Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.mft
File:                     DBBE4703A67772643D7AC2C210F961FBF106CA6A.mft (raw, json)
Hash identifier:          TPjADvNGpHsNnn8/AkQpJYmh/bT/yvJ+G/IdArLQCaE=
Subject key identifier:   2B:97:FC:2D:6A:07:0A:01:F9:79:40:C6:03:F5:78:A2:4D:DC:37:70
Authority key identifier: DB:BE:47:03:A6:77:72:64:3D:7A:C2:C2:10:F9:61:FB:F1:06:CA:6A
Certificate issuer:       /CN=DBBE4703A67772643D7AC2C210F961FBF106CA6A
Certificate serial:       710B2DDAD14790BED9D9176DE11D93EB22A49E6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.mft
Manifest number:          38
Signing time:             Sat 20 May 2023 02:03:56 +0000
Manifest this update:     Sat 20 May 2023 01:58:56 +0000
Manifest next update:     Sun 21 May 2023 02:04:56 +0000
Files and hashes:         1: 3136382e39302e3134342e302f32322d3234203d3e20323635323732.roa (hash: ndyW6qv0320OPNNHh2eF78uVIjQxyTgkrhf6YRHq1l8=)
                          2: DBBE4703A67772643D7AC2C210F961FBF106CA6A.crl (hash: iIcjWnIdtF3GH6RjLWnkrM5j5AX8Cfk7ILmhLvUFras=)
                          3: 323830343a326434633a3a2f33322d3336203d3e20323635323732.roa (hash: rs8MOaVCEuLuawgcbCLPr5LAuSELBnYkhwVWobwnQII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:2d:da:d1:47:90:be:d9:d9:17:6d:e1:1d:93:eb:22:a4:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBBE4703A67772643D7AC2C210F961FBF106CA6A
        Validity
            Not Before: May 20 01:58:56 2023 GMT
            Not After : May 21 02:04:56 2023 GMT
        Subject: CN=2B97FC2D6A070A01F97940C603F578A24DDC3770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:03:3a:f8:ae:c7:84:c1:5b:18:e6:15:68:
                    a5:eb:3e:0a:57:74:61:5a:d4:0d:37:66:cc:55:8c:
                    f4:9a:54:f9:47:f5:3c:bf:b0:60:ed:0b:f3:9c:97:
                    5c:90:94:4e:7f:38:ed:1f:b7:f3:03:1f:5a:f6:ca:
                    ca:97:d3:d4:c9:13:39:5b:bc:28:34:ca:cd:0a:64:
                    3b:8c:ad:c1:b5:a6:22:41:f7:36:9b:f3:38:dc:32:
                    2f:57:09:af:80:84:4a:43:89:05:d0:68:a5:ea:ea:
                    b2:b4:f0:54:2b:1e:34:54:f3:56:45:28:20:f0:e6:
                    11:f9:77:2e:b2:43:ab:3c:8c:58:f4:9b:49:80:fa:
                    be:c0:7d:81:0e:aa:ef:90:ce:41:6c:59:74:e0:bb:
                    2b:ab:b8:df:88:f6:6f:84:3a:2c:ed:e1:2b:24:84:
                    43:d5:aa:97:57:f7:12:b7:ab:5f:84:9e:d7:96:05:
                    61:4c:e9:62:86:a7:da:fd:fb:f4:32:67:24:15:90:
                    78:91:2f:f5:5b:f9:d3:97:f3:62:43:32:30:a9:cc:
                    bb:ba:2c:42:fb:90:0a:58:9c:fb:71:15:3d:3a:36:
                    61:cd:b8:96:95:80:6f:b2:94:33:c3:e2:9b:98:bb:
                    2e:1c:6e:8c:6e:e1:23:b7:0b:b3:35:35:5a:ef:63:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:FC:2D:6A:07:0A:01:F9:79:40:C6:03:F5:78:A2:4D:DC:37:70
            X509v3 Authority Key Identifier:
                keyid:DB:BE:47:03:A6:77:72:64:3D:7A:C2:C2:10:F9:61:FB:F1:06:CA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdaftaH8Zwnsi9WmjTn23rFaRCq5XiaSjMQc3tG3UgVV/0/DBBE4703A67772643D7AC2C210F961FBF106CA6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:19:b6:53:83:26:c7:2e:3f:e0:d2:a4:44:78:c0:b4:0b:
         f1:1b:57:fc:1c:4b:c0:03:28:8a:9a:a3:3d:20:c4:9e:67:65:
         d3:4e:be:4b:75:83:1f:85:37:ab:6d:4f:6f:9a:e9:86:be:3a:
         f1:09:4e:8d:82:0b:5f:fc:bf:1f:00:02:85:ff:0b:65:6e:e7:
         a6:1c:0e:ba:20:61:47:7b:6e:42:dc:5d:2d:54:3b:82:47:72:
         d6:3f:53:78:a7:34:cf:09:f4:d3:29:0a:f3:b9:d6:40:09:9f:
         25:85:8d:1c:9f:eb:b5:94:4d:46:be:91:0e:8e:4c:80:ff:f3:
         6a:ab:8f:de:98:46:9e:c9:a2:7f:3f:ba:2f:d4:20:13:b1:19:
         5f:74:f6:d5:1b:6c:95:c8:32:78:cf:d2:fb:f0:df:af:77:08:
         22:90:42:1a:31:06:f9:04:a6:1f:43:da:27:2f:51:79:5b:e1:
         e3:5f:a8:4e:94:1c:78:ca:6c:9d:f2:88:29:23:1e:7b:0c:f9:
         66:7f:78:67:56:5b:6a:d9:27:47:d2:94:24:41:c2:53:a4:1f:
         91:49:cf:b5:48:ae:5b:55:25:e0:ca:c5:0a:e3:a0:a1:37:6a:
         76:31:58:88:2d:55:dd:c1:69:0b:bd:06:b5:87:5f:0b:4c:6b:
         9f:27:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----