Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.mft
File:                     2F9116FB68935BA8902D23275DB61A08DD00DB40.mft (raw, json)
Hash identifier:          5TqlrCVvbWGz/O3tsfPeksH/sz1RzonYY7QPiA12OLg=
Subject key identifier:   22:35:F8:E9:C4:7A:2C:68:80:BB:62:EB:CE:5A:5A:FA:9C:12:DF:13
Authority key identifier: 2F:91:16:FB:68:93:5B:A8:90:2D:23:27:5D:B6:1A:08:DD:00:DB:40
Certificate issuer:       /CN=2F9116FB68935BA8902D23275DB61A08DD00DB40
Certificate serial:       6CB576DDED26D00C786776015E38EBCBDFF173A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.mft
Manifest number:          30
Signing time:             Mon 11 Sep 2023 23:45:59 +0000
Manifest this update:     Mon 11 Sep 2023 23:40:59 +0000
Manifest next update:     Wed 13 Sep 2023 01:24:59 +0000
Files and hashes:         1: 3138372e312e33322e302f32302d3234203d3e203238323436.roa (hash: TUlI+IOYXuZZxH9lCytAttymA/n1edGW4QDrJdJ5OmM=)
                          2: 2F9116FB68935BA8902D23275DB61A08DD00DB40.crl (hash: 6KrK+I3yA3FXhGF1JsFk8GOeqltcAp3wte55eOZ0TJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b5:76:dd:ed:26:d0:0c:78:67:76:01:5e:38:eb:cb:df:f1:73:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9116FB68935BA8902D23275DB61A08DD00DB40
        Validity
            Not Before: Sep 11 23:40:59 2023 GMT
            Not After : Sep 13 01:24:59 2023 GMT
        Subject: CN=2235F8E9C47A2C6880BB62EBCE5A5AFA9C12DF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:d9:49:76:30:49:3f:e6:22:5f:aa:38:fc:
                    a4:48:62:31:4f:ba:f0:02:25:b3:a4:14:f8:09:fb:
                    5a:51:8c:dd:a9:5c:cf:0f:d5:03:ae:b3:33:19:0b:
                    60:04:59:f7:04:a0:0d:aa:e3:37:bb:d0:d5:09:e0:
                    b3:24:68:66:64:ab:29:0f:8e:09:14:27:e5:49:9f:
                    65:d5:21:dd:1d:95:0a:a0:50:00:cd:fb:81:29:76:
                    65:b6:35:12:0e:32:30:ec:c1:1e:05:f6:70:58:54:
                    bb:da:38:86:69:b9:8c:ef:1e:ff:31:aa:4c:6c:48:
                    ce:98:51:cd:fd:e6:33:78:44:7a:e4:8a:d9:6f:0c:
                    0d:f4:da:d5:f0:45:9e:ce:8a:b1:4a:68:34:ed:bf:
                    5d:47:1a:3f:72:cc:aa:6e:2b:52:36:1f:7e:b3:54:
                    09:9d:dd:e0:a9:69:27:0d:0e:87:8c:61:2e:7d:20:
                    49:e8:23:f2:38:63:6c:95:0a:a3:1f:dd:7b:0d:4e:
                    6e:70:2a:d2:74:ee:88:99:0c:cc:96:c8:71:33:a1:
                    4d:55:09:27:24:fc:db:04:4c:1f:15:5c:30:c5:67:
                    25:b5:d2:f7:b9:f0:2e:40:99:63:eb:5e:b1:b3:ea:
                    b7:5f:f6:f6:82:ca:9a:5b:45:6c:7d:6f:67:39:91:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:35:F8:E9:C4:7A:2C:68:80:BB:62:EB:CE:5A:5A:FA:9C:12:DF:13
            X509v3 Authority Key Identifier:
                keyid:2F:91:16:FB:68:93:5B:A8:90:2D:23:27:5D:B6:1A:08:DD:00:DB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:30:1d:31:d4:08:22:ec:f0:15:32:82:ca:65:06:b7:fd:
         87:99:70:c9:3f:39:b6:bf:79:92:c9:07:6e:b1:f1:ad:58:03:
         d4:dc:d4:21:67:19:84:61:2f:82:d5:cd:41:57:d8:b5:e6:57:
         b3:55:33:b7:4c:52:88:43:87:8a:f5:00:73:c6:03:21:60:08:
         be:fa:f6:71:6b:19:8a:e8:36:55:cb:a4:6a:4f:ad:af:be:22:
         4b:cb:34:02:ef:fa:3a:f0:12:80:4b:c0:c7:89:28:43:ba:04:
         da:64:59:98:a4:99:3b:54:d1:bc:8d:4f:9e:9e:bc:95:8a:4b:
         c9:7d:54:36:52:eb:cc:2e:0d:3d:91:7c:fa:0c:5d:cf:ca:6c:
         bc:7d:3a:34:df:da:05:66:8d:2f:f4:cd:35:67:ff:e2:ff:89:
         f9:90:9e:54:df:58:e1:c1:f2:42:a4:dd:79:f2:bd:23:5f:d0:
         91:c0:90:4d:04:9f:e7:2e:17:b4:47:f5:90:62:1f:3d:72:1b:
         2a:03:fc:4f:07:ee:be:42:1b:fc:08:61:52:96:de:b3:f1:54:
         f5:d2:8c:09:3b:35:21:53:0d:85:25:3e:d8:8e:a2:18:fe:3c:
         e6:44:8e:1c:05:00:ed:56:42:c1:a5:b9:7a:a8:15:de:80:7c:
         eb:40:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----