Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft
File:                     477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft (raw, json)
Hash identifier:          4eVMxSqsDqGx+GBOJsqmExEbtZbzHjY9/TwcixTuJLw=
Subject key identifier:   DF:04:C6:66:1D:54:A6:1C:DF:4E:93:E9:F8:7E:22:D4:EA:EC:38:23
Authority key identifier: 47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50
Certificate issuer:       /CN=477B4C60DF331FB1CD2FF1CF3273E9243B2FA950
Certificate serial:       3356F49FF00632E2B521E463EB9BBE41CD6BA65B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft
Manifest number:          019C
Signing time:             Mon 26 Dec 2022 07:50:03 +0000
Manifest this update:     Mon 26 Dec 2022 07:45:02 +0000
Manifest next update:     Tue 27 Dec 2022 08:54:02 +0000
Files and hashes:         1: 323830343a333761383a3a2f33322d3438203d3e20323636343238.roa (hash: iJSkV22AraJKBg6hx/i/t6L8GAdE7LkraL6d7VM/QPs=)
                          2: 477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.crl (hash: lw4wpzu7BD4U8GJ96zdlp3qwz5gHS6LUxGIcU4XurkM=)
                          3: 3137302e38312e3135322e302f32322d3234203d3e20323636343238.roa (hash: rmiCPC8/QTAAEY1Fizv414GcM8rVisTMWS/yl+ca8Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:f4:9f:f0:06:32:e2:b5:21:e4:63:eb:9b:be:41:cd:6b:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477B4C60DF331FB1CD2FF1CF3273E9243B2FA950
        Validity
            Not Before: Dec 26 07:45:02 2022 GMT
            Not After : Dec 27 08:54:02 2022 GMT
        Subject: CN=DF04C6661D54A61CDF4E93E9F87E22D4EAEC3823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:31:8c:b6:e2:ca:66:4e:70:cd:c1:a8:b3:
                    44:9e:6f:bf:cb:be:6a:bf:99:e3:b3:93:f7:27:ff:
                    1e:43:ce:7c:93:d1:83:73:44:eb:3a:2a:49:5e:a2:
                    d7:06:4f:e0:ce:a3:ad:84:56:02:ad:89:5c:89:8a:
                    28:35:24:c4:a7:f1:1a:80:1b:4c:fe:ac:86:5a:04:
                    86:4c:ca:c6:d6:40:02:46:0c:5d:2c:20:c2:a0:f2:
                    81:93:9b:e8:91:23:f7:0e:0a:f6:74:22:b4:cb:e8:
                    bd:af:81:15:0e:11:9a:16:5c:1c:1c:cb:29:22:e4:
                    4a:ad:4e:36:16:8b:a7:3a:ac:d9:88:e6:d0:a5:e9:
                    15:07:d8:dd:c1:04:81:d5:e3:42:6f:3b:aa:e4:ab:
                    21:56:4f:e7:98:35:b1:3e:fe:f6:67:e9:ec:6c:cb:
                    59:22:5f:db:14:18:3a:49:38:c8:b6:95:9c:09:79:
                    a3:ea:ae:ac:b4:40:d0:5e:3c:24:fe:55:cc:80:08:
                    63:b1:fa:30:49:e4:06:71:5f:89:f9:cb:2d:b2:69:
                    b2:c0:70:be:8f:6b:88:80:83:49:9d:00:4d:90:aa:
                    94:aa:b7:3d:9f:51:34:e1:c8:ee:bd:cf:04:9d:2b:
                    84:c9:d1:b5:90:8e:49:ef:38:0a:ae:78:28:04:55:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:C6:66:1D:54:A6:1C:DF:4E:93:E9:F8:7E:22:D4:EA:EC:38:23
            X509v3 Authority Key Identifier:
                keyid:47:7B:4C:60:DF:33:1F:B1:CD:2F:F1:CF:32:73:E9:24:3B:2F:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7sX888sWMqu6A79ZZYZJDaU8XvdCWdGFPA6seHFNNnm/0/477B4C60DF331FB1CD2FF1CF3273E9243B2FA950.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:b4:2c:37:73:51:33:3c:50:39:eb:eb:ab:a0:19:f1:f8:
         48:15:76:46:0e:38:81:15:6d:1f:b2:5c:ac:30:94:e4:e1:58:
         33:eb:8c:59:09:81:27:04:62:8a:d5:24:57:a1:86:19:f6:bb:
         8a:5e:9e:79:9f:3f:52:e5:ef:1d:7e:b2:f6:2f:be:ad:3f:05:
         22:62:61:2a:a5:0e:f7:77:c0:ef:8f:27:64:5c:47:c0:5a:d9:
         1a:66:56:86:2b:16:54:0e:6f:22:b0:3e:2f:88:8f:4f:98:ba:
         92:f5:62:5d:8e:78:bf:24:65:e5:73:2e:70:cc:25:0d:39:52:
         ec:cc:d3:ac:ac:0a:36:4e:49:36:66:ba:49:07:fc:4a:30:c6:
         a9:52:b7:d8:c2:85:0f:63:c9:bd:2c:a8:8f:49:5a:eb:67:e0:
         b8:e7:ae:3a:5b:c7:ed:83:99:5d:22:77:63:99:42:03:96:52:
         a0:b1:cc:05:4a:ca:aa:95:ba:e0:3e:54:66:9b:66:c6:ae:a9:
         cf:a1:00:33:3b:fc:50:b2:92:38:a8:94:10:1d:39:ad:7b:bb:
         28:51:03:1e:b6:12:03:d4:58:a6:d5:77:13:42:99:b5:18:10:
         ec:f5:cf:cd:89:6d:3b:b5:36:12:a7:1a:4d:68:f9:da:d2:6c:
         96:be:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----