Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft
File:                     9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft (raw, json)
Hash identifier:          0TcZoQ+bKx1kPE1G7vUzBkRqvxj1cTFJ5XeObaHCaiw=
Subject key identifier:   22:F5:2A:5B:88:F2:1E:A7:C0:BE:A3:26:C6:9D:A3:31:1F:EF:AD:88
Authority key identifier: 9A:E7:CC:D8:C2:AC:F0:4A:A8:1B:FD:6A:26:E7:8D:79:AC:89:DE:3F
Certificate issuer:       /CN=9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F
Certificate serial:       32669948C91D69E95489C9B47766E28E2868D0AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft
Manifest number:          3F
Signing time:             Thu 24 Aug 2023 04:04:18 +0000
Manifest this update:     Thu 24 Aug 2023 03:59:18 +0000
Manifest next update:     Fri 25 Aug 2023 07:13:18 +0000
Files and hashes:         1: 34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (hash: u+UYC75aQL+OyMkX3jdxue73NHxNUK4ueec/DAq/Cdw=)
                          2: 9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.crl (hash: 3BtIWSBYV9BAMbmhhjF4vwouxZ8n8yGSlBMol8oNyhQ=)
                          3: 34352e3136312e39382e302f32332d3233203d3e20323638343633.roa (hash: zu8VBRabIXYbdhXpmW/0qDvLEzwgXnZfVmhUrJ03PcY=)
                          4: 34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (hash: mWmjdttwukarmKYgTf0KIgb3XH1gsrlQa3f846Hwn9k=)
                          5: 323830343a353139343a3a2f33322d3332203d3e20323638343633.roa (hash: gJ8AFjcD93hBOpovkVACcaXImPN7Ybg/n/dgiMfm5x4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:99:48:c9:1d:69:e9:54:89:c9:b4:77:66:e2:8e:28:68:d0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F
        Validity
            Not Before: Aug 24 03:59:18 2023 GMT
            Not After : Aug 25 07:13:18 2023 GMT
        Subject: CN=22F52A5B88F21EA7C0BEA326C69DA3311FEFAD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:b8:96:0e:76:fd:38:2c:af:b5:8c:ae:70:
                    c9:a0:49:11:c6:a2:d4:11:90:1f:8e:6e:c3:eb:a8:
                    8e:aa:49:2c:69:16:78:38:02:48:0f:54:d3:cc:7f:
                    53:da:6b:cc:26:0f:53:cb:e9:01:e5:31:47:e7:ed:
                    51:82:d1:c2:32:20:4d:7a:fc:07:c2:5c:08:25:2d:
                    03:53:0c:a3:8c:25:ca:7d:b8:f9:14:33:42:8c:0f:
                    01:35:9a:09:90:88:12:c2:ac:6e:03:0e:e4:8c:8d:
                    4a:21:42:70:ec:42:fd:a1:d9:17:3a:9c:2b:5c:3f:
                    95:31:10:49:8f:89:a0:1b:a0:e5:98:05:0d:85:81:
                    88:21:47:c8:4c:29:9d:32:db:1e:8a:78:e3:5a:d7:
                    69:45:54:cf:54:9a:56:f2:22:3a:2d:9b:35:b4:f3:
                    98:f0:ab:b2:3f:92:f1:cb:9e:99:ab:64:8c:3c:72:
                    02:60:69:45:fa:40:42:fd:1a:e5:a4:5b:c5:9a:e9:
                    e0:96:15:da:46:9c:c4:60:63:f8:03:05:ac:f5:b8:
                    cb:d9:4e:0d:30:fe:90:8f:15:a5:b6:c5:ea:5e:ed:
                    6c:e1:66:b9:49:4d:51:df:0d:e9:4a:5f:f4:76:dc:
                    74:a1:87:14:9e:61:52:3a:fe:09:60:dc:20:a5:e7:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F5:2A:5B:88:F2:1E:A7:C0:BE:A3:26:C6:9D:A3:31:1F:EF:AD:88
            X509v3 Authority Key Identifier:
                keyid:9A:E7:CC:D8:C2:AC:F0:4A:A8:1B:FD:6A:26:E7:8D:79:AC:89:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/9AE7CCD8C2ACF04AA81BFD6A26E78D79AC89DE3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:63:13:a8:51:76:9b:e3:78:17:2f:79:94:45:06:5f:56:
         92:18:17:48:32:cd:f1:b4:be:bf:d6:24:4e:21:a7:bd:7a:69:
         8b:59:7b:fb:c1:a9:88:46:b0:a4:79:44:10:41:2a:76:32:8d:
         4c:52:2c:e5:3e:b3:a6:8e:54:01:51:a7:fb:b0:b3:1c:b1:f6:
         74:db:6c:f9:2c:64:65:a8:f7:4b:59:fc:88:62:69:1b:ab:ed:
         e1:61:42:ba:0c:a7:a9:7c:6b:84:97:77:89:9e:e0:e6:09:4b:
         43:64:49:94:c0:32:71:b8:17:9a:3b:d5:bd:3c:b7:7a:1a:30:
         0a:53:ee:bd:98:0c:44:91:60:54:d0:76:37:36:ef:78:19:69:
         9a:d6:e0:8f:0b:4c:9a:e7:f0:62:ae:f9:c9:ee:12:7c:70:4f:
         7d:d2:a8:29:be:33:2f:d4:17:e3:c5:31:b0:aa:27:de:ea:b7:
         bd:f0:16:58:44:e1:06:fe:26:14:a1:08:14:83:f0:6e:0c:98:
         75:1b:10:e5:a1:26:c6:d3:ed:94:e2:16:10:83:16:e0:cf:a9:
         93:bd:9d:a1:9d:d9:a0:76:ef:44:3c:e7:16:43:af:1e:9b:46:
         33:c0:a0:88:97:d5:0c:6a:d9:cf:2b:86:8e:c4:1d:69:43:5a:
         85:65:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----