Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.mft
File:                     86BA241CDEDDD0EB0837151FECC1703934F67367.mft (raw, json)
Hash identifier:          LE/eIauXo9uho6Rh8cR5oHCy5M2Ed6I2FIjZRV+JJtk=
Subject key identifier:   C7:9F:27:15:92:7F:F4:0D:E0:05:BF:00:BD:34:3F:1C:6C:E9:58:F5
Authority key identifier: 86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67
Certificate issuer:       /CN=86BA241CDEDDD0EB0837151FECC1703934F67367
Certificate serial:       31DFDB67979E663A93C0069C392619F201D4006C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.mft
Manifest number:          64
Signing time:             Mon 17 Jun 2024 20:09:20 +0000
Manifest this update:     Mon 17 Jun 2024 20:04:20 +0000
Manifest next update:     Tue 18 Jun 2024 23:02:20 +0000
Files and hashes:         1: 86BA241CDEDDD0EB0837151FECC1703934F67367.crl (hash: ds0y7Ui5Oy6qwba41UoM/9CPCEQdbj3rRERcmOM60V0=)
                          2: 3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (hash: ee7rnmLl+9sdbkbL19YZt6cToodloRgWFpQ1K0mAUfs=)
                          3: 323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (hash: IE5LkEFxbLBI1wXsV2KtCEZ1xO/425qb2jZuh7ybgN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:df:db:67:97:9e:66:3a:93:c0:06:9c:39:26:19:f2:01:d4:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86BA241CDEDDD0EB0837151FECC1703934F67367
        Validity
            Not Before: Jun 17 20:04:20 2024 GMT
            Not After : Jun 18 23:02:20 2024 GMT
        Subject: CN=C79F2715927FF40DE005BF00BD343F1C6CE958F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:30:72:34:d8:c3:1e:3b:a3:ff:a0:85:d9:
                    38:59:a5:3c:81:bc:eb:5b:14:e4:66:77:e3:8c:b8:
                    e2:ad:90:a3:d0:e2:f7:9a:10:ff:f6:8d:3a:6c:73:
                    1b:b3:ba:2e:46:93:22:d2:3a:9f:07:0a:e0:64:85:
                    6d:20:84:bb:55:b2:62:83:b8:09:27:09:58:bc:bc:
                    06:dc:d3:6f:c4:6e:a9:95:8c:04:da:96:e5:55:6f:
                    62:26:ec:89:c0:4e:17:7d:a6:09:86:9e:4c:ff:ea:
                    39:15:87:56:58:3b:f7:a5:ad:a9:16:15:d4:cb:ba:
                    d2:2e:84:58:35:b6:60:ea:c3:ee:f9:21:e4:0c:0c:
                    be:a1:c8:76:37:bf:b1:0b:67:6f:42:eb:5b:b9:03:
                    49:72:75:6f:0c:37:80:2b:e5:fa:8d:53:db:e8:7c:
                    48:87:f3:e4:2b:86:84:1e:d4:a7:1a:93:e2:45:c2:
                    60:fd:39:ad:40:28:9a:53:e3:6b:4e:b8:0b:da:d0:
                    91:33:29:9c:22:f3:2f:46:fa:b4:1c:0d:7e:6b:ee:
                    e6:ee:db:e6:0a:97:ca:93:02:49:f8:2f:3a:a0:3e:
                    b2:04:4a:5d:91:92:57:23:e6:40:b6:e3:5e:af:44:
                    3e:c4:2b:31:b1:65:79:e0:0a:78:41:cd:52:00:a1:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:27:15:92:7F:F4:0D:E0:05:BF:00:BD:34:3F:1C:6C:E9:58:F5
            X509v3 Authority Key Identifier:
                keyid:86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:ed:87:fa:d0:31:1a:67:2c:55:db:6a:e2:40:e2:52:ac:
         bb:6d:f8:b8:a5:23:84:c5:b6:6a:d0:f8:a9:1a:71:8a:a2:60:
         89:71:92:82:18:3a:dd:20:df:ab:6e:c7:be:5f:8d:9d:5b:75:
         18:3c:d1:18:e1:92:ff:e8:46:cf:84:65:c1:0d:5d:c7:77:a0:
         5c:32:d7:45:a9:d5:d4:13:5d:e6:d6:f1:fe:0a:b5:b6:eb:02:
         fa:9f:02:3e:20:2f:ed:f3:2e:8d:af:22:cf:6f:99:52:b7:d9:
         b6:be:c0:fd:c6:1a:09:7e:95:36:56:b6:8e:65:cf:cb:08:86:
         aa:9d:70:91:46:9a:e7:bf:eb:98:9f:d3:81:09:92:50:71:1c:
         c2:07:a9:bf:96:da:f8:f7:05:c9:da:3b:37:c6:70:bf:ae:98:
         d5:97:9c:6d:4d:98:e5:81:b6:01:aa:f0:7a:99:85:1e:ec:a7:
         bf:d5:57:d2:48:d7:37:14:8a:f4:57:00:b4:bd:1c:fb:f5:8a:
         4e:7e:d3:ec:cb:0f:9c:2d:10:7f:01:10:76:1f:d8:95:13:d8:
         0a:a5:59:b1:36:ad:e4:1e:5d:85:60:56:29:9f:02:b8:55:bf:
         a8:82:30:0d:51:df:0b:a8:42:2f:2f:00:85:58:27:d5:a5:bc:
         a6:c3:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----