Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.mft
File:                     49278BC3CB075BA6C2EC6A4E88DB160150111010.mft (raw, json)
Hash identifier:          3F6yQx3W4FA5JVvximdwy4ED4/v0OOwcG9NuQaooy2I=
Subject key identifier:   B5:75:A0:CE:03:FF:4B:56:C8:7A:10:F6:E6:C4:0A:E8:22:3F:50:F6
Authority key identifier: 49:27:8B:C3:CB:07:5B:A6:C2:EC:6A:4E:88:DB:16:01:50:11:10:10
Certificate issuer:       /CN=49278BC3CB075BA6C2EC6A4E88DB160150111010
Certificate serial:       31B9BF63107B310B6C8B3E326D5F18DB08CFDF8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.mft
Manifest number:          0134
Signing time:             Mon 28 Aug 2023 04:12:02 +0000
Manifest this update:     Mon 28 Aug 2023 04:07:02 +0000
Manifest next update:     Tue 29 Aug 2023 06:50:02 +0000
Files and hashes:         1: 49278BC3CB075BA6C2EC6A4E88DB160150111010.crl (hash: 2Dxa03sPxYZkqZnl+6a+WnGPAkGzxX7bSeQWApnFzss=)
                          2: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: kF0DUou7lnBbg+mScOLVdUJomvGEPFWeF720ro5kKbw=)
                          3: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: CrIxVCE9EEdnmJ5qjVYCO5OuxhYK2AWtzrGC/WS4Nhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b9:bf:63:10:7b:31:0b:6c:8b:3e:32:6d:5f:18:db:08:cf:df:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49278BC3CB075BA6C2EC6A4E88DB160150111010
        Validity
            Not Before: Aug 28 04:07:02 2023 GMT
            Not After : Aug 29 06:50:02 2023 GMT
        Subject: CN=B575A0CE03FF4B56C87A10F6E6C40AE8223F50F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:f9:28:99:70:86:0e:09:97:82:5f:b5:d7:
                    b6:b7:4c:07:4f:5b:91:08:64:d1:b0:9b:4e:df:24:
                    fa:49:bb:c4:68:ed:de:fe:6a:50:51:99:cd:62:b5:
                    a6:4a:b9:33:f5:8b:81:f5:71:fd:16:37:40:62:e1:
                    c6:f8:f4:aa:33:97:62:a3:6d:39:1c:2f:5a:7e:06:
                    35:11:6b:40:5e:10:0f:09:a9:2f:1c:bb:17:6a:61:
                    b5:1e:9c:d9:84:5f:f5:86:22:06:3f:c8:2f:81:79:
                    24:39:d8:40:ed:c2:43:0c:eb:9a:30:6b:54:5d:db:
                    15:ef:90:fe:21:85:3d:f4:e3:dd:2a:9d:39:f9:b3:
                    75:e3:4a:c6:01:28:78:4c:1a:9d:90:83:a2:0b:76:
                    64:25:33:53:54:79:ac:9d:c6:77:02:c1:d0:24:d5:
                    11:dd:16:9d:1f:62:41:89:99:5f:a1:dc:64:ca:aa:
                    4d:b7:6e:62:fc:bf:61:e4:ff:8d:6e:18:49:a0:79:
                    3f:5a:44:5a:07:dc:1b:2f:c7:2c:37:d2:6b:ea:22:
                    66:95:93:f0:3f:35:27:c0:c0:a9:54:6a:03:8f:e6:
                    fd:4e:af:fe:35:2a:58:70:b8:56:23:d7:5d:ca:ad:
                    e2:29:06:3a:91:16:7f:22:0c:db:95:eb:86:a6:b4:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:A0:CE:03:FF:4B:56:C8:7A:10:F6:E6:C4:0A:E8:22:3F:50:F6
            X509v3 Authority Key Identifier:
                keyid:49:27:8B:C3:CB:07:5B:A6:C2:EC:6A:4E:88:DB:16:01:50:11:10:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/49278BC3CB075BA6C2EC6A4E88DB160150111010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:47:b8:2e:8a:64:b3:7b:ee:59:e4:e7:b6:86:7f:83:5b:
         ff:f9:be:ba:5c:18:11:1a:17:07:53:d9:a7:1b:e8:00:2e:6f:
         f0:45:2b:7b:f3:e4:73:45:9d:e7:35:86:4f:9f:28:e4:41:5f:
         2f:9b:73:a7:2c:9f:0f:fc:f6:42:e1:b0:c9:1b:98:61:ef:6e:
         fd:7f:ec:eb:f0:a2:1b:4c:73:a9:36:f9:0f:56:c8:82:a8:96:
         4a:ac:06:5b:cd:83:b2:c0:0e:6b:64:4b:ce:d1:c0:88:66:81:
         cf:92:c1:17:2c:c7:a2:9f:60:1b:f0:65:f3:f6:46:d1:f1:e6:
         47:9a:34:05:d1:35:1e:78:b9:32:a3:18:3f:a0:0e:b4:47:0e:
         c6:f9:84:df:a7:eb:43:dc:ec:d7:38:a0:a3:42:ce:5b:cd:4b:
         c5:86:48:48:eb:0f:4e:17:92:f5:12:b0:3a:df:a9:6f:78:aa:
         de:87:d7:63:87:ab:72:63:53:6e:53:08:ea:96:a9:18:ee:64:
         ef:a2:e1:43:f5:bd:36:66:c1:2b:51:6a:d1:10:77:50:aa:3f:
         6a:75:ba:35:1c:3a:d8:10:16:50:89:38:3c:be:6a:22:dc:4f:
         80:37:1c:e0:19:8f:3e:8a:64:0d:a1:ff:1f:67:a2:9d:32:d5:
         49:d1:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----