Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft
File:                     36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft (raw, json)
Hash identifier:          2Aa9EqJFwxDNzAyTDFH1/y/ozL/EwL6D3k7hxfibjSY=
Subject key identifier:   5D:99:1E:F3:5B:93:39:63:56:43:AA:6F:20:A9:2D:88:24:26:1B:7F
Authority key identifier: 36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B
Certificate issuer:       /CN=36721984BBC32E9CAB34A7B21C92F1CD361B813B
Certificate serial:       46849F8AC7EDEC9F66AC33F520E6B2256BADB3D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft
Manifest number:          85
Signing time:             Tue 16 Jul 2024 21:04:59 +0000
Manifest this update:     Tue 16 Jul 2024 20:59:59 +0000
Manifest next update:     Thu 18 Jul 2024 00:35:59 +0000
Files and hashes:         1: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (hash: 3BWtv2H8347wa5+IUnKmZFDnHYngWU7dP4MDcmtGR6k=)
                          2: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (hash: RmWGkr7mWU0jC3hCBYkfmxKq2rNbIDxKAaUYyHgf0dM=)
                          3: 36721984BBC32E9CAB34A7B21C92F1CD361B813B.crl (hash: ixHwwHi88GaNDB76in3rmEZQaKo7J14RU7uuWRlC8Vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:84:9f:8a:c7:ed:ec:9f:66:ac:33:f5:20:e6:b2:25:6b:ad:b3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36721984BBC32E9CAB34A7B21C92F1CD361B813B
        Validity
            Not Before: Jul 16 20:59:59 2024 GMT
            Not After : Jul 18 00:35:59 2024 GMT
        Subject: CN=5D991EF35B9339635643AA6F20A92D8824261B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:a4:7f:af:1e:0d:ca:fd:4a:81:c6:dd:90:
                    00:b2:ab:c4:d9:d5:59:ea:e9:61:f9:21:d9:1a:63:
                    1f:cb:37:28:77:86:8e:db:e5:9e:94:2d:c6:f7:1e:
                    a6:f7:50:98:54:35:4f:f5:33:b2:ef:8d:22:63:b9:
                    ff:f4:bc:30:85:ad:c4:6c:44:29:ed:6f:d6:76:59:
                    48:51:79:fc:0b:29:62:30:59:80:2d:1b:b6:f5:44:
                    d7:4d:51:34:04:ee:85:55:a2:31:42:32:f7:d1:a4:
                    23:c8:db:af:35:d6:1a:94:60:bd:e0:10:67:76:1e:
                    d5:6e:db:24:ae:ed:0b:ce:09:55:27:c8:5d:e1:ea:
                    ea:58:26:23:1c:a7:42:0d:35:ca:e2:15:00:19:eb:
                    77:29:19:8f:bd:6a:07:6b:b9:5f:3a:48:57:f8:a8:
                    0e:7b:84:b7:9d:eb:ab:81:1b:49:09:d3:91:eb:ec:
                    23:57:86:49:49:ea:63:17:d4:9a:5c:cb:33:d9:4c:
                    13:c1:10:7d:43:86:71:e8:b9:8b:e1:f7:36:98:e2:
                    a1:fe:f0:26:7a:b8:82:51:81:8f:99:fd:20:97:16:
                    cb:b3:53:05:65:68:34:d7:7e:10:74:ed:4f:8a:c3:
                    b8:ef:de:78:aa:03:be:54:24:21:ab:11:0b:67:96:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:99:1E:F3:5B:93:39:63:56:43:AA:6F:20:A9:2D:88:24:26:1B:7F
            X509v3 Authority Key Identifier:
                keyid:36:72:19:84:BB:C3:2E:9C:AB:34:A7:B2:1C:92:F1:CD:36:1B:81:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36721984BBC32E9CAB34A7B21C92F1CD361B813B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/36721984BBC32E9CAB34A7B21C92F1CD361B813B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:0b:57:00:1d:b2:07:02:22:80:2d:85:88:0d:5a:1c:36:
         42:65:35:37:23:7d:a9:5b:df:ed:b3:1f:a7:e2:1a:42:f8:09:
         8c:c4:38:74:f4:ea:81:d0:a9:90:42:25:d5:f9:03:b3:b0:49:
         8e:a2:80:a9:be:cd:82:d4:05:3e:18:f9:5c:46:0f:11:fd:ad:
         db:5a:c2:d4:ac:eb:ba:3d:b4:28:d0:76:24:70:a9:df:aa:99:
         8d:93:75:09:14:19:16:15:3b:af:a2:45:82:ad:92:98:bb:8c:
         4b:f4:53:bb:b1:7e:67:5e:b4:24:12:bb:2f:da:70:96:51:f3:
         c3:c3:e8:7d:a6:a6:e2:d0:34:c3:a7:fa:e9:51:84:97:da:48:
         6c:09:8f:f9:9c:01:6b:58:d2:32:92:81:55:44:63:09:22:4a:
         4e:47:69:01:c7:31:b4:18:b1:7e:2d:d6:bf:6f:a9:1e:71:73:
         32:4c:fe:9b:13:60:fe:16:9d:22:24:95:e2:25:42:71:39:01:
         47:d4:5e:82:c4:ed:86:1b:23:96:24:e0:68:26:43:87:6e:3a:
         c6:d5:13:d0:ad:3a:9a:8c:1b:8d:fb:d8:5b:8f:47:d9:10:2b:
         02:d1:0b:6b:df:97:88:b7:17:71:6c:0d:2b:51:69:94:1f:2b:
         19:38:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----