Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.mft
File:                     1477F1BD82C9178B38F3754FB5C414666133B78A.mft (raw, json)
Hash identifier:          F4fPE3e0nOJXn0L07f7JlFaTYOpjXEKx2Pw9FiMYROk=
Subject key identifier:   BB:31:CE:5F:EA:B9:4E:1A:52:A6:C7:E5:96:7D:0A:AF:B0:8D:1A:76
Authority key identifier: 14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A
Certificate issuer:       /CN=1477F1BD82C9178B38F3754FB5C414666133B78A
Certificate serial:       4C83E7F3F1ED2B8AD4EB030C188FDDE270A3A5A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1477F1BD82C9178B38F3754FB5C414666133B78A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.mft
Manifest number:          AE
Signing time:             Fri 17 Mar 2023 23:53:59 +0000
Manifest this update:     Fri 17 Mar 2023 23:48:59 +0000
Manifest next update:     Sun 19 Mar 2023 01:48:59 +0000
Files and hashes:         1: 323830343a333230303a3a2f33322d3334203d3e20323635303530.roa (hash: wghrfUR+KQ5ptXUXdH2MqSREn2pmI4qh9XVvrpZCrjU=)
                          2: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: VudybU558tGmmjgiPy5di1xM00TChWXT9F3nYcMZsY4=)
                          3: 1477F1BD82C9178B38F3754FB5C414666133B78A.crl (hash: IjN8xDzdYh6PzkZl8qzVSoNY+Nj01g1/+CvQmnVCYhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:83:e7:f3:f1:ed:2b:8a:d4:eb:03:0c:18:8f:dd:e2:70:a3:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1477F1BD82C9178B38F3754FB5C414666133B78A
        Validity
            Not Before: Mar 17 23:48:59 2023 GMT
            Not After : Mar 19 01:48:59 2023 GMT
        Subject: CN=BB31CE5FEAB94E1A52A6C7E5967D0AAFB08D1A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:bf:6b:0b:bf:12:6d:57:e1:91:5b:30:79:
                    dd:b0:6a:78:13:64:ad:e7:76:c7:67:f4:74:35:ab:
                    f2:25:2e:fd:83:43:da:4e:36:d7:da:a7:39:ae:a3:
                    12:a9:da:f4:68:de:3f:a4:81:dc:4b:fe:f1:a5:88:
                    fd:1d:f3:81:0e:bd:df:4d:3a:b6:26:47:c0:f4:8d:
                    0e:b3:4a:44:a8:6a:9b:f4:80:bf:20:da:43:f9:af:
                    5f:61:5f:80:a2:a0:04:fa:a7:5d:23:6a:81:39:4a:
                    61:52:55:9c:34:2e:6f:f2:ab:0d:72:63:39:19:f0:
                    4a:73:01:1a:0f:4e:c3:0e:7f:25:28:2f:d4:66:e5:
                    e4:c3:57:67:b9:68:03:0a:3b:85:fa:ae:aa:f5:2f:
                    c5:7b:d4:9a:09:b5:c1:a9:58:1b:59:ab:fa:71:44:
                    7e:d6:73:ea:01:0c:a0:25:1a:43:00:e9:07:84:fc:
                    5a:5d:1b:bb:55:61:cc:22:09:3c:83:27:4f:94:58:
                    e9:43:ee:65:27:36:7e:7b:3f:7e:8e:d1:12:46:de:
                    22:74:0a:48:cf:cd:db:91:75:e2:b7:b1:3e:ad:87:
                    89:64:53:33:87:6c:d5:47:5f:de:f3:8e:c4:06:6a:
                    ef:ad:96:f5:e4:51:62:1e:65:13:dd:22:67:89:80:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:CE:5F:EA:B9:4E:1A:52:A6:C7:E5:96:7D:0A:AF:B0:8D:1A:76
            X509v3 Authority Key Identifier:
                keyid:14:77:F1:BD:82:C9:17:8B:38:F3:75:4F:B5:C4:14:66:61:33:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1477F1BD82C9178B38F3754FB5C414666133B78A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/1477F1BD82C9178B38F3754FB5C414666133B78A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:6d:b7:98:2f:e6:88:12:48:f1:17:aa:8b:74:a8:8e:ab:
         4f:ca:20:f4:77:8c:cd:3d:ec:3a:78:88:54:05:e2:7e:63:11:
         a8:63:03:17:d5:73:85:f9:15:f8:9f:bc:64:da:23:e7:eb:5d:
         5b:c7:21:87:44:47:b5:d4:d2:22:8b:d7:92:ad:d6:e9:e9:a0:
         52:c5:88:0d:db:e4:4d:d5:f6:30:19:c8:90:fb:87:29:5f:52:
         5a:d6:b4:9e:2b:d6:49:80:60:8f:03:d5:77:f5:68:72:a4:30:
         8f:4b:21:44:e8:70:63:43:5b:41:ed:5b:56:20:9c:4b:4d:01:
         c0:ad:1e:17:3f:3d:cd:d6:53:dc:90:fe:e2:c3:48:eb:18:72:
         d9:78:00:d8:b8:24:3a:06:9b:ef:1d:df:33:0f:e3:4b:d7:6a:
         c5:93:26:d7:47:14:0f:80:f1:97:93:b6:87:fd:b3:59:f4:bb:
         82:21:8c:d8:f0:a4:ae:3d:34:ed:8e:0d:62:cd:43:a1:46:c3:
         5c:13:ac:8b:1a:a8:02:e0:4d:72:73:f2:07:f7:78:f3:87:be:
         05:b4:ac:6d:0e:d9:12:a4:13:99:c5:72:de:40:b3:e1:78:e8:
         8f:c5:a6:50:6f:d3:39:64:c6:8d:f0:74:a5:98:b8:5d:b7:9b:
         84:ad:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----