Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.mft
File:                     CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.mft (raw, json)
Hash identifier:          9FfSocIT+5ZAb2ZSjk7cSKpiuFwiYKvk4Qdk1m7qc2o=
Subject key identifier:   41:02:4C:9B:04:D4:C1:E2:78:46:C0:92:BE:D2:A5:50:02:72:4A:79
Authority key identifier: CF:C7:4D:09:65:E1:DC:3B:D2:D1:11:A2:B2:E3:DD:F0:05:7D:A0:20
Certificate issuer:       /CN=CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020
Certificate serial:       1470458764BE85FAF5068F8D19831EADA5282B18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.mft
Manifest number:          F2
Signing time:             Tue 31 Oct 2023 08:12:56 +0000
Manifest this update:     Tue 31 Oct 2023 08:07:56 +0000
Manifest next update:     Wed 01 Nov 2023 09:57:56 +0000
Files and hashes:         1: 323830343a383833343a3a2f33322d313238203d3e20323732373537.roa (hash: XaG/s2bBnd3Sm/Ug4FB8EchXPEAVJIR0Bfxt+S1SMzM=)
                          2: CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.crl (hash: Q/QDNRYWwcYCw9xGUxzZVoYy2cQoYsxE4HJrWqSPh1U=)
                          3: 3137302e3234342e33362e302f32322d3332203d3e20323732373537.roa (hash: U0uaBz9CLYCu4Jp1qpi/Eo83DkbwSRm2qIN8wj3/sW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:70:45:87:64:be:85:fa:f5:06:8f:8d:19:83:1e:ad:a5:28:2b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020
        Validity
            Not Before: Oct 31 08:07:56 2023 GMT
            Not After : Nov  1 09:57:56 2023 GMT
        Subject: CN=41024C9B04D4C1E27846C092BED2A55002724A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:a2:e1:8b:e0:4b:07:d1:da:67:28:fc:99:
                    dd:1e:3c:d9:46:30:26:a9:73:b1:ab:97:0c:2d:77:
                    0b:5f:b7:b0:51:e7:1d:cd:92:d9:26:9b:1b:64:40:
                    37:02:2c:24:5e:30:4b:61:f0:7a:dc:e2:31:32:a5:
                    aa:fe:0f:5b:0e:d1:1d:fa:7b:81:29:3e:87:91:7b:
                    8e:e2:59:92:8c:48:40:1a:c3:65:95:00:71:79:e2:
                    9e:f7:02:d8:ec:30:b8:77:59:11:82:da:ca:d1:34:
                    36:3f:d0:81:30:21:5f:e0:02:16:d3:32:a0:0e:3c:
                    ad:20:da:99:2c:c6:8f:22:bf:08:a4:4b:a8:ab:d8:
                    47:e9:93:fa:69:23:ef:36:b4:d7:2e:97:00:fd:a5:
                    f7:86:80:1c:5e:b4:7d:21:ec:01:f7:7b:ba:26:30:
                    51:c4:ab:a9:19:28:c1:88:dd:e6:74:ae:32:a8:92:
                    28:8c:4f:e1:b2:ca:50:51:a9:cc:1a:a6:88:4c:1d:
                    73:be:1d:c6:c8:ef:cf:a1:0e:b4:54:a4:7c:0f:ac:
                    b7:c7:07:d9:84:82:2b:5e:28:28:87:77:a5:66:bb:
                    79:0e:1a:db:87:6f:74:f2:9a:4b:1d:d5:7a:5e:df:
                    ec:b1:94:ac:8a:1f:0c:2b:b3:cd:a2:a2:8d:26:32:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:02:4C:9B:04:D4:C1:E2:78:46:C0:92:BE:D2:A5:50:02:72:4A:79
            X509v3 Authority Key Identifier:
                keyid:CF:C7:4D:09:65:E1:DC:3B:D2:D1:11:A2:B2:E3:DD:F0:05:7D:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/CFC74D0965E1DC3BD2D111A2B2E3DDF0057DA020.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:37:17:4e:25:a0:07:ad:b1:bf:99:f1:56:5a:68:94:ee:4d:
         af:8e:e3:af:7c:01:57:68:d6:ff:44:6d:b8:a7:db:06:32:c9:
         09:6e:32:d6:98:3e:a4:2b:21:d5:23:db:ad:4a:63:aa:d9:8c:
         59:79:cb:69:1f:c1:1a:51:1a:9a:c5:f1:e2:8f:d5:e2:1a:55:
         6c:43:de:8a:5a:20:c0:cd:71:2b:ea:b9:7c:da:cd:ee:ac:1d:
         f9:23:a4:85:e8:b3:79:bc:b6:a3:fb:f7:a1:3c:1f:a1:6d:e5:
         4b:44:81:f2:f1:c0:84:2b:49:c7:90:5c:10:4a:e5:5c:10:78:
         2b:cb:e7:06:f7:dd:e4:24:bc:a8:e3:e4:b4:d1:c5:47:0d:98:
         71:d5:5f:40:ad:e8:d3:7e:fe:2f:6a:f7:d5:92:b1:17:3e:0f:
         c9:8a:ed:e8:c4:b9:31:bf:51:6c:a8:d3:d1:56:06:26:63:1a:
         f2:ae:76:6b:f6:a7:9f:7d:90:01:cb:83:ff:b7:38:53:96:98:
         10:4e:a0:99:8a:19:a0:71:08:a3:74:1b:63:e8:83:a8:af:7d:
         95:09:69:72:7c:fa:85:4b:86:ac:ab:96:1f:42:d9:c1:e4:b4:
         08:51:0c:f5:5e:64:ba:a3:a7:91:07:6e:ba:2f:71:4c:4c:93:
         c5:bf:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----