Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/1263E36D870D048640052F0FDC4A3C35512B427A.mft
File:                     1263E36D870D048640052F0FDC4A3C35512B427A.mft (raw, json)
Hash identifier:          0+nsMsNAGu4wJag5XkWDPRY4W7sIUwIEyOnpUet34+8=
Subject key identifier:   77:0B:B5:A1:2F:9B:FC:AD:2F:91:68:03:BB:92:0B:89:8A:6A:C8:D4
Authority key identifier: 12:63:E3:6D:87:0D:04:86:40:05:2F:0F:DC:4A:3C:35:51:2B:42:7A
Certificate issuer:       /CN=1263E36D870D048640052F0FDC4A3C35512B427A
Certificate serial:       4D09C5F83F3B9215BD7A741ADE4EC941A58B18A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1263E36D870D048640052F0FDC4A3C35512B427A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/1263E36D870D048640052F0FDC4A3C35512B427A.mft
Manifest number:          38
Signing time:             Tue 20 Dec 2022 01:39:05 +0000
Manifest this update:     Tue 20 Dec 2022 01:34:05 +0000
Manifest next update:     Wed 21 Dec 2022 04:24:05 +0000
Files and hashes:         1: 323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (hash: QtCS0Fs6n7N5lUzMORrPh2KFFglt5TwLPVGBIC+WSxc=)
                          2: 1263E36D870D048640052F0FDC4A3C35512B427A.crl (hash: SE9ebDDmG2LWEP02VEBudjHrPc8xaDhT9TFcEzztVlc=)
                          3: 34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (hash: 1Gu56ZvJWbdT0YDLec3EGrKTgSz8Nt9PhH1F4GoLhnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:c5:f8:3f:3b:92:15:bd:7a:74:1a:de:4e:c9:41:a5:8b:18:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1263E36D870D048640052F0FDC4A3C35512B427A
        Validity
            Not Before: Dec 20 01:34:05 2022 GMT
            Not After : Dec 21 04:24:05 2022 GMT
        Subject: CN=770BB5A12F9BFCAD2F916803BB920B898A6AC8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:23:15:00:fe:d2:7f:fc:20:61:99:d1:d8:
                    6d:59:76:59:cb:f0:44:66:aa:a8:9b:24:3f:6a:a7:
                    a0:a2:f8:97:b7:ab:24:90:30:11:5b:f8:f5:22:d6:
                    94:a7:e4:d4:21:5e:88:2b:09:fb:e9:2c:40:a5:3a:
                    58:a1:f7:5f:1a:95:00:ef:c6:2d:f0:68:93:64:17:
                    09:31:21:ad:a7:01:7f:95:7e:04:18:56:2a:61:c9:
                    c3:f7:18:fa:6a:99:3d:e3:69:fc:1f:29:8f:eb:6d:
                    4d:86:d1:ae:b1:cf:4b:9c:28:83:ca:18:33:08:e4:
                    2a:8e:a7:2a:a2:95:63:01:76:24:82:0a:15:d4:c7:
                    e6:17:b7:62:f2:e4:3d:29:5d:74:b3:66:8a:32:2a:
                    13:86:75:bc:ba:64:38:6b:21:20:32:34:24:83:8c:
                    72:fe:36:60:3c:d2:b5:ea:69:f0:f7:5e:08:cb:6e:
                    ac:a0:2b:a8:c4:5b:54:0c:3f:52:59:54:aa:08:31:
                    5a:56:a6:e8:b1:c8:04:6e:98:eb:0c:8b:19:b8:1f:
                    99:d0:41:ce:73:75:87:73:1d:f7:13:c5:00:c5:19:
                    1a:a7:a9:70:dc:be:ee:78:17:14:4b:0b:8a:08:ea:
                    ae:aa:0f:06:00:3e:3e:15:de:97:06:51:fa:fc:33:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:B5:A1:2F:9B:FC:AD:2F:91:68:03:BB:92:0B:89:8A:6A:C8:D4
            X509v3 Authority Key Identifier:
                keyid:12:63:E3:6D:87:0D:04:86:40:05:2F:0F:DC:4A:3C:35:51:2B:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/1263E36D870D048640052F0FDC4A3C35512B427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1263E36D870D048640052F0FDC4A3C35512B427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/1263E36D870D048640052F0FDC4A3C35512B427A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:cf:27:b0:3c:ac:43:51:5b:8f:99:b5:3a:c0:6b:05:58:
         e9:c3:81:03:fa:37:cd:99:c7:6f:59:2b:d0:d6:c7:d9:a7:0b:
         d9:aa:be:c7:6d:df:19:0b:10:41:0d:9b:3d:89:4c:e7:b9:18:
         3d:da:f6:92:c7:8e:19:c2:de:4c:14:fe:d6:d4:09:9b:6b:7b:
         59:3e:ed:d6:04:5a:16:be:be:d2:77:14:14:94:82:ec:5c:03:
         b0:56:c6:d9:0d:a7:c4:ba:02:b4:d9:69:f0:b1:17:b2:ce:58:
         01:c5:07:d3:92:53:84:f0:aa:80:13:52:3d:8a:fc:c9:d8:fc:
         9a:7d:16:74:e8:33:4d:e3:59:b3:c1:22:ae:a2:d1:23:25:b5:
         71:c1:b2:cf:7f:c5:4a:a0:a8:73:53:01:52:23:ef:82:54:20:
         b8:ae:5b:ab:12:28:1e:6f:c3:97:22:e3:2b:f4:1c:9e:09:27:
         87:cc:9c:00:cf:bb:3d:a2:eb:ec:96:38:2e:2d:11:62:78:80:
         29:77:dc:0f:0c:0f:4c:59:64:9f:6a:3f:01:b9:51:45:28:52:
         89:17:37:e5:3b:60:b5:32:16:b8:65:58:46:e9:bd:90:46:bb:
         6f:df:fa:f8:f6:d9:a5:bd:42:6a:d4:94:e6:46:88:5a:4d:d8:
         b4:e3:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----