Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft
File:                     86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft (raw, json)
Hash identifier:          WKTYqcZ8NIwtoINdVwg++Y4nepoaPppeuz2cleSF/Bo=
Subject key identifier:   A3:7C:6D:3D:23:01:12:74:71:28:59:21:74:E8:02:B3:A2:FE:E8:96
Authority key identifier: 86:F1:BC:C4:7B:05:0A:EC:63:11:57:30:60:F7:16:DB:6C:2A:EE:14
Certificate issuer:       /CN=86F1BCC47B050AEC6311573060F716DB6C2AEE14
Certificate serial:       3662C9F7FBFEE8D59B21633CE4B9C1A3293EB81C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft
Manifest number:          26
Signing time:             Sun 06 Aug 2023 08:43:46 +0000
Manifest this update:     Sun 06 Aug 2023 08:38:46 +0000
Manifest next update:     Mon 07 Aug 2023 10:19:46 +0000
Files and hashes:         1: 3139312e372e3134342e302f32302d3234203d3e20323633333230.roa (hash: 1tZyxSXUjQ+RqJWGefU2L+whsCLsbmlmy0dFdORNOCY=)
                          2: 323830343a313433633a3a2f33322d3438203d3e20323633333230.roa (hash: NEfDAXfenP3YwF8YthxMOLePvhyOHRNVQw3X1OHbiBU=)
                          3: 86F1BCC47B050AEC6311573060F716DB6C2AEE14.crl (hash: lnc25l9ZcuC1FPmCjtkJyEDYXdnTnlinltvZxdfz0Tk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:62:c9:f7:fb:fe:e8:d5:9b:21:63:3c:e4:b9:c1:a3:29:3e:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F1BCC47B050AEC6311573060F716DB6C2AEE14
        Validity
            Not Before: Aug  6 08:38:46 2023 GMT
            Not After : Aug  7 10:19:46 2023 GMT
        Subject: CN=A37C6D3D230112747128592174E802B3A2FEE896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:6b:8b:b6:7c:b7:f2:bb:ff:dd:16:e4:8f:
                    b2:51:92:3c:33:3d:b2:99:86:62:e3:9f:e3:2b:5a:
                    88:ae:1a:3c:e2:db:6d:89:17:40:31:ef:8f:6e:b3:
                    82:2f:ba:32:1a:75:4a:a0:d4:58:f8:d8:a1:76:80:
                    4a:da:54:fc:89:d8:ec:4c:15:f0:cf:d2:eb:60:d5:
                    f2:26:81:06:16:68:8d:58:6a:62:77:f3:5a:d7:ad:
                    32:22:a8:b6:5d:c0:bf:1d:3a:65:b9:4f:e6:8c:19:
                    af:32:fc:cc:56:bb:c2:17:2c:84:e3:ee:b6:4e:cb:
                    71:fd:be:93:82:94:ed:ea:bb:8b:64:a7:bc:de:25:
                    bf:0d:9a:2d:c8:5f:bb:ea:71:f6:15:f9:97:4c:03:
                    26:df:4c:1f:6a:36:38:c3:c4:65:6a:0c:2a:98:e1:
                    1d:0c:ff:dd:6c:f4:e7:4d:67:b0:39:1f:c1:73:dd:
                    cf:4d:f9:06:c5:1b:4c:c8:c1:de:f4:3b:9b:b3:87:
                    f8:ed:12:9c:be:96:b0:f9:5b:e7:23:59:e3:5f:21:
                    40:06:fb:87:e7:bb:3a:d6:8d:fe:bf:48:e4:40:62:
                    be:98:7f:16:4f:a3:83:24:34:ec:87:f6:12:73:84:
                    dd:c3:9b:39:d2:9d:98:22:5e:b6:b7:e4:5e:d8:ea:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:6D:3D:23:01:12:74:71:28:59:21:74:E8:02:B3:A2:FE:E8:96
            X509v3 Authority Key Identifier:
                keyid:86:F1:BC:C4:7B:05:0A:EC:63:11:57:30:60:F7:16:DB:6C:2A:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b5:0e:c0:72:82:8a:38:2f:7c:02:79:d0:19:5e:50:2f:39:
         e9:94:2c:17:b7:9c:e4:c0:6a:70:d8:e8:06:a1:3e:59:b5:f2:
         71:54:c7:13:2d:9a:20:ef:be:6e:22:d7:41:1b:bc:06:b2:50:
         4f:01:4d:51:56:3c:e2:50:54:51:8f:c3:b4:e1:4b:0f:79:ac:
         89:13:75:a8:95:7c:cf:a7:70:f4:3e:47:b3:90:47:ad:b8:8b:
         61:b3:66:d0:28:0c:11:30:ef:ed:cc:4f:35:58:96:01:12:ef:
         ca:03:38:47:d5:88:6a:ff:83:7d:71:78:23:30:69:3c:bb:74:
         48:0a:b8:2e:bb:20:26:db:76:bc:b5:d0:83:1f:a8:da:b4:67:
         fd:a6:21:08:e6:5e:06:d4:54:cb:ad:ba:e2:30:ee:e4:0c:27:
         9a:1a:38:41:09:01:28:50:88:c3:9e:82:d7:f0:38:fe:3b:28:
         f9:79:f1:5b:e7:66:10:02:95:cc:98:91:20:05:5a:6d:19:01:
         71:ee:ad:fc:ad:99:9f:80:8c:9d:10:d7:a7:6f:a3:fb:8f:d7:
         32:66:74:2a:e6:b3:b1:64:ff:18:ce:a0:cf:f6:5b:82:80:30:
         bc:b8:c2:9c:35:7e:df:3c:2b:df:14:68:c4:a2:d7:c5:df:cf:
         dd:45:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----