Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft
File:                     0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft (raw, json)
Hash identifier:          +BiCRpvQoGAOpa9QfEdnL9u5mt9bb7IfYrI8C73XEKM=
Subject key identifier:   E9:24:2E:B8:CE:6C:AA:AC:FE:F1:25:96:9B:B7:DC:FB:88:AC:68:D5
Authority key identifier: 0C:3A:9A:A1:E2:E7:60:6C:C6:C7:E4:10:73:6F:D2:AF:CC:39:A0:23
Certificate issuer:       /CN=0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023
Certificate serial:       60C32AD1D828BF6E55DD7495671E08EDB604CA0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft
Manifest number:          E8
Signing time:             Mon 19 Dec 2022 12:39:46 +0000
Manifest this update:     Mon 19 Dec 2022 12:34:46 +0000
Manifest next update:     Tue 20 Dec 2022 13:03:46 +0000
Files and hashes:         1: 323830343a336530303a3a2f33322d3438203d3e203238313630.roa (hash: g0zS4oVbOO6qNk2LfBhSjDbrHcMuILgaWK0IO11K2qA=)
                          2: 0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.crl (hash: La30NWmECXW6Var2l06S5SceQH/0sbJQMGdZQGl5kZw=)
                          3: 3138372e36322e3134342e302f32302d3234203d3e203238313630.roa (hash: fBGIPGDPuw1ln3Zp4Pw7tJYproCTXlvmzVccVHYUTys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:2a:d1:d8:28:bf:6e:55:dd:74:95:67:1e:08:ed:b6:04:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023
        Validity
            Not Before: Dec 19 12:34:46 2022 GMT
            Not After : Dec 20 13:03:46 2022 GMT
        Subject: CN=E9242EB8CE6CAAACFEF125969BB7DCFB88AC68D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:48:5a:1d:e8:37:b3:28:ee:81:0c:0c:a5:
                    a9:17:d8:7c:92:c3:b6:df:cd:b7:4f:45:94:60:5d:
                    7a:41:7f:56:e3:54:1a:b6:a3:b0:32:f7:65:f1:d0:
                    45:7a:b5:40:04:55:c3:c9:3b:aa:b6:20:b4:e8:9a:
                    22:3a:57:82:b7:01:00:54:23:2c:a0:5d:a0:c9:34:
                    ea:ba:b5:bc:ee:f2:fc:bb:d1:fd:78:6f:90:6f:b3:
                    19:f5:f5:15:43:3b:16:fd:ed:f6:59:a6:a4:8f:00:
                    6d:b5:9a:03:f3:e6:29:35:de:86:08:9c:4d:77:e9:
                    4e:5f:65:8c:15:04:85:b6:94:73:30:e8:ea:3a:cd:
                    6f:55:93:f9:c3:31:79:e4:f5:61:e8:7a:1a:7e:8b:
                    f6:03:e4:e8:76:82:5d:61:46:9d:70:9b:3b:e7:9a:
                    e5:b2:39:52:33:8c:b7:48:95:94:a2:e6:af:ab:6d:
                    41:14:a5:04:bb:78:5e:8a:b1:e9:85:c0:ca:73:5b:
                    81:e2:3f:7a:6f:51:fd:a9:35:e8:c7:9a:4c:7e:5e:
                    fe:c9:5e:1e:f3:0c:ef:33:24:2a:34:0a:44:19:b8:
                    02:cc:31:f0:2d:b4:88:e6:87:86:d6:72:63:ff:64:
                    b4:26:b4:e4:e7:07:55:81:13:8c:c5:97:a4:4c:1b:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:2E:B8:CE:6C:AA:AC:FE:F1:25:96:9B:B7:DC:FB:88:AC:68:D5
            X509v3 Authority Key Identifier:
                keyid:0C:3A:9A:A1:E2:E7:60:6C:C6:C7:E4:10:73:6F:D2:AF:CC:39:A0:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:a4:d7:36:aa:64:37:87:7e:37:ca:c4:3e:57:35:00:03:
         ac:c3:c6:77:fa:55:ff:ae:a7:82:83:88:c6:b4:69:93:c0:8c:
         ae:bb:39:1d:a2:1a:a5:02:04:55:66:f0:11:8b:d2:a7:e0:57:
         32:4e:5b:f0:8c:2a:d3:ad:cc:12:de:4d:86:2f:c1:b0:c7:19:
         ca:ca:79:00:e8:44:6f:30:08:e3:e6:a0:08:3b:62:e1:41:d7:
         8b:e3:a6:5c:51:c1:f7:a3:99:8f:f6:5e:b6:ec:50:bb:b9:e0:
         24:2e:a3:4d:c5:c0:b0:53:67:b9:14:cc:fc:3e:ce:4f:ac:ce:
         c0:e8:07:94:a6:19:0d:97:d9:51:8b:55:9b:ba:dd:1e:e5:4c:
         32:19:53:1a:e8:84:2f:72:00:0e:f4:e1:fa:e0:e8:c0:16:91:
         c0:91:36:e0:fd:b8:86:2f:67:47:bd:c0:eb:22:4d:0c:c0:9b:
         ed:62:4d:91:25:e0:ca:07:07:29:4e:fb:65:6c:ab:c7:ed:6b:
         b1:71:e7:59:17:fa:54:3f:8a:5c:1e:77:94:ec:ad:7a:0f:2f:
         a0:e1:3c:18:cc:18:a8:fe:73:20:f6:6d:4e:9f:67:9f:0a:eb:
         c5:84:75:7b:dd:43:cd:a7:e5:56:73:97:5d:77:df:04:64:bb:
         42:00:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----