Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft
File:                     C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft (raw, json)
Hash identifier:          cxXAnFo12sZVNwHoBVp1wFw3Z30LG06Ht/YBuvGBMJI=
Subject key identifier:   7F:A1:F3:87:70:D9:05:82:68:AE:79:D1:7B:64:F6:51:F4:1F:26:21
Authority key identifier: C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF
Certificate issuer:       /CN=C3EFDFE04774A66D55883520CCE25EDF13AB92DF
Certificate serial:       73370652214008F340ACD6D94C95EF13F373ED32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft
Manifest number:          64
Signing time:             Tue 29 Nov 2022 11:55:31 +0000
Manifest this update:     Tue 29 Nov 2022 11:50:31 +0000
Manifest next update:     Wed 30 Nov 2022 15:18:31 +0000
Files and hashes:         1: 323830343a326535303a3a2f33322d3334203d3e20323635333338.roa (hash: 5t2WYbsogBLOUqAq9HTdw/UNILjB2DYNgoxDZy86jf0=)
                          2: C3EFDFE04774A66D55883520CCE25EDF13AB92DF.crl (hash: tlTek//CqgoH2OPfOHlJNtQ+E0ueaQ5x9qYcZTe0LrI=)
                          3: 3136382e3138312e3136382e302f32322d3234203d3e20323635333338.roa (hash: 8oEfggvpMQLn8JHtzpuJYczRSJwqOa3yOfLRe5fkJWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:37:06:52:21:40:08:f3:40:ac:d6:d9:4c:95:ef:13:f3:73:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EFDFE04774A66D55883520CCE25EDF13AB92DF
        Validity
            Not Before: Nov 29 11:50:31 2022 GMT
            Not After : Nov 30 15:18:31 2022 GMT
        Subject: CN=7FA1F38770D9058268AE79D17B64F651F41F2621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:11:51:43:19:a2:66:57:c7:cb:df:50:20:
                    88:6f:90:ab:f5:c1:a7:a6:fd:e8:31:fa:32:1c:b0:
                    4b:c5:05:09:0a:bc:4b:5b:2c:bc:5a:d2:bc:66:d8:
                    8e:2c:64:41:7c:47:88:c6:ba:92:54:a4:9c:81:37:
                    a0:49:49:c9:af:47:8e:e0:c5:e9:af:e7:f1:33:a9:
                    d2:38:88:f8:0f:3f:e4:39:b5:ba:a7:b4:8b:03:2e:
                    33:19:05:02:ef:6b:16:b4:fa:32:8c:98:20:51:04:
                    ec:34:37:84:b1:ce:00:8d:90:ec:fd:89:c6:45:da:
                    3d:40:53:5f:20:c2:22:6f:d1:2e:b4:74:50:dd:7e:
                    65:23:ab:e9:69:84:2d:95:9e:39:26:e0:dc:55:b0:
                    1c:6d:c5:7b:ee:80:55:28:85:2c:bc:bf:7b:0c:35:
                    29:cd:34:c4:ed:81:21:b2:fb:94:56:6e:8f:c4:28:
                    e4:68:38:98:bf:be:e7:fd:9a:e0:8e:4f:6f:e7:4b:
                    84:aa:d6:20:12:9a:7f:b4:62:de:d5:4e:10:05:1b:
                    03:1e:01:d7:97:ab:34:6a:78:1b:af:23:21:65:93:
                    2e:81:a8:d1:31:f2:c1:b2:e7:f9:b0:a9:ac:d2:37:
                    48:00:59:d3:16:44:e9:2a:a7:40:ea:09:c6:a1:ad:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:F3:87:70:D9:05:82:68:AE:79:D1:7B:64:F6:51:F4:1F:26:21
            X509v3 Authority Key Identifier:
                keyid:C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ec:e9:3c:29:b8:02:83:af:e8:3b:15:2d:ec:6b:ca:a9:47:
         3b:f8:42:be:82:25:71:07:03:c4:da:20:ed:ec:ee:4c:1a:0f:
         0a:a8:5b:16:b8:56:77:86:52:d0:af:9f:ad:14:64:37:28:31:
         75:92:6f:f8:24:60:d4:2a:c1:cb:33:86:06:d5:6c:0c:a0:8a:
         2c:7e:71:30:6c:6f:cc:25:f0:eb:bb:a7:c9:03:93:73:9e:d5:
         84:a2:3e:bf:71:30:82:bc:8a:97:1e:38:c6:4c:6a:bd:b3:01:
         78:f0:00:5d:13:b1:e5:a3:8d:51:b0:3c:91:b6:ff:99:54:2b:
         ee:40:45:49:c8:47:c3:b4:0f:d8:f4:58:9e:54:e5:02:7a:44:
         d3:6c:a2:75:84:6d:ad:02:0b:ec:0f:dd:49:4f:91:78:9f:a4:
         77:ec:6d:dd:de:da:60:3c:6c:dc:15:bc:c7:a4:96:34:69:61:
         03:0c:1a:ac:35:06:e4:68:06:7c:58:98:86:05:73:f1:61:e2:
         4b:18:1e:d5:be:4c:31:70:89:9e:aa:96:07:05:ce:be:e3:4a:
         90:70:96:ec:44:a9:30:45:cc:01:09:57:3e:48:2e:ef:ba:80:
         cf:f2:11:51:3f:f4:2f:e0:60:f0:38:02:cc:79:bc:78:a2:6c:
         49:8e:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----