Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft
File:                     420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft (raw, json)
Hash identifier:          kMJUmlReTbfV5AtFB0WMBZjcRLCqnFjHEBTEZypLTy8=
Subject key identifier:   C8:39:5C:55:22:C0:A3:B1:2A:7D:32:C2:04:CC:37:A7:20:59:D3:F6
Authority key identifier: 42:04:04:B7:5A:E7:FF:DD:CD:CD:7A:39:3D:2F:26:AA:CE:AD:4E:FC
Certificate issuer:       /CN=420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC
Certificate serial:       6D2AFDE2C11D79632613D39C876EBC752026558C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft
Manifest number:          0164
Signing time:             Sun 20 Aug 2023 17:11:12 +0000
Manifest this update:     Sun 20 Aug 2023 17:06:12 +0000
Manifest next update:     Mon 21 Aug 2023 20:46:12 +0000
Files and hashes:         1: 323830343a363764383a3a2f33322d3334203d3e20323639363534.roa (hash: zf6bcGcyHC1LlphAoj8xBGF0cb7JoklC899wWbImNGk=)
                          2: 420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.crl (hash: SBAeD1LBE/OPvFYqYFWVoRqkZ4+1BebuYP+pqfaUxio=)
                          3: 34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa (hash: u9xUeyhWj6yWL/mBMLaEPmhEJba9XcSoLPH0UueSdi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:fd:e2:c1:1d:79:63:26:13:d3:9c:87:6e:bc:75:20:26:55:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC
        Validity
            Not Before: Aug 20 17:06:12 2023 GMT
            Not After : Aug 21 20:46:12 2023 GMT
        Subject: CN=C8395C5522C0A3B12A7D32C204CC37A72059D3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:e7:d8:60:92:36:53:ce:7a:b2:65:ba:79:
                    58:fc:61:ea:27:4b:aa:87:77:c7:f4:d3:3d:e8:7c:
                    fa:b1:a4:84:15:28:68:dd:ea:d0:82:89:9e:8a:e7:
                    ed:ac:90:12:40:8d:55:25:61:30:71:4f:45:75:75:
                    de:74:1a:e0:1a:b1:1c:b4:28:da:34:40:f9:f0:9d:
                    32:e8:ae:18:18:f8:39:b3:0b:92:07:d8:d0:98:32:
                    fd:74:bb:df:2a:b1:18:a8:6e:9b:25:5e:bb:8f:aa:
                    8e:2e:93:48:ac:64:28:00:31:e5:c4:3d:04:fa:f1:
                    fa:64:5e:a7:87:8c:6c:7c:36:60:c8:e6:65:07:73:
                    db:8c:54:2e:42:2c:05:d6:5e:52:1d:8c:73:ba:35:
                    38:06:c8:de:e5:90:db:2d:8a:ba:d0:d5:38:45:d7:
                    8e:e9:6c:cf:0b:3f:93:48:95:eb:59:c8:95:c9:b2:
                    60:18:0a:78:be:e5:d3:3a:24:e7:b1:cf:be:1f:31:
                    3e:ab:38:91:fb:70:3a:e5:54:e3:e1:39:32:d7:bb:
                    3a:b5:dc:d7:00:0a:45:ca:fe:ab:1e:b8:4b:a8:c5:
                    73:77:40:1d:43:a9:f0:f0:23:2f:61:10:30:cc:84:
                    6c:5c:08:68:bf:87:7f:31:63:27:1f:00:2e:d4:c0:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:5C:55:22:C0:A3:B1:2A:7D:32:C2:04:CC:37:A7:20:59:D3:F6
            X509v3 Authority Key Identifier:
                keyid:42:04:04:B7:5A:E7:FF:DD:CD:CD:7A:39:3D:2F:26:AA:CE:AD:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:2d:4d:45:8f:3f:85:71:ce:e8:4e:eb:1d:c4:33:9d:ca:
         b6:84:4e:0b:5d:da:4e:ab:1b:11:46:ce:21:0b:92:34:97:f1:
         e1:e9:5e:65:74:8b:25:1b:de:6f:7c:00:88:e4:c6:1d:39:79:
         f7:04:af:33:c0:90:37:fd:c1:50:08:2b:a7:1f:84:e6:fc:08:
         ff:19:b7:50:3e:83:9c:f8:33:47:50:ee:b9:dc:8b:01:76:3b:
         92:9b:59:52:37:fb:a2:bd:18:51:2f:b6:2b:4e:8e:1f:71:5d:
         06:cd:e8:07:cf:ad:19:7e:1b:e6:b8:55:78:12:6d:ac:72:d7:
         17:11:d3:e9:67:75:29:e6:77:07:a8:8e:2a:cc:62:d9:74:b4:
         db:0e:6d:24:a9:51:45:2e:c6:1b:8c:f8:3c:36:62:98:40:f0:
         72:3b:22:02:ea:1b:ec:fd:22:ea:aa:f3:75:df:f1:4a:74:b8:
         ea:35:68:ee:11:f5:62:06:d7:38:6d:41:e0:17:dd:4a:d6:5a:
         03:84:d9:60:f3:f2:a7:9d:04:2b:d4:3e:dd:bd:5c:e2:96:3c:
         ab:a9:c4:86:98:fc:86:76:0b:3f:a3:4e:87:46:45:e4:cd:10:
         05:81:f5:7f:1f:de:ee:11:78:98:f9:29:e7:74:f2:fa:33:5c:
         38:7b:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----