Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.mft
File:                     087605E58995955EF04864DADFD60EE0868FF00D.mft (raw, json)
Hash identifier:          cOHuI9JMJC9kl2H2QlDUqW7SAnsHVWSvYOHMaTsjChQ=
Subject key identifier:   2B:C6:06:59:9E:8D:4D:0D:2B:DB:5C:DB:30:53:6F:C1:D0:C7:3E:5D
Authority key identifier: 08:76:05:E5:89:95:95:5E:F0:48:64:DA:DF:D6:0E:E0:86:8F:F0:0D
Certificate issuer:       /CN=087605E58995955EF04864DADFD60EE0868FF00D
Certificate serial:       4894E10195370C3CF5F487EA46740B94080DC45F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/087605E58995955EF04864DADFD60EE0868FF00D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.mft
Manifest number:          95
Signing time:             Sun 15 Oct 2023 19:08:44 +0000
Manifest this update:     Sun 15 Oct 2023 19:03:44 +0000
Manifest next update:     Mon 16 Oct 2023 20:22:44 +0000
Files and hashes:         1: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: twkomHSXJk91/KWoLH9QbUe4IjMUTFUKJscBz3IccIE=)
                          2: 087605E58995955EF04864DADFD60EE0868FF00D.crl (hash: Dl5WsRix1l4IWWke4XuPeCf3UvCj+LSolaNbB+RS/SQ=)
                          3: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: qw9KEIVwN9VxB0ULbWjOGE9OaDXBL91M5Tcqce2oUbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:94:e1:01:95:37:0c:3c:f5:f4:87:ea:46:74:0b:94:08:0d:c4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087605E58995955EF04864DADFD60EE0868FF00D
        Validity
            Not Before: Oct 15 19:03:44 2023 GMT
            Not After : Oct 16 20:22:44 2023 GMT
        Subject: CN=2BC606599E8D4D0D2BDB5CDB30536FC1D0C73E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:0f:96:04:df:c6:9d:ed:ff:bc:01:c2:45:
                    f1:4c:25:73:b0:b6:bc:1e:2f:e6:a7:72:52:ef:30:
                    8f:72:56:c5:31:03:9a:53:9e:9c:1f:90:92:32:fc:
                    a6:64:29:31:59:9b:05:cb:4d:a4:36:a3:af:d8:2c:
                    af:13:f6:4e:52:19:0b:8c:a9:5d:01:dc:fe:61:24:
                    49:7f:47:a9:27:2d:b2:f5:5a:74:d5:75:70:cf:af:
                    23:79:25:97:34:e2:a2:46:35:ff:af:6a:dd:e2:94:
                    17:be:14:23:e8:a9:4d:f4:a6:2c:51:a3:74:20:50:
                    71:f0:bb:90:66:97:7b:10:4a:9d:bd:c7:f4:d9:7f:
                    81:ca:ed:49:3e:96:5d:9e:87:3d:80:a3:e1:65:06:
                    43:6d:6e:1c:ef:00:13:b8:f4:cc:f4:4f:ff:38:0f:
                    81:cb:13:27:4e:29:40:6b:48:6a:9d:69:ee:bc:12:
                    d0:d5:c2:95:95:09:9f:f0:0d:08:03:9f:d4:a6:2d:
                    90:bf:62:ee:20:16:e4:16:13:3d:9e:49:c5:5a:ac:
                    2c:2b:77:99:ed:aa:9f:c4:10:c5:f9:a5:a4:3d:dd:
                    b8:36:74:ee:e9:76:e8:15:97:2f:cb:cc:6b:d7:3b:
                    fa:70:c5:3d:de:31:c9:d9:5b:62:05:90:7e:fc:cc:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:06:59:9E:8D:4D:0D:2B:DB:5C:DB:30:53:6F:C1:D0:C7:3E:5D
            X509v3 Authority Key Identifier:
                keyid:08:76:05:E5:89:95:95:5E:F0:48:64:DA:DF:D6:0E:E0:86:8F:F0:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/087605E58995955EF04864DADFD60EE0868FF00D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/087605E58995955EF04864DADFD60EE0868FF00D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:fa:cc:d7:7d:19:53:6d:34:5b:62:2f:c5:c7:d0:83:5e:
         f5:b9:f8:e0:24:b1:c0:bc:6f:4b:bf:7f:3d:75:a6:4c:46:4b:
         cc:1c:d0:df:d7:44:a6:8d:23:01:eb:d4:51:f6:ee:e5:4c:5a:
         a7:ed:94:ad:67:e4:67:6e:ef:c1:5e:53:6f:2d:5d:06:de:d6:
         ce:6c:55:ff:18:ef:5a:d6:84:86:57:67:b5:49:ac:99:7e:4a:
         86:17:3a:23:49:3a:60:6e:9b:10:9f:b4:01:b5:f1:35:dd:73:
         6e:6d:ad:b5:59:32:91:36:49:a2:11:ff:21:3f:28:56:db:d1:
         91:44:51:17:22:71:81:61:58:fd:85:4f:b6:6f:d3:bb:7e:a6:
         e5:fd:8b:8f:bc:a3:37:6e:ba:74:e0:98:46:4b:3b:08:f2:90:
         f9:e0:5c:da:d8:cc:25:a7:4d:7b:87:23:3e:7d:88:49:db:00:
         26:1f:4b:4a:dc:5b:24:0a:81:86:d4:ab:a0:2d:af:1b:89:c8:
         b4:23:4b:dd:be:2e:f0:ce:0d:74:b9:9b:31:9a:80:53:e6:1f:
         a8:5e:58:84:92:36:61:2e:a7:5e:e3:ca:93:04:7b:7b:95:d8:
         3d:d8:f1:75:0c:85:34:8e:bf:e3:85:a2:cf:fe:fc:73:2e:84:
         a8:ad:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----