Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.mft
File:                     BDA1100C1000EE6F3E01E85E309530BE36F13995.mft (raw, json)
Hash identifier:          50NvESYkCPkrL8TnQm7Q8USc/WHRj6WenK8OTNbrEZE=
Subject key identifier:   1E:CF:4D:1A:92:4F:DD:6B:72:B3:DA:3D:C8:DD:56:9D:92:3A:69:E8
Authority key identifier: BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95
Certificate issuer:       /CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
Certificate serial:       7447470E0B635BB3BB7B18E406B57F4D9B102999
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.mft
Manifest number:          01F1
Signing time:             Tue 17 Jan 2023 07:30:00 +0000
Manifest this update:     Tue 17 Jan 2023 07:25:00 +0000
Manifest next update:     Wed 18 Jan 2023 10:35:00 +0000
Files and hashes:         1: BDA1100C1000EE6F3E01E85E309530BE36F13995.crl (hash: l6PbjLJvlk313yk4abNthexcHXRKDttTdbRuwYsxmWQ=)
                          2: 3139312e33372e3232342e302f32312d3332203d3e20323633333734.roa (hash: KnGAbeR0MHKaSLDb4JyknuXfInHd/ptf6MQsjZJpboU=)
                          3: 323830343a313532383a3a2f33322d3334203d3e20323633333734.roa (hash: +sUnpzEb+Xk9RyTn35tNyOdCgvdSOU29i+q+1H/lkvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:47:0e:0b:63:5b:b3:bb:7b:18:e4:06:b5:7f:4d:9b:10:29:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
        Validity
            Not Before: Jan 17 07:25:00 2023 GMT
            Not After : Jan 18 10:35:00 2023 GMT
        Subject: CN=1ECF4D1A924FDD6B72B3DA3DC8DD569D923A69E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:8a:b1:c9:11:1d:69:e6:f9:90:95:99:43:
                    70:01:de:a0:50:61:eb:65:fc:34:02:c0:a9:c3:99:
                    d9:3d:07:5a:c7:91:ce:96:f0:56:19:85:7a:d0:cd:
                    2e:1e:6c:34:88:88:43:59:1a:88:f8:24:b0:f9:c4:
                    1d:82:6b:4b:e6:f0:05:22:14:1f:79:e5:66:3b:84:
                    6d:50:2b:28:8a:80:76:34:c8:f2:25:2f:7f:3c:91:
                    d2:7d:39:54:4f:e2:dc:0e:9c:12:8f:c9:af:3b:68:
                    63:ae:1e:e0:a4:a8:f8:6b:8a:1d:93:b0:6e:89:9d:
                    c6:f7:60:68:6b:c4:a8:a5:c5:28:69:90:b7:ab:3d:
                    45:b9:12:fc:94:39:19:f7:5f:60:03:ee:4d:ee:4f:
                    71:de:e9:e2:8f:fa:ab:c3:f9:21:aa:d7:0a:3a:77:
                    56:6f:eb:96:7e:1d:76:32:06:b1:9f:8f:d1:73:ec:
                    23:4b:67:30:ad:d0:ae:99:cc:2d:83:61:45:78:09:
                    0c:30:9b:17:1c:21:d0:2d:1e:5e:9f:b8:4b:25:33:
                    6e:8f:5e:f1:9b:30:51:fd:7a:a3:73:37:d7:53:c7:
                    6b:0d:1d:23:20:2f:db:c5:7a:08:d2:d9:54:67:fc:
                    a3:0a:f6:7f:94:28:80:17:aa:03:bf:a0:82:ad:19:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:4D:1A:92:4F:DD:6B:72:B3:DA:3D:C8:DD:56:9D:92:3A:69:E8
            X509v3 Authority Key Identifier:
                keyid:BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:f8:0a:9c:d4:e2:e3:8f:52:8f:b6:8b:05:87:aa:9d:ec:
         a1:d4:f3:1f:cd:b1:3b:76:97:3f:e4:8c:39:5b:2d:6d:de:75:
         d1:b5:d3:7d:3c:ac:92:a9:bc:53:6a:b7:7c:67:b4:c5:69:eb:
         1f:cf:ba:51:fb:f9:a8:e8:c2:d7:fe:f0:11:e8:88:82:da:ce:
         c4:6f:a3:0a:42:45:aa:09:8f:4d:c1:2c:e7:76:fa:45:24:fb:
         68:ba:0c:c3:42:00:9e:93:1e:35:3a:48:38:87:a5:11:56:b3:
         0b:04:d6:b2:fe:88:cf:3e:17:9a:47:35:35:e2:d0:de:2d:2b:
         2b:e1:47:62:20:a5:6e:a7:f4:fa:bd:6e:4c:28:a7:36:81:6d:
         d4:92:fb:a6:fb:53:fd:87:39:0d:69:ca:24:57:fd:d2:e0:ab:
         a2:00:ef:b7:38:65:1d:35:36:3b:47:c0:d6:4e:bc:2b:32:5f:
         23:64:9a:77:64:d0:b6:9a:0f:4d:61:8f:74:40:a3:e1:32:83:
         04:82:fe:01:82:c0:d1:50:e4:25:d6:46:d2:68:d3:06:53:c6:
         50:26:d6:2b:db:0a:43:6b:61:c7:97:0d:fe:02:5b:f2:1a:f8:
         37:a6:0b:45:33:f5:8b:ad:37:c0:4b:2d:15:11:2f:7d:98:d1:
         f8:fa:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----