Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.mft
File:                     0A65FD0BF5741C9112B59189DDF93358FB1FC662.mft (raw, json)
Hash identifier:          xS9hI7XJ7nmaVnAAxpf9zP9M8tIzUTND1x2u8u9h31g=
Subject key identifier:   F3:01:89:C6:F0:3E:45:52:CD:00:A8:E4:A0:3B:C6:0C:CD:F8:5A:FC
Authority key identifier: 0A:65:FD:0B:F5:74:1C:91:12:B5:91:89:DD:F9:33:58:FB:1F:C6:62
Certificate issuer:       /CN=0A65FD0BF5741C9112B59189DDF93358FB1FC662
Certificate serial:       27FB62675D03E89307F30101068D3E30DA74E3AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.mft
Manifest number:          64
Signing time:             Sun 25 Jun 2023 05:14:30 +0000
Manifest this update:     Sun 25 Jun 2023 05:09:30 +0000
Manifest next update:     Mon 26 Jun 2023 05:16:30 +0000
Files and hashes:         1: 323830343a346534633a3a2f33322d3438203d3e20323638323532.roa (hash: eQQJmpLaXl4dc58Id1stQcYbthxD8T3eNGn3yhmkXVw=)
                          2: 0A65FD0BF5741C9112B59189DDF93358FB1FC662.crl (hash: RYFZAh3ICRiEjwBtmsZjOlOOIpskWskxYlFer2PH5oM=)
                          3: 34352e3233362e3235322e302f32322d3234203d3e20323638323532.roa (hash: MjXBIGI8TXuAOU87H+7lP4indaB3rSE28Bj+COHuTJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fb:62:67:5d:03:e8:93:07:f3:01:01:06:8d:3e:30:da:74:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A65FD0BF5741C9112B59189DDF93358FB1FC662
        Validity
            Not Before: Jun 25 05:09:30 2023 GMT
            Not After : Jun 26 05:16:30 2023 GMT
        Subject: CN=F30189C6F03E4552CD00A8E4A03BC60CCDF85AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:a5:0a:e2:c9:96:35:69:21:3c:54:b5:0b:
                    89:c7:c3:43:ef:1f:1b:7d:7a:82:b1:b2:47:13:43:
                    eb:47:20:02:60:c3:74:97:f3:fa:ac:ee:24:3e:79:
                    a5:84:0f:32:23:a1:3c:ea:c5:6b:3b:0c:b7:de:e9:
                    a5:c6:ec:5a:a5:a3:83:d4:7c:61:0b:7e:ef:ce:d5:
                    f5:df:51:c5:5e:b5:82:79:4e:f3:ba:64:3b:74:ed:
                    0f:0a:0b:f7:cc:12:71:95:e6:a4:06:21:f2:6c:2a:
                    9a:56:06:0b:8e:78:30:21:37:25:d0:42:02:6b:33:
                    39:38:27:99:13:c0:3c:88:cb:68:08:d7:42:37:74:
                    b4:c0:14:07:a7:7a:98:99:81:79:ad:af:40:be:8f:
                    a0:80:62:3d:02:bb:63:ce:b7:95:2b:17:e8:a7:7d:
                    69:ab:5a:a7:aa:29:be:06:61:26:6c:bc:dc:19:51:
                    af:19:68:16:df:1a:e3:60:43:04:79:b7:b8:36:e1:
                    de:cf:44:86:15:3a:12:01:5d:2f:a7:9f:00:d9:68:
                    ed:ce:bb:95:2d:69:8b:77:a4:46:2d:7b:b4:e8:79:
                    27:00:6b:8b:38:52:0f:d7:c4:10:a9:c4:0a:60:f9:
                    32:75:c2:fc:60:51:9f:0f:57:fd:55:be:b2:6c:6b:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:89:C6:F0:3E:45:52:CD:00:A8:E4:A0:3B:C6:0C:CD:F8:5A:FC
            X509v3 Authority Key Identifier:
                keyid:0A:65:FD:0B:F5:74:1C:91:12:B5:91:89:DD:F9:33:58:FB:1F:C6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/0A65FD0BF5741C9112B59189DDF93358FB1FC662.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:19:ea:b8:4b:58:e4:bf:91:0b:c2:77:d3:16:a6:a8:6a:
         2d:b5:29:6a:37:ff:46:78:67:19:2b:16:93:46:68:f9:51:fb:
         10:f8:34:15:42:3d:58:de:89:fd:3d:21:1a:7a:46:2c:e4:ad:
         70:66:eb:4d:47:ef:87:04:c7:64:48:1b:56:b2:2d:a3:72:6e:
         18:92:de:41:61:34:8f:43:64:cf:68:32:8e:63:c8:1e:1d:e0:
         c9:e5:54:ed:27:6f:b9:7a:ce:58:d8:82:3e:68:65:bd:3d:7a:
         fa:d4:d6:8f:7b:ba:c1:65:2b:2f:df:62:3d:67:a7:4a:30:bf:
         e7:52:a9:d5:54:8e:27:31:9f:fc:8b:0f:b5:e6:ba:38:fe:fa:
         f7:89:94:91:ed:98:0d:79:c9:d8:1b:fb:c1:5a:b2:b8:6c:a5:
         04:91:79:4a:e9:ba:0f:59:9b:da:d2:df:b4:12:24:dc:bd:d0:
         28:bd:a1:4c:65:7e:90:34:aa:26:c9:eb:81:bc:8d:91:e6:48:
         9e:fc:c2:26:19:b6:55:56:e3:46:c6:12:bb:c1:1e:ed:76:b5:
         5e:84:92:9b:3d:03:c3:d3:76:8b:7d:7c:2e:df:96:d1:86:b3:
         fc:3e:fd:b7:1e:ed:99:0c:86:45:ec:7a:b7:84:c7:2d:fc:ca:
         95:eb:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----