Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft
File:                     BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft (raw, json)
Hash identifier:          KpBEaUsrNjU01ca0gzxLd59kkSpcItm+8rjLg2gMRZs=
Subject key identifier:   1F:68:68:D5:99:04:61:65:53:AC:DB:10:06:6E:40:83:FE:D1:CB:11
Authority key identifier: BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
Certificate issuer:       /CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
Certificate serial:       64BFEFD6EA09A93D6F4B493355AE62AD41C9DFFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft
Manifest number:          02F9
Signing time:             Sun 15 Oct 2023 12:18:22 +0000
Manifest this update:     Sun 15 Oct 2023 12:13:22 +0000
Manifest next update:     Mon 16 Oct 2023 14:26:22 +0000
Files and hashes:         1: BB036EE1ED900E7F5470199DFFD0CDED2316DE76.crl (hash: H4/wJhQLKxWLipD972FBW3pyMwmdHCz0JyUQoBAfRxc=)
                          2: 34352e3136342e35322e302f32322d3234203d3e20323638353938.roa (hash: vy4yOpow/5Iu3CirOEb3qNet5TAiOAyMjHGkg/fWg8I=)
                          3: 323830343a353361383a3a2f33322d3334203d3e20323638353938.roa (hash: 6bUV7avCOFeZS9GA2+RSPAYHOSd7mhVZVOGeetlqXyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:ef:d6:ea:09:a9:3d:6f:4b:49:33:55:ae:62:ad:41:c9:df:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
        Validity
            Not Before: Oct 15 12:13:22 2023 GMT
            Not After : Oct 16 14:26:22 2023 GMT
        Subject: CN=1F6868D59904616553ACDB10066E4083FED1CB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:09:7c:e4:23:75:42:a6:47:3b:e0:a6:2f:
                    4b:14:a1:33:3e:26:0d:5a:07:f4:22:18:5d:c7:47:
                    79:a2:23:69:f7:db:c0:b1:44:1b:72:76:a0:68:09:
                    ac:5d:d0:66:9c:3b:e7:c3:c5:80:55:3a:62:47:4d:
                    76:12:9a:10:10:0f:91:b7:6b:9c:23:2a:b5:b4:80:
                    b6:df:2c:d4:5b:9b:e3:54:d3:71:58:71:84:8d:d6:
                    28:6e:7d:e7:8a:43:b3:c2:d8:24:0c:12:76:a7:ba:
                    75:ee:d3:14:b4:fe:62:42:e7:06:86:4c:76:88:a0:
                    c1:2d:94:a2:e5:b5:cb:74:9b:30:45:35:a5:b6:f2:
                    39:c5:03:e1:dd:34:f1:d2:c6:82:c8:fe:c3:47:67:
                    20:3b:9b:01:16:a4:8c:98:0f:82:da:f5:42:14:34:
                    fd:40:ea:2c:2e:5c:72:02:72:0b:38:6d:67:7b:a0:
                    05:0c:5e:e9:8c:5c:a2:ea:28:04:05:b3:ad:06:4b:
                    c7:b3:d4:57:86:24:b7:97:b2:5f:85:79:42:8f:bc:
                    cf:af:91:01:6c:f2:65:fb:a5:21:73:83:6b:8d:b6:
                    20:bd:04:9f:5b:d7:2f:ef:e3:1b:35:3f:00:aa:4e:
                    9f:a3:4e:5d:39:6b:d9:cb:42:00:df:c2:ae:ad:7e:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:68:D5:99:04:61:65:53:AC:DB:10:06:6E:40:83:FE:D1:CB:11
            X509v3 Authority Key Identifier:
                keyid:BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:4b:6a:35:b1:45:fe:7c:fe:7b:5b:21:8c:de:1b:2d:f0:e8:
         fb:ff:ec:d5:62:2b:a1:56:a3:e0:8f:c7:61:45:fd:20:0f:1f:
         35:0e:e8:08:dc:81:01:2e:f7:0f:18:2a:58:98:b4:77:f1:38:
         2a:ba:2e:20:93:c8:47:39:21:3c:4c:6a:1c:b2:1e:ea:a8:2d:
         cb:0a:8c:d6:d7:cc:51:59:e2:ba:8b:fa:f5:80:e3:33:91:dc:
         93:ad:ed:ef:06:fb:9b:0c:db:bd:dc:1e:67:35:d5:88:f9:bf:
         b7:b8:00:19:a1:ee:59:7b:9a:a3:ea:a1:77:40:ef:ec:8b:3a:
         e1:28:73:3b:a1:25:85:40:c9:7a:78:6c:2c:59:17:72:32:2f:
         d0:8d:02:4c:5c:1c:4b:cb:4f:45:68:b1:48:e3:52:38:3e:0a:
         9a:71:ef:36:1f:30:25:67:46:9d:55:32:ce:95:80:1a:84:20:
         a1:c0:51:f0:68:ea:3d:b2:70:dc:28:7a:b9:b6:40:ee:bb:32:
         a2:8b:80:bb:ce:6f:41:2f:39:84:ea:92:52:82:b6:d1:e1:c0:
         02:df:5d:77:f2:fb:0f:ce:0e:de:67:33:43:71:06:db:e1:80:
         7e:1b:e8:29:9c:18:7c:dd:26:84:c2:fa:5c:d4:7d:a1:11:d6:
         00:b3:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----