Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.mft
File:                     286CCA5B5F517B947ADF353B48E4739F6ED397D5.mft (raw, json)
Hash identifier:          1o2gjm2FpTNK9+2cM5I+alsvGbVLZD7VSwd2+jysFvM=
Subject key identifier:   11:E5:62:15:B4:FF:A5:9D:9B:B3:FC:F3:9F:2B:9E:B9:F9:0A:EC:6F
Authority key identifier: 28:6C:CA:5B:5F:51:7B:94:7A:DF:35:3B:48:E4:73:9F:6E:D3:97:D5
Certificate issuer:       /CN=286CCA5B5F517B947ADF353B48E4739F6ED397D5
Certificate serial:       1EA492A0CBF3DB207A6636D3EBC307CE2B5130D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.mft
Manifest number:          96
Signing time:             Wed 11 Oct 2023 17:24:00 +0000
Manifest this update:     Wed 11 Oct 2023 17:19:00 +0000
Manifest next update:     Thu 12 Oct 2023 19:39:00 +0000
Files and hashes:         1: 3139302e3130372e3136302e302f32322d3235203d3e20323730343135.roa (hash: FHlr2Em96WargZogCerQywGu1eabXAPDSxowi1heJKQ=)
                          2: 286CCA5B5F517B947ADF353B48E4739F6ED397D5.crl (hash: 9eNWZfemzaQy/y4vSZXFSLCbfedY+bq+/GrFNbUEpVQ=)
                          3: 323830343a366261383a3a2f33322d3336203d3e20323730343135.roa (hash: pQHhcYjGrr969m0swDoQNRG2o5VNOmAgrOEb5MupRlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:92:a0:cb:f3:db:20:7a:66:36:d3:eb:c3:07:ce:2b:51:30:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286CCA5B5F517B947ADF353B48E4739F6ED397D5
        Validity
            Not Before: Oct 11 17:19:00 2023 GMT
            Not After : Oct 12 19:39:00 2023 GMT
        Subject: CN=11E56215B4FFA59D9BB3FCF39F2B9EB9F90AEC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:48:42:bf:a3:83:e1:67:db:01:36:28:7f:
                    5c:5c:4c:bb:fb:c2:36:e7:73:91:dd:2b:71:23:63:
                    85:e0:cb:14:f9:2f:1d:59:2f:74:ae:39:0c:a5:88:
                    69:54:03:da:40:fe:bd:d3:58:0c:b2:39:f0:31:0b:
                    1c:ad:c1:c3:dc:1b:b1:9d:70:61:ed:19:c9:60:01:
                    50:ae:0f:99:ab:f0:63:a7:25:a8:88:10:26:23:de:
                    b2:3b:40:b0:b5:e7:d8:66:ae:7b:1a:4b:a1:54:95:
                    52:8d:57:18:42:af:d8:66:6a:55:2b:aa:cd:6f:51:
                    d8:1d:2c:e4:fd:2e:d9:2b:25:b9:0e:b8:ce:68:c5:
                    d3:92:ca:00:0f:ce:0f:2a:ab:c1:e9:8e:4f:87:16:
                    64:a0:fe:62:06:b4:a3:c4:38:41:6d:dc:8e:e0:33:
                    de:04:13:35:9f:41:e4:90:f3:2d:f8:12:8c:aa:b2:
                    6b:b1:b6:69:0a:b4:82:bf:28:c5:ee:01:7d:67:76:
                    a2:f4:2d:0c:a7:8c:97:f6:8f:a6:c0:a0:19:db:71:
                    f8:d0:a2:d3:b2:4d:c6:70:89:e1:d9:98:cf:70:d1:
                    30:9b:3c:62:87:62:ab:60:71:8c:aa:e1:07:36:3f:
                    9e:6a:e5:1d:d4:93:33:31:03:0e:ea:68:bc:a7:43:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E5:62:15:B4:FF:A5:9D:9B:B3:FC:F3:9F:2B:9E:B9:F9:0A:EC:6F
            X509v3 Authority Key Identifier:
                keyid:28:6C:CA:5B:5F:51:7B:94:7A:DF:35:3B:48:E4:73:9F:6E:D3:97:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:03:91:cc:e0:61:6f:34:e5:51:12:5d:b9:6c:e9:07:24:ce:
         aa:94:ae:95:74:cc:f3:4a:52:20:e3:ed:e5:fc:51:16:ba:7c:
         49:02:8f:42:5f:51:f8:a5:ff:b1:b6:20:32:61:13:64:84:cb:
         a0:52:70:48:07:9c:75:17:0f:d2:25:c3:22:30:b5:98:06:fc:
         0e:0e:b7:bb:f7:df:c6:f2:95:0b:82:b2:49:f7:bf:25:68:97:
         28:2a:1d:2e:60:16:85:99:b0:de:35:77:d5:61:18:7b:03:44:
         dc:53:ea:b8:0e:73:fb:48:cb:ff:6f:07:31:1e:f2:96:58:56:
         0a:f3:30:3e:f7:95:a3:b2:5c:b9:8d:2b:41:68:70:44:67:21:
         dc:25:f9:86:c0:94:78:f4:cc:46:63:8c:6f:4b:17:02:3b:f6:
         81:38:0e:be:9f:4e:a5:e5:01:dd:be:4f:6a:47:ba:c4:90:56:
         8a:ba:36:d7:bb:8a:cf:e7:16:42:dc:ad:ca:6f:e3:0a:b4:52:
         c2:59:4c:8e:6a:e7:b0:29:d8:14:14:f3:a4:47:93:be:30:f8:
         d9:69:6e:c3:ff:cb:67:43:bd:7a:10:ee:c0:bd:83:f7:71:a5:
         b3:09:33:b5:b3:7c:6e:42:16:52:e7:d7:5d:62:43:40:55:29:
         1b:e6:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----