Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.mft
File:                     715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.mft (raw, json)
Hash identifier:          iTlqVpYsc3igvhGuuFTiL1n6nzo8snSKCzmKDKrtZ6o=
Subject key identifier:   68:6E:77:7D:22:44:83:FC:37:97:44:AB:FD:73:65:50:F1:3B:9B:3F
Authority key identifier: 71:57:90:DF:DC:AD:0E:1D:7E:4A:3C:A5:07:D0:FE:A8:30:29:88:F0
Certificate issuer:       /CN=715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0
Certificate serial:       043F9E061BA6E98D2F9342121C4FDD9EC4766700
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.mft
Manifest number:          3F
Signing time:             Wed 26 Jul 2023 18:01:29 +0000
Manifest this update:     Wed 26 Jul 2023 17:56:29 +0000
Manifest next update:     Thu 27 Jul 2023 18:47:29 +0000
Files and hashes:         1: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (hash: cM6oDPTAPhKlrBj/JCrIo9Q2zN+DbrmUcPc0EWsiKOE=)
                          2: 715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.crl (hash: b6q8uPOuvyj9iB94WKMvtwUT/3JFt1uq1yeshP996a4=)
                          3: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: ldiFZa4vJid8kyXr9cynIiLjsn0LBAvH9cx9Op0HRWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:9e:06:1b:a6:e9:8d:2f:93:42:12:1c:4f:dd:9e:c4:76:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0
        Validity
            Not Before: Jul 26 17:56:29 2023 GMT
            Not After : Jul 27 18:47:29 2023 GMT
        Subject: CN=686E777D224483FC379744ABFD736550F13B9B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:ff:7f:ba:2a:8c:87:1f:b6:9f:3c:a7:8a:
                    71:78:32:f0:f9:9a:67:98:bd:cf:29:cc:1e:eb:0f:
                    cb:8e:1a:22:1e:bf:f9:6b:ef:08:d1:f1:8c:a0:28:
                    e2:32:ff:df:23:52:10:0a:fb:46:d9:2e:63:40:7d:
                    7a:ec:a7:46:ed:55:5d:e0:1c:c9:15:ac:c7:fe:e5:
                    8d:ab:96:60:65:7a:fc:eb:15:5e:82:d8:ba:30:84:
                    fc:a5:f3:58:a7:69:7a:33:c0:eb:ab:43:65:d4:22:
                    59:69:41:0a:75:37:93:86:e9:d7:1d:44:ce:92:c9:
                    6d:3b:dd:10:f8:bb:f5:5e:f1:a9:ff:34:9f:8c:4b:
                    42:4a:ed:3d:2e:d7:b6:f4:a3:de:09:87:62:7b:7d:
                    40:8a:0b:98:2e:25:dc:2f:6b:07:ce:02:d6:db:14:
                    32:70:96:2d:bb:76:77:49:e6:f4:5f:42:f8:31:f2:
                    90:40:84:33:dd:99:9c:67:36:8c:ca:c5:6b:b5:32:
                    1d:e4:87:82:78:b5:e6:4e:77:6a:59:50:46:91:35:
                    30:37:b2:b4:2c:6e:75:39:d8:6e:e3:6e:69:cc:7d:
                    27:f0:b4:ea:cf:3e:e1:c4:d5:71:19:c9:63:9d:80:
                    e5:6b:c7:43:b2:e7:db:a8:9e:c8:10:93:d9:fd:5a:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:77:7D:22:44:83:FC:37:97:44:AB:FD:73:65:50:F1:3B:9B:3F
            X509v3 Authority Key Identifier:
                keyid:71:57:90:DF:DC:AD:0E:1D:7E:4A:3C:A5:07:D0:FE:A8:30:29:88:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/715790DFDCAD0E1D7E4A3CA507D0FEA8302988F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e6:46:ed:f3:c1:e9:84:f8:03:74:20:82:ec:98:36:a2:1d:
         38:69:1d:22:d6:e7:35:d7:5d:60:fa:1b:8b:b8:50:39:63:1e:
         7f:23:8c:49:53:8e:e7:4b:99:8f:6a:91:19:bb:15:32:38:38:
         a8:0e:39:a1:b8:d9:31:0e:72:ca:e5:8e:6c:e1:1d:5e:63:3f:
         f6:da:3a:c8:e7:81:4d:85:05:21:69:2d:2c:a8:48:1e:8a:ff:
         07:20:cf:ba:d9:14:76:6a:aa:27:c7:63:1e:9a:53:53:48:b7:
         3b:de:48:a3:0c:c5:a8:aa:03:80:a4:90:0a:f9:b4:d6:c6:a1:
         39:32:4a:dd:8f:cd:c8:ec:26:1f:9d:92:4c:a4:90:2a:64:08:
         97:ef:29:98:c4:df:e3:d6:3e:83:b0:6c:7a:b8:bf:57:d0:8f:
         37:1d:03:cc:0f:5d:a6:2b:3c:6e:af:6c:85:4f:b7:44:61:1f:
         79:07:a2:8d:29:f6:b3:8d:4c:c8:7b:6a:9e:c6:84:df:79:5e:
         ac:07:af:55:b1:9c:2b:bb:86:e7:20:94:a6:07:2b:da:f8:d1:
         66:90:8d:0f:4f:a1:e6:67:81:dc:62:a4:ef:44:7f:1e:96:b9:
         b9:c2:9c:4f:d8:05:59:92:c7:b8:0b:2a:a0:7c:d3:02:a9:3a:
         72:41:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----