Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.mft
File:                     271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.mft (raw, json)
Hash identifier:          0aC0tMN0ZfpsS2A88WF5UiRfksqCE3EFi5yh83th8Pc=
Subject key identifier:   85:D2:95:0B:D2:19:76:60:FD:E5:A1:32:11:2A:C4:84:42:23:5A:FB
Authority key identifier: 27:1F:A1:AB:2C:8C:02:87:F6:C6:F5:0A:77:23:A7:E9:E0:88:AB:73
Certificate issuer:       /CN=271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73
Certificate serial:       0A2DAA1F1BDFCFA5BEEC47D53106017674B5B861
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.mft
Manifest number:          FD
Signing time:             Tue 20 Dec 2022 03:12:57 +0000
Manifest this update:     Tue 20 Dec 2022 03:07:57 +0000
Manifest next update:     Wed 21 Dec 2022 04:22:57 +0000
Files and hashes:         1: 3139302e38392e3135362e302f32322d3234203d3e20323730333735.roa (hash: Do2Sh8mp007HHN6xGMcLxs2WvsTtELpYz/TaWRBMDwo=)
                          2: 271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.crl (hash: IO4IAzMza4x8oZSG+NxewGEOg3NvxRA3wY2Wg0TKlIM=)
                          3: 323830343a366231303a3a2f33322d3334203d3e20323730333735.roa (hash: m2VRP2+q6MThgEJ3PgFz+L3KDDKB8Gt8h2QdAotOzsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:aa:1f:1b:df:cf:a5:be:ec:47:d5:31:06:01:76:74:b5:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73
        Validity
            Not Before: Dec 20 03:07:57 2022 GMT
            Not After : Dec 21 04:22:57 2022 GMT
        Subject: CN=85D2950BD2197660FDE5A132112AC48442235AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:2b:ba:09:c6:ff:ab:8c:9f:d0:94:7c:a0:
                    b0:52:12:8a:bd:a7:49:88:6c:b9:e5:a0:fd:d0:1f:
                    17:ee:1d:f6:e4:45:a4:d9:69:ca:dd:f2:30:c7:59:
                    86:3d:04:cb:f8:b3:be:ab:09:0e:d1:7b:27:af:df:
                    b3:b4:9b:b3:b9:2b:08:08:2f:0d:b8:e1:9b:81:e8:
                    56:22:7c:70:66:42:82:27:d9:39:ae:68:56:2e:21:
                    7a:de:4d:52:9f:09:fc:85:da:bc:02:88:c4:89:fa:
                    13:98:8a:61:b4:cc:db:c6:53:da:ea:ca:d5:88:be:
                    b4:86:c6:00:f0:a0:22:bd:15:58:ad:b2:90:08:fc:
                    3f:0d:e1:33:fe:f4:34:d8:15:f1:b0:5e:41:a2:03:
                    50:96:52:cf:b6:c8:23:c5:b3:d3:21:32:3d:5d:21:
                    60:55:63:e0:ff:79:ef:21:62:4b:c5:55:2a:5a:45:
                    6b:59:52:9a:28:e8:0a:f0:59:7e:46:6b:d5:d5:4a:
                    7f:93:96:7a:a3:46:ff:ed:5b:36:43:5e:56:81:e0:
                    91:73:9a:23:dd:79:f9:82:f7:dc:5d:41:7f:dc:98:
                    b4:67:2b:b2:9a:73:98:99:82:13:cd:b5:86:e4:11:
                    04:b4:6a:7a:2d:72:a7:f7:2a:a5:21:23:7a:0f:1d:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D2:95:0B:D2:19:76:60:FD:E5:A1:32:11:2A:C4:84:42:23:5A:FB
            X509v3 Authority Key Identifier:
                keyid:27:1F:A1:AB:2C:8C:02:87:F6:C6:F5:0A:77:23:A7:E9:E0:88:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/271FA1AB2C8C0287F6C6F50A7723A7E9E088AB73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:ca:e0:c8:7b:49:ec:a5:30:e1:fc:32:84:e0:f3:d1:2c:
         b8:0f:3d:a5:65:89:cb:98:4c:63:a6:da:64:d3:18:12:74:20:
         02:83:3e:4a:a8:fa:a8:7b:fa:46:07:33:f1:08:aa:c6:f6:95:
         e1:20:1e:16:f3:6f:36:20:96:37:25:d0:37:12:dd:1f:88:d6:
         96:7a:ff:90:09:11:43:3f:af:66:9b:db:20:6f:8f:6e:9a:84:
         02:61:77:e8:c7:70:1d:c4:3b:d1:f7:a8:1a:53:bf:44:35:dc:
         65:d2:96:8d:37:9e:2a:63:2a:fb:77:57:57:1b:f1:ea:7d:ac:
         f4:14:fb:98:ee:14:79:3a:b1:fa:7d:1a:c8:7f:6a:ff:35:02:
         8f:1d:00:8e:63:0f:db:01:5c:a3:a5:6e:f0:16:11:3e:19:14:
         b7:8a:6a:ef:f2:ed:92:02:6c:49:a4:7e:32:d4:4d:4b:c8:69:
         86:ff:bb:b8:f0:6a:63:fa:45:c7:b5:87:77:5e:59:a1:fd:9f:
         b0:40:e1:ee:0a:29:06:fc:97:5c:86:ee:26:8b:f6:0f:6d:0b:
         44:6e:a4:74:b8:f5:85:0f:b7:bd:0d:83:02:4c:92:0d:28:70:
         a4:06:c5:27:5f:4b:cb:fc:19:d4:19:6a:60:b9:34:07:6b:f3:
         04:ce:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----