Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
File:                     4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft (raw, json)
Hash identifier:          6crX4UckfIXCn8fcesPY/z1DXwe3UEnboeo8PAJ7NPM=
Subject key identifier:   F7:8B:4B:93:4E:7E:DF:DA:DE:D6:AB:EC:28:C5:C9:AE:54:33:64:B2
Authority key identifier: 4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
Certificate issuer:       /CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
Certificate serial:       0831634BFEE76101FE2A12C03108C735CC7420DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
Manifest number:          9B
Signing time:             Mon 05 Dec 2022 13:50:44 +0000
Manifest this update:     Mon 05 Dec 2022 13:45:44 +0000
Manifest next update:     Tue 06 Dec 2022 15:05:44 +0000
Files and hashes:         1: 323830343a336539343a3a2f33332d3333203d3e20323636363037.roa (hash: T5xh1WNiCVcUzF7KYRkMpvcChAhsIQ29oDS2BF3n1hw=)
                          2: 323830343a336539343a3a2f33322d3332203d3e20323636363037.roa (hash: T9/I+zAEzhTXOGI9mg+vGBs+kx3JnSyk0rSFpxZA21Q=)
                          3: 323830343a336539343a3a2f33382d3338203d3e20323636363037.roa (hash: ZNM/Q5W8GudbXcE8/CCdtp5+nhLkh8DWMMgFUIRFM3o=)
                          4: 4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.crl (hash: c/z90MmpMBrofrMhMl8vrbYqaqbt6/T1kxCLfX981WA=)
                          5: 34352e372e3139322e302f32322d3234203d3e20323636363037.roa (hash: fD31ZQZ/fMr5vseY1iGn0/lH+mRi/J5W1NZ9NRIvY30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:31:63:4b:fe:e7:61:01:fe:2a:12:c0:31:08:c7:35:cc:74:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
        Validity
            Not Before: Dec  5 13:45:44 2022 GMT
            Not After : Dec  6 15:05:44 2022 GMT
        Subject: CN=F78B4B934E7EDFDADED6ABEC28C5C9AE543364B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:72:f5:bb:4a:46:e7:68:41:e4:ba:c4:d7:
                    de:e3:04:dd:01:13:42:e6:9d:c0:0e:6f:f7:6f:bc:
                    b0:31:c8:35:92:e0:6d:c0:8a:f1:1f:26:86:92:09:
                    d8:84:a2:df:73:28:64:54:53:e4:f6:74:a1:37:23:
                    b2:3a:2e:67:9a:4b:7e:cf:06:71:63:07:c7:0e:a5:
                    9f:b8:a4:41:45:16:3c:f4:37:ef:3d:6f:f6:4b:f5:
                    b1:29:a9:9b:12:f4:6e:2a:18:66:f1:4e:c5:ff:89:
                    e9:23:41:22:9c:2d:e7:0b:91:4d:7f:06:df:c3:45:
                    51:00:d4:fa:06:2c:15:a1:b5:e3:2a:85:59:63:97:
                    b9:4c:34:2a:9a:ef:6d:70:6a:a8:c7:27:77:11:09:
                    f9:00:78:c0:75:b3:68:57:ad:63:d8:c7:2a:08:bc:
                    ca:71:6b:bc:a8:ff:6e:de:f4:d2:4c:46:d2:86:08:
                    05:b0:69:2f:2c:2f:98:d7:2b:7d:f1:5d:cc:8f:ac:
                    0e:62:e5:d0:60:b7:3c:f7:3a:a0:ef:b1:4e:6b:50:
                    f0:26:16:c2:37:a7:46:5c:8f:1e:12:9a:94:d4:50:
                    29:7f:4a:f0:a2:64:43:2d:18:4c:2b:6d:f4:34:fb:
                    bd:ae:60:b6:38:fa:28:6d:ac:70:f3:45:11:8c:dd:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:4B:93:4E:7E:DF:DA:DE:D6:AB:EC:28:C5:C9:AE:54:33:64:B2
            X509v3 Authority Key Identifier:
                keyid:4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:97:bc:c8:99:b6:af:10:96:c6:09:7f:5c:ae:4c:22:1a:
         51:08:e6:87:fb:dc:9e:62:8b:26:3e:1e:3e:37:75:7f:e6:8a:
         1d:8b:17:21:dc:b5:bb:0d:cc:f3:98:09:b2:ce:4c:22:c1:6a:
         0a:12:66:63:de:8e:92:eb:c2:44:39:49:c3:1d:32:1f:90:e1:
         8d:e1:af:07:7b:27:62:76:a3:ba:e4:71:72:77:e6:e0:f1:e6:
         ca:d7:c4:a3:35:cd:c0:72:a5:30:8d:1e:06:ee:d5:34:f4:44:
         6a:e0:5f:03:a8:f9:33:b3:b4:a7:94:3b:da:16:2f:c5:7e:7d:
         03:79:01:85:c0:41:1c:e0:ae:36:4d:4b:f2:b6:96:06:07:80:
         05:0a:3d:52:4f:77:95:1a:73:21:53:c1:0f:ca:7d:92:49:c3:
         1c:d0:21:11:8f:9e:96:fe:fd:84:90:86:9c:3f:3d:9e:0f:73:
         25:c1:6b:f8:a5:df:a7:12:8f:1f:d8:8b:cf:45:24:ba:93:47:
         72:83:5f:d3:dc:7c:53:ee:a8:9a:07:84:4b:31:9d:97:91:a6:
         bd:c8:18:9f:a5:35:99:75:1a:89:2a:b8:9d:86:2b:bb:f7:57:
         88:1f:44:00:06:2e:14:65:31:73:97:42:5f:4f:00:c4:75:c1:
         15:76:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----