Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.mft
File:                     64F420F8784014FABFBC1041CAA9D39011085982.mft (raw, json)
Hash identifier:          0u8j77qaOEzz9h4uMy75YqSdE61DnGXM1m3XC267SP4=
Subject key identifier:   00:8A:63:02:03:E3:01:EA:40:C7:BA:DE:D6:9F:B8:73:23:71:0A:E4
Authority key identifier: 64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82
Certificate issuer:       /CN=64F420F8784014FABFBC1041CAA9D39011085982
Certificate serial:       405C3B5403521C07D973AE50A38E207B7D027342
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64F420F8784014FABFBC1041CAA9D39011085982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.mft
Manifest number:          6A
Signing time:             Thu 20 Jul 2023 17:04:13 +0000
Manifest this update:     Thu 20 Jul 2023 16:59:13 +0000
Manifest next update:     Fri 21 Jul 2023 19:18:13 +0000
Files and hashes:         1: 34352e3137372e3232382e302f32332d3233203d3e20323639303732.roa (hash: iciLgg3+cTMds2Ioleu4E6OQOPoPPoKh7TsEs4jd0A4=)
                          2: 323830343a356630383a3a2f33322d3332203d3e20323639303732.roa (hash: vtwSjPp75d+Xb0iw8HIt+RArkjwQMA4c7s6PulYJB2E=)
                          3: 64F420F8784014FABFBC1041CAA9D39011085982.crl (hash: hXQC9JcFyM997V0D2epITrLhcyc5WLFO8bfMELXVqkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5c:3b:54:03:52:1c:07:d9:73:ae:50:a3:8e:20:7b:7d:02:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F420F8784014FABFBC1041CAA9D39011085982
        Validity
            Not Before: Jul 20 16:59:13 2023 GMT
            Not After : Jul 21 19:18:13 2023 GMT
        Subject: CN=008A630203E301EA40C7BADED69FB87323710AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:f8:42:76:4a:bf:67:79:57:29:7d:46:8f:
                    2f:b9:38:33:22:a0:47:08:67:42:17:9c:61:81:bb:
                    53:fb:7c:98:ab:1e:0d:d1:11:1d:0e:6e:b5:1c:43:
                    2d:f2:6e:65:a0:ca:7b:1b:7d:af:f9:8c:19:36:7c:
                    5d:ef:0b:40:93:46:91:87:9f:0c:2d:fc:e2:b0:00:
                    5b:6e:49:3d:90:48:31:7e:36:0a:59:9a:b5:eb:bd:
                    ba:59:e8:4c:1f:08:e2:6d:e2:e3:6d:fe:41:08:84:
                    fe:02:28:ba:f6:fd:db:64:9d:cd:d7:18:ee:af:3d:
                    f0:cf:f8:95:24:1b:bd:b4:36:81:d7:14:d6:2c:e8:
                    d6:63:71:9a:2b:ed:45:b5:1b:86:c0:1b:e2:a6:5d:
                    27:22:f0:ae:aa:d3:fb:1a:f9:fc:a3:d6:32:58:2f:
                    63:04:33:04:09:f3:33:b4:79:d1:59:10:84:03:05:
                    3e:3f:6a:f4:8c:d9:94:2f:60:50:a5:d2:b8:94:a9:
                    0b:10:5b:7b:ae:01:b7:55:3e:65:b1:29:f0:e1:53:
                    da:49:43:52:fe:d1:e8:b1:77:74:ba:0a:83:44:5b:
                    39:47:05:1c:5c:4a:59:5e:f3:de:f1:80:07:e6:73:
                    9c:8c:91:52:81:d3:c7:3d:76:85:0f:9f:26:51:db:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:63:02:03:E3:01:EA:40:C7:BA:DE:D6:9F:B8:73:23:71:0A:E4
            X509v3 Authority Key Identifier:
                keyid:64:F4:20:F8:78:40:14:FA:BF:BC:10:41:CA:A9:D3:90:11:08:59:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64F420F8784014FABFBC1041CAA9D39011085982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/64F420F8784014FABFBC1041CAA9D39011085982.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:71:c6:fe:cc:f5:c0:b5:4e:ee:6d:ee:47:5d:d9:4c:a9:
         54:e9:4b:09:97:81:21:ee:c0:20:6b:37:c2:c8:b2:9c:5b:d9:
         0c:a4:c8:8d:05:a4:5d:3e:aa:28:35:79:07:72:dd:eb:fe:b7:
         c4:45:62:81:9c:d2:64:9e:43:22:23:bf:9c:bc:6e:80:f0:7c:
         ae:a3:20:0d:44:ca:6f:f4:cd:b2:4a:ea:eb:32:b4:7a:47:4a:
         2c:09:ba:ee:e8:36:60:9a:81:d6:17:6f:23:2d:37:5a:f6:91:
         e0:82:66:41:57:95:be:d6:ed:6d:78:94:4e:48:71:53:8e:cc:
         fc:eb:f1:ec:79:fa:ad:7d:0b:ba:04:b3:75:6a:2f:6a:52:7e:
         55:db:68:d7:21:50:38:e1:b3:2d:1f:96:a2:f8:f4:e5:61:5d:
         24:6c:c6:d5:36:de:e7:8c:a2:45:30:73:18:87:e4:30:10:14:
         91:61:8d:13:3a:dc:77:39:3f:ef:77:c1:d1:9c:37:b2:88:6e:
         64:63:04:a2:9c:5b:1a:78:90:4d:c6:07:33:44:9f:cc:43:a7:
         14:1a:1a:0c:27:ab:f3:ac:db:53:48:7f:55:fd:b3:df:64:8c:
         5e:b3:4f:96:8c:04:c1:61:fd:9d:03:c3:6d:4a:6f:32:eb:6b:
         4a:dc:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----