Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft
File:                     91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft (raw, json)
Hash identifier:          oMOxDM1kgYoNvXoRRF7kQedFc+UVWrDKQ8XLJcjP3CE=
Subject key identifier:   B4:51:33:7E:6C:7A:8C:E8:CB:77:0E:07:D4:90:92:D4:D6:DE:EF:D6
Authority key identifier: 91:EE:C0:86:A6:EB:98:D1:FC:0A:E2:BA:0F:FB:6B:7B:E3:BE:FE:0F
Certificate issuer:       /CN=91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F
Certificate serial:       6137794AC7228A4D25A8840A241604F79E0F208D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft
Manifest number:          0F
Signing time:             Thu 14 Jul 2022 12:35:34 +0000
Manifest this update:     Thu 14 Jul 2022 12:30:34 +0000
Manifest next update:     Fri 15 Jul 2022 15:14:34 +0000
Files and hashes:         1: 91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.crl (hash: L85PP6EAgKXNrwTEw3EX1wXwWqpc4TBkf/SumA55X+c=)
                          2: 3230302e35332e38342e302f32322d3234203d3e20323731323938.roa (hash: kd1sVJ9Hzcj0jj3bIf1ZjKlRi7VB3qqbXs7iE89a50s=)
                          3: 323830343a373935303a3a2f33322d3438203d3e20323731323938.roa (hash: oseYih5gsEw/93G0LyF17GpRK9Sx0Vg2wlWfDPE34Os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:79:4a:c7:22:8a:4d:25:a8:84:0a:24:16:04:f7:9e:0f:20:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F
        Validity
            Not Before: Jul 14 12:30:34 2022 GMT
            Not After : Jul 15 15:14:34 2022 GMT
        Subject: CN=B451337E6C7A8CE8CB770E07D49092D4D6DEEFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:75:7a:18:d7:b5:80:f0:14:47:9b:7f:ad:
                    2a:29:be:cf:0d:c6:82:7d:a4:86:89:12:d1:f0:d0:
                    d8:a4:41:8a:ba:f6:dd:ce:a0:4c:40:d8:a7:3e:ab:
                    61:48:6e:59:2d:17:a3:0b:58:03:cf:08:1e:b5:1d:
                    9d:03:3c:a1:88:df:43:ef:e8:6d:5c:33:b2:fc:ef:
                    ab:15:71:e7:de:13:09:27:62:86:f9:5f:c9:ac:fd:
                    0b:b8:16:a6:ec:e6:6d:d8:8c:ff:a6:c3:d1:c2:d6:
                    2f:4d:30:d7:59:b2:e8:7a:82:83:ce:af:19:56:a2:
                    b4:eb:9b:9e:8d:d2:1f:04:12:0d:85:7b:8b:33:86:
                    06:37:36:bc:56:1d:40:9d:03:57:ca:33:0b:e5:0c:
                    4a:05:12:ff:a8:8c:f7:9a:81:73:97:2f:61:d0:9e:
                    23:fb:1f:65:60:da:3b:4f:6d:9f:c0:09:8f:14:da:
                    59:5f:ef:1f:45:47:06:ea:01:11:06:01:ba:31:5b:
                    1a:b8:25:e3:18:1e:45:5d:5a:56:34:95:80:c4:58:
                    71:26:37:8f:26:97:a1:5d:be:6b:ad:34:f7:62:a5:
                    a6:c5:b0:4f:e2:9b:ad:8a:17:5e:1d:18:82:3f:99:
                    27:98:6b:c4:7c:47:5f:f4:78:29:49:35:d0:c6:4e:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:51:33:7E:6C:7A:8C:E8:CB:77:0E:07:D4:90:92:D4:D6:DE:EF:D6
            X509v3 Authority Key Identifier:
                keyid:91:EE:C0:86:A6:EB:98:D1:FC:0A:E2:BA:0F:FB:6B:7B:E3:BE:FE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:67:2f:a6:be:0f:44:af:73:dd:f1:e4:f0:6e:62:28:20:
         d5:04:cd:ce:27:bf:32:43:81:a7:82:0e:c5:4d:76:3a:24:5b:
         13:17:2f:cf:f4:04:36:b5:23:cf:3c:ef:01:f6:e4:3c:7c:70:
         9c:a8:bf:f5:90:a5:3a:ad:c9:a0:5c:83:60:5f:98:1d:2e:e9:
         d8:f8:20:11:1c:5d:9e:52:83:c4:32:58:f8:55:e9:d3:a9:08:
         20:4e:5b:8e:0e:8c:ab:7c:e7:af:a9:a2:cd:0a:e8:b3:16:9a:
         12:01:ea:cc:87:b0:eb:29:0a:ff:ea:cd:20:75:9b:c5:3d:d7:
         94:a5:14:07:28:c8:00:b0:49:14:9c:89:86:ed:62:26:f5:e4:
         7c:17:27:52:67:c7:80:4f:e5:28:d6:02:50:b2:f8:40:14:43:
         dd:93:a5:ae:8c:2c:3f:7c:d0:57:98:96:1f:ed:f5:d4:f5:bc:
         28:63:e3:69:e8:65:0b:9a:29:37:9b:ab:2f:e3:be:27:eb:f7:
         c6:52:2c:bd:09:3e:94:02:89:55:d1:e8:06:a6:7f:bc:fb:a1:
         12:31:42:90:d1:4f:65:c9:60:62:83:41:77:1d:8a:79:bf:70:
         ad:a7:f2:e6:81:a0:22:9e:de:b7:f8:6f:56:8e:93:c8:a8:87:
         17:3d:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----