Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/B27457E28BF0AE4B60276C0B39EE805791820D04.mft
File:                     B27457E28BF0AE4B60276C0B39EE805791820D04.mft (raw, json)
Hash identifier:          3hvXEfHip+pAiFP2YQOpFIBlUqnGNyGK+coh1LvG2RU=
Subject key identifier:   9C:00:36:EF:3F:5C:99:96:30:19:C4:9F:F0:CB:03:3A:73:B2:D3:60
Authority key identifier: B2:74:57:E2:8B:F0:AE:4B:60:27:6C:0B:39:EE:80:57:91:82:0D:04
Certificate issuer:       /CN=B27457E28BF0AE4B60276C0B39EE805791820D04
Certificate serial:       5C0F90EFA579F75083B3BA5DAD6ECB84E2205ECD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B27457E28BF0AE4B60276C0B39EE805791820D04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/B27457E28BF0AE4B60276C0B39EE805791820D04.mft
Manifest number:          13
Signing time:             Fri 10 Mar 2023 23:37:26 +0000
Manifest this update:     Fri 10 Mar 2023 23:32:26 +0000
Manifest next update:     Sat 11 Mar 2023 23:49:26 +0000
Files and hashes:         1: 323830343a363165343a3a2f33322d3438203d3e20323639323633.roa (hash: FG63ltoWSjl82l+HxEO11zQNuYeulhotESUp8CzUzVg=)
                          2: B27457E28BF0AE4B60276C0B39EE805791820D04.crl (hash: AJQ2pn90h2i1QkCZGSoxYgnS4XRWc64dN05y3iwf0go=)
                          3: 34352e3138332e35362e302f32322d3234203d3e20323639323633.roa (hash: AGWZ/37JKBFFxUMNMSKfx94b7oy3A/StXhE673kh6zM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:90:ef:a5:79:f7:50:83:b3:ba:5d:ad:6e:cb:84:e2:20:5e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27457E28BF0AE4B60276C0B39EE805791820D04
        Validity
            Not Before: Mar 10 23:32:26 2023 GMT
            Not After : Mar 11 23:49:26 2023 GMT
        Subject: CN=9C0036EF3F5C99963019C49FF0CB033A73B2D360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:08:ea:51:b9:dd:6e:74:39:a0:f5:c4:e0:
                    1b:d9:ac:1e:ba:c2:5b:5f:cf:21:49:a0:ff:e8:c8:
                    ba:ea:1f:50:87:3b:02:d3:56:e4:85:73:d2:d8:1e:
                    e0:7a:64:c0:6c:75:d9:27:54:5b:a9:46:2c:9e:85:
                    0a:ec:4a:db:83:83:63:3f:96:00:d3:48:cc:07:71:
                    a1:03:e3:ca:b4:11:74:19:19:e9:a3:0c:0a:11:7e:
                    c0:b0:66:f5:e1:73:45:2e:e2:33:94:ef:88:96:41:
                    cc:41:5a:2c:13:7e:fd:56:db:36:26:9d:00:0b:b7:
                    8e:c9:55:29:f2:02:9b:4b:24:b6:59:c3:45:46:b3:
                    74:41:16:6d:4b:3a:b8:33:1d:72:4d:32:0f:f8:65:
                    c7:6a:0b:e1:cd:1a:3e:82:f7:47:66:ed:d4:f7:73:
                    ce:32:77:c4:ec:e2:f4:ca:40:de:77:9c:6b:6d:7a:
                    ff:c2:4d:1c:d7:08:2c:70:a7:ac:c1:a7:b6:50:09:
                    00:74:ea:04:73:65:22:89:97:9b:05:da:61:2b:19:
                    69:72:61:bc:38:cf:00:17:d2:be:c0:24:0b:9e:c9:
                    f8:7d:41:59:e7:39:af:41:f0:f6:d9:44:f2:64:a0:
                    4a:62:c5:ec:c2:63:9a:c7:03:79:3e:f2:91:29:92:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:36:EF:3F:5C:99:96:30:19:C4:9F:F0:CB:03:3A:73:B2:D3:60
            X509v3 Authority Key Identifier:
                keyid:B2:74:57:E2:8B:F0:AE:4B:60:27:6C:0B:39:EE:80:57:91:82:0D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/B27457E28BF0AE4B60276C0B39EE805791820D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B27457E28BF0AE4B60276C0B39EE805791820D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/B27457E28BF0AE4B60276C0B39EE805791820D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:3f:c3:35:14:95:62:2b:8a:4a:bf:c0:8b:e1:60:dd:19:
         9a:7f:02:38:c3:e0:d4:b2:0d:28:12:9e:46:7d:3c:54:ec:91:
         ae:5b:26:67:55:30:28:a0:98:34:e1:c8:07:16:c5:bf:f3:30:
         7a:44:08:a1:c7:39:46:3c:de:91:9f:66:4e:5b:cf:dd:c6:e6:
         b2:15:47:65:c1:52:54:70:16:88:9e:56:ca:db:81:29:7f:bc:
         32:f8:ef:05:80:7c:bf:26:a0:61:fb:e4:37:c4:0c:c8:12:e0:
         c5:eb:d9:2f:14:1e:f7:cd:78:49:56:a7:a2:1a:5d:b9:28:5a:
         e5:25:fd:89:ef:37:8f:04:00:bc:c3:e1:9a:c4:ce:07:23:95:
         af:d0:33:df:0c:6b:13:fd:bc:bc:fe:19:67:32:7d:73:73:68:
         85:f1:2a:ba:68:2f:7b:8e:8c:5e:a4:4e:79:e9:cc:9c:68:29:
         7c:63:1c:e7:73:40:06:d4:c4:52:fd:cd:18:8d:fe:31:c1:27:
         b4:a7:46:a0:5b:22:a5:3a:af:0e:90:eb:34:d2:7e:24:8e:ac:
         0e:22:91:71:bf:59:cd:64:df:a4:98:c0:5e:41:fd:7b:cd:39:
         0b:29:97:6e:78:03:02:0e:41:01:68:b7:09:9b:55:e0:92:49:
         04:8c:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----