Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft
File:                     1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft (raw, json)
Hash identifier:          s/dxy0GLlhu++9pjADvjZOYq7LhTha/I+mJgRsg19K8=
Subject key identifier:   B0:47:7A:B9:95:91:74:A3:03:68:11:19:9C:80:73:E7:3A:7D:84:2C
Authority key identifier: 1A:DD:50:7D:E9:1F:BA:F3:69:7D:3E:22:0B:A1:CD:20:AE:08:EE:E6
Certificate issuer:       /CN=1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6
Certificate serial:       091386754FDA9E1FB0258CA0AE1E7388A1F0A0FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft
Manifest number:          02D0
Signing time:             Tue 04 Apr 2023 06:40:07 +0000
Manifest this update:     Tue 04 Apr 2023 06:35:07 +0000
Manifest next update:     Wed 05 Apr 2023 08:34:07 +0000
Files and hashes:         1: 1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.crl (hash: S/9s3WvD5BTuNIDWyAuCGeyfafLs4D4QN40PfqR/txM=)
                          2: 323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa (hash: juJpmjCWcSbM8u02Y8L+NIXy6+zC87jpQaZ85VuOJr4=)
                          3: 323830343a343134303a3a2f33342d3334203d3e20323637343233.roa (hash: 1NVxk1z7UCzGNRu1/q5qWDfi37909qD5yOvZclYjdjc=)
                          4: 3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa (hash: cF+cFI5Atwdr0Osmb2nuL74Vb66gN7a8ZhfgbdcIp4w=)
                          5: 3138312e3139312e3131382e302f32342d3234203d3e20323637343233.roa (hash: achSBs22DDTbXffQLkzcO3xL3WBiJ67Tza2UFrlzyQk=)
                          6: 3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa (hash: QVN/vmZT/s9Efq5tbOSOYkJCwbbHY9UNMUkNjo7U3Rs=)
                          7: 3138312e3139312e3131372e302f32342d3234203d3e20323637343233.roa (hash: 63eed1ws43XGNhxQBHiUORUM6+qDbpfRNAyy+c0lvWE=)
                          8: 3138312e3139312e3131362e302f32322d3234203d3e20323637343233.roa (hash: PndG4NLa23koeiDJIWEVBdKdZRbu7Xat1z4Ajo1pdkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:13:86:75:4f:da:9e:1f:b0:25:8c:a0:ae:1e:73:88:a1:f0:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6
        Validity
            Not Before: Apr  4 06:35:07 2023 GMT
            Not After : Apr  5 08:34:07 2023 GMT
        Subject: CN=B0477AB9959174A3036811199C8073E73A7D842C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:63:64:77:a5:98:b8:3c:ac:78:3d:b1:51:
                    8d:ad:cf:a4:96:55:1d:4f:b8:b7:9b:21:80:80:45:
                    b5:c3:a2:7a:a7:48:e0:82:4a:96:a1:6f:71:10:5b:
                    ef:70:9a:e1:c8:0d:2d:1d:e6:95:e8:72:3c:b3:13:
                    bb:01:4f:39:dd:95:97:3c:e3:8c:7c:4a:bd:3b:da:
                    be:23:b1:d2:dd:ce:55:97:cd:19:39:a3:18:1c:58:
                    11:74:8c:f2:72:5a:34:a6:dd:74:57:f6:c4:2f:85:
                    f5:c3:52:92:05:b2:5a:05:3e:60:48:a3:93:aa:84:
                    54:93:54:4b:36:42:fc:5a:af:c0:90:e9:13:6d:6a:
                    73:dc:4f:6b:95:b5:ec:df:04:39:02:62:2b:85:d9:
                    d2:61:5d:f7:ac:de:20:49:7a:58:10:c5:e0:27:05:
                    8f:7d:83:13:76:45:28:d6:35:1f:24:4a:d5:02:a6:
                    44:28:ae:7a:c4:9f:e6:16:d3:ba:26:a6:3e:ce:ea:
                    75:7b:27:3a:41:a6:72:ef:fc:68:22:9b:9b:73:bc:
                    06:22:ac:66:f9:90:9a:75:f4:12:ad:93:a2:9f:a2:
                    37:98:00:92:f6:2c:89:fb:29:ad:06:18:5e:5a:3a:
                    70:54:ed:38:a4:20:ac:cf:78:7d:7a:2d:57:12:b6:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:47:7A:B9:95:91:74:A3:03:68:11:19:9C:80:73:E7:3A:7D:84:2C
            X509v3 Authority Key Identifier:
                keyid:1A:DD:50:7D:E9:1F:BA:F3:69:7D:3E:22:0B:A1:CD:20:AE:08:EE:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:59:2f:a6:5a:e9:31:9e:46:ee:74:16:3e:4b:48:d7:aa:06:
         c8:d9:59:ba:66:35:d2:4d:a1:34:c9:ff:76:a5:32:9f:aa:68:
         d1:4a:a9:d2:76:2f:dd:2b:13:71:6a:df:67:6d:39:03:4c:c0:
         91:0d:e2:4a:33:c1:37:40:43:fe:b5:f7:47:ac:4a:ee:56:59:
         de:49:25:cb:37:b7:62:23:09:16:f7:27:53:bc:e3:35:b7:03:
         0c:31:43:32:4b:bb:f0:bd:63:67:23:c6:19:06:29:29:c0:16:
         dc:0b:5b:90:f8:28:a9:93:9c:41:d6:e7:37:2f:e5:ab:5c:c6:
         e6:71:f3:0a:27:a6:f8:d9:36:0a:3f:5d:e3:c2:1b:61:48:2a:
         17:b8:11:46:df:99:81:fc:57:06:82:50:f4:35:6f:69:4f:72:
         98:9d:2f:48:63:a6:32:84:98:34:b0:69:a2:19:9d:95:78:e2:
         29:a6:99:ad:1c:a1:e8:d8:f2:01:a8:37:6b:54:c0:17:ce:8b:
         91:32:4a:0b:eb:6b:13:e8:ed:c2:3f:c3:f5:31:3b:6b:81:11:
         3a:5b:18:62:b9:85:8f:8b:d7:d9:0d:da:df:01:c3:f0:ba:81:
         e2:a6:c9:2b:4b:df:e6:43:a5:82:9a:ee:b7:87:1b:4a:91:e0:
         69:1d:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----