Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.mft
File:                     44A0A3F77E79040FEEC7F1822ADB061950301667.mft (raw, json)
Hash identifier:          zBc50SGgCWesLXlxWNY/bFSkOhAyw5PMXtMQcQuOPaU=
Subject key identifier:   2E:49:26:64:3A:FA:E3:81:59:87:CE:C3:2E:03:59:2E:DF:AE:E7:C6
Authority key identifier: 44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67
Certificate issuer:       /CN=44A0A3F77E79040FEEC7F1822ADB061950301667
Certificate serial:       6BF7CF867D52600EB756C7C86743F00B841FD936
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A0A3F77E79040FEEC7F1822ADB061950301667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.mft
Manifest number:          19
Signing time:             Thu 20 Apr 2023 21:41:46 +0000
Manifest this update:     Thu 20 Apr 2023 21:36:46 +0000
Manifest next update:     Fri 21 Apr 2023 23:19:46 +0000
Files and hashes:         1: 323830343a373761303a3a2f33322d313238203d3e20323731313535.roa (hash: OP0bj2Y2HbTVj68i7YaPMfKIdxGbrKWOkb/s0jZRmog=)
                          2: 44A0A3F77E79040FEEC7F1822ADB061950301667.crl (hash: s4/RrpjTVgte9O6n0BXqHW57Hi0b+US3YjS2okWwBWo=)
                          3: 3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa (hash: 1sPw5+dcIZpawOcqCj9eFPbRhm4Den6McSQAg/rjGmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f7:cf:86:7d:52:60:0e:b7:56:c7:c8:67:43:f0:0b:84:1f:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44A0A3F77E79040FEEC7F1822ADB061950301667
        Validity
            Not Before: Apr 20 21:36:46 2023 GMT
            Not After : Apr 21 23:19:46 2023 GMT
        Subject: CN=2E4926643AFAE3815987CEC32E03592EDFAEE7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:e6:e9:39:4d:50:25:04:a8:8f:00:0e:69:
                    10:03:18:60:a0:47:d5:f8:37:50:58:b8:21:5c:0d:
                    b9:f9:cb:03:0c:d5:37:9f:00:84:94:ad:99:41:fb:
                    7c:c5:fa:ed:60:ad:81:75:c0:5b:5d:0a:a7:19:82:
                    70:d5:98:a5:85:cd:d3:16:2c:ee:a5:d7:23:ec:95:
                    6c:3b:de:12:31:97:a2:4d:12:b7:2c:51:4a:5a:dc:
                    e1:65:42:4a:24:9c:4d:b3:91:ad:42:8c:93:0b:66:
                    03:7a:4d:75:30:d3:d6:b7:69:5b:96:e8:e8:18:aa:
                    bf:82:49:6e:d3:5a:cd:7b:30:bf:49:b4:17:7f:fc:
                    d5:49:e7:74:41:a6:cd:86:e8:16:e0:3a:77:11:01:
                    ba:ab:28:f6:b7:25:c5:6c:1a:e6:64:4e:53:70:69:
                    e0:84:8e:59:3e:1b:b4:6e:6e:33:d8:2c:ee:35:ac:
                    b9:6a:0d:1c:61:a9:0e:2d:87:bc:9b:a9:c7:bf:53:
                    00:5c:3e:b7:a6:29:6d:20:86:16:b5:e6:2e:11:e9:
                    4e:a6:09:ec:49:9d:47:df:ea:ba:a0:a0:20:16:89:
                    a7:a8:af:bd:58:30:18:30:55:5f:a9:b9:e2:c6:da:
                    c8:0d:ac:d8:65:13:07:91:38:cc:dc:01:ea:f7:37:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:49:26:64:3A:FA:E3:81:59:87:CE:C3:2E:03:59:2E:DF:AE:E7:C6
            X509v3 Authority Key Identifier:
                keyid:44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A0A3F77E79040FEEC7F1822ADB061950301667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:63:ce:fe:5b:3e:76:b4:2d:60:9f:4c:b5:e6:d3:5a:c4:
         65:f3:61:c2:f9:e6:86:10:23:0c:53:14:e5:0f:23:f9:67:bb:
         a5:25:c9:2d:8d:a9:b7:84:fb:0f:34:48:a4:43:e2:84:41:ac:
         82:84:49:bb:0a:f2:9a:74:bc:2f:cd:78:a4:c4:68:04:bc:14:
         ab:07:56:bb:6d:3b:f1:0c:77:89:64:03:12:3b:58:b8:e7:e5:
         50:29:46:e8:0d:b3:8b:c3:5a:12:6f:a2:fd:4f:1c:0f:77:ee:
         2f:e5:4f:74:b0:91:f3:d2:a3:b5:35:ba:23:07:16:43:39:51:
         4c:4d:4a:76:01:b9:fe:ac:c6:4c:e7:ec:8f:c9:11:1c:fb:3d:
         77:ed:16:5a:7b:97:df:14:0d:8d:30:0b:7a:73:65:59:a4:b1:
         ec:d1:2e:9f:9f:60:d8:40:2e:f3:e8:7c:a5:36:0d:23:e9:64:
         7c:fa:7a:82:e8:8f:11:38:30:22:e6:07:d0:bf:45:29:4a:ee:
         13:49:39:7f:08:0c:f0:14:93:6f:3b:ef:3c:6b:1b:a2:f6:65:
         98:7e:52:3f:07:f8:96:fc:c7:fd:8c:c8:ad:d1:57:bd:b8:12:
         98:17:79:f3:a6:d9:fe:a8:1d:86:f5:61:09:78:3d:97:e1:c7:
         43:42:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----