Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.mft
File:                     857722366BDAD6511C5D6EF9E409EF470CAF16BE.mft (raw, json)
Hash identifier:          97Xtp/On4RstZ9Fo9CiQoT/6XkVd9HwD0S85JJNBXAM=
Subject key identifier:   C8:7E:98:62:3C:E1:9E:F8:BB:9E:F8:1A:3D:9C:56:32:E9:E0:42:B7
Authority key identifier: 85:77:22:36:6B:DA:D6:51:1C:5D:6E:F9:E4:09:EF:47:0C:AF:16:BE
Certificate issuer:       /CN=857722366BDAD6511C5D6EF9E409EF470CAF16BE
Certificate serial:       52E9F4AB1901119B6529C7001ABDCCE11651D0AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.mft
Manifest number:          85
Signing time:             Sun 14 Apr 2024 16:31:19 +0000
Manifest this update:     Sun 14 Apr 2024 16:26:19 +0000
Manifest next update:     Mon 15 Apr 2024 19:43:19 +0000
Files and hashes:         1: 323830343a6136633a3a2f33322d3430203d3e20323632323832.roa (hash: FbZJ9MagDgjITRYU4QAjIvKh83aE8xpCu+Kfs8ekJp8=)
                          2: 857722366BDAD6511C5D6EF9E409EF470CAF16BE.crl (hash: Il1b43pXDCk9LwOewlEFKrNk/EbC/IVoZqNQDZLdL+4=)
                          3: 3137372e35322e32342e302f32312d3234203d3e20323632323832.roa (hash: R7sn3AckaXEsT+LB53t8JPeQk5Ke8MCzbiRlEKoCXkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e9:f4:ab:19:01:11:9b:65:29:c7:00:1a:bd:cc:e1:16:51:d0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857722366BDAD6511C5D6EF9E409EF470CAF16BE
        Validity
            Not Before: Apr 14 16:26:19 2024 GMT
            Not After : Apr 15 19:43:19 2024 GMT
        Subject: CN=C87E98623CE19EF8BB9EF81A3D9C5632E9E042B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:30:1c:28:58:02:a8:50:f5:8c:eb:ae:b4:
                    8f:41:23:e4:b4:79:0b:d2:1e:1b:e5:40:0e:53:0d:
                    95:c3:9d:12:49:22:9c:05:5d:e0:c0:d9:c2:c2:31:
                    de:6d:d1:77:5b:fc:24:e6:92:df:ec:07:98:39:cb:
                    30:75:8a:4f:9c:d1:9f:da:1a:e1:e6:df:d8:5b:0f:
                    c6:60:ac:d2:82:b4:dc:81:84:33:df:39:a0:1e:55:
                    c6:c4:4c:8b:5f:ac:38:29:ea:83:52:45:93:b2:a9:
                    22:03:c2:79:c6:0d:93:eb:68:29:4b:84:a2:93:b4:
                    3e:19:f2:08:6d:19:89:6d:23:60:73:6c:67:5b:f3:
                    82:31:46:0a:cc:76:32:81:a8:31:b4:50:ee:d8:0d:
                    41:17:84:fd:2f:3b:22:11:35:5f:20:4f:bd:58:1a:
                    e3:44:b1:83:e9:5f:5b:2c:fc:cc:57:2c:83:f6:ef:
                    f4:2f:8e:1c:cb:19:16:cd:f5:cf:9a:c9:6b:5e:80:
                    fc:c8:8e:bb:f0:54:03:6e:c9:87:2d:c8:89:6c:45:
                    fa:5b:99:f1:00:48:b2:64:3a:5d:75:4a:e7:2d:a4:
                    42:f4:d0:31:d2:df:c4:15:3f:b0:52:83:1b:28:b0:
                    76:3a:9f:6a:2b:e5:12:34:75:94:6f:89:d0:da:80:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:98:62:3C:E1:9E:F8:BB:9E:F8:1A:3D:9C:56:32:E9:E0:42:B7
            X509v3 Authority Key Identifier:
                keyid:85:77:22:36:6B:DA:D6:51:1C:5D:6E:F9:E4:09:EF:47:0C:AF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:4f:9b:06:1a:6c:50:35:00:b0:35:e7:16:df:38:d9:6b:
         ca:97:39:4f:c6:17:d4:d9:f0:68:b1:74:f2:e9:dd:22:20:a7:
         b0:8d:97:a0:fd:a4:4c:7e:f7:05:82:7e:31:11:2f:d6:8e:d9:
         18:7a:ce:39:01:24:13:37:71:b3:f0:23:be:fc:9f:ac:17:b7:
         d2:37:95:ac:b8:b4:9a:c2:3f:96:fe:0a:5d:b9:a4:e0:2f:b7:
         21:6b:97:4c:4c:06:b8:c4:b9:7b:71:3e:aa:b3:7b:76:0a:8b:
         0e:24:e1:57:7f:b7:26:2c:66:7f:ed:1e:79:19:fb:fa:6a:87:
         ab:e2:6e:1a:07:f2:8f:a8:5c:fc:27:34:43:79:ac:c8:08:1d:
         f0:c3:91:00:c8:10:72:54:bf:77:bb:f7:92:5a:eb:10:fc:3c:
         ed:2e:df:b0:68:35:0e:58:81:f2:cb:cd:f2:f8:aa:db:47:e8:
         51:79:ff:14:19:3e:6b:1e:4a:56:cd:96:97:e9:ed:f1:7b:ec:
         05:e0:f1:cd:79:b7:0d:dc:ca:1b:ec:24:91:12:c3:84:a6:1e:
         a9:29:28:12:b2:96:db:82:3b:23:42:ec:e2:61:68:a0:d4:5f:
         3e:00:65:86:3a:2c:62:43:27:72:90:fa:ec:bc:a9:c3:36:3b:
         a9:12:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----