Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.mft
File:                     0D9B089D54449B828A03CD60C6B4CD46823B573C.mft (raw, json)
Hash identifier:          RGViI5VHbAWPK0vcVTPDvPhVAm6bUlUmPnh5kFWs3d4=
Subject key identifier:   CD:BE:B3:14:C0:10:39:F5:B7:99:27:08:46:C2:E6:1B:3B:66:C7:84
Authority key identifier: 0D:9B:08:9D:54:44:9B:82:8A:03:CD:60:C6:B4:CD:46:82:3B:57:3C
Certificate issuer:       /CN=0D9B089D54449B828A03CD60C6B4CD46823B573C
Certificate serial:       52FA06EF6C2868B9795198712C9D942F20ACC39E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.mft
Manifest number:          EC
Signing time:             Tue 25 Oct 2022 03:46:26 +0000
Manifest this update:     Tue 25 Oct 2022 03:41:26 +0000
Manifest next update:     Wed 26 Oct 2022 07:32:26 +0000
Files and hashes:         1: 0D9B089D54449B828A03CD60C6B4CD46823B573C.crl (hash: 33OeQmveFE+TihNvwgXFoWbL3fIv8Rd5dOxAmWUu5K8=)
                          2: 3137372e33372e34342e302f32322d3234203d3e20323730353035.roa (hash: E4iMT1FLReKINBnJUh9I5hnqXoSdDVH4y4JD2FgVJ2Q=)
                          3: 323830343a366366633a3a2f33322d3438203d3e20323730353035.roa (hash: MUtpWQSKRBcvLHpyIMfzj4sMouK9U/BxqqIkQJYMRRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:06:ef:6c:28:68:b9:79:51:98:71:2c:9d:94:2f:20:ac:c3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9B089D54449B828A03CD60C6B4CD46823B573C
        Validity
            Not Before: Oct 25 03:41:26 2022 GMT
            Not After : Oct 26 07:32:26 2022 GMT
        Subject: CN=CDBEB314C01039F5B799270846C2E61B3B66C784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:c3:28:da:e2:7a:be:54:41:a4:dc:70:ab:
                    b0:f0:f3:55:80:c4:f3:ba:08:b4:18:60:ce:a4:7a:
                    10:9d:2c:59:67:47:c2:d0:c3:7f:c8:1a:da:ff:18:
                    db:39:e7:ae:76:9d:13:a7:a6:3c:e6:f2:b2:e8:9b:
                    f1:47:e2:7d:e4:9f:eb:55:5e:df:c5:cb:9a:57:32:
                    1b:56:bb:47:16:70:1d:83:92:a8:01:14:68:2d:9a:
                    e3:f4:fd:5c:4a:12:d7:62:16:3f:9c:f7:93:5e:c0:
                    81:0f:99:28:d2:e8:7d:36:18:2c:4d:d9:3d:6e:02:
                    0f:13:90:eb:c4:94:66:b7:63:39:5a:ea:fd:f0:eb:
                    fb:f7:b3:c0:5e:34:7a:ef:9a:7f:96:b5:2b:02:36:
                    ac:25:1f:de:d6:67:7d:1a:97:af:ec:d7:39:f1:f5:
                    4a:e1:e4:b1:61:7e:bf:43:11:59:6c:0f:30:93:d4:
                    c1:ee:50:88:cf:f2:13:ae:a7:99:38:be:69:bf:e2:
                    c8:88:72:ea:f5:17:59:e6:e7:9e:03:d0:65:e5:ca:
                    f1:40:7b:b9:5c:7a:01:49:4f:87:4a:c8:53:5b:78:
                    80:ca:d6:27:bf:c6:81:e5:12:ee:6f:74:b7:be:cc:
                    fd:b0:ec:6b:ce:2b:45:34:e1:d9:ca:03:16:7e:2a:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BE:B3:14:C0:10:39:F5:B7:99:27:08:46:C2:E6:1B:3B:66:C7:84
            X509v3 Authority Key Identifier:
                keyid:0D:9B:08:9D:54:44:9B:82:8A:03:CD:60:C6:B4:CD:46:82:3B:57:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:4f:c7:94:96:35:76:5a:26:09:31:64:4f:60:c8:ec:47:
         26:ee:39:f9:9b:3d:ff:1f:c1:2a:2b:30:20:cf:ee:26:08:2d:
         76:93:56:2e:66:ea:db:fb:04:b4:71:46:26:ca:e0:1d:39:f0:
         44:53:f6:50:5e:6b:e7:73:18:a3:9a:24:85:44:e5:ba:79:b9:
         21:53:db:03:8e:8e:2b:7e:84:2d:49:9c:dd:f5:a1:78:9f:3b:
         d9:87:45:1b:57:3e:9f:de:40:99:58:07:61:58:d1:da:ec:15:
         ba:e7:18:d3:7d:80:73:dd:79:a1:0e:97:a8:72:44:f4:3c:e8:
         b8:59:7f:50:0e:61:79:e6:8c:12:96:9a:84:6e:85:9a:f6:66:
         cd:7c:c1:44:e1:da:c0:2c:b0:f2:6b:90:56:52:eb:47:10:2b:
         6c:e4:6c:90:b6:77:f6:3e:71:7d:40:40:fa:3b:e0:24:1e:58:
         a3:8e:f9:df:cf:90:fe:e4:08:6b:f0:70:de:8e:31:83:b3:da:
         d0:81:c2:66:a7:90:8f:bd:11:5a:64:ba:13:de:61:96:21:dd:
         7c:cb:01:94:25:52:e7:a9:2d:50:43:30:e1:73:ed:2f:5f:16:
         3b:81:fd:ad:ca:6b:69:47:9c:ac:8b:e5:76:9c:06:a9:bf:ea:
         7b:e3:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----