Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft
File:                     7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft (raw, json)
Hash identifier:          dfLtsqPEna1qSwwab08oqkwJIa1e/PWbtMcB4voCdNQ=
Subject key identifier:   C6:2B:72:0B:3C:FE:63:6B:84:6F:5C:E1:9E:08:31:CE:26:62:09:FF
Authority key identifier: 72:35:DC:8F:1F:E8:0A:9F:E8:56:38:7F:C2:4A:1B:14:9B:50:E3:01
Certificate issuer:       /CN=7235DC8F1FE80A9FE856387FC24A1B149B50E301
Certificate serial:       539DD8206353EC7F1F599C18675EB49377390D28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft
Manifest number:          0308
Signing time:             Wed 11 Jan 2023 01:00:00 +0000
Manifest this update:     Wed 11 Jan 2023 00:55:00 +0000
Manifest next update:     Thu 12 Jan 2023 01:00:00 +0000
Files and hashes:         1: 7235DC8F1FE80A9FE856387FC24A1B149B50E301.crl (hash: TAiGU2mWXPMDuTjdf/5H9Y1HbByzR5B/4zhOiZymHGU=)
                          2: 34352e3138372e35322e302f32322d3234203d3e20323639343536.roa (hash: nOD9vIWHVyF4bBZhfuwD+1iz/nQHYAnbgc4QdI/tJho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9d:d8:20:63:53:ec:7f:1f:59:9c:18:67:5e:b4:93:77:39:0d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7235DC8F1FE80A9FE856387FC24A1B149B50E301
        Validity
            Not Before: Jan 11 00:55:00 2023 GMT
            Not After : Jan 18 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:3e:ed:67:52:a1:ed:25:c4:71:48:ca:e6:
                    22:d8:84:34:4e:0e:b7:1c:72:9f:b1:ef:59:16:ab:
                    2e:45:9f:61:86:bc:8d:e9:8d:25:fe:e3:25:66:94:
                    af:e6:88:8b:16:20:ec:e5:d8:da:eb:12:5a:dd:e0:
                    82:a9:ad:a1:27:12:a2:6a:10:e3:4e:a8:af:d5:90:
                    93:27:ee:14:0c:cf:90:04:49:00:2e:9f:83:41:e6:
                    eb:d6:86:ab:21:75:86:d0:46:bb:7a:87:d5:a3:2d:
                    d1:db:67:9f:20:a5:b9:27:2b:b2:9b:fe:5b:f9:de:
                    d0:d3:11:74:85:f2:9f:b5:b4:34:41:02:ea:80:94:
                    63:97:4f:ed:bc:c8:01:f8:6c:58:6a:d8:1c:45:c0:
                    51:66:47:a5:c7:55:99:73:1b:72:28:b6:58:a3:b4:
                    67:25:4c:a0:90:68:85:35:ea:67:bb:11:48:5b:dd:
                    43:81:21:cf:1b:ee:96:8b:1f:9f:8d:6a:dc:b7:37:
                    88:25:46:c3:fc:d2:de:f5:5d:eb:0f:b7:a4:54:7a:
                    a5:d6:0d:0f:f6:a8:3c:0e:04:c0:c2:59:93:26:a1:
                    fa:29:ea:b9:7f:71:4b:31:e5:5b:e0:aa:ab:3f:43:
                    6e:62:ae:30:76:b8:b1:c8:d1:14:96:0a:23:8d:f7:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:72:0B:3C:FE:63:6B:84:6F:5C:E1:9E:08:31:CE:26:62:09:FF
            X509v3 Authority Key Identifier:
                keyid:72:35:DC:8F:1F:E8:0A:9F:E8:56:38:7F:C2:4A:1B:14:9B:50:E3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/7235DC8F1FE80A9FE856387FC24A1B149B50E301.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:6e:e3:27:aa:70:6c:8b:55:8d:76:40:6a:5a:33:01:de:
         f0:0b:fa:ae:20:25:92:67:ce:a9:dd:ca:29:15:0b:72:7e:3e:
         37:b2:86:5b:ba:91:08:64:27:02:38:34:55:89:72:73:c2:01:
         f4:e2:6f:0c:0f:03:e4:eb:3a:4c:d4:4a:ca:65:64:3c:44:65:
         1a:a8:d7:4b:0b:3d:aa:74:e4:83:d0:2a:ae:60:dc:a0:e3:a7:
         9d:73:74:9a:6c:ec:50:16:d7:84:24:22:3b:2e:b4:4c:bc:bc:
         00:f8:25:1f:49:19:13:c6:d6:9f:ad:a9:d6:c6:16:ce:f3:e8:
         3a:4b:58:30:41:49:8c:ee:62:21:40:44:10:cf:1f:97:84:e4:
         9f:c3:78:1e:f7:95:2c:1b:00:1b:42:f1:04:68:67:c4:6a:c9:
         bc:9d:0e:82:cd:8e:f6:52:d8:a2:e5:ae:50:9c:a5:7b:f1:52:
         7f:63:c3:68:0b:c9:b8:a2:3d:2b:24:58:96:da:6d:76:df:43:
         7a:33:42:9d:1e:b6:5e:eb:a0:20:95:2f:bb:98:98:37:54:89:
         99:14:d0:f4:52:d6:24:f9:b4:3c:de:38:23:8c:a6:a0:f5:a5:
         d1:47:4c:2a:71:d9:93:e6:6a:fb:c9:27:e1:a3:2b:d6:d1:96:
         da:52:d8:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----