Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft
File:                     C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft (raw, json)
Hash identifier:          FSaHzURgve95fk6rZzrGLmhDmvrC7iJS+ELqusVnomc=
Subject key identifier:   C0:8A:05:D1:1D:13:72:11:72:74:A9:3B:51:39:59:F6:CA:A8:2D:CD
Authority key identifier: C9:93:0A:AA:CF:A8:88:D4:80:AE:8B:38:75:C4:B4:F4:DE:61:2F:B0
Certificate issuer:       /CN=C9930AAACFA888D480AE8B3875C4B4F4DE612FB0
Certificate serial:       322DEC35DA8B6CCB3D298A65895008E013BBA429
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft
Manifest number:          0279
Signing time:             Fri 10 Nov 2023 08:46:17 +0000
Manifest this update:     Fri 10 Nov 2023 08:41:17 +0000
Manifest next update:     Sat 11 Nov 2023 09:01:17 +0000
Files and hashes:         1: C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.crl (hash: ONATJ4T3njCzNX5tic8rtoTy+JShLBwhVUBb8sAL8fc=)
                          2: 34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (hash: V/grDtD2kFtHcnvtNTr90nZmogVB1XI9MuGK/xewCNQ=)
                          3: 323830343a363266303a3a2f33322d313238203d3e20323639333239.roa (hash: DIY2i/TepPqd7SX9KyYtUkl+iY+rPTXodquXS8Ff4Cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2d:ec:35:da:8b:6c:cb:3d:29:8a:65:89:50:08:e0:13:bb:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9930AAACFA888D480AE8B3875C4B4F4DE612FB0
        Validity
            Not Before: Nov 10 08:41:17 2023 GMT
            Not After : Nov 11 09:01:17 2023 GMT
        Subject: CN=C08A05D11D1372117274A93B513959F6CAA82DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:2d:a4:bb:eb:42:7c:cb:21:6c:7b:50:e1:
                    34:4b:6f:09:d8:73:49:d7:0e:a0:05:ea:d6:1d:78:
                    c0:18:9b:dc:a7:aa:7b:0c:f6:ed:c6:ec:e0:54:bb:
                    7c:61:42:d2:92:55:cd:e0:86:87:60:e2:c6:cd:df:
                    4f:de:87:41:57:c4:5f:20:37:8e:1c:c7:13:af:c6:
                    41:0f:eb:c5:6a:e6:c7:8c:21:ef:37:17:a2:75:bf:
                    53:9f:d7:33:6b:2f:b7:72:1c:aa:b7:b2:c1:36:da:
                    2c:72:5c:d8:f3:37:76:d3:9d:cd:b4:4f:9c:21:bd:
                    44:eb:51:ff:9a:c3:02:de:26:f2:af:d5:d0:d2:b5:
                    93:28:c2:2b:25:87:45:18:ff:77:34:d4:f2:5e:6c:
                    74:a2:51:c4:e0:0b:43:25:bf:46:87:0b:c0:06:91:
                    7a:45:99:7c:c0:de:39:cb:5c:6d:2d:2d:21:51:56:
                    49:f7:e7:9d:9e:27:6f:3f:6f:a1:07:eb:a1:84:af:
                    eb:ea:fe:fe:33:18:58:80:96:b9:5e:9d:10:ca:38:
                    34:c2:80:85:c9:9e:de:2d:ca:c8:73:1c:e2:5d:ac:
                    64:00:fe:b0:3c:d6:27:fe:0e:fa:a7:cf:b1:bd:93:
                    99:a1:1e:f7:de:e3:6e:56:21:8a:20:8a:8f:84:76:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:05:D1:1D:13:72:11:72:74:A9:3B:51:39:59:F6:CA:A8:2D:CD
            X509v3 Authority Key Identifier:
                keyid:C9:93:0A:AA:CF:A8:88:D4:80:AE:8B:38:75:C4:B4:F4:DE:61:2F:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:2a:64:1a:78:e6:13:c3:c7:e2:0e:8c:69:e3:8a:c5:b6:
         59:8e:d9:a9:a5:5a:50:e8:d5:98:69:29:92:20:46:23:bf:17:
         78:e6:0b:5f:f7:79:05:3b:de:9c:96:63:f7:79:b9:e0:59:fd:
         09:64:f9:17:d8:a0:3a:1f:51:78:30:f5:06:c9:51:04:d7:dc:
         17:e7:82:b2:3a:c1:77:28:68:62:eb:e0:5c:a8:fc:bc:5b:e3:
         3e:de:b9:23:c7:58:53:56:b7:84:f7:18:25:ee:e9:be:e0:d4:
         39:51:ce:02:e7:48:62:56:72:c3:94:93:00:53:30:59:dd:1c:
         1a:f6:01:0d:b6:e2:aa:38:3a:b0:09:de:3a:61:ab:03:98:ae:
         c1:78:e0:c4:e6:90:6c:d7:db:b5:ab:29:48:b4:af:e0:55:4c:
         07:c6:81:05:86:e7:9a:87:08:f6:a5:95:fc:e0:a9:a7:7d:a3:
         54:f3:a8:97:9a:03:cd:64:4c:26:a4:02:ec:fb:17:fe:13:62:
         d1:71:eb:bc:41:29:59:60:de:f3:27:ae:5e:df:d7:f5:2b:97:
         1f:4d:3f:76:58:75:69:a2:91:70:50:ca:94:35:e5:f5:3c:0a:
         c9:af:8e:74:50:c3:c8:af:28:af:15:07:4c:04:0a:c0:0f:02:
         19:11:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----