json)
Hash identifier:          8+Lmx6wZcJTfXMOS6lm0Hc+j0+qx6tr2RDP+bjCRe0E=
Subject key identifier:   99:79:80:9C:37:3B:D9:AA:08:3F:F0:46:4C:0D:CD:C5:58:E3:9A:94
Authority key identifier: 23:1A:AC:EA:C3:0B:D0:A1:9B:A1:48:E2:F6:A4:BC:EC:40:BB:99:EF
Certificate issuer:       /CN=231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF
Certificate serial:       2F4EC5BECECFFFB5ACDC2F815A78EA5CE2B3BBB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.mft
Manifest number:          04
Signing time:             Sun 10 Apr 2022 12:20:00 +0000
Manifest this update:     Sun 10 Apr 2022 12:15:00 +0000
Manifest next update:     Mon 11 Apr 2022 12:33:00 +0000
Files and hashes:         1: 3138372e302e31362e302f32302d3234203d3e20323632373531.roa (hash: jkflCLC9F1LQZ7Kwdh7DYhfUoscqCyhTI+GiP/icPqM=)
                          2: 231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.crl (hash: 1NNAse9ux70RaUPvcOkSOq9zZpPTaUN12iVJd5iizTg=)
                          3: 3138392e38392e34382e302f32302d3234203d3e20323632373531.roa (hash: TJjQ58ROKCPOXtHojCX6m4EXHumWmX1UNB6jgrAuRr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4e:c5:be:ce:cf:ff:b5:ac:dc:2f:81:5a:78:ea:5c:e2:b3:bb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF
        Validity
            Not Before: Apr 10 12:15:00 2022 GMT
            Not After : Apr 11 12:33:00 2022 GMT
        Subject: CN=9979809C373BD9AA083FF0464C0DCDC558E39A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:8e:21:19:7d:3e:4d:c8:5c:b8:4f:cb:39:
                    38:a2:88:13:60:76:65:f0:99:9a:a2:89:01:0b:8e:
                    15:60:f8:c1:3a:c1:f7:09:a0:af:0a:c7:d0:14:58:
                    3f:cb:22:42:e9:df:30:42:7e:da:41:3e:e5:6f:60:
                    5a:54:5c:12:95:6e:ef:bd:da:c9:be:e3:6d:9d:da:
                    66:3c:b9:b6:ee:ed:fc:2f:90:e9:73:6b:41:84:36:
                    4e:b1:ec:7e:6a:77:45:40:0a:e2:3e:81:a2:43:4e:
                    cc:72:46:50:dd:0b:ca:54:dc:e4:01:65:6c:43:1d:
                    a7:2a:31:34:ca:c4:ea:11:30:d8:ec:b6:45:46:86:
                    dd:7a:77:2a:8c:9c:c9:4d:9f:81:f3:6d:dd:2d:23:
                    20:5c:77:73:10:7a:1f:21:43:32:1a:ac:3a:1a:c1:
                    67:98:79:04:8e:6c:8a:20:cb:c0:f9:b3:e1:16:94:
                    fa:59:aa:1e:9f:06:2d:4f:df:cd:65:2d:75:ad:32:
                    d4:49:74:26:5a:5e:05:7d:7e:88:58:88:22:18:63:
                    ed:cf:c5:14:3a:cc:09:ba:8e:6d:f3:8d:b4:7b:94:
                    a3:30:bd:93:70:c1:ba:58:0b:bb:30:1b:cd:36:67:
                    22:af:c9:f9:30:37:7a:25:c0:cd:27:d8:bb:d7:7d:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:80:9C:37:3B:D9:AA:08:3F:F0:46:4C:0D:CD:C5:58:E3:9A:94
            X509v3 Authority Key Identifier:
                keyid:23:1A:AC:EA:C3:0B:D0:A1:9B:A1:48:E2:F6:A4:BC:EC:40:BB:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/231AACEAC30BD0A19BA148E2F6A4BCEC40BB99EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:92:f0:3f:49:74:d7:44:dc:55:71:be:35:28:ba:1b:fc:70:
         65:24:f0:92:20:a2:79:8e:ec:0f:af:d2:b5:0c:45:03:8d:79:
         0c:34:08:09:8d:30:9a:f0:b6:bf:4f:ac:00:1b:b0:9e:d5:0f:
         97:b4:cc:e8:e8:0a:ab:45:0f:a2:bc:f5:8e:96:15:29:78:37:
         37:47:85:51:f7:32:07:3c:bf:a5:0f:7f:d6:cd:b5:3c:28:41:
         14:23:fd:17:38:14:7e:70:8d:44:6d:9a:25:8a:12:12:55:7b:
         1c:0d:56:68:78:63:22:5d:b9:bb:0c:2a:03:98:fc:03:ee:8d:
         69:ca:d6:9d:ba:9c:37:f5:fc:95:6a:e0:52:7f:5a:af:7a:33:
         63:c9:68:92:f9:47:a6:10:37:0d:53:e9:3d:9d:78:4f:ce:9d:
         00:28:c9:17:28:1d:ce:15:f0:ae:15:72:02:e3:1c:cb:18:82:
         1f:b1:b1:b8:90:c5:c3:ce:53:fa:46:ed:5a:06:9c:df:3a:d5:
         11:a2:25:86:ea:e7:57:c4:19:61:d2:27:17:9f:04:fb:80:23:
         b0:00:d6:ad:b3:3a:a2:0e:e6:a5:a1:ac:80:1a:c6:31:74:97:
         f5:77:25:26:da:7d:2c:84:74:10:d0:b0:df:4e:63:c7:ef:d7:
         38:4b:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----