Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/E5582930CAB57484356706A2772E35B4A076CBDF.mft
File:                     E5582930CAB57484356706A2772E35B4A076CBDF.mft (raw, json)
Hash identifier:          +U4rGXp2CpFZTwCuvpl5g8ym6hMWQaEHh/e524KwFA8=
Subject key identifier:   97:31:3A:46:F0:FE:C2:CF:64:63:B6:67:11:A6:54:B4:F2:35:11:1B
Authority key identifier: E5:58:29:30:CA:B5:74:84:35:67:06:A2:77:2E:35:B4:A0:76:CB:DF
Certificate issuer:       /CN=E5582930CAB57484356706A2772E35B4A076CBDF
Certificate serial:       541BA8399530A9BCE7CF4404E3708AA6068FFA4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5582930CAB57484356706A2772E35B4A076CBDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/E5582930CAB57484356706A2772E35B4A076CBDF.mft
Manifest number:          D2
Signing time:             Wed 15 Mar 2023 17:39:23 +0000
Manifest this update:     Wed 15 Mar 2023 17:34:23 +0000
Manifest next update:     Thu 16 Mar 2023 17:50:23 +0000
Files and hashes:         1: 323830343a376130633a3a2f33322d3333203d3e20323731333434.roa (hash: oFRXxHB1/1lk/kLkeQlpFCvJSt4AA36/Y8bNOTBwHjc=)
                          2: E5582930CAB57484356706A2772E35B4A076CBDF.crl (hash: ucpP+YldlSJvikrozarUj+3yIQBVJ9vFnlq1OTyrEr4=)
                          3: 3139302e3132332e36342e302f32332d3234203d3e20323731333434.roa (hash: JU5VLi6BifnzEzR4OfGOmA16dVZGteFbyB2JulQuL38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1b:a8:39:95:30:a9:bc:e7:cf:44:04:e3:70:8a:a6:06:8f:fa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5582930CAB57484356706A2772E35B4A076CBDF
        Validity
            Not Before: Mar 15 17:34:23 2023 GMT
            Not After : Mar 16 17:50:23 2023 GMT
        Subject: CN=97313A46F0FEC2CF6463B66711A654B4F235111B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:4e:d6:02:94:3e:3b:71:7d:0c:74:c6:f0:
                    7e:da:ef:6d:5b:49:54:96:68:36:f6:18:24:39:d4:
                    27:49:f1:ec:9e:ac:b1:5c:55:6d:d5:5f:b5:b3:f8:
                    d6:7b:81:4d:56:c7:cc:25:3e:9e:b9:0e:95:d8:1a:
                    7d:15:c0:3c:07:8c:43:18:b1:e1:ad:f1:0d:e1:fd:
                    5e:9d:62:30:e9:ad:7d:42:f7:ca:c4:39:af:b1:bc:
                    94:5f:08:ea:3f:92:d0:10:02:f5:eb:3e:3c:1f:49:
                    a6:e8:3c:ac:b7:35:d4:16:fc:78:3a:67:51:e3:a4:
                    0d:34:a4:78:0b:87:41:2c:98:db:14:72:b2:2c:11:
                    9b:1e:ad:89:1d:1c:59:85:9b:14:ef:8d:38:37:9f:
                    21:6f:43:9b:16:61:b3:a5:b9:56:64:22:67:d7:33:
                    29:93:b8:e2:d4:2a:c3:81:c4:2f:56:b0:9f:37:c5:
                    0d:f9:76:f8:1f:5e:f8:cc:6a:4d:07:b6:7a:ff:6f:
                    d7:1f:60:4a:f8:83:82:82:f6:4d:74:e4:cf:f5:09:
                    99:90:e6:ce:cb:8e:d3:d1:1b:52:5a:fb:70:b8:a0:
                    72:56:af:a4:bf:a7:50:8a:48:ed:ac:85:05:21:79:
                    43:71:a5:75:81:66:2f:8c:09:65:e8:12:9c:fd:7a:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:3A:46:F0:FE:C2:CF:64:63:B6:67:11:A6:54:B4:F2:35:11:1B
            X509v3 Authority Key Identifier:
                keyid:E5:58:29:30:CA:B5:74:84:35:67:06:A2:77:2E:35:B4:A0:76:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/E5582930CAB57484356706A2772E35B4A076CBDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5582930CAB57484356706A2772E35B4A076CBDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/E5582930CAB57484356706A2772E35B4A076CBDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:89:84:23:9b:87:9a:b1:46:2c:0a:65:f5:8c:2c:2b:b4:c5:
         1e:ac:0f:20:ac:fe:de:d4:3b:cf:2d:49:68:28:ff:3b:a9:23:
         c1:72:e8:28:6d:f0:0b:a4:30:48:08:d4:82:79:8c:b5:97:e8:
         b4:4a:a2:f7:21:4c:50:25:ba:bb:4e:77:46:6a:dc:3f:b1:0a:
         e3:44:c9:a3:18:bf:53:bd:8c:6d:a2:67:09:e0:6d:65:54:f4:
         dc:07:5d:07:70:a3:56:78:ff:9f:3d:91:40:47:7c:81:9a:9e:
         00:38:58:bc:d7:43:dd:00:1e:6b:5e:79:bd:76:5f:5d:b7:fd:
         b1:41:d0:39:7a:ff:b9:85:ba:5d:fa:77:76:b8:3c:33:80:73:
         87:9c:f3:28:9d:3f:f6:9e:23:b2:cf:11:1b:8c:eb:56:87:b8:
         d3:16:e2:dd:96:47:e8:e9:89:52:7f:85:c2:e2:f9:72:35:89:
         55:65:b8:dc:fb:bd:7b:52:45:0f:b7:46:12:d4:4a:ee:8d:0c:
         0d:25:9f:86:f3:43:1b:10:9a:00:ae:d3:7b:b0:55:74:e8:58:
         dd:a6:f7:eb:42:fa:5a:45:c3:15:93:cb:96:15:da:df:aa:fe:
         47:63:e9:d9:ec:d6:9d:44:f7:95:e0:fe:5e:ad:16:4b:d9:60:
         69:4a:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----