Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft
File:                     C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft (raw, json)
Hash identifier:          hu/fprIUEG1OTq/v324/EBZwR6XRTX7VZ4E5RfNc8nE=
Subject key identifier:   07:30:12:74:A5:0A:87:AE:94:1F:8C:AC:DA:09:91:9F:47:32:70:71
Authority key identifier: C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9
Certificate issuer:       /CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
Certificate serial:       65DC9F9B813BD98B3047359E554DE376665745B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft
Manifest number:          03CF
Signing time:             Sat 01 Jul 2023 07:00:00 +0000
Manifest this update:     Sat 01 Jul 2023 06:55:00 +0000
Manifest next update:     Sun 02 Jul 2023 07:00:00 +0000
Files and hashes:         1: 323830343a313739633a3a2f33322d3438203d3e20323633313539.roa (hash: T5+ncJ7k1e7wGEUcooAoGyAkXOHuWYQvVNzTlSUjtGQ=)
                          2: C32C4CF5306FA1777F8B122237D098922FCFDEB9.crl (hash: ko66g55p0vDkgLbf80bqTpa1QdfSUs/jwd2DBZqKA8I=)
                          3: 3137372e39332e3136302e302f32312d3234203d3e20323633313539.roa (hash: Cj+PcUbdqED02ryn1a3R+tyxPpRBqitMfyha2+T6uWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dc:9f:9b:81:3b:d9:8b:30:47:35:9e:55:4d:e3:76:66:57:45:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C32C4CF5306FA1777F8B122237D098922FCFDEB9
        Validity
            Not Before: Jul  1 06:55:00 2023 GMT
            Not After : Jul  8 07:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:a4:a9:22:ea:f7:01:35:b3:5a:af:d8:48:
                    0b:e7:fe:bc:5e:97:c9:6b:50:97:3b:4d:ff:53:98:
                    a9:41:37:3c:ef:09:12:4e:d2:4b:37:65:f7:05:cd:
                    41:45:33:98:4a:57:ea:8b:b7:41:47:6a:bf:bf:dc:
                    b4:93:d3:f6:a5:03:8e:54:bf:7d:43:8b:90:02:7d:
                    9e:f9:bd:9d:4d:8e:82:0f:25:66:89:10:28:3e:1b:
                    e2:93:05:1d:3f:1f:9c:26:90:42:b4:6b:fe:e1:05:
                    cb:2f:e6:5c:66:80:8b:d1:99:24:25:c8:a9:35:3e:
                    b2:d6:f2:99:ce:fb:f1:f8:1f:1e:6b:50:bc:a4:f4:
                    51:ac:3d:ee:68:9c:9b:f0:7e:a7:0b:67:7c:d7:c1:
                    7d:c9:b3:26:87:3c:f5:63:2c:8c:84:19:dc:9c:17:
                    43:c3:44:26:12:b7:c4:58:ad:f0:a9:84:7c:b6:bf:
                    61:00:6a:e3:c1:f7:83:43:7f:89:88:a2:3d:e0:b8:
                    4a:da:d2:15:ee:37:b2:35:d3:14:a0:00:aa:64:32:
                    b2:f0:f3:c4:3a:7f:58:a4:8a:3c:64:f9:31:41:01:
                    04:03:67:98:7b:f7:7b:00:48:0a:10:dc:c2:6e:02:
                    3c:3d:d0:99:e1:b8:ed:b1:a5:3f:af:c4:ce:62:8c:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:12:74:A5:0A:87:AE:94:1F:8C:AC:DA:09:91:9F:47:32:70:71
            X509v3 Authority Key Identifier:
                keyid:C3:2C:4C:F5:30:6F:A1:77:7F:8B:12:22:37:D0:98:92:2F:CF:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/C32C4CF5306FA1777F8B122237D098922FCFDEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:63:17:ce:59:87:2f:6d:a5:9f:b7:45:ca:24:5d:5e:b7:f7:
         af:2d:13:69:0d:93:a6:79:98:ff:63:b5:9c:c2:dd:d3:c3:58:
         74:e9:62:ef:bb:ea:98:43:c0:5d:04:29:2b:78:8c:54:0d:d6:
         64:73:c4:30:7d:ae:09:58:a4:41:ff:84:2c:1a:10:c6:c5:a3:
         dc:be:d3:fe:01:d8:87:3a:aa:33:f3:d6:27:6b:66:b8:90:56:
         28:f5:08:0c:1c:6d:b9:65:b3:f6:58:22:62:9a:c5:3c:1b:ad:
         c5:09:2d:3f:b7:17:32:d9:e5:95:b9:08:49:db:01:06:70:02:
         e0:12:cd:71:43:88:42:f0:51:eb:b7:07:ba:53:8e:39:d3:79:
         00:6c:49:80:0e:5f:d1:ab:34:2e:b8:fb:c3:c6:e6:99:3a:96:
         43:e4:ce:4f:88:f0:af:56:e6:e6:34:3c:de:ee:a7:7e:e0:35:
         f3:89:4f:1a:11:14:8d:9b:e2:d6:c7:c5:b2:27:f1:12:05:b1:
         4d:12:18:ed:e8:f8:ee:e9:87:b1:82:56:48:bc:72:d7:ad:1c:
         5e:17:b8:59:fd:6c:aa:6f:43:86:0c:df:13:e4:45:3f:86:0b:
         9a:39:81:de:22:4e:8c:34:25:b2:68:40:bb:3f:89:e0:44:fe:
         60:56:55:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----