Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.mft
File:                     D197131BCADC9ACC3E759E991A7593DE5FB7955F.mft (raw, json)
Hash identifier:          X93hWx3Xelu/z4kkuF7CONzpeCzub+1S4aTxN6z9cIg=
Subject key identifier:   47:E3:EF:AA:D8:10:A0:7E:0F:5B:2F:B5:58:9D:56:92:A2:6E:4E:C2
Authority key identifier: D1:97:13:1B:CA:DC:9A:CC:3E:75:9E:99:1A:75:93:DE:5F:B7:95:5F
Certificate issuer:       /CN=D197131BCADC9ACC3E759E991A7593DE5FB7955F
Certificate serial:       53E4F4D97CFEFD719FDF9F82D7A3862DE99E0614
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.mft
Manifest number:          2C
Signing time:             Wed 17 Jan 2024 15:06:01 +0000
Manifest this update:     Wed 17 Jan 2024 15:01:01 +0000
Manifest next update:     Thu 18 Jan 2024 18:15:01 +0000
Files and hashes:         1: D197131BCADC9ACC3E759E991A7593DE5FB7955F.crl (hash: LxDtshBGSLHJhu0m/nwOTQX82/16CzOvgmnRJHh0O+0=)
                          2: 323830343a323163633a3a2f33322d3438203d3e20323634353734.roa (hash: /KdZIzo93c0F3mpckUsePSwG9cqxo1JEJE/WZj5T9W0=)
                          3: 3133382e33362e3130382e302f32322d3234203d3e20323634353734.roa (hash: JQ2P+15raoIXK5mClfwPPJ1CxWfuDfEZ6u3ccxao5Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e4:f4:d9:7c:fe:fd:71:9f:df:9f:82:d7:a3:86:2d:e9:9e:06:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D197131BCADC9ACC3E759E991A7593DE5FB7955F
        Validity
            Not Before: Jan 17 15:01:01 2024 GMT
            Not After : Jan 18 18:15:01 2024 GMT
        Subject: CN=47E3EFAAD810A07E0F5B2FB5589D5692A26E4EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:65:9f:5e:07:3f:24:f6:a1:86:a4:89:8e:
                    a5:d1:65:3f:69:f0:a8:52:f8:f3:6b:cd:01:0e:da:
                    e5:c4:86:83:51:e6:4d:b6:ef:fd:24:c4:67:67:f7:
                    c5:c5:a9:34:00:82:21:68:28:08:70:33:b9:7a:dc:
                    04:d4:8f:ea:bc:bc:db:c8:96:3b:4a:7b:6d:0b:b6:
                    e4:77:2a:71:7f:8f:fc:a4:13:e3:c4:b4:2a:a7:c5:
                    3d:9a:2e:34:7f:1d:06:e6:2d:fb:7b:f3:b5:14:08:
                    ae:66:ce:55:24:fc:02:f2:2b:af:2a:2d:23:46:d2:
                    93:24:c1:3f:96:4e:22:b9:5a:61:91:f3:15:09:c1:
                    87:aa:0d:85:44:2c:bc:b7:48:64:bf:ec:73:e7:aa:
                    a1:b6:20:20:e2:d5:d6:c4:1a:d5:d9:23:10:a4:28:
                    e4:82:b4:9a:36:83:7b:b5:67:ba:48:27:12:b6:48:
                    54:0f:f0:32:94:04:72:f1:24:50:1f:02:08:64:aa:
                    b0:cf:9e:cb:49:1c:c6:18:c8:27:18:41:8a:ea:62:
                    cd:48:44:2a:d7:cf:5d:c6:0f:8f:2f:83:dc:02:c8:
                    54:0d:6a:b4:b2:9d:31:60:04:a5:d0:06:6f:26:a7:
                    47:d0:d5:9e:34:fa:3b:05:9d:c3:51:a2:17:9b:d7:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E3:EF:AA:D8:10:A0:7E:0F:5B:2F:B5:58:9D:56:92:A2:6E:4E:C2
            X509v3 Authority Key Identifier:
                keyid:D1:97:13:1B:CA:DC:9A:CC:3E:75:9E:99:1A:75:93:DE:5F:B7:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a5:03:16:7e:f8:b0:4a:80:f2:55:75:e3:ef:38:ac:3c:8d:
         7f:ed:d1:b1:40:4d:5c:bd:cc:42:38:13:8c:92:e6:56:0e:7c:
         59:98:0e:f7:b0:6f:f9:f6:d9:c8:c4:5f:31:ad:bc:34:74:65:
         e2:78:44:08:83:b5:ca:9f:06:b1:b0:c3:a5:be:48:c7:99:cc:
         13:1b:cb:73:66:da:7d:d2:df:c5:7f:cc:a4:b0:cf:8a:07:f6:
         d9:e4:80:b9:a8:d4:26:e0:90:99:d7:f6:1b:9b:3a:fe:5f:26:
         c4:a1:f4:0d:af:d5:7b:33:ed:1b:92:7d:5e:a4:5f:e2:42:db:
         ae:a7:e6:77:31:f8:01:4d:e3:df:bd:34:ba:3b:03:77:5f:48:
         7c:f7:d0:ef:a5:1c:67:3b:d9:5c:d7:30:97:1e:38:34:7e:f7:
         36:b9:e3:3c:bc:65:9d:ec:b6:f9:50:56:22:be:87:61:f5:16:
         fb:64:19:61:88:43:ca:9f:1c:04:bf:bb:e4:9f:0b:15:c4:7e:
         03:87:65:d8:0b:ba:45:da:e1:65:25:6a:06:de:71:c9:0d:b5:
         00:ba:14:30:03:0d:1b:f7:a1:0f:da:33:27:65:cd:87:0d:2c:
         6c:a7:c6:0f:cb:eb:32:2e:0b:57:b0:a9:e7:be:ea:0f:6e:1c:
         cf:0c:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----