Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft
File:                     52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft (raw, json)
Hash identifier:          OQBlZkeN5IakVEZ7jPFSz6LQhsq8ly8FPKQ5knb2WXk=
Subject key identifier:   69:E7:BB:64:0C:FF:AE:8B:AC:B8:1E:10:54:11:BF:D4:37:46:0A:EF
Authority key identifier: 52:14:06:34:A3:C5:68:91:FF:B3:EC:70:ED:A0:A5:F9:C9:BC:E0:4C
Certificate issuer:       /CN=52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C
Certificate serial:       121E1D1544F8232467837C93F8F6E206DAFB354C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft
Manifest number:          03
Signing time:             Fri 16 Dec 2022 15:32:02 +0000
Manifest this update:     Fri 16 Dec 2022 15:27:02 +0000
Manifest next update:     Sat 17 Dec 2022 16:21:02 +0000
Files and hashes:         1: 323830343a383762633a3a2f33322d3334203d3e203631363039.roa (hash: HbcstEeRbswHPkMN6M9bzYJDr0aHAf1zrW01DXX0fQY=)
                          2: 52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.crl (hash: OOfkSoohnEvKCmto9gE5ZA2/1gvlmDcsTlLEn/NISPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1e:1d:15:44:f8:23:24:67:83:7c:93:f8:f6:e2:06:da:fb:35:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C
        Validity
            Not Before: Dec 16 15:27:02 2022 GMT
            Not After : Dec 17 16:21:02 2022 GMT
        Subject: CN=69E7BB640CFFAE8BACB81E105411BFD437460AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:d7:6a:81:aa:e3:a8:f5:3b:f8:5c:05:a8:
                    c0:da:b0:7e:df:68:dd:98:ea:51:f7:9a:02:70:9e:
                    43:59:9e:9b:82:9d:44:88:96:1b:df:7a:e3:f7:c1:
                    d7:18:d4:ad:f3:d3:7d:6c:fe:b4:27:10:f7:37:79:
                    3d:e2:85:cd:23:99:19:0c:ef:d5:cb:dc:39:7b:0a:
                    57:75:26:c2:7c:bb:e6:bc:e0:06:d0:a7:16:9d:44:
                    44:ab:e6:6a:a1:ee:03:dc:b8:cc:f1:de:8b:62:39:
                    7d:25:45:33:ad:86:7c:70:71:ed:dc:7b:95:8c:a3:
                    63:c5:41:9a:a5:92:f7:10:42:73:23:10:ed:87:e6:
                    b5:81:87:13:75:c2:af:22:99:5b:b0:b5:fd:3b:ac:
                    4b:e8:bc:5a:f0:f8:35:3f:55:34:da:b0:bc:e9:57:
                    eb:d4:78:51:77:e8:84:04:bc:fa:24:9b:49:c4:bb:
                    8b:c3:58:b8:19:f5:34:3d:83:a3:97:83:5b:be:23:
                    af:2c:e9:49:69:f7:ee:60:13:8b:2e:a0:bb:34:75:
                    30:33:82:b7:e7:85:fe:77:3c:f9:69:07:40:cb:42:
                    29:ce:58:05:37:63:70:4f:0e:e4:18:fa:ba:fc:41:
                    40:c1:82:a7:2e:01:ba:99:e9:45:f4:54:17:2e:61:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:BB:64:0C:FF:AE:8B:AC:B8:1E:10:54:11:BF:D4:37:46:0A:EF
            X509v3 Authority Key Identifier:
                keyid:52:14:06:34:A3:C5:68:91:FF:B3:EC:70:ED:A0:A5:F9:C9:BC:E0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/52140634A3C56891FFB3EC70EDA0A5F9C9BCE04C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:23:38:e4:c7:15:0e:50:73:f3:63:0a:47:43:e8:0a:c7:
         18:33:c1:71:ac:43:a1:49:61:4a:0c:a3:b7:25:5a:40:07:2c:
         ca:b5:5a:74:ac:de:40:da:cf:cb:08:6d:c7:a1:b9:fa:b7:7f:
         2c:45:dd:b9:67:a4:c4:eb:c0:ca:2b:39:c7:11:bc:39:ba:8b:
         24:fd:3a:4e:34:d3:b0:c9:5e:0c:0a:d6:b1:36:91:01:5a:8b:
         9f:21:2f:bf:0b:12:88:c9:29:02:f8:5d:0c:63:c9:32:1d:65:
         1b:30:0d:ec:35:51:41:f0:47:f9:a4:99:a0:5b:ce:22:3e:b6:
         65:9a:45:8c:d2:83:84:15:ca:69:41:7b:2c:c0:89:34:96:3b:
         fc:05:bb:d2:80:ab:7f:d4:5d:d1:e5:9f:66:3c:b3:3e:28:09:
         fb:86:f1:f3:ed:d3:cf:98:4c:57:63:c8:74:89:e4:c4:50:5b:
         16:47:a9:c4:a4:f3:4f:1a:d9:5d:57:fc:a6:d5:ab:5d:38:91:
         7f:54:24:c1:c6:3d:10:4d:08:ac:b6:86:86:89:a7:d6:ed:71:
         11:15:3f:d1:55:01:f9:09:12:d9:66:99:7e:34:20:11:52:64:
         cf:d4:22:8d:e2:60:af:32:bf:18:93:af:80:1f:6b:4b:c8:33:
         85:8c:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----