Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft
File:                     8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft (raw, json)
Hash identifier:          rE9OsE8ZidPsEepTVcjFm+PcnCM+E2GiIN/HKfZJUS8=
Subject key identifier:   33:F2:32:F3:A1:6F:1E:78:28:A9:0E:CF:8E:36:6E:76:D0:B9:36:54
Authority key identifier: 8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC
Certificate issuer:       /CN=8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC
Certificate serial:       1CC82FF8F8076B4D65C51784B91581A89FBB3089
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft
Manifest number:          34
Signing time:             Fri 19 May 2023 06:45:45 +0000
Manifest this update:     Fri 19 May 2023 06:40:45 +0000
Manifest next update:     Sat 20 May 2023 10:38:45 +0000
Files and hashes:         1: 8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.crl (hash: EsPKXR6BvA/brMKB48iXCh9nWj0NpkYXEoRJfcK1USo=)
                          2: 323830343a316133633a3a2f33322d313238203d3e203631383437.roa (hash: Z5yRJugOSj2h8wrmjW++A/lBzvkMEDB51ecVr49S/IE=)
                          3: 3230312e3134382e3234382e302f32322d3332203d3e203631383437.roa (hash: /HDPqHHX7sPM4d0D9SeyhrKKuogS8IzT2QPBSaIOBdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:2f:f8:f8:07:6b:4d:65:c5:17:84:b9:15:81:a8:9f:bb:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC
        Validity
            Not Before: May 19 06:40:45 2023 GMT
            Not After : May 20 10:38:45 2023 GMT
        Subject: CN=33F232F3A16F1E7828A90ECF8E366E76D0B93654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:39:9a:cd:8b:c5:0d:69:29:eb:33:6b:62:
                    f9:c8:2b:12:01:e7:a3:40:35:f6:36:c4:5d:2a:11:
                    54:4b:d6:78:55:1f:f3:2e:a5:ce:fb:39:01:19:13:
                    e9:45:f0:d2:2e:5a:60:11:40:97:a3:4c:a6:24:96:
                    77:6b:90:79:24:16:44:5d:18:6b:d8:76:5b:f7:bf:
                    c9:fb:8c:8e:b4:e8:52:f3:91:18:cd:b3:ca:ec:30:
                    8d:9d:87:8c:cb:ae:e6:8d:38:f0:a0:41:3b:ec:88:
                    9b:f6:d9:12:1c:59:ac:0d:57:1e:b3:19:a0:16:70:
                    de:3b:93:eb:2d:07:67:92:04:9c:79:70:37:a2:0a:
                    1a:59:8b:83:17:87:a3:c8:bf:a1:c4:e2:2c:e9:6b:
                    4c:9f:83:0a:38:07:b9:23:22:85:04:a4:c0:7b:41:
                    79:ad:8d:27:a9:f4:67:58:91:df:df:41:0c:af:a6:
                    bc:82:88:17:14:76:2e:ef:97:c1:60:c3:7f:f3:19:
                    e1:77:d7:b6:8d:ec:b4:b0:47:42:e8:42:08:3a:d2:
                    30:98:c8:75:5e:90:69:2c:3c:93:7e:72:09:1f:27:
                    69:e6:70:b1:67:21:01:8c:78:dc:36:8e:8b:41:30:
                    64:fd:12:b0:44:6c:5c:23:db:a3:03:a9:17:bb:2d:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:32:F3:A1:6F:1E:78:28:A9:0E:CF:8E:36:6E:76:D0:B9:36:54
            X509v3 Authority Key Identifier:
                keyid:8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:77:2a:b7:69:10:ba:b4:b2:59:80:f9:ca:e3:56:0e:c0:
         76:05:bc:69:45:ff:e6:b2:88:df:92:44:9f:4b:31:cb:f4:1d:
         95:d8:0b:e2:f7:1b:1c:03:e3:6f:f0:f0:1b:16:38:e6:4e:0e:
         b1:f6:cb:a5:b7:8c:e2:60:fe:84:3a:fa:a3:ac:a5:32:57:47:
         03:f1:da:83:1d:b6:09:15:e4:d0:11:c4:06:83:be:90:38:1e:
         01:5e:4a:f2:1d:5e:bb:d3:66:c5:b8:03:77:ea:ca:4a:78:c9:
         5f:3c:aa:49:f4:90:bf:f1:ec:0e:54:85:d6:5a:7c:4d:56:ce:
         06:98:7a:fa:53:b5:1e:c9:95:42:77:5a:b1:1b:8a:67:dc:1c:
         0e:27:3b:7e:d7:48:34:d1:5f:c5:a2:ce:61:67:09:a1:90:fb:
         d8:5a:f1:66:33:1a:c2:09:d8:07:11:60:a6:39:22:11:78:0c:
         be:34:e7:a2:78:c6:16:90:18:87:c5:0a:d1:db:b4:06:f7:68:
         5b:cf:07:c1:66:68:4e:0b:58:8a:a0:35:34:df:ca:bd:55:84:
         bb:e2:74:7a:c0:bd:5a:7c:34:b0:53:f2:41:5e:ea:95:74:e4:
         23:a6:73:90:03:f8:e2:4d:12:05:79:74:9f:53:5b:39:f9:c9:
         bd:69:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----