Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft
File:                     0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft (raw, json)
Hash identifier:          NYkuH9WIvHYM/Lsm4snslwURmkQDNXjkh2m5zGIcoAg=
Subject key identifier:   C3:54:00:F1:3A:63:9E:42:E9:79:71:19:D1:A8:5D:27:DE:28:D2:FE
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       01F76D51191C2DF770FFE0E5200496FB78B8EDF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft
Manifest number:          019C
Signing time:             Tue 13 Jun 2023 18:11:15 +0000
Manifest this update:     Tue 13 Jun 2023 18:06:15 +0000
Manifest next update:     Wed 14 Jun 2023 20:02:15 +0000
Files and hashes:         1: 3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa (hash: arcqwWNff/vo7NX/33I0RFSLXBpA1cAte82/OTkQ23s=)
                          2: 323830343a313331383a3a2f33322d3438203d3e20323633353135.roa (hash: DMW6CsDrzJESpbMYsg5SUYzAHMgs93I6R557kTPssdc=)
                          3: 0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl (hash: zgGIM7X8JJT9PUZoXdZhUu/BwKrNBlF+hhrtXaRbZuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:6d:51:19:1c:2d:f7:70:ff:e0:e5:20:04:96:fb:78:b8:ed:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Jun 13 18:06:15 2023 GMT
            Not After : Jun 14 20:02:15 2023 GMT
        Subject: CN=C35400F13A639E42E9797119D1A85D27DE28D2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:d2:47:1e:75:98:56:db:d3:94:16:3e:19:
                    95:01:e6:d4:32:ff:96:c2:e7:1c:67:de:f5:7e:48:
                    9f:2b:d8:0e:43:96:38:7a:95:6d:50:ea:b2:0d:aa:
                    f3:17:f5:bf:d1:31:1e:b5:ac:70:94:94:34:9f:df:
                    13:de:83:9e:e8:a5:88:68:a8:2d:57:b9:da:5a:67:
                    70:c4:88:ad:83:30:fc:d6:a8:a8:d6:ec:e3:d0:ff:
                    a0:48:7b:72:a0:ee:2a:10:6d:db:93:51:16:f6:cd:
                    7a:5e:3e:13:64:78:db:0a:cc:d7:aa:c6:b2:2f:d4:
                    44:aa:f5:6e:39:02:53:75:f3:1e:03:67:91:65:08:
                    89:e8:1f:22:39:2a:02:a9:0a:ae:90:4f:3b:74:27:
                    1e:cc:91:21:61:3e:31:33:67:12:09:4e:db:f0:26:
                    23:47:77:fc:1b:95:20:95:39:73:bc:ad:d5:24:47:
                    24:10:07:95:2a:3b:ff:30:68:d8:8b:3e:cb:a4:6b:
                    f2:92:87:19:c3:68:87:a0:5f:0d:fc:f1:3e:3c:5a:
                    b7:23:04:57:dc:65:b3:15:f6:d5:9e:0b:f6:fd:46:
                    e9:e9:c7:18:d8:a6:94:0a:0d:37:1d:a2:64:98:34:
                    65:68:37:6c:40:94:2e:29:ba:3c:f0:8d:dc:28:5f:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:00:F1:3A:63:9E:42:E9:79:71:19:D1:A8:5D:27:DE:28:D2:FE
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:7d:44:ca:27:2c:fc:4c:b3:93:19:76:d8:f8:8b:d6:ee:
         45:2a:98:c8:96:18:69:74:a3:b5:61:ad:f9:bb:3d:a1:7a:54:
         e7:96:7b:f2:0f:41:4c:6f:db:18:6f:42:a0:84:b4:14:9f:1b:
         f3:2f:0d:47:e7:35:99:f0:eb:41:59:3a:89:b1:5b:6a:36:be:
         ef:bc:d1:cd:be:98:d9:72:98:08:ee:f5:ac:ca:e7:b5:72:96:
         d8:02:28:fa:e5:58:28:4e:80:8a:09:1e:96:a1:fe:10:56:ba:
         02:9d:da:db:71:20:92:93:67:15:21:41:9a:4e:8f:91:6f:8e:
         a7:ec:b5:63:05:48:b7:18:94:f6:58:f7:a4:1c:a8:52:d4:e1:
         d1:96:69:0d:7b:a1:37:ab:a1:7e:f3:2d:71:54:fa:8f:a6:9c:
         db:8d:92:82:ad:9d:61:4f:7b:98:49:cf:38:69:69:a1:d9:8e:
         81:2c:1c:5f:b3:90:2a:16:86:c1:de:38:2f:08:11:a1:f1:04:
         7e:c3:bd:2e:72:e7:3e:3c:8c:c5:94:a9:8e:a9:a3:69:50:24:
         17:21:4e:ea:f0:63:50:5a:f4:43:09:0e:de:4e:2a:54:63:ae:
         8d:bb:4b:0f:d5:a8:8c:85:2a:60:a6:c8:87:89:e0:79:38:e1:
         28:78:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----