Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft
File:                     C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft (raw, json)
Hash identifier:          arx9yBTZ6jCZjWZVRDywYx5pkwiNnrSQNk+v0rnqpO4=
Subject key identifier:   B6:31:BC:6B:62:0F:82:AF:4C:BD:57:E0:DE:71:A1:7B:72:62:5D:81
Authority key identifier: C4:7A:02:55:A3:99:5A:AE:D2:A3:42:7A:EB:59:BE:13:7E:0E:B8:3C
Certificate issuer:       /CN=C47A0255A3995AAED2A3427AEB59BE137E0EB83C
Certificate serial:       6E72B3E69DC03295F16836EAEE7D799C2DF36F28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft
Manifest number:          A3
Signing time:             Wed 11 Oct 2023 10:32:40 +0000
Manifest this update:     Wed 11 Oct 2023 10:27:40 +0000
Manifest next update:     Thu 12 Oct 2023 11:50:40 +0000
Files and hashes:         1: 3133382e3138352e38392e302f32342d3234203d3e20323730383737.roa (hash: kwTV6SKJ2Lq4y9+gLIf+TKUI10pAOcFNVtZfPTkfrs8=)
                          2: C47A0255A3995AAED2A3427AEB59BE137E0EB83C.crl (hash: EAeDgCwCqCeqDfYdCRlV3aJSKSET/2LedvUrhiPY9w8=)
                          3: 3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa (hash: N/PMcP/iXO6FL+6M7AfKNgIr3kf+mzhpgvc0CsGxljU=)
                          4: 3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa (hash: bDoPkT+7I2fmO2/kbPLt5fplhRacwLsil/rDOoq2k1E=)
                          5: 323830343a373264303a3a2f33322d3332203d3e20323730383737.roa (hash: lFhy9V37qWqZeC7+mFRzpO4QAzDuCdjyItCtE8C50TY=)
                          6: 3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa (hash: Jw5yymoEeyGmQp8DRAZmXaowcQZZlxIE/94tl3jB06g=)
                          7: 3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa (hash: faPbLm2NCqBQCh820LZ2ooapK4jmgNwsRZzfEFS+T7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:72:b3:e6:9d:c0:32:95:f1:68:36:ea:ee:7d:79:9c:2d:f3:6f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47A0255A3995AAED2A3427AEB59BE137E0EB83C
        Validity
            Not Before: Oct 11 10:27:40 2023 GMT
            Not After : Oct 12 11:50:40 2023 GMT
        Subject: CN=B631BC6B620F82AF4CBD57E0DE71A17B72625D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:5d:e6:7b:dc:24:53:0a:2e:57:97:dc:b3:
                    83:4c:6e:82:c4:a2:7c:fc:e5:12:9d:72:56:70:97:
                    75:a4:0e:de:59:c7:b1:49:a4:7c:48:ab:0b:a1:f5:
                    ea:63:f6:94:17:6b:52:26:d6:ce:59:c2:90:e7:9f:
                    87:70:0c:19:85:62:ad:f1:11:59:48:a8:be:21:9a:
                    6e:85:b6:fd:63:27:6c:fe:6f:43:b3:a4:d3:bf:f8:
                    c6:05:60:65:a0:fe:90:e9:30:d9:35:f5:04:30:20:
                    84:3c:5d:97:6e:33:90:5e:5a:53:c7:54:5e:54:c5:
                    60:3e:5b:bf:9e:d8:ee:c7:91:92:45:25:6a:c9:b2:
                    40:0c:aa:a2:99:40:c5:8e:e9:d5:b7:bf:87:6d:a2:
                    4d:bd:ad:f2:25:23:87:f8:e1:de:c0:51:68:03:bb:
                    15:8b:b6:df:be:e9:c9:d8:0f:91:4e:d5:f2:f7:aa:
                    85:0c:1b:2b:b2:f1:00:37:9f:24:d7:8f:78:07:0e:
                    2c:d0:71:e1:b0:cb:36:ad:b0:e2:94:c1:fb:d9:6a:
                    c8:fc:61:1a:8b:0e:d4:87:ad:c1:61:5d:b5:ba:4b:
                    76:1a:bc:5f:57:a5:4b:87:b3:3c:91:5d:1f:ad:7f:
                    c9:05:1a:2b:e8:07:ad:76:87:db:f7:83:53:83:c8:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:BC:6B:62:0F:82:AF:4C:BD:57:E0:DE:71:A1:7B:72:62:5D:81
            X509v3 Authority Key Identifier:
                keyid:C4:7A:02:55:A3:99:5A:AE:D2:A3:42:7A:EB:59:BE:13:7E:0E:B8:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ed:e4:a2:77:1b:f8:a2:fc:93:50:0c:16:10:50:26:cc:19:
         ad:fc:94:40:02:a2:7c:02:d3:e2:5b:53:20:64:9c:14:3d:1f:
         75:4e:be:a7:ae:ca:3c:42:cd:62:74:58:ec:72:18:40:21:ea:
         53:74:01:d7:e7:e8:0b:62:6f:3f:44:65:d5:4e:27:14:62:77:
         fa:0e:6d:20:21:4c:8a:e6:21:c2:25:65:96:94:80:10:99:ef:
         8d:35:46:d7:8d:0b:7f:b8:c5:e7:c5:d3:d7:e4:26:98:81:8b:
         26:cd:f9:cb:11:50:69:b3:ff:ad:a5:c0:1c:4f:21:64:4d:35:
         b7:79:cb:93:94:c8:c6:f6:b6:58:73:95:70:49:aa:23:d2:e4:
         58:41:7b:87:ff:6f:98:06:96:d4:80:1d:52:57:6b:64:33:b4:
         44:67:e6:b4:d7:71:90:28:65:a7:97:73:5a:61:89:6c:40:f5:
         06:4b:41:e9:d2:b6:6e:1e:d9:b8:0b:53:9f:6f:39:54:b2:7f:
         59:03:2c:28:58:cb:a2:f2:95:45:f6:18:33:22:a3:4b:d0:b9:
         70:72:0a:42:ad:d2:d2:ef:bd:10:1e:09:f8:f4:22:c6:6b:a8:
         c7:e8:18:9b:0b:41:46:d4:c6:7e:20:2a:f5:2f:3f:98:7b:24:
         a4:e9:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----