Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.mft
File:                     C54586D44647014E47C52F3A3F2184006D2B17C3.mft (raw, json)
Hash identifier:          WIudhTLtgonr2XW4J1v4IvssNH0J9YI4oEH7zcOZBpo=
Subject key identifier:   68:58:A1:E6:52:BB:16:94:4C:C7:5B:87:F2:31:97:9B:7D:FA:6F:AE
Authority key identifier: C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3
Certificate issuer:       /CN=C54586D44647014E47C52F3A3F2184006D2B17C3
Certificate serial:       1C119C9B710CBCA20C49A1AE8C741F8DFE218E9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.mft
Manifest number:          DE
Signing time:             Fri 16 Dec 2022 07:52:51 +0000
Manifest this update:     Fri 16 Dec 2022 07:47:51 +0000
Manifest next update:     Sat 17 Dec 2022 10:29:51 +0000
Files and hashes:         1: 323830343a326463343a3a2f33322d3438203d3e20323635333032.roa (hash: UkP2fUFwK4nbshl+Nnw0C9W5pqyOE172E4uF45snEoA=)
                          2: C54586D44647014E47C52F3A3F2184006D2B17C3.crl (hash: YfNLbsi8pam/UkqTPL2SaA5vgzeze16d7NuUzgwxXxU=)
                          3: 3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa (hash: qxU4uh8yb5eHJnqo+Wod1jQAGCUZoWcccR9o4LjdAJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:9c:9b:71:0c:bc:a2:0c:49:a1:ae:8c:74:1f:8d:fe:21:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54586D44647014E47C52F3A3F2184006D2B17C3
        Validity
            Not Before: Dec 16 07:47:51 2022 GMT
            Not After : Dec 17 10:29:51 2022 GMT
        Subject: CN=6858A1E652BB16944CC75B87F231979B7DFA6FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:6e:40:06:0d:f9:56:db:24:30:ff:8a:30:
                    49:bf:c1:f0:37:47:8a:ca:96:39:66:55:1d:2b:c9:
                    fe:c2:14:49:15:dd:bd:6f:00:71:e2:91:d8:70:39:
                    e2:a9:06:75:b1:f5:22:a7:92:d4:8b:40:11:20:e4:
                    f4:c6:2f:1b:19:bd:49:92:04:39:05:9e:d7:6b:7f:
                    6c:80:13:5d:1e:ec:4c:54:ae:fb:ff:b1:79:a8:a9:
                    8f:b6:5d:f2:b2:da:82:54:1e:56:2a:19:48:b9:08:
                    f0:1a:94:5c:8c:6e:8f:92:28:6a:aa:27:74:66:fe:
                    27:90:66:0c:eb:85:1a:02:1b:6e:ad:8e:80:93:b3:
                    6b:4f:f2:10:c7:cc:b2:07:2a:3c:db:76:b0:af:b1:
                    6e:9a:49:ba:7b:b5:90:12:0c:50:e2:97:99:04:a0:
                    10:2c:48:6f:68:a8:e6:40:c4:29:dc:23:d6:11:23:
                    12:a4:01:16:8c:9f:26:7f:33:ef:f8:84:28:2b:c5:
                    1b:6d:ff:7b:9b:fc:7e:cf:d9:15:a0:3b:44:74:90:
                    4c:bf:8e:e4:94:f7:ab:67:10:6f:0c:ff:9f:67:72:
                    25:30:92:8c:28:35:7d:05:67:3b:16:61:2e:82:a9:
                    7b:7f:15:d1:0e:a0:8e:2a:a3:ed:50:d3:dd:28:99:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:A1:E6:52:BB:16:94:4C:C7:5B:87:F2:31:97:9B:7D:FA:6F:AE
            X509v3 Authority Key Identifier:
                keyid:C5:45:86:D4:46:47:01:4E:47:C5:2F:3A:3F:21:84:00:6D:2B:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C54586D44647014E47C52F3A3F2184006D2B17C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/C54586D44647014E47C52F3A3F2184006D2B17C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:45:37:2c:0a:98:3f:8c:f0:67:c2:64:a2:b5:4d:df:ac:
         37:4d:30:7a:99:df:9c:82:c5:74:89:ed:17:69:fa:82:49:02:
         54:e9:e7:e6:7c:1e:26:e2:ee:89:6d:b4:a4:9f:c7:6c:6d:ea:
         0b:ad:6c:ad:35:cb:4d:79:5d:90:b1:fe:d2:e2:66:bd:2f:47:
         42:5d:18:68:3f:d0:6b:0a:86:c2:d7:16:18:62:a6:9d:39:d9:
         4f:8c:37:51:cd:19:8c:1c:3e:8e:86:bc:cf:69:85:aa:64:6a:
         ba:7c:7f:f4:38:64:12:27:44:3f:e6:79:15:07:64:e3:3d:3e:
         cb:83:ae:70:15:d5:c5:7c:1d:53:4f:72:47:12:4c:1d:2c:a3:
         7f:8c:ee:6e:ed:91:07:c2:05:9d:ce:3d:f8:fd:6d:93:7f:e1:
         a9:b2:ba:b3:60:16:7f:28:d8:94:88:12:9b:a0:cd:02:64:11:
         d6:67:b9:5a:e3:3e:78:51:e4:47:4f:77:4c:e3:6b:d9:f7:b8:
         f0:60:68:5d:11:a4:ca:c0:50:47:84:a8:b7:9a:cc:47:5f:66:
         82:6f:0f:5e:f6:8f:da:7d:d2:2b:ab:c0:a1:89:81:f0:63:5c:
         1f:95:d9:a0:eb:70:5a:8d:9d:14:4a:0e:c6:f8:03:81:4e:65:
         df:f6:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----