Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.mft
File:                     D8274A719AFB0FB78FE470195A3A8CECB5272A85.mft (raw, json)
Hash identifier:          sVHBF7Je0zfonC+fS0NGPgh2WmnOhsze99kY8193Qc8=
Subject key identifier:   D6:70:9F:3C:D4:30:01:79:D7:1F:FC:14:F2:D0:88:FF:8E:B0:99:8A
Authority key identifier: D8:27:4A:71:9A:FB:0F:B7:8F:E4:70:19:5A:3A:8C:EC:B5:27:2A:85
Certificate issuer:       /CN=D8274A719AFB0FB78FE470195A3A8CECB5272A85
Certificate serial:       644D20BCD692D09262A878B7490B51C4F23859BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.mft
Manifest number:          2B
Signing time:             Thu 23 Jun 2022 11:23:43 +0000
Manifest this update:     Thu 23 Jun 2022 11:18:43 +0000
Manifest next update:     Fri 24 Jun 2022 15:04:43 +0000
Files and hashes:         1: D8274A719AFB0FB78FE470195A3A8CECB5272A85.crl (hash: SqBB/SqMEX1I3fn01yu1xnCzi5xjc86FsbPWCguPu54=)
                          2: 34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (hash: bjhZUejoI4/SK+ZjisTzH3XHhLLJaqDPgCnN2322SK8=)
                          3: 323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (hash: x95IOPr7coRVE0Xuw0MYA12l9X8qOl0OlTZyt3q+EE4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4d:20:bc:d6:92:d0:92:62:a8:78:b7:49:0b:51:c4:f2:38:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8274A719AFB0FB78FE470195A3A8CECB5272A85
        Validity
            Not Before: Jun 23 11:18:43 2022 GMT
            Not After : Jun 24 15:04:43 2022 GMT
        Subject: CN=D6709F3CD4300179D71FFC14F2D088FF8EB0998A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:43:10:17:8f:fa:ef:da:60:8a:d9:e6:f7:
                    9b:3b:73:c8:3d:6a:d2:30:0b:9e:5c:71:cf:9a:d3:
                    02:35:01:77:69:ae:55:e8:45:4f:aa:4c:33:86:0d:
                    c2:6b:7f:50:0e:d3:c1:cb:f1:fd:64:b9:23:4d:df:
                    c9:48:f6:e7:d1:9c:53:98:24:1f:ed:ae:c7:28:90:
                    ff:30:c7:05:fa:58:f0:68:90:ab:48:4d:e5:db:3e:
                    43:bf:14:e6:33:8a:ac:c1:35:3b:6d:98:35:87:fa:
                    0c:a3:1d:d5:ef:63:91:83:a4:4c:da:2a:1a:7f:63:
                    c1:d4:3b:35:01:ed:42:24:1e:b7:f5:1b:20:e5:2d:
                    23:21:f4:ff:f3:1c:b1:55:fc:f2:11:3b:4e:08:6d:
                    67:c9:c4:fa:0d:ff:5e:36:e6:fa:16:32:93:3e:9e:
                    e5:5b:5b:44:95:89:97:95:4d:00:51:cc:2c:13:43:
                    13:94:5d:76:d4:9e:4a:bf:ee:78:b7:1b:c0:98:21:
                    76:f2:de:9b:cf:c4:73:c4:27:5d:8b:6d:58:ab:55:
                    7e:58:23:7b:ce:d6:b8:35:bd:1b:62:2f:79:27:08:
                    9c:6b:f1:27:5d:a0:97:cd:7c:9e:9f:89:c4:9d:23:
                    31:86:c2:b8:2d:4b:25:4e:d3:bd:47:90:f1:e5:cd:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:70:9F:3C:D4:30:01:79:D7:1F:FC:14:F2:D0:88:FF:8E:B0:99:8A
            X509v3 Authority Key Identifier:
                keyid:D8:27:4A:71:9A:FB:0F:B7:8F:E4:70:19:5A:3A:8C:EC:B5:27:2A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/D8274A719AFB0FB78FE470195A3A8CECB5272A85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8b:28:5b:8b:72:e5:3c:78:80:7f:dd:ca:5f:fd:54:ee:e9:
         93:c0:83:52:6e:2b:ce:b3:29:5d:65:33:e5:bb:0e:cd:09:40:
         96:06:98:b3:2e:69:e3:16:db:f8:17:2d:21:15:8b:31:5c:b9:
         bc:b5:29:38:24:c0:fb:9b:f3:c7:4f:0f:87:26:2a:9b:7f:d5:
         37:2a:9d:52:3f:4a:22:e8:70:d9:b9:c8:02:25:32:a0:15:03:
         14:37:7c:0f:35:88:36:a4:8f:75:21:b5:0a:50:ae:66:bb:4e:
         fe:79:2d:ae:e6:d9:0c:99:1c:8a:00:5c:7f:75:12:b4:36:a1:
         58:aa:8a:13:a4:d4:0d:27:82:89:a7:43:27:94:42:36:bd:c1:
         6f:2f:81:bb:8a:f7:2f:15:6d:1e:58:6f:8c:57:77:69:c7:6a:
         06:1c:fa:94:b0:08:92:26:f5:f8:04:96:fc:ba:9c:4c:e4:6e:
         60:2d:8f:a2:15:35:94:34:fb:41:a9:15:2a:87:d0:ea:bd:d0:
         ae:57:b5:45:57:72:ec:a4:34:bd:b1:93:0f:6d:eb:89:73:66:
         38:55:e2:6e:33:61:72:e5:0c:6d:62:e7:3a:dc:1b:98:fe:48:
         11:85:b0:d1:8e:a7:9e:8c:38:e9:98:05:85:94:75:cb:d9:da:
         76:f4:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----