Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.mft
File:                     3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.mft (raw, json)
Hash identifier:          sMHODtY/Y8FZ7qDpQRwo9XEbPrSu8Akpwk0pRa3a5pw=
Subject key identifier:   FC:C2:77:AC:CD:7E:66:1A:F3:68:9D:09:A2:0F:C6:6B:6C:71:EE:C1
Authority key identifier: 38:00:EF:B7:23:10:B2:3D:BE:E3:2A:FF:5D:0C:B6:D1:22:A5:96:DE
Certificate issuer:       /CN=3800EFB72310B23DBEE32AFF5D0CB6D122A596DE
Certificate serial:       2A2375A9A4AFA75D5BE3517047AFDAD90D7DE410
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.mft
Manifest number:          25
Signing time:             Tue 23 Aug 2022 08:35:10 +0000
Manifest this update:     Tue 23 Aug 2022 08:30:10 +0000
Manifest next update:     Wed 24 Aug 2022 11:42:10 +0000
Files and hashes:         1: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (hash: wKAQt+s0jwFEUGw2R7v90cgnjagM2wmvh3ZX2iZJa2Y=)
                          2: 3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.crl (hash: FHaTgZySCQp/6R+fjne/b7lTcdUw5bvATQd2KJ3M82g=)
                          3: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: IpCqjXm3oXq1jYoOulRcJpreQpipRHdlr472vkVDIdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:23:75:a9:a4:af:a7:5d:5b:e3:51:70:47:af:da:d9:0d:7d:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3800EFB72310B23DBEE32AFF5D0CB6D122A596DE
        Validity
            Not Before: Aug 23 08:30:10 2022 GMT
            Not After : Aug 24 11:42:10 2022 GMT
        Subject: CN=FCC277ACCD7E661AF3689D09A20FC66B6C71EEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:26:9f:33:95:b0:dd:49:9a:c8:7d:3a:e0:
                    75:b6:ac:34:99:13:f3:1e:67:e4:28:fc:b9:88:b9:
                    5b:71:f3:a5:bc:8f:a5:5c:53:50:7f:f3:af:78:17:
                    24:6f:d9:bb:18:0f:73:6c:11:5b:e5:39:f7:31:b2:
                    93:25:5a:e4:9e:40:de:c0:7f:4c:7e:4f:4e:3f:da:
                    82:0a:95:05:4d:30:91:21:b8:0e:cc:d2:06:31:9b:
                    99:7e:ed:1f:4b:b3:d9:cc:6e:fa:fd:28:bc:cc:8e:
                    8b:39:73:e0:3f:eb:3a:cf:c1:3d:4b:38:34:da:51:
                    37:1b:0e:9d:49:82:30:e1:bf:65:22:2b:ae:10:ef:
                    27:37:a6:d5:6b:95:c0:38:c4:a8:d8:06:79:d5:aa:
                    66:98:db:f3:ad:33:f8:11:98:5e:24:7f:1f:ee:df:
                    59:9e:1d:65:11:d4:db:01:64:59:37:81:de:e7:b4:
                    9e:13:65:6a:33:c1:c4:03:41:c3:c8:62:f9:3c:40:
                    a6:aa:f5:a4:e5:57:6b:80:26:5f:fa:d3:d5:02:13:
                    b5:a3:23:6e:f8:03:44:d6:27:7e:5a:1f:25:fb:b8:
                    fc:fa:b9:de:30:92:99:b7:82:15:40:40:75:a9:fc:
                    f1:92:42:12:30:97:ef:e4:6d:31:0d:69:54:a3:30:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C2:77:AC:CD:7E:66:1A:F3:68:9D:09:A2:0F:C6:6B:6C:71:EE:C1
            X509v3 Authority Key Identifier:
                keyid:38:00:EF:B7:23:10:B2:3D:BE:E3:2A:FF:5D:0C:B6:D1:22:A5:96:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/3800EFB72310B23DBEE32AFF5D0CB6D122A596DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:57:4a:dc:36:e4:1a:3d:6c:4e:77:3b:53:59:de:32:75:
         cd:bf:29:21:a6:46:54:fa:d8:7f:8a:61:08:e1:fa:61:41:7e:
         f8:55:b3:18:80:1b:b2:10:23:df:fb:3f:12:b7:5c:49:f4:9a:
         33:93:1d:e5:e4:6e:d6:c4:62:01:3f:e9:63:e3:a7:b6:37:b2:
         42:15:b0:7e:ce:48:ad:d2:8f:d5:58:a5:c5:f0:00:63:2e:ea:
         6d:fe:5e:d4:6a:4f:76:10:cf:dc:95:60:db:fa:a6:2b:5e:fd:
         1f:4b:8c:7c:76:1e:e6:e7:66:8e:6f:9a:07:54:68:be:a8:c6:
         a5:cd:9f:39:1e:69:ab:f3:96:0e:19:a8:0a:6f:f8:23:c8:40:
         42:66:b1:94:e1:48:15:39:6a:23:25:ae:37:08:7e:7d:03:9b:
         ca:7c:5c:b0:76:1a:78:b4:7c:ce:bc:eb:85:d3:ba:bf:3e:4f:
         7d:10:bd:b4:07:3a:2c:67:19:78:d1:ed:1a:82:89:4c:68:42:
         f4:fa:fa:8e:4e:2b:0b:53:94:87:ba:47:7a:d8:13:25:2a:c8:
         cc:64:62:d7:d1:f7:b1:2b:90:2e:4a:fd:1b:99:08:c0:17:74:
         b5:ca:55:1c:f2:52:01:25:4f:b6:2e:38:40:e4:4f:91:a7:0a:
         25:3c:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----