Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft
File:                     86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft (raw, json)
Hash identifier:          GMApkekFqyQGYCg+WCswCUiPUTD/9pFw9dSVgumCVIw=
Subject key identifier:   B6:C4:6C:25:D2:A5:25:B5:04:8B:34:71:5B:2D:8D:0F:7C:6A:C0:A0
Authority key identifier: 86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A
Certificate issuer:       /CN=86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A
Certificate serial:       21E6973F184BFDCC0A17D8CB181CC8199121342E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft
Manifest number:          0132
Signing time:             Tue 14 Feb 2023 02:39:23 +0000
Manifest this update:     Tue 14 Feb 2023 02:34:23 +0000
Manifest next update:     Wed 15 Feb 2023 05:26:23 +0000
Files and hashes:         1: 34352e3136362e3136342e302f32322d3234203d3e20323637393538.roa (hash: HPU/ycHkNUuKb2CI0CaYeufnHr+M+D/tnAeKqobb7WI=)
                          2: 86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.crl (hash: INaBDDyu+N9a6+DCFZ/AI46gB8mipmgsUA+B22EvHrw=)
                          3: 323830343a353564303a3a2f33322d3332203d3e20323637393538.roa (hash: fMly4uVb7ClNEZHPft5XUbYA5ig696Ou6bKcWaaNxYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e6:97:3f:18:4b:fd:cc:0a:17:d8:cb:18:1c:c8:19:91:21:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A
        Validity
            Not Before: Feb 14 02:34:23 2023 GMT
            Not After : Feb 15 05:26:23 2023 GMT
        Subject: CN=B6C46C25D2A525B5048B34715B2D8D0F7C6AC0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:ed:05:64:5a:71:b8:f4:66:a1:bc:46:be:
                    4e:b2:9d:0f:7c:a4:ea:c9:58:f8:18:45:69:b3:40:
                    28:fd:ec:47:14:27:b2:fd:31:71:12:51:ae:52:b0:
                    ba:e9:13:5c:af:5a:7e:e1:8f:70:f3:b4:24:5a:a0:
                    9c:74:c7:ff:b8:34:f9:6e:7f:16:68:59:c2:7f:99:
                    46:3f:67:40:3b:49:3c:55:c4:18:48:46:fd:8b:bf:
                    fb:10:d2:6c:49:56:3c:8a:32:46:d8:65:87:82:6d:
                    e1:8c:63:84:26:b2:66:41:bd:7b:94:f8:3c:fa:72:
                    2b:c9:19:0f:ee:2b:76:57:95:fe:d9:b2:4c:66:0c:
                    55:ae:4c:f6:86:c7:4e:77:a5:14:c5:86:69:ff:64:
                    15:c6:c2:2b:79:23:a0:7a:73:49:fa:b6:3c:01:28:
                    b7:86:0f:dc:6a:b5:8d:e2:38:17:98:03:88:39:e8:
                    88:83:c1:08:cc:7e:a5:02:7c:27:2c:9b:7e:23:b7:
                    3f:84:4c:df:99:66:75:36:79:d7:bb:96:3f:75:4f:
                    bd:12:a7:95:bf:96:0d:1b:24:f6:3e:f3:86:67:a5:
                    0d:6d:b6:13:00:ee:1c:79:b2:b7:10:ac:87:8a:3c:
                    a4:87:31:f9:b9:e0:fd:2f:bb:83:d4:bb:af:39:b7:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:6C:25:D2:A5:25:B5:04:8B:34:71:5B:2D:8D:0F:7C:6A:C0:A0
            X509v3 Authority Key Identifier:
                keyid:86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:7a:48:2b:e0:91:ad:70:10:bc:da:34:66:44:f3:15:d6:
         91:ba:34:d3:07:51:52:a7:04:60:ee:4e:2b:58:cb:6b:e3:c1:
         61:23:32:50:c8:5e:67:be:78:5f:8e:5e:d9:3b:9c:6d:5f:ed:
         ee:36:81:2c:5c:f0:f7:28:e5:cc:01:d5:3a:38:e9:87:ec:30:
         3e:21:cc:ff:52:2b:6f:ca:bb:d9:f8:10:b8:cc:c6:1e:0f:fd:
         3f:39:9a:de:9f:75:8a:68:63:74:69:12:40:26:f0:9c:5a:0a:
         f4:9d:d4:79:b6:0b:49:4e:cf:ac:a4:4d:d9:c4:8c:50:95:8b:
         1b:6a:7a:d6:10:25:2d:ef:4c:8e:21:71:00:ba:eb:1a:e4:88:
         8e:9e:9c:52:9c:a6:0e:05:b8:16:3a:18:92:61:85:ba:4b:0a:
         ce:38:b2:2a:a6:22:e7:7e:b8:ad:ad:a1:5c:18:06:25:d5:7c:
         db:ae:4b:4e:3f:9a:94:c6:e3:05:66:96:2f:fe:3c:71:e9:01:
         05:64:1a:2b:17:5b:46:ca:41:ee:a2:6d:43:e3:ed:30:51:06:
         1c:de:e4:fc:22:7c:b9:2c:73:1c:18:fe:68:c0:89:21:8f:03:
         62:07:3c:31:b8:c4:4d:59:c8:da:38:91:d7:d6:af:75:39:b9:
         4b:9f:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----