Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.mft
File:                     AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.mft (raw, json)
Hash identifier:          lvKt4pdWApPVB5D2LfeDxoeURV1PHqDrorI7M8cm3aU=
Subject key identifier:   6C:85:98:47:8B:F2:95:A1:54:79:B2:DC:02:7B:93:DA:61:BF:18:04
Authority key identifier: AF:10:E4:D4:64:E5:DA:C2:B5:C2:45:AB:F5:75:49:4E:3D:39:A6:B8
Certificate issuer:       /CN=AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8
Certificate serial:       79D462D61AA429541F86FD1A492A16B47BA50F60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.mft
Manifest number:          01D7
Signing time:             Thu 21 Jul 2022 03:40:52 +0000
Manifest this update:     Thu 21 Jul 2022 03:35:52 +0000
Manifest next update:     Fri 22 Jul 2022 06:39:52 +0000
Files and hashes:         1: AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.crl (hash: A+sssRDtO5//8X6WGgiUPQNvZBgizt/NFrscfvb9aTs=)
                          2: 34352e3138392e302e302f32322d3234203d3e20323639363438.roa (hash: Q6FWvHJIeE0Ix3+xRjlTe/+6brStppzkfCPkBBA1L/Y=)
                          3: 323830343a363763303a3a2f33322d3332203d3e20323639363438.roa (hash: ZTdraauJJ8LhKTGiSYM37U65oef4UfUo+xkW1GQ7gls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:62:d6:1a:a4:29:54:1f:86:fd:1a:49:2a:16:b4:7b:a5:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8
        Validity
            Not Before: Jul 21 03:35:52 2022 GMT
            Not After : Jul 22 06:39:52 2022 GMT
        Subject: CN=6C8598478BF295A15479B2DC027B93DA61BF1804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:55:c1:c0:ee:6a:8c:82:30:71:9e:b5:0f:
                    b1:5b:17:8c:36:cc:5d:4f:92:f1:2d:bc:a5:05:c4:
                    39:bf:c8:62:d6:41:51:12:66:6c:f9:71:97:f3:2b:
                    34:37:14:d3:8a:69:05:8c:f1:01:8a:5a:22:00:a8:
                    d5:d6:57:b4:d5:1d:ea:a4:ad:2b:0e:f0:2a:79:9a:
                    ce:f9:45:0f:79:17:be:cb:03:c8:4c:9f:61:00:68:
                    51:22:4a:1c:bb:53:a9:de:a4:2e:f8:66:15:4b:e7:
                    d1:91:0a:5f:f7:ed:e6:77:eb:61:46:25:19:b5:5b:
                    82:d9:e1:ed:84:1e:23:f6:fe:23:f8:ab:34:76:b7:
                    5a:06:0b:79:61:56:a1:ee:1b:49:13:4e:95:6d:31:
                    7e:bd:b9:61:83:4d:84:9e:28:00:5a:11:68:ac:e1:
                    51:db:a6:5f:96:ec:9a:20:db:f8:35:e6:fe:6c:d3:
                    db:2b:21:81:4d:08:0e:39:8c:53:6c:23:ec:d9:eb:
                    53:4a:85:11:f1:49:4e:89:d0:7a:01:b8:7f:a8:4b:
                    d9:b8:de:11:88:4a:d3:9e:4d:51:a2:24:c0:99:cb:
                    a4:6d:79:64:eb:bd:f5:4b:cd:2f:8b:92:0b:cc:f0:
                    38:e6:34:7d:b5:45:79:d3:a7:b4:b5:5d:bf:5d:7d:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:85:98:47:8B:F2:95:A1:54:79:B2:DC:02:7B:93:DA:61:BF:18:04
            X509v3 Authority Key Identifier:
                keyid:AF:10:E4:D4:64:E5:DA:C2:B5:C2:45:AB:F5:75:49:4E:3D:39:A6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:5a:36:ff:f5:c0:ae:3c:fe:4b:d1:25:d9:73:40:a2:a0:
         55:30:e9:dc:2f:4a:60:3e:87:95:a9:20:48:56:e9:56:c6:e1:
         da:3c:3b:7c:51:71:69:1b:d8:67:f9:f8:ef:97:c7:f1:77:d4:
         d8:7d:a2:28:55:b0:34:5d:03:34:35:44:4b:a5:aa:4b:9f:9b:
         8b:4b:07:73:10:8f:ec:ac:af:87:fc:a5:ad:e4:90:b7:bc:a5:
         62:df:ac:2c:53:e2:c5:fc:72:42:68:66:bc:c1:76:9d:5c:1e:
         73:c0:c2:0b:2b:7c:6f:87:51:28:2f:ac:e3:42:70:8c:a8:31:
         63:a3:ab:92:93:a4:f6:0b:4e:30:21:d4:80:4f:f8:be:25:36:
         09:16:60:c8:af:eb:77:2b:c8:8b:1b:ee:2e:55:be:61:e0:9d:
         ec:dd:10:d7:7b:5f:16:ec:e6:65:7c:09:20:a0:c5:dd:d6:09:
         f3:b0:4f:02:b4:20:c2:03:83:ed:62:c6:8f:09:2a:87:84:c4:
         88:1c:21:8e:bd:5e:9d:cd:dc:d3:a6:04:2d:4d:ba:8d:50:1f:
         c5:40:37:48:6f:ca:98:ba:d8:63:e1:40:68:2e:f9:ba:7e:51:
         dd:f9:f4:de:6f:aa:63:03:49:2e:b4:f2:0b:a1:67:22:54:90:
         fb:cc:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----