Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/9C8F897F8976624C21F6870555244473B19A5763.mft
File:                     9C8F897F8976624C21F6870555244473B19A5763.mft (raw, json)
Hash identifier:          W++6SdqygCnVown/JcQ51ccRRim/IPsPau0R4W+3tXA=
Subject key identifier:   7F:05:DE:5B:3E:92:9E:77:1B:A7:8C:9A:35:21:60:0D:5F:43:A3:CB
Authority key identifier: 9C:8F:89:7F:89:76:62:4C:21:F6:87:05:55:24:44:73:B1:9A:57:63
Certificate issuer:       /CN=9C8F897F8976624C21F6870555244473B19A5763
Certificate serial:       528F453A8C8F0915CCDCD0D2DB74DB32465EE03D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C8F897F8976624C21F6870555244473B19A5763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/9C8F897F8976624C21F6870555244473B19A5763.mft
Manifest number:          011A
Signing time:             Mon 23 Jan 2023 06:17:27 +0000
Manifest this update:     Mon 23 Jan 2023 06:12:27 +0000
Manifest next update:     Tue 24 Jan 2023 09:26:27 +0000
Files and hashes:         1: 323830343a346439383a3a2f33322d3438203d3e20323638323037.roa (hash: dC9yFl9xXWvaQcO3SoTAXiLL60KlS1QXdN5qHo9J/IM=)
                          2: 34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (hash: kiBpjmh/1MxIasAoHEgDlN9FpEWPUFXtxSCInX+nRcQ=)
                          3: 9C8F897F8976624C21F6870555244473B19A5763.crl (hash: X/Y4onEaWtl2O0XAnD+DsAclf9lFMVF3m9WtX5Fi+m0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8f:45:3a:8c:8f:09:15:cc:dc:d0:d2:db:74:db:32:46:5e:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8F897F8976624C21F6870555244473B19A5763
        Validity
            Not Before: Jan 23 06:12:27 2023 GMT
            Not After : Jan 24 09:26:27 2023 GMT
        Subject: CN=7F05DE5B3E929E771BA78C9A3521600D5F43A3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:e2:b1:20:68:d8:ca:9f:a0:ae:f8:3a:c7:
                    04:65:92:15:11:d7:24:b9:75:db:38:7f:33:7c:a1:
                    85:6e:38:bc:48:c4:27:3f:76:07:c9:61:1d:38:09:
                    21:03:a4:59:4b:4e:69:2d:cc:fc:5f:c3:d2:ff:6b:
                    45:15:3c:57:74:07:23:44:6b:4f:e5:a3:f1:97:40:
                    50:2a:c1:c6:53:74:d8:d2:ae:30:f4:78:46:33:f5:
                    d5:60:40:94:86:83:1c:50:05:f3:39:26:bd:d4:63:
                    54:0a:78:16:2f:4c:af:be:ab:0a:8d:f4:82:3b:1f:
                    38:aa:db:ce:2b:38:fd:41:ab:eb:0e:7e:ba:48:44:
                    68:32:10:08:92:f0:98:5b:24:58:a3:bf:ac:5d:69:
                    c7:65:ec:37:18:81:58:25:21:f1:b0:5f:bc:9f:e7:
                    1e:ee:d0:77:b7:b8:40:9d:09:b5:f0:6f:dd:3c:0b:
                    97:1e:e7:ac:94:44:e5:72:91:4d:70:cf:85:51:61:
                    59:75:3e:09:1a:27:37:cc:8f:0b:40:08:bd:d1:e5:
                    38:bc:a2:22:74:03:7a:94:ce:e8:67:ec:49:26:22:
                    c8:fa:1d:8e:33:10:d0:f4:e0:a2:68:03:14:cf:52:
                    75:b0:14:e2:69:45:ec:f0:10:92:8e:bd:73:0b:02:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:DE:5B:3E:92:9E:77:1B:A7:8C:9A:35:21:60:0D:5F:43:A3:CB
            X509v3 Authority Key Identifier:
                keyid:9C:8F:89:7F:89:76:62:4C:21:F6:87:05:55:24:44:73:B1:9A:57:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/9C8F897F8976624C21F6870555244473B19A5763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C8F897F8976624C21F6870555244473B19A5763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/9C8F897F8976624C21F6870555244473B19A5763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:de:e3:ab:78:f2:ac:3e:1d:9b:6a:b5:ec:79:43:9c:ae:
         04:30:a0:88:72:a1:4a:9f:a9:83:30:0f:cb:45:c9:1a:62:0d:
         90:8e:f4:8b:e2:d1:88:53:52:41:d6:e5:ab:b7:c4:76:e1:4c:
         70:9e:7e:50:7b:6c:5a:31:6d:6a:9b:d5:6b:ae:57:4c:72:32:
         66:92:3a:46:17:14:cd:53:0b:69:8d:76:9b:b3:2a:1e:b5:cd:
         cc:fd:84:4b:b9:d1:ec:50:bf:48:9a:56:a4:0a:a2:23:e5:d5:
         9f:81:f7:44:16:08:f1:85:d1:29:82:c6:ae:7b:4a:31:40:7c:
         16:37:7f:59:4f:3e:66:ff:40:d0:05:97:d1:e3:30:14:f3:ff:
         bd:cc:51:48:15:8a:93:73:be:eb:0d:3c:13:8f:f2:69:0e:37:
         e6:a9:aa:fc:14:a0:fe:57:c3:b5:5f:8a:f6:a1:f8:f5:f8:ad:
         19:ba:32:77:f4:e7:f7:1c:c6:e8:65:c2:0c:3b:e5:5c:1f:11:
         4d:e7:71:46:ee:0c:54:27:64:06:69:5d:88:0d:1b:de:d0:eb:
         5d:85:41:4d:03:21:d9:93:f0:22:d4:92:7a:78:09:15:b8:68:
         f2:9a:60:bd:de:2c:b5:67:08:39:7b:e0:08:5c:ab:20:c8:ac:
         73:83:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----