Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft
File:                     9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft (raw, json)
Hash identifier:          zXBuueQx5g1yUlBd3O9LsbZmtuQTDEp7jWhVgCvKddg=
Subject key identifier:   87:D6:C2:77:1E:D9:AF:D3:BB:A1:14:FB:B2:27:00:B2:89:65:1E:8D
Authority key identifier: 9F:88:A9:66:AF:C6:F2:42:67:E4:0C:CF:D0:10:AD:7B:1E:D8:2C:46
Certificate issuer:       /CN=9F88A966AFC6F24267E40CCFD010AD7B1ED82C46
Certificate serial:       20E0F7F7679E27AE9F3AF9CF3E2A0036E12AE0B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft
Manifest number:          18
Signing time:             Fri 10 Mar 2023 21:44:19 +0000
Manifest this update:     Fri 10 Mar 2023 21:39:18 +0000
Manifest next update:     Sun 12 Mar 2023 00:58:18 +0000
Files and hashes:         1: 9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.crl (hash: 6ghjkwjgLF3EzaNPlDV/rvzqmuCPX25jpJPDMpjnuJE=)
                          2: 323830343a313033383a3a2f33322d313238203d3e20323633363235.roa (hash: qNL0qO70ww0y54Imf2vSYzO3Z1ChQaPlo57Nt/aOg1o=)
                          3: 3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa (hash: OFly0LM8BaSchqOxgooWUSduv1yAIoZ/5GXEfz19HVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e0:f7:f7:67:9e:27:ae:9f:3a:f9:cf:3e:2a:00:36:e1:2a:e0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F88A966AFC6F24267E40CCFD010AD7B1ED82C46
        Validity
            Not Before: Mar 10 21:39:18 2023 GMT
            Not After : Mar 12 00:58:18 2023 GMT
        Subject: CN=87D6C2771ED9AFD3BBA114FBB22700B289651E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:6e:a3:0d:5d:c4:1e:c1:68:92:b4:10:cb:
                    4f:94:b1:12:29:02:b5:b7:10:d5:1d:e8:8c:88:a5:
                    c9:43:63:89:26:a7:bb:25:16:3a:a2:b3:ed:04:2a:
                    8a:01:ed:6c:3c:1e:ee:2d:94:af:fc:d5:90:46:a9:
                    18:90:d2:81:19:1c:35:e2:2d:d9:ec:cf:0c:3d:d8:
                    13:82:3c:8e:79:d4:ab:d8:d1:7e:b0:04:3c:83:19:
                    d8:08:55:83:7e:83:d7:6a:e6:52:8a:f1:91:35:1a:
                    f1:ea:27:aa:1a:ce:cb:5c:df:12:7a:eb:03:7b:18:
                    25:ee:88:c9:6c:84:d0:85:0e:0f:15:2f:3e:75:47:
                    1c:45:b6:7e:db:8b:b6:9a:3b:db:2a:d8:bd:22:ae:
                    53:bc:cc:ae:01:96:2e:c5:79:64:f3:19:d1:4a:72:
                    b2:76:b4:63:62:72:0e:2b:3f:2a:b4:8e:bb:14:70:
                    b7:44:1f:54:fb:4e:4c:f2:95:cd:d3:0c:37:10:8b:
                    bd:5b:87:69:db:9e:d0:2f:64:ef:3a:cb:e5:b9:e4:
                    ec:9c:27:fc:d5:09:2e:1d:27:c8:13:57:ec:08:d0:
                    b2:bd:15:1c:e5:22:89:00:a8:d7:8f:9d:c9:3f:ab:
                    71:d3:3f:c4:8f:c5:04:35:10:27:eb:8a:04:a0:46:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:C2:77:1E:D9:AF:D3:BB:A1:14:FB:B2:27:00:B2:89:65:1E:8D
            X509v3 Authority Key Identifier:
                keyid:9F:88:A9:66:AF:C6:F2:42:67:E4:0C:CF:D0:10:AD:7B:1E:D8:2C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:af:7c:1d:47:0c:a2:0c:00:e7:4f:d6:7e:b7:64:1f:05:
         85:5f:a4:b4:a5:68:92:c9:bb:7a:0b:80:20:20:09:3d:ec:47:
         0d:b6:c8:85:58:60:18:69:26:5b:ad:ff:2a:95:bd:6e:9a:85:
         a7:ca:b1:e1:94:84:45:b0:15:07:5b:f9:f4:d1:60:d1:55:eb:
         0d:95:3f:76:f8:a0:b9:a2:38:d3:64:0e:ce:8e:c0:27:47:a8:
         3d:7a:27:cb:65:1c:a0:11:a5:01:c4:a2:b4:84:82:8a:f8:58:
         a1:d8:b4:4e:6b:1d:ff:be:49:20:de:af:5b:fc:51:53:66:dd:
         0d:82:a6:d5:65:42:1d:41:ac:8d:6f:df:a4:da:0a:a7:6b:46:
         73:9f:a1:c0:24:71:5b:8c:07:ae:72:e6:af:dc:8f:df:da:05:
         8b:22:50:2b:49:d3:d3:df:9e:6b:3e:f1:74:1f:42:fc:3a:b8:
         13:20:55:b5:05:0d:c3:ba:c1:63:a2:13:b5:67:80:c8:de:56:
         ac:47:b8:19:88:2a:de:67:72:17:f7:9a:70:5c:b2:c9:da:cb:
         a4:d9:29:53:7b:95:aa:ab:3d:d4:23:fc:82:ab:60:0c:fe:a5:
         3a:82:cb:44:76:61:ec:2b:b3:a7:a8:a6:6e:17:92:12:93:38:
         7b:6a:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----