Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft
File:                     D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft (raw, json)
Hash identifier:          vOgZBs6PPfjMMu7VuYR6brnlc4bjMPmWu1gMbsBpf64=
Subject key identifier:   7E:FB:35:AF:DD:45:8C:29:1A:6A:16:93:8D:54:8F:8B:D5:89:B9:C6
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       7BFE5110C627352A503869D238E945A0BFDD6217
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft
Manifest number:          E4
Signing time:             Sat 11 Feb 2023 20:01:32 +0000
Manifest this update:     Sat 11 Feb 2023 19:56:32 +0000
Manifest next update:     Sun 12 Feb 2023 23:36:32 +0000
Files and hashes:         1: 323830343a363530343a3a2f33322d3338203d3e20323639343633.roa (hash: /yIciSSTDpb3CjadRH/JLTdBONhcIPWEN+GrTOd0K2w=)
                          2: D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl (hash: xDyfrBal16HcP2pSvHMejHZ6Np4/1egFw0/PN+B1mIQ=)
                          3: 34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (hash: lN9ADIJ8vwqTrbbGHUYpKr9INLsEZMkUmXDJWtuDrBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fe:51:10:c6:27:35:2a:50:38:69:d2:38:e9:45:a0:bf:dd:62:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Feb 11 19:56:32 2023 GMT
            Not After : Feb 12 23:36:32 2023 GMT
        Subject: CN=7EFB35AFDD458C291A6A16938D548F8BD589B9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:f4:ec:28:5b:f2:09:2b:f3:e8:43:3b:79:
                    9e:1d:5d:fe:e0:82:c9:4e:8d:ea:8b:91:68:b2:df:
                    87:bb:a3:e8:eb:a2:e7:0e:59:4b:a5:f6:99:42:3e:
                    bd:a1:f6:d8:fa:60:0c:05:f2:cf:6b:5c:78:59:c0:
                    8b:b1:43:d1:f4:54:27:b6:ef:b6:bd:5d:6d:bf:d9:
                    8c:2f:ab:37:ca:92:30:9a:91:ec:b8:55:61:93:9e:
                    9f:f9:c0:ad:87:e3:b5:01:92:6e:62:62:2f:dd:db:
                    08:45:bf:24:28:69:b0:fc:1d:48:11:82:f1:71:3e:
                    7f:4d:26:00:11:50:bd:2b:a3:05:22:21:57:92:91:
                    c6:4f:48:b0:ee:6e:0a:d1:e8:e2:7b:6c:3e:a3:77:
                    88:59:df:21:48:de:d2:7e:72:cd:bd:2e:8b:98:c2:
                    77:0b:4c:dd:4b:4c:23:d4:e0:11:fd:89:e6:be:5a:
                    a1:5a:da:87:f5:71:3f:3a:2d:62:13:b1:30:6b:b5:
                    d1:e9:c5:8a:91:c0:f1:78:f7:64:6e:e5:1e:9a:f3:
                    5a:f6:1e:2f:0b:39:4e:6e:ce:44:64:8f:43:be:9c:
                    c6:24:bc:88:c6:44:c5:d8:f6:06:c8:3d:67:67:28:
                    fc:d3:61:09:e5:09:b5:df:a6:57:e2:bd:29:06:76:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:35:AF:DD:45:8C:29:1A:6A:16:93:8D:54:8F:8B:D5:89:B9:C6
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:a5:11:a9:75:36:22:12:c1:71:e7:6b:ab:71:68:1f:a6:
         8b:85:1e:97:ce:2b:fc:6a:8d:48:ed:f0:3b:8e:ed:08:9f:e9:
         16:9e:a8:8a:e1:ba:3f:8c:84:e1:97:7e:39:3e:53:ca:f0:d3:
         24:8b:08:05:54:40:55:06:c2:30:b9:c3:9d:b7:11:7a:f0:95:
         6a:58:ae:d8:58:65:5b:26:e0:96:83:95:49:35:0f:66:60:61:
         45:8e:0e:fd:2f:99:5b:3d:49:9f:fe:b7:b8:3e:20:d4:8e:cb:
         62:ee:8b:8c:33:e5:97:15:47:98:b6:8a:2f:8a:cc:2f:50:23:
         86:8f:3f:07:0c:f7:b2:86:da:d3:a5:ed:c9:a1:d8:93:1b:31:
         85:c7:8c:12:5b:0a:b3:e6:b7:ae:77:e8:b1:fa:8f:8a:eb:33:
         5f:fc:d0:51:88:da:6f:cc:f4:14:f8:0a:c6:36:48:15:03:2e:
         85:d3:9b:c0:3f:93:b1:cb:49:cb:1f:70:63:85:fa:37:bf:a6:
         ed:5e:dd:bf:af:75:02:23:a2:67:e3:41:3a:69:b9:2b:8f:9f:
         3d:42:dc:3a:4e:8d:e4:16:bf:2c:67:7c:6c:07:9f:b5:b0:a4:
         02:1f:d7:58:d0:1b:56:cf:5c:82:af:2d:27:83:77:82:b9:7b:
         5d:64:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----