Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft
File:                     3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft (raw, json)
Hash identifier:          fmDrEhPVGzg6Vv/fdb54whgdDwNDAULJqWqj+a5cmVM=
Subject key identifier:   4B:50:76:4B:11:30:59:A6:D4:0D:07:31:09:2B:FA:6E:3D:6C:7C:42
Authority key identifier: 3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98
Certificate issuer:       /CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
Certificate serial:       19A7AAC47AF2EBE722AFBD7A69B4A0AD42CBC116
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft
Manifest number:          02
Signing time:             Sun 23 Apr 2023 16:44:57 +0000
Manifest this update:     Sun 23 Apr 2023 16:39:57 +0000
Manifest next update:     Mon 24 Apr 2023 19:08:57 +0000
Files and hashes:         1: 323830343a383262343a3a2f33322d3438203d3e20323732353335.roa (hash: vQiN4IOdrRfQOBWqryuWEIZNT/3Lvi9Lfi3/ufhw98w=)
                          2: 3230312e39342e3135322e302f32322d3234203d3e20323732353335.roa (hash: bRskLlgDv/CCJ4aFIGeFN8gr2Wmay96eN+fMRpX11LM=)
                          3: 3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.crl (hash: ZUPa54BFWDwQPfIxiBBkcBzP8e4cApsAxqtaAmcCZ3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a7:aa:c4:7a:f2:eb:e7:22:af:bd:7a:69:b4:a0:ad:42:cb:c1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
        Validity
            Not Before: Apr 23 16:39:57 2023 GMT
            Not After : Apr 24 19:08:57 2023 GMT
        Subject: CN=4B50764B113059A6D40D0731092BFA6E3D6C7C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:f8:0c:90:3c:5e:84:ad:2b:ae:0a:ec:0a:
                    86:b6:26:96:06:8e:20:24:3a:54:9a:a3:2c:0b:5c:
                    29:e6:91:77:51:bf:60:ff:3f:bb:d0:62:04:f7:97:
                    19:ee:8d:ed:83:5d:13:6f:a9:51:9a:84:3f:31:d2:
                    bf:af:6a:82:90:f5:e5:3c:9a:71:a7:01:89:1f:ed:
                    4e:92:a7:b1:6f:1a:fb:4d:4f:3c:89:c7:45:d9:f6:
                    e5:6c:32:94:80:dc:c0:30:f5:dc:6b:1c:1c:67:51:
                    e8:34:dc:78:92:77:8e:5b:95:16:7e:dc:ca:c3:41:
                    da:69:58:8d:ac:e5:82:60:b6:73:bc:3e:7c:1e:6f:
                    b5:d8:8d:48:c0:77:50:bb:04:f0:e6:5e:bf:b8:e5:
                    ed:f4:0a:ac:f6:ac:3a:01:a3:22:b2:d6:9e:fd:1c:
                    12:42:b1:32:28:c3:30:86:00:7f:d1:47:56:25:d1:
                    f9:d7:67:26:a4:e6:d5:a4:3b:13:4f:4b:b1:33:d5:
                    0f:65:5a:9e:8d:06:55:7f:e9:32:5c:2b:08:7d:8a:
                    73:b0:d7:2e:7e:89:00:7f:3f:8f:5a:14:ba:7d:a4:
                    60:2a:31:ee:cf:35:4a:94:da:cc:54:d9:65:49:78:
                    8a:bc:a2:e4:fc:32:ef:8c:cc:43:56:e6:8d:77:50:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:50:76:4B:11:30:59:A6:D4:0D:07:31:09:2B:FA:6E:3D:6C:7C:42
            X509v3 Authority Key Identifier:
                keyid:3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2e:d0:71:17:7e:ff:68:11:20:fa:7d:66:34:e3:f4:c5:b6:
         c9:a8:75:1f:56:8a:68:b5:2b:bc:b1:dc:f8:08:bb:09:97:90:
         d4:00:29:14:f5:ff:51:28:4d:74:e0:2d:8b:22:f2:a4:6c:46:
         df:65:47:73:d4:67:2e:09:9f:57:b4:d0:e0:82:8e:8d:e9:73:
         9c:e2:8f:97:7a:b1:26:cd:0f:22:63:bc:f6:90:3a:e7:17:05:
         36:c1:ba:d2:62:58:da:e5:bc:03:cf:3d:41:d0:94:8c:4d:22:
         4d:f3:2f:dd:e5:40:60:79:d6:8c:55:7d:c1:ae:f3:d6:d0:05:
         c7:95:ef:21:69:68:f8:16:88:5d:a1:e7:05:74:ca:69:bf:ec:
         f3:b4:05:0f:f3:da:34:39:e5:9e:05:23:8b:1c:82:4f:41:6f:
         8b:31:3f:f1:46:35:28:ae:7d:07:ae:e1:19:a8:68:8d:d6:f0:
         12:08:01:ab:2e:25:23:5b:50:31:65:aa:f7:e4:63:42:75:13:
         7c:cb:cd:7b:b5:dd:de:06:55:e2:61:fb:24:29:27:24:e0:9e:
         16:46:e8:c4:6e:7e:13:c0:8f:d2:f2:25:b7:64:29:b6:41:b8:
         22:00:f7:c9:d8:25:f5:33:25:7b:ab:1a:0e:58:a2:56:57:7d:
         13:ca:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----