Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.mft
File:                     717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.mft (raw, json)
Hash identifier:          Gy8Z7Lv0jemrqg2VDOOnlhfHVjWchZvYZmK5AmdjUjg=
Subject key identifier:   DF:C8:9D:9C:66:FF:8B:57:99:FE:99:F1:B0:5B:6A:C1:B9:F4:B3:87
Authority key identifier: 71:70:34:ED:5F:FB:B4:D5:BA:BA:C1:AC:A4:3A:16:7B:4F:81:92:D2
Certificate issuer:       /CN=717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2
Certificate serial:       14DFE1077CE7537496984A200B3EAC518BD96189
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.mft
Manifest number:          21
Signing time:             Wed 12 Apr 2023 17:58:46 +0000
Manifest this update:     Wed 12 Apr 2023 17:53:46 +0000
Manifest next update:     Thu 13 Apr 2023 21:21:46 +0000
Files and hashes:         1: 717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.crl (hash: tPzyQ19mmBXIHBEJWInyxqgM2rBAR4HGGYtZaOsm1Os=)
                          2: 323830343a376130383a3a2f33322d3334203d3e20323731333433.roa (hash: vPtOxraHrQ8gbKI5lB2yX6l92SzvL3VAeb16mr3zYD0=)
                          3: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: p0mLnHQLuYrcc57NJOUI+i8nD+RMJAz4LRYTr0Is/1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:df:e1:07:7c:e7:53:74:96:98:4a:20:0b:3e:ac:51:8b:d9:61:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2
        Validity
            Not Before: Apr 12 17:53:46 2023 GMT
            Not After : Apr 13 21:21:46 2023 GMT
        Subject: CN=DFC89D9C66FF8B5799FE99F1B05B6AC1B9F4B387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:2d:8a:ea:e5:fa:f5:f0:5f:48:f6:9f:76:
                    ce:cb:86:06:a0:ff:74:af:49:c1:b2:6e:a4:10:ef:
                    f5:e3:0f:1b:d9:0d:0a:f1:ef:a5:6c:96:51:67:ef:
                    f7:91:e2:f9:1d:38:8f:38:99:b8:c6:39:33:c8:20:
                    15:c7:19:93:e3:ad:05:7c:83:96:85:a0:16:79:bb:
                    1d:22:7c:7b:4b:73:80:d5:5e:f0:d9:2c:7b:e6:8e:
                    5d:f9:77:1f:9f:7d:63:a3:ce:84:48:39:ab:c3:fd:
                    12:24:c4:7e:19:84:06:c4:b7:85:11:42:80:54:a5:
                    e2:59:6b:4a:09:b1:c4:42:86:b5:18:d7:82:6a:8c:
                    df:ee:7e:18:5e:c0:7a:88:56:d5:88:fe:e3:bb:c3:
                    04:f6:f0:b7:34:36:67:87:dc:ff:84:d1:2a:d9:3e:
                    5e:38:96:a3:79:9b:a6:bd:48:57:bc:01:b2:30:0c:
                    f7:7b:fd:31:07:48:69:df:8b:9c:71:6e:81:d0:a7:
                    35:de:c4:6f:c3:f3:b7:33:b9:a8:19:7e:ba:3b:ba:
                    a9:03:77:df:34:07:a7:3c:0d:09:14:f7:bd:b1:dc:
                    73:e5:88:aa:79:99:ee:18:69:5c:2d:a1:1b:7a:3d:
                    70:ba:6b:32:50:36:54:44:ea:ad:4b:13:3b:a7:e5:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:9D:9C:66:FF:8B:57:99:FE:99:F1:B0:5B:6A:C1:B9:F4:B3:87
            X509v3 Authority Key Identifier:
                keyid:71:70:34:ED:5F:FB:B4:D5:BA:BA:C1:AC:A4:3A:16:7B:4F:81:92:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/717034ED5FFBB4D5BABAC1ACA43A167B4F8192D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:b5:a7:06:d0:af:d8:48:db:84:cb:e8:85:a8:18:c5:18:
         89:d1:cc:e8:cc:9e:80:91:bc:69:72:02:c8:24:3d:bf:a9:13:
         18:0b:19:67:11:8e:f3:33:2a:c4:3f:00:01:c1:bf:fa:a0:a0:
         cf:fe:1d:55:91:c2:20:5d:a0:fd:5a:2d:9f:10:5d:74:7e:cb:
         3e:1b:9b:14:a8:c3:10:cd:b9:07:8c:d8:47:88:fd:53:22:5c:
         ba:6f:f0:ce:1e:33:32:f5:59:23:2e:04:00:e3:56:70:7b:03:
         af:58:a2:a1:07:7d:16:ab:b0:98:65:ef:f6:b0:05:04:cc:8b:
         e5:51:46:a6:3c:c4:5f:ff:a7:06:22:61:c1:ba:85:a0:21:65:
         19:e6:5e:7c:42:4b:4a:29:d1:ba:c3:67:d7:ae:3c:f9:0b:8e:
         2d:fe:de:4c:0e:bd:47:58:55:85:b9:cd:2b:c1:0a:ce:c2:61:
         ea:de:22:96:d9:29:29:5d:67:4f:fc:7a:40:79:3d:8f:33:36:
         78:f3:07:c8:27:dc:3f:58:d5:bd:69:11:75:15:47:23:4f:5c:
         f4:6f:8d:2c:a8:ac:d7:31:ac:55:ff:6e:26:b3:1d:a9:8b:ae:
         62:23:de:6f:68:9f:66:38:6c:3b:76:5c:5e:41:3d:0a:aa:80:
         24:a6:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----