Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.mft
File:                     64902D35F66E7AF02159D76F49B1F57C555C7B1A.mft (raw, json)
Hash identifier:          4Iy7EHvASGy8dKmaaOl6KGjiA3RWAgzGccPrKTuGMh0=
Subject key identifier:   2E:2E:71:A5:D1:FD:C3:6F:A2:9A:38:17:9A:FE:D2:0B:3D:30:32:3C
Authority key identifier: 64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A
Certificate issuer:       /CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
Certificate serial:       39A1FD032F9DD232266CC96214D712FCD884346C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.mft
Manifest number:          01CD
Signing time:             Mon 06 Feb 2023 20:20:00 +0000
Manifest this update:     Mon 06 Feb 2023 20:15:00 +0000
Manifest next update:     Tue 07 Feb 2023 23:34:00 +0000
Files and hashes:         1: 3136382e3139352e302e302f32322d3234203d3e20323635343130.roa (hash: GMTnvxU9lWFd7LTDXJNEDHIKCt/EcsgtTXBvf/UhIsw=)
                          2: 64902D35F66E7AF02159D76F49B1F57C555C7B1A.crl (hash: P1AWalNQ2ewDAf06vucbr3K90WUTcWIPBQ8faQ5y8N8=)
                          3: 323830343a333361383a3a2f33322d3438203d3e20323635343130.roa (hash: pSSSZb8Ogu9BZFb+jSYbUvbe66SbTM/g7iE+WHkSj6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:fd:03:2f:9d:d2:32:26:6c:c9:62:14:d7:12:fc:d8:84:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
        Validity
            Not Before: Feb  6 20:15:00 2023 GMT
            Not After : Feb  7 23:34:00 2023 GMT
        Subject: CN=2E2E71A5D1FDC36FA29A38179AFED20B3D30323C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:f4:ef:40:19:23:23:78:6e:6c:e2:0e:d9:
                    77:86:1e:89:13:65:e1:d3:88:6d:d4:1f:4a:c1:00:
                    b1:60:db:5b:66:44:69:4d:9c:77:f9:1d:fb:25:48:
                    fd:55:2d:86:eb:8d:82:c5:c4:34:2d:74:75:44:f9:
                    35:50:08:43:b5:ea:98:ec:35:5d:df:2b:30:4e:c8:
                    57:33:70:5a:dc:42:f3:a5:be:28:f6:1a:a9:24:88:
                    b2:0c:96:97:d5:0a:12:e1:24:7f:fd:7b:35:bc:b0:
                    6f:78:72:cb:70:3f:d8:dd:bd:0c:df:42:22:97:6f:
                    a5:10:ec:b3:7e:a3:cc:72:78:6d:7d:ef:37:0a:e7:
                    e5:65:ae:45:62:8f:72:bb:61:ae:38:7f:10:cb:fb:
                    fa:02:21:bc:09:d2:bd:08:c4:65:9f:55:d3:d2:9d:
                    0f:10:cb:d3:3d:94:85:dc:a6:c4:a9:46:40:e4:24:
                    bf:6c:42:57:ec:47:0e:26:80:47:92:da:8a:00:87:
                    f3:a8:fc:c6:90:9d:ae:2e:6b:32:82:e5:42:7b:d3:
                    5b:d1:cf:45:2b:2d:8a:d9:b3:fa:f7:55:87:79:bb:
                    ba:7f:f1:64:e9:2c:fa:fa:52:ff:aa:78:79:0c:17:
                    24:19:5d:fe:8d:26:d7:59:af:e0:83:4e:18:e0:c6:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:71:A5:D1:FD:C3:6F:A2:9A:38:17:9A:FE:D2:0B:3D:30:32:3C
            X509v3 Authority Key Identifier:
                keyid:64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:18:43:a4:b7:25:e4:38:c0:0f:ca:bb:bf:cf:5c:e5:8b:
         28:f8:59:f0:04:91:bb:40:b2:34:6f:02:4c:71:24:4a:21:97:
         67:b3:7a:6a:e2:b5:02:04:67:ea:94:e1:02:eb:a7:63:7a:d4:
         b3:43:84:a2:66:f2:c7:47:72:86:ce:59:96:59:55:ed:c7:6b:
         02:82:fa:8b:de:98:9c:d7:5a:a5:84:9e:55:73:28:c1:83:2f:
         2e:95:d1:36:2b:8d:28:b0:21:45:c9:19:95:84:c5:8d:bf:f2:
         f9:33:9e:e8:1f:f6:d0:46:22:f3:b8:6f:11:8a:b5:86:94:57:
         0b:da:8e:c5:7c:18:67:65:5e:cf:02:43:e0:03:08:3d:18:f5:
         23:35:13:48:28:a0:fc:5d:66:61:f6:9f:f4:5d:1c:37:63:aa:
         e0:4a:67:9a:0f:53:6b:04:9a:96:38:c8:0b:6a:e7:a7:5b:f9:
         05:69:23:7a:83:50:c8:d8:11:18:45:cf:2a:be:1b:1c:6a:46:
         bd:de:cc:b5:98:44:82:05:d1:1c:1e:93:cb:a3:cd:19:8a:91:
         b2:c2:d3:de:a3:1e:7a:0d:3e:98:f8:2f:fb:8b:12:e1:e2:e8:
         56:79:17:d3:f2:d8:63:38:07:7b:15:6c:ad:ef:29:c6:e3:ab:
         70:72:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----