Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.mft
File:                     C26BFA83533142EE2FDE0F72B36DA3E7B7426577.mft (raw, json)
Hash identifier:          yKyekLH9sL9L5u60qVjCKNA/tRThaNxJVV7QIAmAr+Y=
Subject key identifier:   BF:36:5B:A0:46:58:BD:63:43:49:38:B0:9A:5F:68:8D:C9:7D:12:00
Authority key identifier: C2:6B:FA:83:53:31:42:EE:2F:DE:0F:72:B3:6D:A3:E7:B7:42:65:77
Certificate issuer:       /CN=C26BFA83533142EE2FDE0F72B36DA3E7B7426577
Certificate serial:       2E37DEA40C5E611209D4B6AFD7DD9CF3E5E0EE55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.mft
Manifest number:          2D
Signing time:             Mon 13 Jun 2022 22:37:32 +0000
Manifest this update:     Mon 13 Jun 2022 22:32:32 +0000
Manifest next update:     Wed 15 Jun 2022 02:26:32 +0000
Files and hashes:         1: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: QPIxxtBElQsYALygcIO3GF0RaDInt2DYymZvKVp9dJQ=)
                          2: C26BFA83533142EE2FDE0F72B36DA3E7B7426577.crl (hash: Mt2rtMHmgOFaZsKqMMXMR50uWPry+nu7DwSBFKpjMXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:37:de:a4:0c:5e:61:12:09:d4:b6:af:d7:dd:9c:f3:e5:e0:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C26BFA83533142EE2FDE0F72B36DA3E7B7426577
        Validity
            Not Before: Jun 13 22:32:32 2022 GMT
            Not After : Jun 15 02:26:32 2022 GMT
        Subject: CN=BF365BA04658BD63434938B09A5F688DC97D1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:16:7f:23:21:d0:7f:78:44:8d:8c:dc:93:
                    40:9f:b4:8c:2b:d2:cb:9c:43:21:12:26:35:a6:0a:
                    ea:07:b0:d8:d9:d8:5f:a1:a2:16:8d:7f:4f:23:85:
                    5a:d6:ab:48:c7:ed:99:68:96:2e:95:45:e0:08:df:
                    89:4a:19:44:10:cb:10:6c:3d:4a:00:0c:77:5d:d9:
                    cf:53:5f:2f:02:69:aa:a9:cf:95:09:ad:52:69:4d:
                    4e:d7:0d:0e:4e:ab:1e:ba:e1:20:63:93:17:8b:b5:
                    e6:7c:e8:72:2e:b5:50:aa:a0:98:b1:3f:f6:bc:ed:
                    78:89:8f:e2:ff:bb:e6:c8:47:07:6b:f4:01:95:40:
                    ef:52:f0:d3:3e:b6:4d:0c:8d:3e:fe:a3:d4:cf:e0:
                    85:07:f4:25:8e:15:74:cd:a7:de:a7:e6:66:92:2d:
                    c7:d1:c1:23:f1:8a:1e:32:8c:52:0d:ab:76:74:0c:
                    24:00:d5:b2:c3:b3:27:1f:fa:2e:eb:2f:27:0b:db:
                    b2:f7:be:3a:57:58:dc:3f:35:b4:b5:4d:e0:ca:84:
                    e7:1b:0b:3a:22:fb:74:ee:64:b8:25:11:fc:a0:88:
                    54:83:75:41:e3:e9:d4:25:34:91:50:54:14:9d:fc:
                    a7:0d:cc:34:56:15:15:88:ad:d1:d2:a5:fd:c9:16:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:5B:A0:46:58:BD:63:43:49:38:B0:9A:5F:68:8D:C9:7D:12:00
            X509v3 Authority Key Identifier:
                keyid:C2:6B:FA:83:53:31:42:EE:2F:DE:0F:72:B3:6D:A3:E7:B7:42:65:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/C26BFA83533142EE2FDE0F72B36DA3E7B7426577.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:e9:2c:81:35:a7:51:4b:15:cc:b8:91:c2:f3:e7:23:2b:
         0e:4d:29:a3:75:36:b3:18:82:a7:c8:ef:35:61:97:7e:47:f6:
         dc:f6:0a:8f:93:41:4b:da:d1:5b:00:a7:34:6b:96:34:3f:67:
         b1:bd:8a:e0:b9:b7:14:ad:fb:36:3d:c8:84:0e:a3:da:85:c6:
         8c:d7:3b:6a:96:9c:eb:37:cc:b4:e3:99:aa:55:ec:3a:e3:aa:
         e9:bb:7d:89:13:32:e0:ea:bf:f2:b5:a5:2d:b7:51:22:9a:fe:
         15:69:1c:5d:cb:d7:c3:02:24:7f:39:d8:5d:3d:68:5f:9e:33:
         54:8d:be:39:05:4d:84:ab:82:a1:6e:97:e6:b6:b9:23:80:91:
         d5:d8:bc:8a:36:f8:2f:77:f4:96:8e:d3:b7:8d:62:2d:fa:0e:
         c8:02:86:37:1b:c1:44:e1:f1:d1:64:2d:47:56:5f:72:86:67:
         ee:66:37:39:43:be:11:c7:23:01:f1:fd:0a:11:12:57:36:04:
         0f:d4:5f:69:f9:62:d7:20:3f:c5:22:1f:4b:9f:96:d1:13:ea:
         d2:4c:98:7d:2c:d3:1e:d0:6f:b3:32:79:7c:3c:29:f0:5e:83:
         bb:50:ba:de:d7:c0:68:5c:39:dd:c6:3d:ef:9a:e4:34:17:15:
         77:6d:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----