Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.mft
File:                     9FF7AE1DE3A484ED489D36F4B5315338134CB42F.mft (raw, json)
Hash identifier:          c+Sn9DHtjZUDTkWsMc/EUWocnYrZ++qgLKoRpjxQHEg=
Subject key identifier:   1D:5D:F2:75:9E:C6:56:1B:BE:54:7E:FE:A5:C1:4C:BB:FA:59:16:C1
Authority key identifier: 9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F
Certificate issuer:       /CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
Certificate serial:       4F9BAB3E8C03B0A109C3458403DF1135230B8F29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.mft
Manifest number:          81
Signing time:             Sun 24 Apr 2022 11:10:01 +0000
Manifest this update:     Sun 24 Apr 2022 11:05:01 +0000
Manifest next update:     Mon 25 Apr 2022 11:17:01 +0000
Files and hashes:         1: 9FF7AE1DE3A484ED489D36F4B5315338134CB42F.crl (hash: WfJpeOHiLFd5ASpfky2XB0nIlFz+rUdB58c8En8oAck=)
                          2: 34352e3138352e3137322e302f32322d3232203d3e20323639333931.roa (hash: nyKspRAF+qf0kCoHGW2hRT5nOrBpyOlOZqHsy9fYDkU=)
                          3: 323830343a363365383a3a2f33322d3332203d3e20323639333931.roa (hash: Smeqs8kn+2yNxMCJmx1Sin4iQOCYgwF+ojX5NuKY7OQ=)
                          4: 323830343a363365383a383030303a3a2f33332d3333203d3e20323639333931.roa (hash: OVLoznFe3a+GTWaGGU5gi0x72pGYCpREmqvoLcsccEE=)
                          5: 323830343a363365383a3a2f33332d3333203d3e20323639333931.roa (hash: 7Eq0UWX3Sf3VXhpmAtB/+EJAuQGdaG86iv100GtRL2E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9b:ab:3e:8c:03:b0:a1:09:c3:45:84:03:df:11:35:23:0b:8f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
        Validity
            Not Before: Apr 24 11:05:01 2022 GMT
            Not After : Apr 25 11:17:01 2022 GMT
        Subject: CN=1D5DF2759EC6561BBE547EFEA5C14CBBFA5916C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:c1:5f:cb:e9:0d:75:58:c6:f6:c4:d1:09:
                    9b:2e:8e:74:13:f1:ef:fb:c8:33:39:16:8b:e8:e2:
                    e2:4a:67:2d:64:89:1d:d9:6d:86:71:44:68:c0:77:
                    4f:03:8e:03:46:47:ac:9f:51:01:24:ba:09:12:39:
                    d3:85:b6:ae:c8:8f:2c:96:b9:7a:6a:20:1f:a6:31:
                    5f:ca:95:ca:10:b9:3b:9c:a6:ff:2e:96:56:ba:c8:
                    ce:be:da:34:9f:cd:23:66:90:bf:8d:eb:15:8a:da:
                    1a:1b:5e:39:7b:5d:6f:92:41:8b:4c:03:c7:b8:5f:
                    59:0a:34:18:80:34:7d:e3:e9:10:8f:93:c0:df:94:
                    04:44:1a:e5:c0:67:0d:f1:bd:15:8a:80:ee:53:97:
                    d7:e9:9f:74:5c:5e:d3:c7:47:df:c4:6b:b9:62:04:
                    b8:9d:34:1e:3e:e4:42:bd:06:e7:a0:06:b3:b9:5a:
                    55:9f:c8:c6:94:a8:f1:67:db:ed:18:93:a3:60:59:
                    f4:ef:ea:b5:b8:22:9b:56:85:f7:7e:e6:83:ea:8c:
                    2d:2d:10:7e:35:d6:ff:25:eb:ab:12:74:cd:ff:62:
                    69:87:67:fe:83:d2:f3:12:d1:14:c2:6e:ff:8b:2f:
                    3c:17:1b:6f:bf:2a:c0:50:42:9d:bf:a7:43:a6:75:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5D:F2:75:9E:C6:56:1B:BE:54:7E:FE:A5:C1:4C:BB:FA:59:16:C1
            X509v3 Authority Key Identifier:
                keyid:9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:69:42:c1:c2:25:d0:0c:70:0d:ae:26:39:d2:d1:3e:f1:
         ab:e6:2e:90:a1:42:a6:77:0c:0f:a0:37:ac:7f:1b:f6:19:04:
         31:be:8f:1f:cd:b9:c6:6e:73:17:6c:ed:50:37:5b:16:b4:24:
         37:84:25:98:97:41:11:8d:0b:3b:d8:e9:ae:22:3c:78:37:ad:
         6d:1c:f8:3c:75:6c:17:b1:5d:41:f9:a0:27:9f:ed:e8:b2:d7:
         33:99:ac:59:ba:94:22:8f:60:f0:4a:65:c1:b2:c6:54:3b:e2:
         c2:d5:31:81:63:cb:f0:65:a9:8a:1d:8a:37:84:0c:a5:68:e8:
         e5:08:a2:39:6f:76:8e:f5:fe:0c:a5:b1:0c:95:50:f8:23:f0:
         82:55:9c:4a:a2:6e:f3:b9:4f:18:c7:e7:bf:92:38:4b:17:78:
         4f:30:f4:2e:70:95:45:97:b8:f4:c6:d3:c7:07:98:8a:8e:97:
         64:cd:40:a7:68:45:b0:3d:59:90:45:ae:1e:9e:f3:e2:70:ab:
         8e:06:cc:92:22:80:53:4a:d8:34:26:36:0b:c3:66:ed:e9:59:
         c1:85:57:5d:a5:1f:00:9b:c2:94:51:53:c0:47:0e:41:cb:28:
         97:39:81:db:78:3b:22:7b:fb:9d:7c:41:11:97:22:f7:ee:0a:
         5d:14:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----