Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft
File:                     9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft (raw, json)
Hash identifier:          5z6rhyi3Bjxs1dDv4USdrFkDTyjp3nr+vrmfB3VRiQk=
Subject key identifier:   91:F5:DF:6E:06:8B:6B:F3:7B:5D:52:9B:C9:78:04:A3:75:04:B9:A8
Authority key identifier: 96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31
Certificate issuer:       /CN=9696D17A0AA09553DE77DE6DBAAD33755AFE7131
Certificate serial:       659D162AFC658AECD56433E567F5084D3C070BC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft
Manifest number:          32
Signing time:             Wed 25 Oct 2023 21:33:18 +0000
Manifest this update:     Wed 25 Oct 2023 21:28:18 +0000
Manifest next update:     Fri 27 Oct 2023 01:04:18 +0000
Files and hashes:         1: 323830343a313362303a3a2f33322d313238203d3e20323633353436.roa (hash: 4DjqFtBOBmyHwS2+Mhuy0oFjXEsn9BMM6uOr3lk+y8Y=)
                          2: 3139312e362e31362e302f32302d3332203d3e20323633353436.roa (hash: +0zEP/j9h823Kn4inW3HrV3ZVxr5Cv51FQUdGmBoR1s=)
                          3: 9696D17A0AA09553DE77DE6DBAAD33755AFE7131.crl (hash: Vh2YycovBlyZt0bOngRMlKMzuE+HiyQTEaSQQ8dR+pM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:16:2a:fc:65:8a:ec:d5:64:33:e5:67:f5:08:4d:3c:07:0b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9696D17A0AA09553DE77DE6DBAAD33755AFE7131
        Validity
            Not Before: Oct 25 21:28:18 2023 GMT
            Not After : Oct 27 01:04:18 2023 GMT
        Subject: CN=91F5DF6E068B6BF37B5D529BC97804A37504B9A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:f2:f4:57:05:27:68:dc:c3:b0:15:57:8e:
                    85:10:e6:80:70:fd:eb:5a:da:f5:fd:81:c9:df:ce:
                    aa:8a:d1:7c:a5:6a:a1:9e:b1:8d:86:b9:a9:37:b6:
                    5e:4b:51:fc:96:e7:08:a3:af:81:90:fe:7b:01:1a:
                    eb:70:4f:6c:4d:7f:69:da:32:39:43:40:a2:bd:b9:
                    2b:6b:ca:28:87:25:5d:8b:00:1d:9f:7f:24:54:86:
                    d8:65:7a:2e:2c:6d:a4:a1:b3:34:09:82:28:46:d7:
                    d9:61:88:23:69:6e:4e:ba:57:1c:ba:ee:95:53:1a:
                    cf:78:b9:fc:e1:16:08:7d:c4:b6:83:e5:74:41:ef:
                    26:89:29:4a:2b:4d:bb:61:55:ff:d1:89:24:ba:91:
                    02:1e:a8:03:04:9c:b2:53:ef:60:e0:67:d6:e7:cd:
                    70:16:27:ce:8d:ed:b7:1b:0f:b0:0e:bd:b4:63:72:
                    9c:59:86:4e:a0:39:65:80:d9:0e:51:f9:17:b6:fe:
                    24:b6:e1:72:c5:77:5b:65:58:e4:16:c3:28:4d:ee:
                    84:6e:a7:39:1b:1b:98:c2:9c:e9:31:c4:e7:40:9c:
                    24:72:21:e5:81:be:98:4a:6a:3b:b1:20:ca:a0:53:
                    0b:fd:84:e2:7a:2c:aa:04:b2:2e:a3:88:51:e5:11:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:DF:6E:06:8B:6B:F3:7B:5D:52:9B:C9:78:04:A3:75:04:B9:A8
            X509v3 Authority Key Identifier:
                keyid:96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:09:d5:98:9f:80:98:a2:3f:1b:09:c9:be:14:98:f9:4a:
         d3:1b:67:8c:f5:95:4a:3d:9a:ac:c5:35:4a:39:36:76:e8:55:
         a0:71:5d:22:6a:f4:49:84:d2:ef:90:60:d9:08:08:0e:c8:96:
         61:98:98:8c:3d:1e:fd:44:17:13:d2:21:55:4f:3f:b2:b2:e0:
         39:cf:40:a1:60:bf:03:5b:54:cd:16:02:8e:41:2d:19:5c:4c:
         61:1c:57:04:90:48:a7:76:56:f4:c2:a1:a1:23:d2:62:2d:da:
         cd:eb:9c:4c:20:82:88:29:97:05:1d:32:5a:0b:b8:bb:5e:c6:
         3d:6a:82:b1:d9:a1:b5:33:78:0e:b3:2b:e9:c2:b5:fb:b9:bd:
         d2:17:59:5c:85:c5:b5:a8:3a:e3:62:e1:26:f0:71:93:ad:e2:
         a8:96:6b:87:62:fd:5d:28:89:d8:d0:1f:06:a1:65:46:49:14:
         2a:c0:a9:27:e7:66:ee:b7:f7:28:77:22:05:5e:6b:c7:dd:9e:
         dc:f9:29:6a:e9:67:14:2b:eb:59:44:c8:67:54:8f:c4:6e:c0:
         35:c8:0f:90:af:00:5e:a6:4c:52:96:17:1b:93:96:08:d9:2e:
         40:7c:59:bf:4a:12:cb:10:5b:b3:d4:02:0d:4a:ef:61:08:f0:
         0d:a2:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----