Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft
File:                     2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft (raw, json)
Hash identifier:          hO7OUvd2gl2eznEzEMc04mVeuhO4aZUTL3G9VzdphDU=
Subject key identifier:   53:94:81:00:1A:04:EE:31:29:E9:11:BA:5F:FD:0B:FC:5A:5A:54:C6
Authority key identifier: 2A:72:49:3D:6E:34:83:E9:C9:49:11:28:9F:BE:03:F4:FA:3B:E7:A3
Certificate issuer:       /CN=2A72493D6E3483E9C94911289FBE03F4FA3BE7A3
Certificate serial:       268372DCE5007B93458FA28FBAFE8192280C6ED5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft
Manifest number:          66
Signing time:             Sun 12 Jun 2022 23:40:00 +0000
Manifest this update:     Sun 12 Jun 2022 23:35:00 +0000
Manifest next update:     Tue 14 Jun 2022 02:50:00 +0000
Files and hashes:         1: 323830343a3534383a3a2f33322d3438203d3e203533303035.roa (hash: pn9Y/BxELCRPEdz5JKurZQbCvM2h9bhgfo5bp5wAnEI=)
                          2: 2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.crl (hash: u8jExG3EN9yZq6uR+u9+R4TeIsfswtPa5GENKMfvof8=)
                          3: 3137372e36362e3234302e302f32312d3234203d3e203533303035.roa (hash: MjEei4/KvblgXNsvx8kTwOIMNbqgxdwZoWL0FiAUA5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:83:72:dc:e5:00:7b:93:45:8f:a2:8f:ba:fe:81:92:28:0c:6e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A72493D6E3483E9C94911289FBE03F4FA3BE7A3
        Validity
            Not Before: Jun 12 23:35:00 2022 GMT
            Not After : Jun 14 02:50:00 2022 GMT
        Subject: CN=539481001A04EE3129E911BA5FFD0BFC5A5A54C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8b:61:70:2f:0b:be:60:99:3f:6e:14:f4:00:
                    c0:93:74:c7:5b:12:5d:93:32:42:f9:9b:71:16:1a:
                    22:43:e9:ae:24:3c:4d:f2:11:38:d9:1f:47:bb:39:
                    fe:34:e8:28:bd:83:2d:e7:47:19:80:e5:3a:03:be:
                    59:cf:4b:09:d6:4c:90:5d:0d:c7:40:06:73:91:9c:
                    88:4d:17:b5:0b:c8:0d:a0:f5:1c:5a:90:87:22:5d:
                    d9:55:3f:4a:7b:e0:28:66:5a:fc:41:e1:7c:46:c6:
                    a0:55:b3:e4:9e:1e:31:22:a0:17:dc:b0:6b:e1:de:
                    bc:7e:a8:02:b0:70:e9:57:86:3f:98:5d:3e:38:d8:
                    86:88:7a:e0:8f:07:b3:9c:13:2e:5e:c8:ae:e3:6f:
                    6f:4c:93:ad:32:45:9d:cc:de:df:9f:3f:4c:18:78:
                    ab:af:c4:f6:25:c2:74:28:93:1e:40:a7:52:3a:78:
                    1d:a2:0d:a0:c3:6d:8c:a2:c0:e0:15:63:c9:2f:a2:
                    5d:2a:c3:06:ba:25:0e:8e:c5:84:b9:99:fa:93:c6:
                    8f:ba:8b:c8:1d:c2:a6:0b:52:e5:06:81:20:79:f0:
                    0f:e6:55:19:4e:74:1d:f6:a7:dc:c2:ac:04:b9:44:
                    7b:4d:71:67:1a:04:9a:ab:2a:e6:87:c2:bb:9b:7d:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:81:00:1A:04:EE:31:29:E9:11:BA:5F:FD:0B:FC:5A:5A:54:C6
            X509v3 Authority Key Identifier:
                keyid:2A:72:49:3D:6E:34:83:E9:C9:49:11:28:9F:BE:03:F4:FA:3B:E7:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/2A72493D6E3483E9C94911289FBE03F4FA3BE7A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:7c:9b:dd:a4:97:cb:9f:d0:56:3e:71:fd:9f:a1:95:57:
         6e:e7:db:df:7a:83:a7:02:09:3a:ad:40:0c:42:4d:d0:47:72:
         e1:7c:e0:13:55:a1:1b:ae:1e:77:1d:8f:c8:e2:e6:38:14:7d:
         97:2e:04:3f:fa:d9:48:f0:26:57:fb:6c:a2:64:2c:c4:b4:e2:
         44:76:3e:98:b4:85:78:8b:5e:fc:8a:3b:34:ff:16:8d:54:a8:
         11:83:da:7d:96:1e:31:9d:c4:09:cb:5e:a1:72:a8:c3:d0:d1:
         65:69:05:e1:b0:8d:a4:42:76:bd:8c:14:88:12:d3:3f:ac:cc:
         1b:bc:de:68:97:c0:9c:46:f3:b5:b4:90:af:55:66:bb:ba:b2:
         57:e8:81:ff:7a:62:7a:9b:61:a6:81:39:69:87:8c:ab:a4:95:
         32:b9:d7:c1:fd:36:25:d9:ba:2b:03:e1:a0:bd:f9:14:ac:e4:
         fd:d9:84:d6:dd:93:15:b7:08:7a:01:9d:46:7c:54:6f:9c:64:
         e2:0b:e4:1d:0b:9b:3a:db:46:7e:20:e4:86:19:b6:13:04:b4:
         f2:0d:62:48:c2:a4:66:a9:c6:f7:e6:4b:72:37:71:5b:ef:b5:
         1a:f5:2e:e1:d5:58:db:b4:c7:34:ed:3b:bb:67:ef:15:53:9c:
         4d:9c:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----