Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/9334B2281430100C1A462582597A22B41134F8F4.mft
File:                     9334B2281430100C1A462582597A22B41134F8F4.mft (raw, json)
Hash identifier:          2mNGVnICVKUeHKgaZvNg6NN+NQgAQkedDO3Xuu13u2s=
Subject key identifier:   10:86:BF:DA:52:A8:50:FC:E8:3F:98:33:10:DD:1C:1D:91:F4:26:84
Authority key identifier: 93:34:B2:28:14:30:10:0C:1A:46:25:82:59:7A:22:B4:11:34:F8:F4
Certificate issuer:       /CN=9334B2281430100C1A462582597A22B41134F8F4
Certificate serial:       01342B6F1096CC737FA5A9F8A4730E9053FCB23A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9334B2281430100C1A462582597A22B41134F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/9334B2281430100C1A462582597A22B41134F8F4.mft
Manifest number:          1E
Signing time:             Tue 18 Apr 2023 07:48:14 +0000
Manifest this update:     Tue 18 Apr 2023 07:43:14 +0000
Manifest next update:     Wed 19 Apr 2023 11:29:14 +0000
Files and hashes:         1: 323830343a336461383a3a2f33322d3333203d3e20323636353435.roa (hash: 1IYCJkVtCQiHMV4woa9MbBwc79uIUm6RtxeypDfoVZY=)
                          2: 34352e362e3139322e302f32322d3234203d3e20323636353435.roa (hash: ApMAsvX1cCiWNax72Ebzow8zsTox1e0evB5r3zT1hAQ=)
                          3: 9334B2281430100C1A462582597A22B41134F8F4.crl (hash: 4Mv7rRDC98SBttJM3JwKar8688imD7WmrUMtnveYwLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:34:2b:6f:10:96:cc:73:7f:a5:a9:f8:a4:73:0e:90:53:fc:b2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9334B2281430100C1A462582597A22B41134F8F4
        Validity
            Not Before: Apr 18 07:43:14 2023 GMT
            Not After : Apr 19 11:29:14 2023 GMT
        Subject: CN=1086BFDA52A850FCE83F983310DD1C1D91F42684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:22:8f:2c:20:d4:91:00:7e:05:c8:2c:a9:
                    0b:5c:30:71:c2:74:5e:b2:f2:26:ea:fc:09:bf:37:
                    a2:f9:1c:eb:ad:41:8f:41:ea:cf:81:60:57:49:c5:
                    95:c7:f9:f5:bd:a5:f0:c7:4c:6c:ab:de:f1:c9:19:
                    72:e8:8b:2c:9b:c0:5a:b0:28:41:0e:b0:ba:14:66:
                    57:51:c3:f5:e6:7f:80:36:be:d3:a4:61:07:d5:2b:
                    5c:45:f9:05:a0:d9:c3:85:34:c8:c3:d9:77:81:fe:
                    9d:21:52:ea:e2:8f:40:d8:d5:1e:24:02:91:1b:1e:
                    ca:19:66:15:28:3b:c9:d5:54:ba:29:2c:15:ff:6a:
                    b0:35:db:43:34:ad:aa:dc:33:2f:ff:e4:5d:19:27:
                    90:b1:1c:0c:06:c0:c8:09:5b:00:c9:1f:a9:bd:1f:
                    52:19:6f:09:3c:32:7c:3b:ad:cc:46:f7:e9:c1:e3:
                    b9:bd:65:8c:3e:3e:36:3e:98:be:cc:3a:c9:4e:d3:
                    1d:66:93:74:10:57:ed:2c:76:92:57:d1:46:30:d2:
                    e2:76:e2:16:a4:48:f1:0a:6f:72:1b:76:73:f2:a4:
                    d0:db:e7:1f:7e:9c:76:95:bc:3a:11:e7:43:08:16:
                    41:e8:3a:d7:12:eb:36:d2:ee:42:c2:53:5c:c2:fd:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:BF:DA:52:A8:50:FC:E8:3F:98:33:10:DD:1C:1D:91:F4:26:84
            X509v3 Authority Key Identifier:
                keyid:93:34:B2:28:14:30:10:0C:1A:46:25:82:59:7A:22:B4:11:34:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/9334B2281430100C1A462582597A22B41134F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9334B2281430100C1A462582597A22B41134F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/9334B2281430100C1A462582597A22B41134F8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:00:06:84:d2:43:3b:28:ac:05:36:66:a1:0b:8e:37:61:86:
         98:a4:a1:60:22:0d:04:57:dd:d7:fc:a9:a3:21:8a:a9:1a:e8:
         13:46:de:e6:b6:85:6d:af:11:71:4e:b6:40:b6:96:16:65:d7:
         c0:d1:a0:6b:a7:a6:ac:59:a7:42:ba:f3:d9:37:ad:b7:59:a3:
         fc:bc:7c:18:90:58:58:54:58:34:19:57:f9:b6:63:ce:50:65:
         3a:20:d0:41:c3:b4:7d:ce:e4:63:3b:cd:70:75:71:59:cc:c3:
         f3:f8:28:75:44:97:68:d9:8e:71:cb:a1:80:7c:e6:d0:09:68:
         6d:1b:12:d7:15:00:4b:d3:9b:ae:9f:6b:ae:a3:56:51:f1:d1:
         14:4c:23:39:7f:5d:05:32:e0:8c:3e:db:e0:09:9d:5f:cb:11:
         90:a4:c5:36:fe:04:ec:4f:10:9c:cd:39:2c:4b:00:18:1e:be:
         ea:f4:d9:11:ce:fe:27:f5:e8:ca:fc:62:e0:27:43:b4:3a:6a:
         20:a3:f4:5d:a5:52:e7:a2:2f:fe:6e:c4:33:f7:c8:b9:ed:54:
         6e:6b:da:f6:7b:8e:fa:1a:f2:ca:2b:28:65:02:3b:ae:aa:08:
         06:a6:0b:ae:6b:85:40:84:88:a4:ab:09:03:99:55:b8:89:1c:
         a3:64:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----