Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft
File:                     BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft (raw, json)
Hash identifier:          wWoDNAwciu4ORZoEaxv/z/PX9zDHA2ay3PnSSwWS9cA=
Subject key identifier:   B7:35:6B:69:C2:7A:99:BE:6A:1B:33:A9:DA:AA:65:11:7E:A4:79:D7
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       206C750A2EBDB4705F856860024B027A1C77DA30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft
Manifest number:          F1
Signing time:             Wed 04 Oct 2023 22:40:07 +0000
Manifest this update:     Wed 04 Oct 2023 22:35:07 +0000
Manifest next update:     Thu 05 Oct 2023 22:57:07 +0000
Files and hashes:         1: 323830343a376436303a3a2f33322d3336203d3e20323731353537.roa (hash: 3vNxGbbaXrHAiyK0S5kWP3lyjCs3qRLGIR/CMeWYmNo=)
                          2: 323830343a376436303a3a2f33322d3336203d3e203230343733.roa (hash: DVRsh6SdBM8xyPoe64jgfu4Citi5JdU+g0WgbWCH1mw=)
                          3: 3138312e3233332e3138382e302f32322d3234203d3e20323731353537.roa (hash: vyXDvpfPAmq5SPbrG7tesZPE8sIB05dVPLHqE9sc7XE=)
                          4: BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl (hash: 2ugxqHjkJU+X+kFwOFD8iL1+VaCKGqfO7cNmzT3aluI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:75:0a:2e:bd:b4:70:5f:85:68:60:02:4b:02:7a:1c:77:da:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: Oct  4 22:35:07 2023 GMT
            Not After : Oct  5 22:57:07 2023 GMT
        Subject: CN=B7356B69C27A99BE6A1B33A9DAAA65117EA479D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:b4:b5:1f:e7:6a:4b:bf:b1:f2:a6:69:9b:
                    78:69:6c:33:51:31:a5:28:19:72:85:53:f6:b1:1a:
                    88:69:99:39:43:1f:f6:df:f5:a6:25:27:b7:5e:a4:
                    c9:d7:06:b8:d2:62:3c:cf:f7:a5:38:52:8b:62:43:
                    db:59:29:f4:12:f5:18:3b:f3:c0:07:88:17:1a:62:
                    47:ec:dd:af:29:fc:f4:73:e6:e3:4c:4d:a0:54:55:
                    cc:5d:1e:82:f8:0c:53:10:57:4b:bf:99:40:30:0e:
                    f1:29:90:78:3f:40:04:d8:45:2a:3c:83:99:86:e6:
                    70:96:a0:66:45:e5:7b:30:ba:ae:26:a7:1c:de:d9:
                    b7:79:86:a7:db:5b:1d:d9:74:c9:be:b6:b5:8a:03:
                    b2:52:d8:60:e2:66:2a:9e:48:67:f7:ed:8c:4a:09:
                    70:84:79:84:2f:3c:33:3f:22:41:ed:91:67:cf:f8:
                    f1:d7:93:80:06:89:a9:79:ea:02:fa:04:8b:5f:37:
                    9f:e9:25:9f:e1:42:96:8b:50:b2:8c:8f:11:11:51:
                    c8:82:91:59:25:92:e7:39:fb:da:18:78:50:4a:d5:
                    b5:cc:8e:25:ae:46:75:db:1d:18:f6:4b:fe:7c:71:
                    ec:87:f3:13:cd:2e:92:88:fc:a9:3f:97:37:49:04:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:35:6B:69:C2:7A:99:BE:6A:1B:33:A9:DA:AA:65:11:7E:A4:79:D7
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:62:7e:4b:24:9e:88:c6:f3:b3:94:3c:9a:bb:46:0e:c9:
         7f:f1:74:95:c1:2f:ac:03:98:6e:63:ef:bd:e3:cd:01:6b:9c:
         a6:6c:42:b6:37:29:54:fc:df:9a:7b:d2:05:92:74:f7:3e:7c:
         e9:70:52:54:d7:99:c8:8d:22:f1:2a:79:84:62:ad:7d:d2:02:
         e0:3c:8a:f2:42:78:8d:18:0c:52:da:51:e8:c5:3b:0d:7f:93:
         5e:7f:77:05:3f:dd:5e:2a:e6:00:bc:4a:31:0f:09:a8:10:bc:
         b7:48:e8:fa:b5:20:7b:3c:41:bd:3a:30:75:18:b8:f3:aa:c9:
         b1:b7:4c:72:ec:bc:ce:6d:30:77:54:7c:c4:a9:6a:ba:a4:9c:
         85:43:23:30:80:23:6b:59:60:9d:07:a6:06:39:9e:c2:94:fb:
         d3:c2:19:d4:87:ff:1a:57:c7:d9:92:ce:4a:ac:58:04:b3:34:
         2d:f5:54:d6:49:f5:fc:d4:cc:a5:7a:78:cf:76:ac:1e:be:83:
         22:21:9b:77:00:00:a2:78:85:ba:58:c3:6b:b6:a4:ea:2c:f2:
         ff:fb:19:11:53:0d:db:c0:fd:f0:ab:7e:88:5f:3e:0b:3d:a2:
         b1:b5:1a:99:f3:75:d6:85:c3:67:62:8c:c4:70:0c:01:1f:f1:
         42:5f:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----