Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.mft
File:                     AEEAC1DAE1138312288D24F1AEDA563B45327DB0.mft (raw, json)
Hash identifier:          9mlVtM6oCwal+oHU8qw9/qIhm6XjK32i4/dMx1un64Q=
Subject key identifier:   45:41:00:2F:5F:6A:6C:CF:58:31:B9:E3:D2:C9:C4:32:72:E6:97:8F
Authority key identifier: AE:EA:C1:DA:E1:13:83:12:28:8D:24:F1:AE:DA:56:3B:45:32:7D:B0
Certificate issuer:       /CN=AEEAC1DAE1138312288D24F1AEDA563B45327DB0
Certificate serial:       1308656F10D75CC061A9EC07C782D8674B13C88F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.mft
Manifest number:          29
Signing time:             Fri 20 Jan 2023 11:53:12 +0000
Manifest this update:     Fri 20 Jan 2023 11:48:12 +0000
Manifest next update:     Sat 21 Jan 2023 14:47:12 +0000
Files and hashes:         1: 323830343a373862383a3a2f33322d313238203d3e20323731323631.roa (hash: 82wAmQijHrjbeiFw8glh8ptWUEqNSdTgDEhwll0TPi0=)
                          2: 3137392e34392e3139362e302f32322d3332203d3e20323731323631.roa (hash: bF4CzTPyC2NOhhlqLcEPBL1EMMnSDXyY6zF5x2w6/LI=)
                          3: AEEAC1DAE1138312288D24F1AEDA563B45327DB0.crl (hash: /8I2X1NWWATwcKZdFaqNIoq/ngjs1OUrb6lr41N4DIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:08:65:6f:10:d7:5c:c0:61:a9:ec:07:c7:82:d8:67:4b:13:c8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEAC1DAE1138312288D24F1AEDA563B45327DB0
        Validity
            Not Before: Jan 20 11:48:12 2023 GMT
            Not After : Jan 21 14:47:12 2023 GMT
        Subject: CN=4541002F5F6A6CCF5831B9E3D2C9C43272E6978F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:2a:18:96:99:3c:2e:2b:20:53:2e:4e:85:
                    cf:f1:58:8c:c9:f9:88:0a:e7:88:aa:3a:3e:5a:51:
                    a9:8f:57:d8:3f:c3:87:84:fe:9b:55:6a:5e:13:c5:
                    27:8a:1d:85:74:ed:c2:76:4d:6d:7c:64:02:fe:8d:
                    74:4a:7e:a3:07:0f:ad:7c:25:79:30:aa:e3:1c:f1:
                    46:60:ae:9b:2e:fc:82:73:16:00:ac:55:51:a2:17:
                    12:c2:73:b0:64:dc:fb:f4:8e:be:03:89:c0:c0:6a:
                    28:9d:fd:15:d8:ec:fc:37:09:be:ad:45:7e:62:5f:
                    67:83:3c:98:e9:68:73:1a:0c:7d:1e:40:e5:bd:80:
                    d4:1e:9b:a3:c2:f9:21:31:5d:5c:09:17:6f:98:db:
                    b9:ef:93:42:5a:6b:44:59:bf:00:99:f4:ad:8a:f3:
                    0d:48:3f:c7:7e:6a:36:33:3b:5b:11:f1:ea:00:10:
                    26:22:cd:04:3b:b0:7e:46:31:ba:26:3f:8d:9f:46:
                    eb:7d:c1:5c:b1:1d:e5:60:41:82:3c:5b:e3:0f:ec:
                    c0:8b:ab:3d:00:6c:33:bd:43:92:26:68:63:1e:00:
                    59:95:ff:90:37:67:91:1c:0d:8d:0f:8f:5b:63:a9:
                    47:f9:88:9e:42:30:98:2f:29:ec:84:98:11:19:d6:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:00:2F:5F:6A:6C:CF:58:31:B9:E3:D2:C9:C4:32:72:E6:97:8F
            X509v3 Authority Key Identifier:
                keyid:AE:EA:C1:DA:E1:13:83:12:28:8D:24:F1:AE:DA:56:3B:45:32:7D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzAsTkYSUxE9igNWosi9HdZHrMJFNYFV3FL96jg87bAL/0/AEEAC1DAE1138312288D24F1AEDA563B45327DB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:c3:39:35:fd:9d:a3:15:0d:0b:19:fe:73:d3:79:0a:02:
         e7:74:5b:de:90:82:b2:32:22:30:17:f1:58:17:bf:62:c6:b8:
         68:ce:9c:92:43:3d:fe:1b:8a:5c:56:33:ba:19:d8:92:fe:f6:
         14:89:1e:89:9a:73:67:e8:ad:43:6d:f9:dd:a8:a4:23:32:a8:
         ec:94:d1:aa:5f:65:59:9b:41:89:12:54:7f:c9:b6:05:14:0f:
         28:71:40:9e:90:2d:10:f6:fc:35:00:0c:ef:c5:9f:e6:7b:50:
         b7:d2:60:1f:5a:da:43:62:4c:79:d4:ee:ce:fd:25:2f:df:13:
         51:c3:7f:eb:28:cf:49:16:a4:99:f2:95:22:af:09:5e:0f:38:
         fa:b2:40:6e:eb:89:55:91:1f:d9:de:db:e5:b0:c6:60:ee:ea:
         f4:d7:a9:a8:ba:ab:00:8c:bf:db:20:9a:43:07:04:bd:17:bb:
         fe:c3:f9:d9:16:ae:2e:dd:e6:01:46:ff:b5:61:e2:b6:47:f0:
         af:9f:35:51:e7:c9:7a:6d:a4:17:da:08:01:b9:f2:67:9d:bd:
         bd:03:f3:02:b8:8f:ff:aa:4c:1e:9b:28:3e:6a:8f:86:ce:b4:
         90:8a:d9:ed:0b:bb:1b:7a:b4:0b:9b:fb:a1:31:8e:74:3f:df:
         62:1b:ea:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----