Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft
File:                     1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft (raw, json)
Hash identifier:          3PSkZUG3knETYoUqMJFEDvl6wVaLi4QpS90EjVrHQkc=
Subject key identifier:   A8:C7:99:A8:FE:F3:F5:A8:B0:2B:DB:0B:3A:BD:7B:8E:4C:4C:25:65
Authority key identifier: 19:36:D1:B7:62:E4:EC:4D:BA:E7:E1:5E:E5:B9:30:4B:40:25:D7:F5
Certificate issuer:       /CN=1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5
Certificate serial:       212A93D52D7F38F683005BE4C719252ECD81A97C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft
Manifest number:          05
Signing time:             Wed 20 Sep 2023 08:43:52 +0000
Manifest this update:     Wed 20 Sep 2023 08:38:52 +0000
Manifest next update:     Thu 21 Sep 2023 09:07:52 +0000
Files and hashes:         1: 34352e3138312e32342e302f32322d3332203d3e20323639313633.roa (hash: dTXtXJFcnb+ICyGxG7o8D5SNOC6SfZDlj1RJCTi28uE=)
                          2: 1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.crl (hash: ZhQ0h1kqNjVdIHxzS+5N3Z2f5DK7MVscjtrOzSCULkU=)
                          3: 323830343a363036303a3a2f33322d313238203d3e20323639313633.roa (hash: IbhCI1mgL2w7NAOHvC80m3RCqRj4BYl9owK/+VyJKyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2a:93:d5:2d:7f:38:f6:83:00:5b:e4:c7:19:25:2e:cd:81:a9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5
        Validity
            Not Before: Sep 20 08:38:52 2023 GMT
            Not After : Sep 21 09:07:52 2023 GMT
        Subject: CN=A8C799A8FEF3F5A8B02BDB0B3ABD7B8E4C4C2565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:e6:c0:90:a4:97:4e:a5:d7:3a:c3:40:a8:
                    e4:a7:2b:97:f2:c3:f1:fa:5c:db:73:a9:c2:2c:7d:
                    d2:44:35:ad:6f:13:d3:da:33:92:ba:7e:b8:0d:c1:
                    be:ae:8b:d3:05:47:c3:69:8a:60:28:c0:44:fc:8b:
                    61:29:e2:e2:f1:9f:40:84:a8:c0:74:fb:84:46:2e:
                    69:35:b9:a2:84:db:06:d4:a4:dd:4a:f9:3e:ad:d0:
                    7b:3c:ae:f7:97:4e:7e:7f:4c:23:82:ed:89:1a:c4:
                    d0:0f:32:5a:31:5c:98:fc:ce:89:2e:87:54:68:bd:
                    6c:f6:1d:53:f6:4d:83:e8:09:7e:7b:41:b6:99:26:
                    74:82:6b:77:af:f9:4a:79:79:de:b5:df:65:d7:4f:
                    90:e6:bd:b3:5d:63:b6:be:64:e5:44:3a:6b:bd:f2:
                    eb:0e:c9:03:b1:cf:cd:4a:ff:19:30:76:83:f7:62:
                    d1:76:d3:9f:24:89:df:85:03:47:26:1f:88:a7:a3:
                    10:26:3e:a1:f7:76:e3:6e:21:9f:b2:23:0b:d1:36:
                    a4:eb:39:0d:47:87:db:de:bc:25:85:39:d9:a4:d9:
                    8f:75:e9:67:47:1e:a4:e0:2f:5b:e2:23:97:a2:ab:
                    5a:fa:f7:83:6f:56:b2:d1:6a:88:4b:06:d4:67:62:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:99:A8:FE:F3:F5:A8:B0:2B:DB:0B:3A:BD:7B:8E:4C:4C:25:65
            X509v3 Authority Key Identifier:
                keyid:19:36:D1:B7:62:E4:EC:4D:BA:E7:E1:5E:E5:B9:30:4B:40:25:D7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:2f:5d:bc:2a:40:45:8b:9e:45:64:c4:96:6a:b4:9c:cb:
         6b:96:e6:ec:80:5c:23:cc:9c:dd:ce:9c:58:83:88:68:18:cd:
         40:45:3b:6d:30:c8:d3:be:84:94:7b:7b:43:74:78:23:29:3d:
         73:1b:0a:88:0e:ae:34:a8:9f:c1:6a:1c:fd:c8:0e:d3:14:60:
         9b:ef:81:58:25:0d:cc:6c:8b:51:9a:a2:2f:37:8d:3d:0e:26:
         52:43:76:cf:3a:ec:9a:e4:ee:42:b1:ce:6b:ed:3e:57:20:fb:
         47:e5:07:91:7f:3f:1a:36:12:03:af:0e:68:4f:ca:2e:dc:eb:
         e1:da:ff:5f:41:7c:33:fe:ab:0d:44:ab:45:d2:4f:a1:a1:e1:
         93:53:f2:24:99:e1:f5:26:fb:eb:10:48:6b:ef:56:46:ca:5a:
         1e:61:3a:33:1a:54:b1:a5:45:4c:4f:f7:71:4d:d5:7c:e9:a9:
         00:68:d7:a4:1a:de:0f:c3:95:cf:5f:86:d7:7c:74:c4:6e:16:
         69:da:cd:db:71:ab:65:56:3b:0c:c5:ca:f6:8f:b5:88:fc:ac:
         96:24:33:84:10:5c:37:50:88:52:7c:9e:dc:b5:12:9f:08:a6:
         48:be:66:c1:a2:0a:1c:99:79:c4:b6:4e:75:91:cb:b2:2e:f9:
         75:80:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----