Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.mft
File:                     4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.mft (raw, json)
Hash identifier:          wILrzxWbKlQKKwev7/7sqHM6eaOBF8wkp6schcRT5e4=
Subject key identifier:   F2:00:82:4A:19:5E:97:13:7E:16:52:FC:46:05:36:C4:98:85:44:AF
Authority key identifier: 4F:0C:FD:D6:FA:BF:25:A7:55:7C:49:7D:EA:5A:FF:FA:38:28:03:0C
Certificate issuer:       /CN=4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C
Certificate serial:       39A5A80FE03A50BAC9D9B7C2362C7D3EE7D3738A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.mft
Manifest number:          01C8
Signing time:             Wed 14 Jun 2023 04:00:00 +0000
Manifest this update:     Wed 14 Jun 2023 03:55:00 +0000
Manifest next update:     Thu 15 Jun 2023 05:11:00 +0000
Files and hashes:         1: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: Sc3CuKRCEp5naOQ1a2rsG2bhT8bi4mvtuAtbuTjY4b4=)
                          2: 4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.crl (hash: ULY6ovnN+3Dnd6MHN8XEuTuVA33UvUVo3vo3DKFraLQ=)
                          3: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: BsDQ5mcxxtBoxbytP+yz5OKL3aNGjyKh8vma6ITnuCw=)
                          4: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: uIYBOXRYmz6hnhpNawhBo3Kf2uTxMX31AGfbYyQ07II=)
                          5: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: rReeFEf2TcHzJWPObgq+Yg/MM7hbAcPqELuxFVMgMHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a5:a8:0f:e0:3a:50:ba:c9:d9:b7:c2:36:2c:7d:3e:e7:d3:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C
        Validity
            Not Before: Jun 14 03:55:00 2023 GMT
            Not After : Jun 15 05:11:00 2023 GMT
        Subject: CN=F200824A195E97137E1652FC460536C4988544AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:fe:dc:1a:eb:57:e3:ca:85:c1:f6:7b:5a:
                    28:ff:b8:4b:f4:37:ac:3b:63:77:fb:b5:f1:5a:98:
                    39:49:e4:ce:73:c7:59:97:4c:b1:9c:45:4f:b5:c7:
                    1a:d6:34:66:4a:5e:be:62:4f:bc:98:d0:77:a9:01:
                    da:ab:61:ec:dc:6a:23:d7:77:09:ae:ee:05:1b:88:
                    b5:d5:68:cd:5a:fb:b8:3c:7a:d6:00:02:42:9b:57:
                    b9:c7:ae:dd:23:6c:bd:af:45:b4:52:08:e4:63:79:
                    e2:b5:c8:51:7f:97:50:be:0a:75:ce:38:83:d1:e6:
                    3a:36:83:a0:05:3d:63:09:a5:87:75:ff:ed:e5:70:
                    ed:45:4a:7f:37:f5:75:ee:07:f8:fc:18:f6:2e:9a:
                    0e:a7:a0:44:a5:3c:c1:9c:79:92:af:1a:cc:21:1c:
                    8f:3b:6d:9a:10:84:87:a8:38:55:49:23:f2:60:93:
                    17:1a:27:29:3e:ac:d7:bb:e6:77:70:05:ae:f5:70:
                    86:5c:bd:c6:e1:7b:93:9f:f3:f7:23:b5:50:54:a7:
                    c5:80:aa:98:d5:60:87:d0:3b:f6:8f:ab:03:da:35:
                    95:ea:25:ca:a9:fe:5d:32:67:a2:68:76:de:65:bb:
                    ed:74:f2:dd:9a:45:f1:9a:11:cd:8f:67:09:0e:cc:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:82:4A:19:5E:97:13:7E:16:52:FC:46:05:36:C4:98:85:44:AF
            X509v3 Authority Key Identifier:
                keyid:4F:0C:FD:D6:FA:BF:25:A7:55:7C:49:7D:EA:5A:FF:FA:38:28:03:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/4F0CFDD6FABF25A7557C497DEA5AFFFA3828030C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:60:83:f0:8b:73:c7:e1:2c:53:c6:6e:1d:de:3c:9c:97:
         fe:c0:71:b8:01:b3:ca:15:55:5c:18:60:e4:f2:34:0b:57:83:
         78:59:0b:d7:6e:99:27:ec:19:0e:3e:5d:9e:46:73:39:77:67:
         e8:89:3e:a7:ef:3b:75:aa:e4:0d:83:68:e2:e3:a2:84:f8:41:
         97:77:71:a9:25:95:d7:98:a0:66:b3:b5:f8:aa:85:32:56:ca:
         fd:fb:ae:66:d7:80:f0:f8:66:7c:ca:48:91:1c:b5:4e:dc:a1:
         ac:11:b6:a6:6b:96:67:d3:9f:d8:35:8e:9c:55:d9:78:bf:e0:
         50:43:ed:ff:63:fd:d4:e8:c7:c0:90:d8:b8:75:a0:c6:c6:04:
         49:67:aa:1d:9d:0e:7c:20:b3:88:1f:9b:ee:54:c5:8b:bf:d8:
         b3:16:dd:cc:03:93:b0:4a:e7:29:d1:e3:fe:72:d0:db:40:10:
         75:3c:b5:42:82:0e:04:09:10:37:6b:af:14:80:fe:a1:c4:0b:
         79:82:b8:1e:ef:29:8b:66:51:4b:a9:00:04:b3:a0:77:6f:62:
         9d:92:72:8c:a5:86:06:b7:c8:9b:39:80:29:e0:ce:02:cd:bc:
         ea:db:95:63:b8:90:bd:66:9c:99:8b:77:f0:07:b3:a5:96:81:
         66:9d:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----