Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/2D8A1F6ACB16D7AD5662707F421152571E266585.mft
File:                     2D8A1F6ACB16D7AD5662707F421152571E266585.mft (raw, json)
Hash identifier:          wmqSPrrsvRyJLC+C85MoqSe/51bB2NH4N87hnEB6ZGk=
Subject key identifier:   DF:CC:DE:65:33:77:AF:A3:44:A0:5C:65:25:C3:A6:13:04:84:7C:EC
Authority key identifier: 2D:8A:1F:6A:CB:16:D7:AD:56:62:70:7F:42:11:52:57:1E:26:65:85
Certificate issuer:       /CN=2D8A1F6ACB16D7AD5662707F421152571E266585
Certificate serial:       07B7410D3BAF5C3B96DA147652B6F75BF42A7970
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D8A1F6ACB16D7AD5662707F421152571E266585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/2D8A1F6ACB16D7AD5662707F421152571E266585.mft
Manifest number:          48
Signing time:             Mon 20 Feb 2023 09:16:36 +0000
Manifest this update:     Mon 20 Feb 2023 09:11:36 +0000
Manifest next update:     Tue 21 Feb 2023 09:49:36 +0000
Files and hashes:         1: 2D8A1F6ACB16D7AD5662707F421152571E266585.crl (hash: x1sXiYMVL1Mazd36HAfGrV1pCuqvMRtf5Z9CnbZ4QyU=)
                          2: 323830343a383762633a3a2f33322d3334203d3e203631363039.roa (hash: skpskmNCR+lstrX6udkXVMg6Hay+tjwcu5lkkF+Lodg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:41:0d:3b:af:5c:3b:96:da:14:76:52:b6:f7:5b:f4:2a:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A1F6ACB16D7AD5662707F421152571E266585
        Validity
            Not Before: Feb 20 09:11:36 2023 GMT
            Not After : Feb 21 09:49:36 2023 GMT
        Subject: CN=DFCCDE653377AFA344A05C6525C3A61304847CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:a0:0c:06:33:ac:3a:ff:90:82:a1:f3:d8:
                    be:55:91:f6:8c:fb:fe:5a:c4:0b:e5:e0:96:b3:a2:
                    9f:58:4c:93:6e:a2:49:f9:3c:b5:ce:02:5c:16:b3:
                    81:1a:9f:04:43:3b:51:11:c5:90:32:5d:3a:8f:7c:
                    13:8d:84:1f:95:aa:46:88:c1:75:c2:e6:f7:65:6e:
                    43:9b:c7:f1:56:2a:70:85:9e:33:8c:a6:91:88:f2:
                    77:b9:66:64:b7:dd:f2:39:83:a9:99:2b:ee:bd:c6:
                    5a:89:c0:7c:c6:05:5e:d5:d7:46:5a:76:55:1e:06:
                    a6:1a:d6:54:2f:09:5b:d2:35:ea:b9:e5:94:d5:85:
                    00:51:e0:19:8b:de:4a:d9:71:95:6f:91:7b:ce:25:
                    04:cb:ef:0f:48:99:ba:a1:0f:c0:5f:c8:16:68:0e:
                    f3:d6:05:02:99:95:a2:77:20:e5:dc:0b:a4:ac:bc:
                    57:1e:7b:77:16:99:fe:c6:a5:c4:7d:95:d3:00:8d:
                    28:3e:ba:94:a1:52:18:a8:b1:b9:bd:a5:63:ba:ff:
                    f7:ca:c4:91:a5:22:b0:89:54:0d:18:a0:d3:54:42:
                    31:46:6e:b6:e9:c2:21:d3:14:3b:06:6b:9d:33:f3:
                    d3:f2:80:93:8b:5b:41:d2:58:66:c7:c4:f7:e0:b4:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:DE:65:33:77:AF:A3:44:A0:5C:65:25:C3:A6:13:04:84:7C:EC
            X509v3 Authority Key Identifier:
                keyid:2D:8A:1F:6A:CB:16:D7:AD:56:62:70:7F:42:11:52:57:1E:26:65:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/2D8A1F6ACB16D7AD5662707F421152571E266585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D8A1F6ACB16D7AD5662707F421152571E266585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/2D8A1F6ACB16D7AD5662707F421152571E266585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:29:68:a0:d0:8d:be:de:61:24:14:0a:8f:8d:af:96:3a:
         a0:fa:69:66:e9:7a:60:c1:d9:f4:24:2d:9a:41:12:34:6d:80:
         6b:ff:a1:15:2a:53:65:af:42:b4:ac:b3:2d:95:d1:94:ce:52:
         cb:75:e3:60:f9:f1:74:a3:5c:67:8c:2e:e8:41:c3:71:78:dc:
         40:10:74:fa:c9:34:8f:e4:e8:ec:04:30:8e:33:a9:65:4b:9c:
         49:78:2e:2e:c3:9d:a9:8f:ed:12:f0:5d:ae:f9:e6:b3:75:2b:
         80:1e:a5:f1:3d:db:2b:db:74:71:24:06:6c:e1:46:4c:f4:ee:
         84:2e:b2:3a:ac:96:e9:d0:f9:5d:e4:f8:e1:f6:47:5c:75:ca:
         c4:73:46:ca:15:0a:e6:65:c3:0c:00:5d:93:45:83:d5:e5:79:
         ee:b0:ad:4d:df:9a:05:c8:f2:5e:9c:cc:31:97:6f:97:d2:c8:
         cd:7c:38:c2:74:f9:a3:c2:b0:6f:70:dd:1b:3f:4b:cb:96:37:
         b9:9f:68:da:cc:67:9f:43:bb:30:d0:67:bf:98:a0:5b:0c:11:
         fe:c8:fc:ce:1d:c1:18:98:6d:3f:ec:bc:fb:f5:40:a9:e0:7d:
         4c:23:a6:dc:33:02:a3:84:af:b0:4f:b8:00:66:cd:14:99:95:
         f7:c6:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----