Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.mft
File:                     2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.mft (raw, json)
Hash identifier:          8WzRQML9fWJG4BHhzF1H74AVERSMDAT2GVxAiN0SHtk=
Subject key identifier:   86:1B:89:CF:42:8F:4E:B9:D4:58:F7:E6:1A:D8:11:3D:24:4F:76:F3
Authority key identifier: 20:93:FB:A8:2B:53:D7:8A:2A:4C:9E:7B:C5:7F:6F:50:6C:00:C3:B7
Certificate issuer:       /CN=2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7
Certificate serial:       2FC01832687132B7255A05071C1CEFEA2FCD6D07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.mft
Manifest number:          F5
Signing time:             Tue 25 Apr 2023 14:50:06 +0000
Manifest this update:     Tue 25 Apr 2023 14:45:06 +0000
Manifest next update:     Wed 26 Apr 2023 17:58:06 +0000
Files and hashes:         1: 323830343a366164633a3a2f33322d3438203d3e20323730333632.roa (hash: hIzxVuoLotl+67yshw6bB8GCFSH09uYDOBkngXJ6avU=)
                          2: 2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.crl (hash: 3wOd5ZJwix5NUzm+eqw0gJ/gvRYWO4ymCP7Y+cTRlm8=)
                          3: 3139302e38392e36302e302f32322d3234203d3e20323730333632.roa (hash: H3b8QgrXVP4YxIh2dXrq4gpmOTf7oQRy4dh/iSiPWCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c0:18:32:68:71:32:b7:25:5a:05:07:1c:1c:ef:ea:2f:cd:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7
        Validity
            Not Before: Apr 25 14:45:06 2023 GMT
            Not After : Apr 26 17:58:06 2023 GMT
        Subject: CN=861B89CF428F4EB9D458F7E61AD8113D244F76F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:93:95:0f:f1:b0:2a:d6:44:25:bc:a8:9b:
                    38:65:61:c9:94:27:fc:3b:b1:e4:32:c8:62:22:37:
                    af:e5:cf:95:03:2d:f1:ef:ed:8d:bd:82:ad:03:69:
                    ee:77:b9:63:66:50:df:8d:4e:0b:61:ee:8f:86:86:
                    02:c8:88:90:3a:d4:56:52:bd:5d:d5:3b:76:1a:72:
                    56:e3:a0:7b:8a:bb:45:b8:fc:72:15:7e:d1:35:ad:
                    13:0b:b8:94:1f:9f:bb:cd:d3:42:38:09:52:e9:d6:
                    93:2b:75:27:c8:0d:10:9c:9d:6f:3e:e7:9e:73:ae:
                    07:63:cb:e9:4d:42:aa:13:67:98:38:f9:89:dc:1d:
                    0d:59:a5:51:f4:3f:8d:2c:a5:b7:c7:b8:32:bc:1a:
                    a8:b9:18:e5:4b:02:15:0e:3c:0e:bf:95:9e:29:31:
                    6c:f8:28:c0:a4:b1:30:e7:a9:d8:be:09:10:94:a4:
                    40:bf:64:12:cd:97:0a:7f:8f:cb:49:ec:bf:8c:db:
                    36:f8:31:43:b6:ec:17:37:8d:b6:47:63:31:84:35:
                    33:82:28:fa:73:c0:69:8b:91:e3:84:82:19:74:61:
                    41:0f:16:55:f5:0f:15:c5:cc:51:4f:0b:d4:6c:da:
                    cb:d3:d6:ce:95:06:aa:19:14:ed:e2:15:4a:fd:83:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:89:CF:42:8F:4E:B9:D4:58:F7:E6:1A:D8:11:3D:24:4F:76:F3
            X509v3 Authority Key Identifier:
                keyid:20:93:FB:A8:2B:53:D7:8A:2A:4C:9E:7B:C5:7F:6F:50:6C:00:C3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/0/2093FBA82B53D78A2A4C9E7BC57F6F506C00C3B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:c1:00:c1:a9:d3:14:f9:37:f3:0b:8a:10:d2:84:38:78:
         cf:40:22:39:e9:ab:3b:0f:0c:89:ca:ef:b0:62:44:d5:80:2c:
         77:a3:73:d9:e9:a0:30:76:1c:4a:a2:63:c7:53:5f:30:06:4a:
         9f:c6:17:ce:e0:87:8c:1d:46:5a:c6:31:d4:35:89:76:fc:96:
         9d:e4:c1:f9:b5:b9:2a:1b:be:b8:58:50:26:75:57:37:8a:b9:
         9c:89:84:6a:fa:84:92:e9:e3:d8:67:11:e5:85:4f:28:fa:6b:
         47:19:51:49:1c:44:63:82:e2:d8:cf:76:90:33:16:29:f0:d9:
         73:f6:bd:97:f1:1c:95:48:24:64:8a:a9:a1:93:a5:53:12:00:
         ed:93:e2:64:e7:17:56:23:5f:68:a2:a8:c3:cf:7b:63:08:42:
         82:52:0d:c3:64:91:c6:61:2c:ec:b8:97:0c:30:e7:af:d8:5b:
         bb:e4:65:73:56:e8:53:df:d1:e4:48:50:5c:6d:2e:b9:dd:13:
         77:2b:6e:cc:06:58:39:2f:c4:2f:e5:d0:d0:88:aa:08:f0:40:
         58:91:ef:04:25:42:9f:62:d1:73:8b:f4:52:79:fb:11:79:ff:
         c5:e2:71:f2:42:db:ab:84:d0:ac:87:4a:50:31:e4:8a:05:52:
         9f:47:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----