Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
File:                     DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft (raw, json)
Hash identifier:          iB+9OSQUUqu4YlEfb5Nk+kF0a1WoxXXJKzDacr8ouVA=
Subject key identifier:   79:03:89:40:C3:B9:F4:A8:9F:D8:9F:1D:1B:24:34:D9:05:A5:C8:79
Authority key identifier: DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
Certificate issuer:       /CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
Certificate serial:       4E693F166EEFA6C7F75C6B4DD2ADAC275253F462
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
Manifest number:          74
Signing time:             Mon 20 Mar 2023 16:26:27 +0000
Manifest this update:     Mon 20 Mar 2023 16:21:27 +0000
Manifest next update:     Tue 21 Mar 2023 17:11:27 +0000
Files and hashes:         1: 34352e3233322e32362e302f32332d3233203d3e20323637333031.roa (hash: JLiHo0RpEfixBSZZTCL8gFDBv8+bJvtnHSun9xf9WBQ=)
                          2: DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.crl (hash: L9Grri/YnBYmd5oVzSNzcAzy4bKYEBPu3AH8C54PI3c=)
                          3: 323830343a346235633a383030303a3a2f33332d3333203d3e20323637333031.roa (hash: m/CjlDG9t7cbO7+IoCdItObiKB38BPNVI+Wgk8Bm+YU=)
                          4: 34352e3233322e32342e302f32322d3232203d3e20323637333031.roa (hash: uaz8EYzsBsnToQMdg5c/O3VTQyXY37iZ6IULacvJvbs=)
                          5: 34352e3233322e32342e302f32332d3233203d3e20323637333031.roa (hash: OyC+yCVAZJ3pehFeWfr2DFXJj2eKfwjMW5+q8BI8C7U=)
                          6: 323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa (hash: lDHxW27WSiPEuOW5BtXbMZVhxNxTyBnAAkPmSmoz5Cg=)
                          7: 323830343a346235633a3a2f33332d3333203d3e20323637333031.roa (hash: BBeD1nSHZN0hJfUg3gFDm6JHuZYappxz6eQtJjcURus=)
                          8: 323830343a346235633a3a2f33322d3332203d3e20323637333031.roa (hash: Oe5n6qqWFLUZZHHzbr3nqZ7l8cR0p7yuP+Jsi/JSjzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:69:3f:16:6e:ef:a6:c7:f7:5c:6b:4d:d2:ad:ac:27:52:53:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
        Validity
            Not Before: Mar 20 16:21:27 2023 GMT
            Not After : Mar 21 17:11:27 2023 GMT
        Subject: CN=79038940C3B9F4A89FD89F1D1B2434D905A5C879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:28:8a:0d:9e:1a:09:d0:19:e4:2f:b6:42:
                    f9:5c:30:30:4f:82:4b:4e:b0:21:d6:25:91:a8:1d:
                    4e:dd:88:e5:dd:24:f8:a9:cf:ff:ce:f8:88:02:6f:
                    4e:3f:09:2e:f1:f2:77:f0:46:df:1c:e7:42:23:b8:
                    fa:f0:39:f9:03:20:56:be:4d:e1:cf:a2:dd:5a:04:
                    54:53:ac:14:84:b3:36:38:e7:aa:d6:58:0d:9f:72:
                    fb:57:02:de:f8:aa:86:1f:3c:e4:94:06:92:78:b7:
                    22:c5:ea:e5:12:b2:58:66:3c:67:f4:0b:23:6e:4a:
                    2a:0e:52:7a:a3:fe:17:00:79:ae:d8:a9:6b:79:5e:
                    09:ea:0d:90:ed:ca:6e:32:52:28:ef:74:80:fd:e0:
                    19:30:8c:2c:6b:da:04:bd:0c:2e:76:1f:1a:7a:f1:
                    3e:c8:c7:24:ef:9b:2c:b5:a0:30:41:0a:4d:01:92:
                    5e:38:82:2b:36:95:02:2f:91:e5:d6:c9:a6:61:c3:
                    f3:1b:67:ba:a3:9b:01:de:41:cc:ad:84:70:10:71:
                    da:41:d0:d6:13:91:a1:eb:b6:04:c1:89:77:53:1e:
                    0f:b9:5f:54:08:79:79:4d:ba:0f:a9:1a:9d:1f:be:
                    3c:87:57:8e:9f:0e:8c:37:f6:d6:53:47:d7:a9:d5:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:89:40:C3:B9:F4:A8:9F:D8:9F:1D:1B:24:34:D9:05:A5:C8:79
            X509v3 Authority Key Identifier:
                keyid:DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:90:a7:3a:7f:2d:1f:08:ca:c3:63:fa:8a:2f:5d:52:82:
         32:37:de:d4:09:b9:4d:b3:ff:92:6b:bb:76:2b:f0:08:9c:e9:
         57:af:29:d1:f2:62:d6:b3:dc:f7:0b:c2:85:02:a2:a2:e0:0f:
         c0:a5:73:83:50:6e:fe:d2:96:39:60:78:dd:7e:4e:5e:99:73:
         12:a9:dc:0c:16:55:3d:3c:ff:36:8e:02:91:c3:bd:4a:01:c7:
         9b:e1:d7:e9:64:2d:a6:c8:94:7b:e5:11:73:f1:5c:50:7b:25:
         40:71:c0:c7:f1:59:c4:9f:08:c5:07:6e:ba:3f:34:03:3a:e3:
         66:03:c5:3f:5c:4c:3f:15:57:53:71:df:24:8d:c2:21:38:9d:
         83:4a:e7:b3:59:c2:69:d2:9c:30:a3:99:07:d0:f0:33:40:76:
         2b:6f:c7:4a:e2:5c:09:66:41:e9:5f:46:cb:5d:8f:5d:6b:23:
         ec:ad:48:12:a4:57:34:06:45:69:f0:92:1f:b5:95:8e:a5:65:
         f5:f7:b3:f9:92:64:f7:09:2c:19:1b:98:ff:c4:3e:c5:e8:81:
         2d:d2:43:06:4f:fc:38:66:b6:dd:f7:06:e8:41:11:bf:7a:08:
         e1:96:7a:9c:38:d7:9b:f5:b8:d1:e5:ff:be:72:48:f0:20:df:
         be:4b:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----