Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.mft
File:                     E297D7E4600902A15DE37C20708CF7BC5A3BF010.mft (raw, json)
Hash identifier:          cOJthxgo7EAWFwpXQVR1VP0uDBIH7QJ2+kxJuOC6J38=
Subject key identifier:   AB:17:33:32:06:D3:F8:75:48:D1:AB:0E:2F:8E:49:AE:E2:87:96:3F
Authority key identifier: E2:97:D7:E4:60:09:02:A1:5D:E3:7C:20:70:8C:F7:BC:5A:3B:F0:10
Certificate issuer:       /CN=E297D7E4600902A15DE37C20708CF7BC5A3BF010
Certificate serial:       11A8B6BA7935118C322545C82A3113A47CD575BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.mft
Manifest number:          64
Signing time:             Fri 02 Dec 2022 04:59:53 +0000
Manifest this update:     Fri 02 Dec 2022 04:54:53 +0000
Manifest next update:     Sat 03 Dec 2022 07:28:53 +0000
Files and hashes:         1: 34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa (hash: QnZHmKsvOc36wamXOrdLjqqXMHA3BxvcJ8cgU316sWg=)
                          2: E297D7E4600902A15DE37C20708CF7BC5A3BF010.crl (hash: 9XH7bpTm60iOMAQ3Q/qtgtH33JKIwwyoE/Ba8ll+GD0=)
                          3: 323830343a346262343a3a2f33322d3438203d3e20323637333235.roa (hash: eusenEyKRDg9pKAbGS8DZKrRiqtFmxG4iEB/2qcZ0/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a8:b6:ba:79:35:11:8c:32:25:45:c8:2a:31:13:a4:7c:d5:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E297D7E4600902A15DE37C20708CF7BC5A3BF010
        Validity
            Not Before: Dec  2 04:54:53 2022 GMT
            Not After : Dec  3 07:28:53 2022 GMT
        Subject: CN=AB17333206D3F87548D1AB0E2F8E49AEE287963F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:eb:5e:4d:a6:e2:6c:f4:78:1a:72:60:75:ac:
                    87:e3:14:bc:75:fe:02:77:14:d6:f7:d9:7e:89:25:
                    51:51:da:99:e6:ef:0b:c3:99:c1:cc:e9:4d:a5:74:
                    ca:83:35:ae:2d:1a:41:48:a9:46:6a:e0:77:98:7c:
                    9d:9d:35:9f:a4:68:e5:f4:dd:ab:78:28:8c:9b:3a:
                    a5:6e:5f:58:49:0a:c4:b8:01:9a:33:c8:21:da:bf:
                    ac:84:74:6c:4f:c8:c6:19:ed:28:e4:fd:d4:8e:62:
                    f3:ee:16:b2:93:73:3e:77:73:05:5c:81:21:fe:88:
                    7a:b4:f1:39:63:44:ea:f4:19:59:22:fc:af:44:b5:
                    d7:a7:3f:2c:9a:b2:2b:b5:cc:d4:1c:01:26:b7:1e:
                    af:47:cf:42:65:c3:cf:2f:bb:c2:79:35:66:69:6f:
                    9a:95:e5:8d:34:53:2d:ef:e7:bc:5a:e0:43:79:d9:
                    59:3a:56:96:78:11:67:0b:92:0c:c2:2f:c0:d5:c0:
                    6f:5e:92:2e:05:ef:4f:38:7b:f0:3b:ef:63:b5:24:
                    fe:60:76:e4:53:fd:e7:73:1d:d7:87:8c:d1:00:40:
                    93:dd:b7:e2:3d:24:8d:75:63:bf:54:28:7d:93:4c:
                    7f:d7:0d:f9:c9:82:29:dd:c1:6a:64:be:97:ab:e8:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:33:32:06:D3:F8:75:48:D1:AB:0E:2F:8E:49:AE:E2:87:96:3F
            X509v3 Authority Key Identifier:
                keyid:E2:97:D7:E4:60:09:02:A1:5D:E3:7C:20:70:8C:F7:BC:5A:3B:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:34:33:33:65:0d:ee:00:dc:31:5e:45:35:d5:a6:ad:93:5c:
         71:41:73:da:b6:2a:00:c6:4b:85:8f:1a:c0:4d:dc:40:4f:c4:
         e4:0c:03:1b:3c:c2:a9:4d:cf:2b:61:b6:28:27:8e:71:04:67:
         2a:ef:99:f4:07:82:bc:0f:8d:17:e2:6d:8f:77:53:7b:46:db:
         26:b2:ba:07:e6:46:46:db:b1:4b:0b:58:c3:29:05:27:03:e6:
         25:f5:31:09:3f:1b:12:e3:90:7f:a1:ef:5a:08:fa:a0:82:ea:
         68:f6:96:4f:c0:c0:de:24:82:f4:d1:8b:fd:77:c2:fa:c4:55:
         fc:c8:9a:a3:20:1d:bc:ae:0d:42:14:8e:02:18:d9:3d:68:30:
         f4:42:d9:9b:02:a0:cd:91:75:39:d5:5b:01:49:2d:15:a8:64:
         f5:28:bb:f7:cc:7c:3b:f1:32:90:bf:79:b2:2e:51:2f:a0:40:
         ce:de:41:10:b0:17:51:94:55:d4:f4:7c:ba:e6:aa:cf:de:24:
         a5:0f:a6:e7:9d:1c:c8:30:8d:93:7c:b2:56:a2:48:dc:b6:53:
         32:27:b0:89:19:4d:e6:9f:76:8c:c4:34:3a:88:6b:00:2a:75:
         f0:81:47:23:8f:0c:00:fd:69:d9:bc:46:ac:f3:1e:a6:b7:d8:
         cd:a2:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----