Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.mft
File:                     F77B4981C01A44D314577EF2F2E3DCBC9C02004F.mft (raw, json)
Hash identifier:          7LCLvm7iq8F7CBkmV8xmYIGi+xpJoBohih2FgpudRXQ=
Subject key identifier:   A7:C2:70:B9:FE:64:2B:82:54:82:2A:FD:A3:EF:54:70:EB:D1:8A:FC
Authority key identifier: F7:7B:49:81:C0:1A:44:D3:14:57:7E:F2:F2:E3:DC:BC:9C:02:00:4F
Certificate issuer:       /CN=F77B4981C01A44D314577EF2F2E3DCBC9C02004F
Certificate serial:       2BB7707643F41F44421C8D90250F44984F7955BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.mft
Manifest number:          DF
Signing time:             Sat 04 Feb 2023 21:08:59 +0000
Manifest this update:     Sat 04 Feb 2023 21:03:59 +0000
Manifest next update:     Sun 05 Feb 2023 21:28:59 +0000
Files and hashes:         1: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: dN62XaD27OZP3Vhm9AxgodVJrYZyXumJDDmXJH4ZNh4=)
                          2: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: U1CjmkwT0uHboUXgY0AdysawlDbCI1k07qJNZageHiY=)
                          3: F77B4981C01A44D314577EF2F2E3DCBC9C02004F.crl (hash: Qml7m9JSWxs6zAcAmEk3+Lmwih80sojnIfVk1qtRJrI=)
                          4: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: TKsfibDsuLWEp/wCw+2ClxhLRB0og3NI/3vQhuWh6MM=)
                          5: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: orzO28p7nvJKvKoE2jY83O/Lr+FApfy4jdu2KonjO1c=)
                          6: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: 1NbnD8Zi2FyJp8diNBlf4Og1bIgoYjcAEovMeus0YYs=)
                          7: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: LNaH23yB7wFqMBJTHRbtpNy4MwBT3szXoYxiwdgqmzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b7:70:76:43:f4:1f:44:42:1c:8d:90:25:0f:44:98:4f:79:55:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77B4981C01A44D314577EF2F2E3DCBC9C02004F
        Validity
            Not Before: Feb  4 21:03:59 2023 GMT
            Not After : Feb  5 21:28:59 2023 GMT
        Subject: CN=A7C270B9FE642B8254822AFDA3EF5470EBD18AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:12:6a:88:ab:2a:13:f7:5e:ae:c7:43:b6:
                    e3:0e:b1:f4:45:46:f7:4e:bf:01:5c:4e:e0:ff:68:
                    b2:b5:9b:c1:3c:01:27:ee:43:17:77:03:33:75:a0:
                    a7:f7:d5:14:63:34:04:f1:90:0f:8f:a2:9c:2e:92:
                    a4:b9:b3:7c:16:a0:e4:1a:6a:a1:78:37:2e:53:45:
                    e2:9d:d9:75:72:f6:78:ad:60:12:04:4e:c4:50:dd:
                    90:93:de:e2:7d:ae:74:43:0b:65:a6:29:f0:ff:3c:
                    1b:b2:18:34:bf:f7:a4:ab:d4:92:11:fc:dd:2b:e7:
                    db:b8:30:bf:78:b2:39:61:bc:07:12:de:95:c3:60:
                    25:0f:96:97:16:9f:1a:ae:f9:34:8f:9a:5a:68:4b:
                    a9:90:14:a4:92:58:b9:c0:80:cd:32:ce:a5:e7:f5:
                    9e:4f:22:18:62:a6:0e:0f:dc:b5:7f:33:71:d9:87:
                    32:b2:bd:24:25:c1:8f:48:d4:8d:9d:5d:c7:1e:d9:
                    3d:b2:0e:2f:95:23:32:b3:e0:33:64:16:35:0d:31:
                    d2:a3:76:68:2a:cc:26:88:3e:09:8a:f7:17:98:ae:
                    90:4c:c8:c7:a8:e7:e9:30:b7:a9:1b:b0:19:e3:5f:
                    ff:09:2b:d9:ca:3b:0d:16:26:c5:4b:c5:21:aa:cc:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:70:B9:FE:64:2B:82:54:82:2A:FD:A3:EF:54:70:EB:D1:8A:FC
            X509v3 Authority Key Identifier:
                keyid:F7:7B:49:81:C0:1A:44:D3:14:57:7E:F2:F2:E3:DC:BC:9C:02:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/F77B4981C01A44D314577EF2F2E3DCBC9C02004F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:35:e2:94:d6:1d:40:87:da:b1:69:85:a5:80:a1:16:29:24:
         c1:12:f0:73:e8:1e:92:1b:31:e6:7b:eb:61:57:f6:88:6f:0e:
         bb:18:df:ae:59:2e:26:28:54:57:26:df:b9:47:e1:ad:7d:be:
         c5:22:21:02:2d:80:15:a6:12:7c:5f:60:66:6b:00:5e:7c:9c:
         c9:53:85:40:90:43:51:b2:84:1a:6f:c3:3f:56:e5:7c:50:01:
         86:6a:ea:97:4d:3b:93:a7:ad:20:50:3c:8f:23:50:23:80:b1:
         82:bd:39:c0:fb:9e:95:f8:ca:08:f5:0f:21:9b:dc:32:2c:eb:
         e1:49:13:10:46:ea:84:8e:98:e9:2d:a5:71:d1:5e:62:50:aa:
         3b:3c:97:ab:d6:92:9d:f4:d7:21:72:0f:a6:2b:89:72:8c:72:
         77:5e:75:79:e3:c4:8f:17:bb:a2:43:4d:6a:e8:13:08:c4:80:
         54:18:9a:de:0c:0e:1c:ca:ce:16:0f:f6:3f:39:2d:1e:33:bc:
         2d:59:b4:3d:3d:b0:46:01:ce:af:01:27:2f:8b:5a:7c:76:86:
         1f:6d:99:8d:8f:2c:b7:75:29:de:14:ae:0a:a2:e4:fb:f9:6a:
         9f:0b:ae:5e:f1:6b:6b:60:85:cc:c7:5c:bd:22:36:3c:c4:e8:
         89:34:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----