Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.mft
File:                     16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.mft (raw, json)
Hash identifier:          psGpT4rdL+/MlXY4qqeR24/eaK/2GgC0AjP2BPpZDog=
Subject key identifier:   78:4D:05:C5:E2:83:FD:CF:24:47:26:AD:13:ED:8D:64:F4:1D:9B:15
Authority key identifier: 16:C9:EB:53:A3:8B:A1:61:53:3E:3B:07:40:CD:A0:F7:C9:F9:CF:6A
Certificate issuer:       /CN=16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A
Certificate serial:       53849D4AB2F04C18141D89FBE719E8539B2B7ED5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.mft
Manifest number:          BD
Signing time:             Tue 31 May 2022 13:54:02 +0000
Manifest this update:     Tue 31 May 2022 13:49:02 +0000
Manifest next update:     Wed 01 Jun 2022 17:34:02 +0000
Files and hashes:         1: 3137302e302e3130302e302f32322d3234203d3e20323634393637.roa (hash: s4XAJLnBRszNPHu1NMydEJjrH56OYsy+dtRBTAfJR84=)
                          2: 16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.crl (hash: q/9/3ScNSAmYqduY+6P1KgUVmvDCg0AaTSxrL0u10hI=)
                          3: 323830343a333061383a3a2f33322d3334203d3e20323634393637.roa (hash: PnYh4qIF7T9xROTsCfNnkWwIbLYwGK+844E6v4OKKMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:84:9d:4a:b2:f0:4c:18:14:1d:89:fb:e7:19:e8:53:9b:2b:7e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A
        Validity
            Not Before: May 31 13:49:02 2022 GMT
            Not After : Jun  1 17:34:02 2022 GMT
        Subject: CN=784D05C5E283FDCF244726AD13ED8D64F41D9B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:ab:90:5f:d0:93:01:8c:3d:bf:d8:3a:78:
                    f1:31:02:53:87:ab:50:f8:1e:2e:2c:61:79:c4:a7:
                    d3:50:49:b9:8b:c3:82:ba:ab:55:98:1c:ce:c4:ec:
                    0f:a5:1f:f2:7f:cc:49:fe:f9:99:f2:bb:98:a5:9c:
                    6b:fc:e4:11:09:08:3d:a6:c1:e1:fe:25:fb:e0:e4:
                    6a:97:66:fa:05:45:56:e0:06:67:44:56:19:64:cf:
                    cc:17:06:06:5a:2f:a9:43:75:3f:14:de:fc:8f:49:
                    76:79:88:a6:f2:26:b1:89:63:39:83:fc:8e:e1:b6:
                    3f:23:1d:28:53:6e:00:e0:30:4a:76:73:d6:a8:6b:
                    89:7c:59:4e:35:9d:b5:59:c7:6c:6c:ae:a7:1d:db:
                    bd:09:94:d3:25:84:b7:ec:b0:14:e9:1c:a9:5c:43:
                    56:f0:a2:62:5f:ea:63:9b:77:2e:c5:c4:7d:a5:f7:
                    70:05:ae:a6:2e:41:d1:c3:12:32:ef:c2:d5:79:5a:
                    b4:81:6b:e2:7c:c7:c1:3d:c7:e6:32:4e:d7:a6:8e:
                    44:b1:25:84:a5:86:1e:62:a9:8a:60:08:bc:2f:89:
                    db:8e:a8:24:f7:bd:12:b4:20:a7:77:ef:f0:a1:5e:
                    99:e1:6d:3e:71:6f:03:af:c7:9e:5f:f7:20:c7:f3:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:05:C5:E2:83:FD:CF:24:47:26:AD:13:ED:8D:64:F4:1D:9B:15
            X509v3 Authority Key Identifier:
                keyid:16:C9:EB:53:A3:8B:A1:61:53:3E:3B:07:40:CD:A0:F7:C9:F9:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/16C9EB53A38BA161533E3B0740CDA0F7C9F9CF6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:8c:65:95:ab:96:25:31:a2:0d:57:a1:2f:c1:24:61:2b:
         0c:a3:4e:13:4b:46:88:c1:9a:a0:6b:06:b0:e7:9c:f4:2c:49:
         d7:19:32:84:c0:f1:7e:73:48:bc:66:0e:c5:4c:ac:e4:b0:59:
         4f:22:ff:af:4d:00:97:cd:07:bf:d3:a7:ab:a2:d4:32:7c:75:
         6a:d5:28:43:51:69:da:80:5e:a6:ab:ac:7c:c8:d7:5d:9e:4b:
         76:ee:11:38:42:2a:85:df:af:f9:4e:f6:a5:0f:6b:b3:7e:ee:
         c7:03:d6:09:fe:88:d0:d0:5f:f3:3e:58:00:0a:88:c6:b6:75:
         67:d8:97:72:6e:d4:6b:ef:3a:14:db:1b:99:77:85:78:a6:19:
         20:db:22:75:c6:6b:0d:b9:11:ff:ac:ef:bd:77:82:82:c7:04:
         ed:75:5a:de:21:27:5b:08:ef:32:07:9a:7e:db:b6:f6:ce:eb:
         cb:33:2e:18:72:6c:c8:bb:87:ef:a8:ed:9a:73:28:49:7a:69:
         68:63:a0:86:3c:44:05:77:cf:27:4c:95:3e:69:b2:f8:23:38:
         06:fb:15:c4:fa:aa:82:7d:c0:09:83:0b:ec:6e:5e:50:a4:57:
         67:eb:d2:57:8c:01:0c:0c:74:39:49:6c:10:38:c6:5a:dc:84:
         c1:80:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----