Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft
File:                     9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft (raw, json)
Hash identifier:          iq44mtBYSyFI9SBMGUp5yac1J0scbls/aHfBevNako8=
Subject key identifier:   DA:49:CD:3E:44:A7:01:36:3B:A1:4E:DC:F2:16:28:41:13:12:CB:88
Authority key identifier: 93:56:F0:DC:1F:A7:14:05:D4:21:A5:57:EC:89:63:E7:AF:D2:E3:63
Certificate issuer:       /CN=9356F0DC1FA71405D421A557EC8963E7AFD2E363
Certificate serial:       3222FAFA6BE6E783EB9887B75BF9A93EB3E71101
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft
Manifest number:          08
Signing time:             Tue 21 Feb 2023 02:36:47 +0000
Manifest this update:     Tue 21 Feb 2023 02:31:47 +0000
Manifest next update:     Wed 22 Feb 2023 05:33:47 +0000
Files and hashes:         1: 3139312e3234312e36342e302f32302d3234203d3e203533313831.roa (hash: CSBewxzAeLCXuYXlDIqLcjGkhnh+r74i/dIHXWeywr4=)
                          2: 9356F0DC1FA71405D421A557EC8963E7AFD2E363.crl (hash: w37qjv2aO3QZom3PF4CTVFFo5FGH6s485A1STYg6FQ4=)
                          3: 323830343a313133633a3a2f33322d3438203d3e203533313831.roa (hash: bMy4slHuFWdIgpRPfEjRBO6wwHs+bnTTOIvnw/1Cniw=)
                          4: 3230312e33332e3136302e302f32302d3234203d3e203533313831.roa (hash: O7i5d/+jcTTml+XIlpfpPH7f1ZoMwbW7jwgJTFgla4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:fa:fa:6b:e6:e7:83:eb:98:87:b7:5b:f9:a9:3e:b3:e7:11:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9356F0DC1FA71405D421A557EC8963E7AFD2E363
        Validity
            Not Before: Feb 21 02:31:47 2023 GMT
            Not After : Feb 22 05:33:47 2023 GMT
        Subject: CN=DA49CD3E44A701363BA14EDCF21628411312CB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:c2:2f:47:28:0b:db:cd:a2:7c:7d:27:5d:
                    21:e5:92:81:3f:9f:98:05:8b:b4:55:c5:42:cc:b0:
                    79:6e:1d:59:d6:a7:a4:61:c0:2a:2b:4f:e9:ee:6e:
                    7d:20:f0:37:c8:4e:36:0d:9e:1f:1d:47:9d:c6:20:
                    07:90:a0:ab:25:d2:a6:c2:32:d5:15:71:34:a0:8d:
                    a4:4e:40:dd:37:c5:91:c0:1b:61:7b:bf:08:39:56:
                    09:33:fa:7c:63:10:72:3b:37:92:5a:50:be:fa:8b:
                    8f:60:53:82:5b:a9:88:10:38:c3:e9:bf:b4:e2:e6:
                    18:05:22:bf:74:06:41:19:c5:83:4a:25:f5:bf:99:
                    8a:bb:72:53:e9:a7:b2:21:a5:a2:cd:22:9d:91:5b:
                    7b:00:ae:47:ac:ed:5a:21:67:91:31:35:6b:d9:87:
                    35:c1:de:ed:d4:00:60:f7:b4:22:80:ae:1e:56:c8:
                    ab:77:bd:c4:a8:4d:cb:1f:2b:ee:76:04:18:65:8d:
                    32:5d:c7:d5:9d:03:de:fb:06:af:66:dc:8e:cd:c5:
                    32:2c:a7:e0:02:03:e9:f3:ab:f9:6e:a4:41:64:4d:
                    77:f4:66:11:66:ff:21:ab:68:73:b0:77:19:08:82:
                    5c:a5:4b:a4:98:a3:64:86:b0:43:54:2e:d0:63:c5:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:49:CD:3E:44:A7:01:36:3B:A1:4E:DC:F2:16:28:41:13:12:CB:88
            X509v3 Authority Key Identifier:
                keyid:93:56:F0:DC:1F:A7:14:05:D4:21:A5:57:EC:89:63:E7:AF:D2:E3:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:75:3c:f3:71:46:85:65:33:8f:b2:9e:8d:55:ce:09:3b:
         cb:6d:ec:77:da:84:cb:b4:21:ad:56:76:75:c5:24:6a:96:a6:
         65:a9:39:6b:d9:f8:ec:29:fe:21:d2:74:72:71:82:b5:ec:59:
         df:00:e5:85:6e:f6:d8:e3:55:cc:2e:d9:e3:23:d1:85:76:d3:
         7e:16:d2:fa:e7:72:4f:0b:f3:ce:0c:70:c2:2e:00:31:91:ca:
         2c:fb:91:40:bf:2c:d0:56:3c:c3:75:04:35:90:50:36:be:70:
         69:6d:cd:c5:8b:95:a8:bb:ed:13:fd:32:d8:c0:cd:c8:13:86:
         bc:6e:6c:59:6d:52:5f:7d:01:31:f6:b9:17:7e:d3:7e:b8:56:
         e4:7a:b1:17:5c:92:89:81:7a:54:0c:a3:b0:d4:57:79:39:76:
         bb:22:2b:ae:e3:a4:95:90:fc:c1:54:e5:79:2d:d9:d9:0d:4e:
         f2:55:b3:68:70:f6:85:a3:a8:a3:41:e7:f2:62:2c:88:9c:f4:
         76:7c:8c:48:48:ac:d9:01:24:79:a3:82:59:a6:a7:50:a8:2f:
         0e:30:b0:42:28:b3:c6:c4:e9:4a:a9:83:3e:8d:62:b3:5b:ff:
         b8:f4:8e:8f:8f:91:05:95:6d:46:c5:05:0b:c5:6a:87:ec:3e:
         c3:8b:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----