Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.mft
File:                     A154EA318C648A7DB42706A6CD66BA031E6E0176.mft (raw, json)
Hash identifier:          w1sVS+wkC4CRyI3OqoEt0r/QmzJJsXDSVy/l/3WpphA=
Subject key identifier:   33:01:98:6E:64:02:EE:2A:AC:2E:5D:B8:0D:53:92:43:27:3E:22:7F
Authority key identifier: A1:54:EA:31:8C:64:8A:7D:B4:27:06:A6:CD:66:BA:03:1E:6E:01:76
Certificate issuer:       /CN=A154EA318C648A7DB42706A6CD66BA031E6E0176
Certificate serial:       7A13BB55D16B45634A5EE055DE06CF3C4F6C78C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.mft
Manifest number:          C6
Signing time:             Fri 16 Dec 2022 00:27:19 +0000
Manifest this update:     Fri 16 Dec 2022 00:22:19 +0000
Manifest next update:     Sat 17 Dec 2022 01:04:19 +0000
Files and hashes:         1: 34352e3138392e302e302f32322d3234203d3e20323639363438.roa (hash: lNVoS4+B06l8PBQarb2dLEXXMG1xW9pN9TP7HicpFhw=)
                          2: A154EA318C648A7DB42706A6CD66BA031E6E0176.crl (hash: TgBdGyhBbDVS7bEZ1QP7hrkz3Vu+4nHuXHtpnojt3g0=)
                          3: 323830343a363763303a3a2f33322d3438203d3e20323639363438.roa (hash: UfQOWWg/SXensHXnXQ3f8T3Q2zRSfY0/4DiAUiRQPTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:13:bb:55:d1:6b:45:63:4a:5e:e0:55:de:06:cf:3c:4f:6c:78:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A154EA318C648A7DB42706A6CD66BA031E6E0176
        Validity
            Not Before: Dec 16 00:22:19 2022 GMT
            Not After : Dec 17 01:04:19 2022 GMT
        Subject: CN=3301986E6402EE2AAC2E5DB80D539243273E227F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:93:88:c2:a8:b5:91:81:59:16:3e:cc:e5:
                    53:6d:09:94:4f:36:d0:7a:9f:9f:fa:06:20:5f:e5:
                    1f:b4:63:06:c7:a9:e0:f4:35:ac:a7:15:74:ea:e3:
                    2c:8a:7a:55:a9:1f:40:3c:96:a1:8a:be:61:e6:0b:
                    05:d7:ac:ee:04:67:b7:3c:19:06:4e:97:44:cc:42:
                    ec:c3:a0:0b:5c:a4:90:25:32:81:ec:af:81:64:5b:
                    c0:63:4d:29:ad:d4:a0:8d:19:d0:15:bc:2e:d3:a0:
                    ad:63:b3:fe:eb:dc:50:bd:66:f7:d6:d6:39:14:fb:
                    1c:ca:a3:ae:14:c4:0d:6b:f1:12:4a:a7:44:55:35:
                    17:da:bd:de:11:76:24:db:9e:62:b2:91:31:10:2d:
                    28:73:52:6f:d1:5a:33:1e:16:02:04:68:d9:9f:ab:
                    18:49:93:c2:a0:96:d9:58:16:ca:56:2b:90:05:f9:
                    ce:ae:94:b0:2b:0d:d1:4d:be:f0:9e:7c:76:2a:f9:
                    6e:df:b1:89:95:2d:11:b7:77:76:70:d7:75:dd:a3:
                    41:c5:3c:8e:24:fb:8c:3f:f5:51:d2:1a:6f:e7:91:
                    6c:13:69:7a:3a:31:b6:ff:a8:b9:e9:9d:d6:64:60:
                    be:02:f6:98:59:4a:aa:61:49:ab:50:bf:46:22:5c:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:98:6E:64:02:EE:2A:AC:2E:5D:B8:0D:53:92:43:27:3E:22:7F
            X509v3 Authority Key Identifier:
                keyid:A1:54:EA:31:8C:64:8A:7D:B4:27:06:A6:CD:66:BA:03:1E:6E:01:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:34:c0:49:5e:7c:33:e5:a7:a9:fe:7c:ee:9d:0c:a6:06:f0:
         ec:66:29:02:9b:13:ec:ed:e9:e9:f4:0f:fe:1f:a0:c6:8b:ad:
         cd:1c:ec:9e:57:fb:26:e1:80:c4:e3:f7:81:47:2c:20:35:0e:
         a9:17:8d:e4:d8:16:36:60:10:fc:97:1d:b2:7d:fd:0c:3f:29:
         da:28:13:5d:96:67:12:15:6c:79:a0:bf:b8:b7:14:ea:a6:59:
         44:5a:9f:ed:23:f7:03:2c:3b:3b:82:e9:23:b6:5a:24:dc:0c:
         fe:30:44:3a:64:a5:19:fe:5f:fa:1d:b3:ff:5d:66:95:2c:f0:
         29:7a:7e:77:48:0e:45:33:fe:72:f9:7f:05:6f:ec:76:5c:c3:
         3c:9c:6e:02:d9:a2:09:66:9d:d6:5b:08:f0:12:db:8d:ff:65:
         de:55:1c:79:4a:30:80:b9:b5:be:8a:d1:56:dc:a9:11:87:19:
         15:2f:98:fd:9d:b7:2c:f3:88:84:01:27:7a:fc:97:ad:27:66:
         eb:e5:db:ad:7b:8a:e6:6b:9d:36:10:46:b6:85:d4:a4:8b:88:
         9d:26:a5:08:43:42:61:cb:45:fc:16:e8:d7:cd:c6:da:11:64:
         1a:e2:10:68:61:d8:42:a1:05:b9:f8:da:d8:cd:9b:1d:f0:fc:
         1b:ea:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----