Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3688F320471D8DAE99E94E080C3244EF219C23D6.mft
File:                     3688F320471D8DAE99E94E080C3244EF219C23D6.mft (raw, json)
Hash identifier:          wY+rcJWCoXgMyC+vWmPceaw5QriAu5ZLsS2LA43Rrf4=
Subject key identifier:   EB:58:82:50:55:E0:5E:7E:16:7E:20:09:AF:7D:5C:F1:22:8A:17:BB
Authority key identifier: 36:88:F3:20:47:1D:8D:AE:99:E9:4E:08:0C:32:44:EF:21:9C:23:D6
Certificate issuer:       /CN=3688F320471D8DAE99E94E080C3244EF219C23D6
Certificate serial:       05E50AFFC28AF7324AF215166CB10CA186857708
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3688F320471D8DAE99E94E080C3244EF219C23D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3688F320471D8DAE99E94E080C3244EF219C23D6.mft
Manifest number:          56
Signing time:             Thu 16 Feb 2023 14:57:30 +0000
Manifest this update:     Thu 16 Feb 2023 14:52:30 +0000
Manifest next update:     Fri 17 Feb 2023 17:03:30 +0000
Files and hashes:         1: 3688F320471D8DAE99E94E080C3244EF219C23D6.crl (hash: mkdwScOStcKGN29gs2DX1mkggFM4suGoFElCsYtfe+M=)
                          2: 3137302e3135302e39362e302f32322d3234203d3e20323635303237.roa (hash: j53JtrIuQir/YFOiTq32JMst2zzXDxRwLU3DtwB5664=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e5:0a:ff:c2:8a:f7:32:4a:f2:15:16:6c:b1:0c:a1:86:85:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3688F320471D8DAE99E94E080C3244EF219C23D6
        Validity
            Not Before: Feb 16 14:52:30 2023 GMT
            Not After : Feb 17 17:03:30 2023 GMT
        Subject: CN=EB58825055E05E7E167E2009AF7D5CF1228A17BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:00:47:0b:ef:d8:e9:78:21:82:4f:eb:8d:
                    d6:a7:cf:f9:5e:7d:d9:74:35:a0:d6:e8:e3:c0:66:
                    d8:3a:01:72:14:23:08:38:d5:29:69:df:1c:43:db:
                    11:35:54:cf:a2:b2:eb:af:8a:b4:25:a7:c4:1f:f7:
                    75:dd:10:6d:56:55:e9:b3:7e:e5:13:28:8d:ec:87:
                    4a:3f:dd:f6:ce:b4:b5:44:2d:3d:bf:d4:09:4d:03:
                    f6:a6:cd:0e:a3:b7:a1:2d:1a:9b:7a:ee:9e:e7:eb:
                    9d:5a:7e:02:3f:b3:6f:8b:6d:3e:53:62:1e:a4:c4:
                    4f:20:0d:b6:e0:21:77:d0:8c:05:0c:9b:c7:27:c6:
                    b4:34:cc:f5:b8:44:83:9a:55:3f:fe:1f:f9:34:95:
                    b3:03:2e:8c:7d:90:18:88:4e:71:d0:ef:72:55:34:
                    65:1b:96:19:72:d0:0f:fd:58:b0:0f:83:cc:ef:f5:
                    e0:22:b4:7a:94:5b:18:9a:43:df:87:41:80:ac:cc:
                    a5:c7:7f:ab:98:f1:61:76:ff:13:f8:cb:4f:5f:0e:
                    e2:e5:4a:6e:05:bf:96:3a:fa:dd:e2:6e:ed:f2:9f:
                    54:f4:33:c3:9e:b7:ed:1f:84:fa:9c:e5:f2:75:9d:
                    3d:56:cd:c6:e6:83:21:ae:10:6f:12:18:0d:63:6b:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:58:82:50:55:E0:5E:7E:16:7E:20:09:AF:7D:5C:F1:22:8A:17:BB
            X509v3 Authority Key Identifier:
                keyid:36:88:F3:20:47:1D:8D:AE:99:E9:4E:08:0C:32:44:EF:21:9C:23:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3688F320471D8DAE99E94E080C3244EF219C23D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3688F320471D8DAE99E94E080C3244EF219C23D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3688F320471D8DAE99E94E080C3244EF219C23D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:71:d4:f3:cf:5b:ac:75:2e:5e:7c:71:77:68:4a:9b:a9:8b:
         f1:94:37:29:86:76:f0:30:2b:04:94:c7:95:31:1a:35:bf:c1:
         78:63:b1:78:90:a8:07:e1:12:8a:fc:62:63:fe:88:95:ff:aa:
         2a:39:5b:60:fc:87:f8:20:af:91:12:a1:c4:9c:a3:45:86:85:
         7f:5a:9f:b3:fa:ca:50:8b:92:f7:e8:9b:6a:d1:bb:e4:ea:d4:
         67:bb:75:59:c6:9b:06:9a:5e:46:ed:e9:cd:0d:b3:be:72:79:
         fa:99:f5:e7:cf:17:8b:7e:9c:8c:15:41:2c:94:ac:8c:bb:73:
         6d:b2:0f:35:d7:f4:26:c3:90:04:0c:ab:8a:6a:6f:f7:86:d5:
         24:1d:cc:d0:11:de:8c:29:e1:f5:70:4a:35:85:af:6d:0f:62:
         02:28:62:d5:9e:ec:eb:f0:61:4d:0c:29:78:ec:48:92:eb:b1:
         c3:5b:e4:51:d4:0f:a7:dd:a9:6e:78:6f:d2:50:bf:8c:30:f0:
         b1:46:c7:3b:98:35:a4:90:25:68:89:19:1d:ba:3e:f3:23:d2:
         c4:2c:31:43:e1:74:47:9c:88:ce:e9:33:12:97:59:e5:cc:58:
         44:39:eb:45:e5:d4:22:fb:d7:91:f1:5d:c0:4d:4a:bf:2d:4f:
         57:0f:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----