Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.mft
File:                     12A563E6CB281950568A88ACEA43BC4A417021A9.mft (raw, json)
Hash identifier:          Ve0d75Un4S+yohV/1i0+m8r+r88HiEPU3lOizYnsJ+4=
Subject key identifier:   AF:B7:AB:06:CD:98:42:2A:69:8A:DB:40:E9:70:01:B5:F5:9F:7E:51
Authority key identifier: 12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9
Certificate issuer:       /CN=12A563E6CB281950568A88ACEA43BC4A417021A9
Certificate serial:       1CE8A1164377358AB3358C4690B5B9D3EE069542
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.mft
Manifest number:          0177
Signing time:             Wed 19 Apr 2023 18:32:40 +0000
Manifest this update:     Wed 19 Apr 2023 18:27:40 +0000
Manifest next update:     Thu 20 Apr 2023 18:49:40 +0000
Files and hashes:         1: 3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (hash: jOngKAZqv3ub0/TTvbmFDLMTEccX8bYxc+a1A/3MrD0=)
                          2: 323830343a333061383a3a2f33322d3438203d3e20323634393637.roa (hash: 9/1Bwt7JtH0L3DaJuU1nb75uH5oe1Rfx+rh/TgSQPsE=)
                          3: 12A563E6CB281950568A88ACEA43BC4A417021A9.crl (hash: vcsyrLCbf/ub/xsUD4y3PwbS6hbCv2Non++Nv3NtTeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e8:a1:16:43:77:35:8a:b3:35:8c:46:90:b5:b9:d3:ee:06:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A563E6CB281950568A88ACEA43BC4A417021A9
        Validity
            Not Before: Apr 19 18:27:40 2023 GMT
            Not After : Apr 20 18:49:40 2023 GMT
        Subject: CN=AFB7AB06CD98422A698ADB40E97001B5F59F7E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:97:0e:2a:13:b7:a6:51:1a:22:7c:72:02:
                    13:f0:36:70:31:52:7f:54:fa:3a:59:26:47:de:05:
                    8a:9f:2e:7a:0b:75:e7:bb:3a:d4:69:f2:3d:91:a0:
                    c4:ec:d5:d7:93:d3:2b:fd:39:30:2e:f3:23:78:5c:
                    c2:f6:a8:39:26:77:c1:6b:ef:f5:81:7f:24:5e:db:
                    7c:b3:e3:50:f5:60:d8:8f:61:69:9f:71:9b:c4:36:
                    49:5a:28:99:e9:b6:fa:42:60:18:22:3d:cf:0b:88:
                    55:94:1b:cc:9f:23:61:8a:82:93:98:e6:4e:1d:ab:
                    73:69:92:d2:d2:cf:00:9a:8f:2c:53:25:47:e3:56:
                    5b:e1:9e:39:80:42:d5:73:05:61:9f:42:18:d8:d8:
                    9f:34:8d:f9:8b:56:28:01:82:f2:d2:01:11:f0:5e:
                    4d:50:8d:1c:f8:b2:a0:b3:b0:88:89:1a:08:51:f3:
                    fe:8e:01:5a:c2:6f:d8:0a:e6:64:b7:1b:a3:31:04:
                    7b:b9:15:09:a1:28:66:f5:5e:81:18:f8:b1:13:ef:
                    72:de:b2:eb:75:77:12:51:3d:01:76:3c:c2:ee:fd:
                    9a:1f:aa:c9:be:8c:fd:c2:5c:e1:80:f8:39:5b:c7:
                    45:09:8c:8b:3c:41:21:32:f9:fd:12:e4:8b:6a:5b:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:AB:06:CD:98:42:2A:69:8A:DB:40:E9:70:01:B5:F5:9F:7E:51
            X509v3 Authority Key Identifier:
                keyid:12:A5:63:E6:CB:28:19:50:56:8A:88:AC:EA:43:BC:4A:41:70:21:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12A563E6CB281950568A88ACEA43BC4A417021A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/12A563E6CB281950568A88ACEA43BC4A417021A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:21:8d:98:44:e7:66:ea:b7:33:46:ca:f1:9b:94:3a:e1:be:
         92:8a:25:e1:d7:62:fe:45:57:4f:3b:c7:51:78:4e:46:90:ee:
         66:bd:6c:da:aa:b0:bc:90:fb:91:ba:cd:4f:9d:a4:1b:45:8d:
         bc:60:90:56:f0:cd:9d:c6:98:72:59:e6:8b:bf:a5:2a:22:06:
         11:66:fd:c7:46:bc:5c:b6:57:54:91:59:2a:b1:56:0d:8b:01:
         8c:de:7f:4b:f4:ca:f4:51:cc:40:1f:a3:56:e9:71:f9:28:f2:
         8c:0c:a7:ee:13:c2:09:2f:bb:80:b4:86:9e:69:ea:58:09:83:
         c0:48:f4:10:52:8b:28:62:81:a6:0d:97:f9:10:45:46:77:a7:
         8a:eb:0e:c1:ea:08:d9:fa:45:8c:3a:be:79:2a:b0:04:50:fd:
         dc:7f:83:62:28:ac:37:fe:f7:f0:51:09:65:13:2b:f1:84:88:
         78:5a:8c:d6:83:8f:8c:37:d3:4b:f5:a4:31:f4:b7:7e:01:ce:
         7a:2c:90:47:bd:41:76:ed:f9:74:35:09:1c:b5:f6:41:c4:d0:
         56:65:22:d1:ff:bc:de:05:a2:c6:08:d2:00:0f:76:21:07:fc:
         76:49:57:7d:4d:62:ed:e7:6e:e4:80:df:be:2e:34:02:75:cd:
         b5:16:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----