Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.mft
File:                     86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.mft (raw, json)
Hash identifier:          2Pvv8j39OyXzEB/IYAf/yob6xV89+UVowbOW6vRFabk=
Subject key identifier:   52:15:E5:5B:B5:42:7B:8F:ED:E4:8C:00:97:3F:E3:79:EC:14:54:3C
Authority key identifier: 86:43:4A:8E:9E:21:F8:B8:C4:74:60:1A:AB:42:EF:E0:97:8E:FC:DB
Certificate issuer:       /CN=86434A8E9E21F8B8C474601AAB42EFE0978EFCDB
Certificate serial:       72927A187DE34E26C8BCC65E6435053BD6C48F3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.mft
Manifest number:          0460
Signing time:             Sat 15 Jul 2023 10:32:32 +0000
Manifest this update:     Sat 15 Jul 2023 10:27:32 +0000
Manifest next update:     Sun 16 Jul 2023 12:21:32 +0000
Files and hashes:         1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: t7MDo8o1jJOcNe1+XfH4fnVkTZSoC5PPSHAdb+VrHU4=)
                          2: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: Go7J7TBUgVbMLA6+pZp4dvemNORGAcTPnGxykO2oHEE=)
                          3: 86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.crl (hash: /9fsSH0Ct+ZMphYrY7JoD3f8/rLNHoSqmtlOCdxnhDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:92:7a:18:7d:e3:4e:26:c8:bc:c6:5e:64:35:05:3b:d6:c4:8f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86434A8E9E21F8B8C474601AAB42EFE0978EFCDB
        Validity
            Not Before: Jul 15 10:27:32 2023 GMT
            Not After : Jul 16 12:21:32 2023 GMT
        Subject: CN=5215E55BB5427B8FEDE48C00973FE379EC14543C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:28:f6:81:fc:1c:0f:37:d8:b3:e4:c4:4f:
                    3b:12:46:02:72:67:f7:cc:ff:64:3f:2d:35:6e:ee:
                    64:12:30:40:50:94:63:b7:d2:70:4f:e5:47:d9:34:
                    f7:62:a7:bc:e8:6a:a7:46:c8:d2:c1:d5:fa:fa:02:
                    fd:b8:8a:ca:e7:77:f6:38:43:5f:80:7a:5c:b4:82:
                    5b:a3:45:c4:56:82:09:e6:cb:c8:ed:bb:db:78:de:
                    de:26:be:e3:ef:c5:f2:5f:1b:27:db:52:77:a3:b1:
                    b2:e8:9c:34:69:bd:4f:88:ce:ab:73:1e:62:f1:95:
                    aa:17:3c:fd:7f:4c:f5:ce:1a:54:d5:9d:0d:75:e8:
                    a3:19:0d:56:82:e8:93:5d:63:43:95:d4:a9:64:47:
                    7f:cd:f0:82:54:69:74:78:04:c0:aa:96:10:59:58:
                    be:b3:db:06:60:3a:59:3c:57:43:89:c5:f3:f8:3a:
                    76:72:dd:9a:89:4e:a1:6d:52:f2:63:67:04:7f:25:
                    f2:82:7b:4d:99:2a:c3:5f:0e:32:3c:be:c6:b4:a1:
                    a6:9d:0f:45:f4:33:fc:69:12:e0:dd:11:28:e9:bc:
                    e9:3d:d8:57:7f:fb:ba:0c:b7:7b:89:f3:89:1a:41:
                    d6:31:30:66:a7:23:25:6d:5c:e3:8d:5f:81:0d:15:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:E5:5B:B5:42:7B:8F:ED:E4:8C:00:97:3F:E3:79:EC:14:54:3C
            X509v3 Authority Key Identifier:
                keyid:86:43:4A:8E:9E:21:F8:B8:C4:74:60:1A:AB:42:EF:E0:97:8E:FC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/86434A8E9E21F8B8C474601AAB42EFE0978EFCDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:a2:02:58:0c:2d:f0:fc:3b:50:96:f9:2b:6a:f1:11:7b:
         e5:b4:df:a2:a1:8e:a2:04:da:ee:27:67:07:59:5e:a1:cd:51:
         89:cb:1c:02:f5:2d:f8:79:08:d4:b5:01:19:df:19:78:fc:cb:
         91:62:ed:4b:4d:8d:0f:19:6b:fd:c8:b7:d0:76:44:0d:4d:68:
         05:b7:9f:01:d6:11:ff:84:5a:56:7b:a6:9d:69:9e:8e:12:8a:
         31:ef:90:42:3f:0e:4a:47:ae:11:c3:1d:64:0d:ac:c3:67:36:
         96:c0:56:61:c5:41:ca:db:eb:2a:a4:8b:f7:6a:14:8d:69:39:
         57:1d:3b:0d:57:ca:3f:3a:58:0b:82:22:e9:fb:eb:9f:15:2b:
         56:94:76:27:56:bd:a4:c1:9c:a8:f1:62:58:21:77:7d:62:3a:
         25:9b:5a:e6:e2:ce:86:43:e5:32:77:40:4c:37:b5:21:fd:a0:
         b2:d1:af:b5:4f:42:cf:52:da:67:12:41:a6:de:d5:9b:0b:1f:
         18:67:c6:00:90:8f:75:a1:fb:a6:4c:6b:6b:d4:20:ee:16:9d:
         34:e2:65:4a:20:09:48:f5:9e:de:e1:64:32:14:06:09:4d:4f:
         cf:aa:a6:3d:ea:04:89:0e:0c:ce:b3:53:6a:06:14:73:84:fa:
         ed:d4:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----