Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/381A2B13541B9F92718D080E6B70E1109077FBAD.mft
File:                     381A2B13541B9F92718D080E6B70E1109077FBAD.mft (raw, json)
Hash identifier:          4XiJT9eKVTF+lqO2I2SeKyO3UIFRV34OCPm1Yc46+5Q=
Subject key identifier:   46:04:2F:03:38:3F:2F:32:CD:32:FE:CD:57:F9:7C:0D:F0:98:16:59
Authority key identifier: 38:1A:2B:13:54:1B:9F:92:71:8D:08:0E:6B:70:E1:10:90:77:FB:AD
Certificate issuer:       /CN=381A2B13541B9F92718D080E6B70E1109077FBAD
Certificate serial:       797682A7AA92492E80D7F43CB19C9242C4D7533E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/381A2B13541B9F92718D080E6B70E1109077FBAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/381A2B13541B9F92718D080E6B70E1109077FBAD.mft
Manifest number:          33
Signing time:             Wed 16 Mar 2022 10:30:00 +0000
Manifest this update:     Wed 16 Mar 2022 10:25:00 +0000
Manifest next update:     Thu 17 Mar 2022 13:36:00 +0000
Files and hashes:         1: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: T2LLOPRGJEQJuSadYRQZ5kY0uVFKfTN5DEM8m0N/ii8=)
                          2: 381A2B13541B9F92718D080E6B70E1109077FBAD.crl (hash: IrXZ/D7VfpGlNJjU+12TkT5A+u4NNREFdLNTHcJzORY=)
                          3: 323830343a373735343a3a2f33322d3438203d3e203631363034.roa (hash: xOG2EqxtnVTizDV+GWNPtkvkPP0p+guVlEJTspvzRaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:76:82:a7:aa:92:49:2e:80:d7:f4:3c:b1:9c:92:42:c4:d7:53:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381A2B13541B9F92718D080E6B70E1109077FBAD
        Validity
            Not Before: Mar 16 10:25:00 2022 GMT
            Not After : Mar 17 13:36:00 2022 GMT
        Subject: CN=46042F03383F2F32CD32FECD57F97C0DF0981659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:91:31:b7:d2:c9:e6:f3:af:2b:c0:2f:e9:
                    b0:20:53:9a:fd:ae:35:7e:8f:f7:d9:97:7e:38:96:
                    e0:73:0f:0f:e4:d5:d4:2e:51:d0:bc:dd:f8:ac:c6:
                    f8:b2:f0:cd:40:40:6c:db:f3:e0:e4:b4:ab:01:a4:
                    28:6f:62:f0:ab:99:09:63:06:7f:08:d5:fb:f0:13:
                    33:23:d9:65:90:5e:36:76:44:6c:1d:c8:82:f0:43:
                    fe:43:66:ba:97:05:26:59:f2:5c:24:2b:57:54:dd:
                    3c:94:49:84:44:43:ad:39:fb:26:ba:76:6c:ca:2f:
                    7a:3f:44:f7:03:6a:21:a2:0d:70:d4:df:6e:fe:7f:
                    ef:93:e9:18:89:de:77:b5:d0:82:46:59:07:da:b9:
                    04:a5:6a:ac:5a:08:f1:20:f0:07:4b:0e:19:7c:f4:
                    ca:be:13:c8:41:08:a6:83:2b:02:fe:8f:a9:7d:48:
                    f8:35:b1:21:c4:23:c9:40:e8:e4:f8:3e:37:18:30:
                    39:a3:ed:c5:eb:e4:13:8d:3e:60:2c:6b:e5:36:20:
                    88:d4:50:5b:5c:9a:7f:f0:d9:ad:a6:50:8a:1c:f6:
                    f2:24:4d:1d:b5:4b:5d:98:98:78:15:2b:a1:9b:23:
                    c1:d1:17:30:03:20:eb:26:1a:03:34:00:da:de:2b:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:2F:03:38:3F:2F:32:CD:32:FE:CD:57:F9:7C:0D:F0:98:16:59
            X509v3 Authority Key Identifier:
                keyid:38:1A:2B:13:54:1B:9F:92:71:8D:08:0E:6B:70:E1:10:90:77:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/381A2B13541B9F92718D080E6B70E1109077FBAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/381A2B13541B9F92718D080E6B70E1109077FBAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/381A2B13541B9F92718D080E6B70E1109077FBAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f9:13:96:f9:fe:0f:86:08:4a:92:86:93:0e:d4:b9:75:b5:
         51:9e:24:6d:0a:5d:56:a5:a1:d2:79:14:e7:5e:e1:cf:7a:c5:
         62:83:b5:e5:e5:ea:23:b8:b8:62:d7:cd:b7:b7:9a:e9:f7:30:
         60:99:54:ce:c0:fc:f9:b2:b5:6c:d0:0a:35:27:27:d5:a2:9f:
         d8:bd:9f:0c:ef:0f:2d:9e:b2:dc:cc:67:e6:e9:49:c6:a2:5f:
         2e:0d:c2:c8:6e:f7:88:ba:0b:09:4c:c3:ce:db:8f:2c:c2:00:
         45:51:2c:94:86:45:12:6b:9e:37:52:78:d2:d1:4d:ae:07:0a:
         10:19:55:c9:90:6b:34:27:7d:36:ad:ab:81:a0:f1:e3:bd:91:
         07:06:a4:fe:16:2b:d5:9e:9f:7b:d1:d4:6b:c8:59:f5:f6:8a:
         9f:be:f5:aa:33:fe:3d:3a:26:04:17:da:fa:b5:fa:f2:29:01:
         3b:fa:ed:dd:e8:d0:da:32:b1:fb:24:5a:2c:1c:fa:5c:e4:eb:
         ac:1a:fb:47:79:f5:16:01:f8:7a:2d:ed:ba:40:b7:69:34:57:
         78:50:ad:1c:5e:b1:e7:2f:cc:99:7e:d4:9f:87:ce:82:07:b2:
         ae:89:77:33:39:17:ac:d3:8d:28:4b:46:9e:90:5a:c5:fe:72:
         54:7b:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----