Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/3F966215B60E422A7000225E44554C64B703D244.mft
File:                     3F966215B60E422A7000225E44554C64B703D244.mft (raw, json)
Hash identifier:          P9STC9HqERYJQMvK4dDOFLO5nZNt8Y2pcLvHWv9p9VQ=
Subject key identifier:   EB:B3:77:FE:9A:7C:1E:5A:D0:05:B9:57:A9:A7:AB:5D:C4:01:2B:35
Authority key identifier: 3F:96:62:15:B6:0E:42:2A:70:00:22:5E:44:55:4C:64:B7:03:D2:44
Certificate issuer:       /CN=3F966215B60E422A7000225E44554C64B703D244
Certificate serial:       0DB9CDF3367E111D7114641F27FD66894BE6FE67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F966215B60E422A7000225E44554C64B703D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/3F966215B60E422A7000225E44554C64B703D244.mft
Manifest number:          37
Signing time:             Tue 18 Oct 2022 16:40:00 +0000
Manifest this update:     Tue 18 Oct 2022 16:35:00 +0000
Manifest next update:     Wed 19 Oct 2022 19:04:00 +0000
Files and hashes:         1: 3F966215B60E422A7000225E44554C64B703D244.crl (hash: sfJyUrzkIL9o9SPoKlJlZFn6LFqYVm7tGHuyfyXP1I8=)
                          2: 323830343a376462383a3a2f33322d3438203d3e20323731353738.roa (hash: MY3PNixa0NrNgnEwXoMAO+7SfKClI0MfXKIho6NBS10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b9:cd:f3:36:7e:11:1d:71:14:64:1f:27:fd:66:89:4b:e6:fe:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F966215B60E422A7000225E44554C64B703D244
        Validity
            Not Before: Oct 18 16:35:00 2022 GMT
            Not After : Oct 19 19:04:00 2022 GMT
        Subject: CN=EBB377FE9A7C1E5AD005B957A9A7AB5DC4012B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:64:74:8e:99:77:63:fe:bc:a9:84:81:7a:
                    bd:71:4a:2d:9d:c8:5b:46:ac:4c:c9:e0:86:c9:3c:
                    f1:2c:75:49:dc:93:14:5a:d6:59:31:34:11:2f:a3:
                    95:43:ab:87:88:ca:1d:7c:08:10:e7:7c:04:b8:40:
                    21:8a:3d:c4:5d:a7:07:c5:e3:23:6e:f7:83:4c:73:
                    38:2f:ad:cc:c2:14:57:67:bf:91:14:ad:5c:95:13:
                    bf:f2:a9:0c:42:72:9e:56:36:c0:d2:74:a2:1e:8d:
                    05:1e:40:f7:4f:ff:cb:28:02:65:d2:6d:c8:e0:79:
                    e9:55:f5:e4:62:3d:79:a0:ec:4a:f0:71:9e:80:19:
                    db:fb:12:91:71:ca:3f:9c:8f:13:24:21:ed:61:47:
                    85:a4:4d:2e:87:40:84:37:a0:f6:18:6c:17:ee:ad:
                    e8:eb:df:d0:fc:93:18:ef:16:58:a2:6d:19:4d:db:
                    e6:53:30:bd:11:39:2e:3e:35:74:4d:34:79:8f:45:
                    b7:db:89:60:c9:b5:29:2a:23:8b:a7:1c:42:e8:28:
                    aa:6f:4f:87:fd:56:0f:a0:19:8b:17:4f:19:9d:3d:
                    a9:d2:d4:90:22:a8:f3:59:be:56:86:a8:e1:3e:68:
                    ea:ab:1e:b4:47:d7:1f:1f:34:7b:00:42:ba:51:28:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B3:77:FE:9A:7C:1E:5A:D0:05:B9:57:A9:A7:AB:5D:C4:01:2B:35
            X509v3 Authority Key Identifier:
                keyid:3F:96:62:15:B6:0E:42:2A:70:00:22:5E:44:55:4C:64:B7:03:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/3F966215B60E422A7000225E44554C64B703D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F966215B60E422A7000225E44554C64B703D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/3F966215B60E422A7000225E44554C64B703D244.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:58:86:0b:9f:a1:e8:3b:9e:17:d0:6a:b5:84:99:40:0c:7e:
         c5:f4:0f:81:9d:e1:c0:65:d1:a0:d8:c3:f5:b0:ea:57:0d:2f:
         b9:06:db:3b:5a:ca:0c:ee:6d:9b:da:8c:b2:e8:ab:35:59:7c:
         ea:13:af:9b:b8:10:5e:31:64:2d:17:90:e3:24:57:97:be:0d:
         32:59:da:1a:4e:77:e1:c4:c8:9a:d3:90:df:53:d4:db:98:6d:
         1b:26:05:f6:ce:08:8b:84:0d:b2:8a:16:ce:d1:5d:e3:de:9f:
         86:93:c7:d3:98:26:b6:26:d9:0d:ad:cc:46:b8:14:a4:e8:c7:
         14:91:ea:ae:8b:0e:ed:ce:98:98:61:56:d5:55:b2:1e:b1:15:
         8c:63:29:c6:3f:b0:a5:e0:cd:3e:b6:8e:58:22:38:ec:e2:cd:
         15:d6:d1:59:89:5f:ca:e8:aa:6a:2d:ac:cf:ca:41:e0:2d:af:
         7d:2a:61:04:75:02:91:9d:54:46:67:af:55:c8:89:77:84:8b:
         37:6c:87:bb:76:0e:3b:13:c9:cc:51:20:f8:3f:4c:b1:2f:6a:
         1d:5b:a3:f0:87:61:7d:d9:fd:b1:16:dd:e8:64:48:6c:76:36:
         55:dc:85:d0:6e:a2:ba:0b:df:b7:83:16:a4:91:10:61:e3:09:
         12:45:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----