Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.mft
File:                     CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.mft (raw, json)
Hash identifier:          7JhNEIj53v5CR86STbKfgaiNp+c21ye1N5Qybpxnch4=
Subject key identifier:   C5:9E:9C:A4:58:7E:65:BE:62:39:F3:B0:66:D6:32:42:C2:77:4E:3A
Authority key identifier: CC:93:EA:88:EC:E5:E5:A8:3C:6D:0B:D0:FE:B0:E0:72:2E:4D:40:29
Certificate issuer:       /CN=CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029
Certificate serial:       1B95A439CCF73CB81ED735BD8EE05531C0E642F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.mft
Manifest number:          19
Signing time:             Wed 20 Sep 2023 13:23:58 +0000
Manifest this update:     Wed 20 Sep 2023 13:18:58 +0000
Manifest next update:     Thu 21 Sep 2023 16:20:58 +0000
Files and hashes:         1: 3137302e37392e3139382e302f32332d3233203d3e20323636333130.roa (hash: nEwXkVObJdJJY/6JQaRpvt+kfGDnrZITt07bWO1hbII=)
                          2: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: 1Km5OSSYFdOu4K0qxp4fhgNihOHONZnSPS5cPJRzmBI=)
                          3: 3137302e37392e3139362e302f32332d3233203d3e20323636333130.roa (hash: jfEW+MKwVhhVYFt5OvvVYwRQ32R5sci1wsKl49CEiTs=)
                          4: CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.crl (hash: nroZB6qrFuVHs37ZCtSoVrZCfJtusdGLqIdTRqCbNek=)
                          5: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: Wm0NtpxkfF0xl2U311+GwXDtzWRw3CQaUuCI2dZ58Wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:a4:39:cc:f7:3c:b8:1e:d7:35:bd:8e:e0:55:31:c0:e6:42:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029
        Validity
            Not Before: Sep 20 13:18:58 2023 GMT
            Not After : Sep 21 16:20:58 2023 GMT
        Subject: CN=C59E9CA4587E65BE6239F3B066D63242C2774E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e0:21:4c:d8:74:2b:9c:0b:7f:89:60:60:7a:
                    02:75:05:08:f3:be:6b:d8:b4:2f:75:68:b5:5f:8d:
                    84:aa:d0:7a:9f:c5:91:fd:d0:6d:20:3b:de:cb:6b:
                    86:db:92:e9:46:ef:74:49:40:71:dc:44:70:d5:99:
                    14:f4:0a:0b:9d:40:3f:e6:de:6a:0a:c7:b6:a4:98:
                    61:00:c6:b4:c7:b0:5f:99:ce:9e:fd:d6:76:da:d7:
                    10:46:2e:7f:8a:03:04:9a:ba:22:ee:c9:6d:fb:b9:
                    b9:34:7a:50:23:1b:7c:cd:3f:96:b4:10:86:7d:35:
                    99:1f:c4:30:07:72:0e:eb:fb:49:bf:1c:ff:bc:01:
                    68:3f:2c:06:0e:02:d8:a6:26:3c:4e:6a:20:8a:10:
                    16:ed:2a:28:06:5b:83:f2:b3:24:4f:41:cb:5d:62:
                    f1:63:ad:bc:a6:e6:53:c5:c7:dc:70:ad:a7:2f:c1:
                    f3:77:03:7a:07:1a:1a:09:b7:40:aa:87:c1:9b:da:
                    df:2d:31:74:0b:44:f7:f7:83:21:95:ad:ad:df:c1:
                    bd:72:6e:39:e7:e1:f5:85:53:1a:ef:90:42:b2:32:
                    ea:06:df:79:c2:5c:95:ea:8f:f1:43:ef:2e:1c:c8:
                    5c:9d:42:0c:97:0e:7a:fd:a2:10:ef:63:9e:14:e2:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:9C:A4:58:7E:65:BE:62:39:F3:B0:66:D6:32:42:C2:77:4E:3A
            X509v3 Authority Key Identifier:
                keyid:CC:93:EA:88:EC:E5:E5:A8:3C:6D:0B:D0:FE:B0:E0:72:2E:4D:40:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/CC93EA88ECE5E5A83C6D0BD0FEB0E0722E4D4029.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:95:1b:00:6e:71:2c:24:cf:28:13:94:42:50:37:37:eb:3a:
         06:b8:63:48:9e:cc:c5:aa:ff:72:fd:4c:ce:a3:40:f9:08:df:
         ab:84:6d:f0:43:eb:5a:cc:fd:ae:ba:5f:5e:e0:01:b7:2e:60:
         9c:ac:1f:f5:53:77:0a:08:b2:a9:8c:83:a5:eb:90:7e:d7:ad:
         b6:95:ad:1b:03:4e:d8:51:47:7f:dd:75:3a:51:c1:1f:34:60:
         56:d9:c8:ca:cf:ab:d1:c4:d9:36:b1:9f:dd:62:31:c4:3d:2c:
         0f:8c:b3:ea:a3:44:83:14:70:c8:a1:56:d6:91:c0:38:43:d8:
         e2:cf:81:97:93:ad:6c:32:fe:46:26:02:36:3e:ca:8d:32:aa:
         7c:65:9d:a2:e1:a3:48:2c:70:5d:20:e3:fb:57:90:9b:00:c1:
         31:16:8a:39:40:aa:03:54:81:36:c7:1d:a9:6a:98:cb:86:29:
         04:c0:1b:ff:0d:b2:8e:4a:36:11:a7:69:7b:e4:30:47:77:07:
         48:b3:af:40:f8:ca:71:47:62:0e:61:2f:aa:47:21:e0:a0:b0:
         24:d9:7b:26:ee:38:0d:7a:06:2f:6b:87:d3:3a:22:d7:d4:f5:
         dd:8e:0a:10:00:04:93:9d:32:50:42:b7:2d:b9:e8:94:53:22:
         80:cb:f6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----