Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft
File:                     BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft (raw, json)
Hash identifier:          /VlxJ3pLAd+NoJzJXs30VA50alyzoE214fqMgqVy4G4=
Subject key identifier:   F4:ED:1E:B3:B4:C0:AC:5B:A7:60:1E:83:10:48:1C:34:34:1D:17:36
Authority key identifier: BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72
Certificate issuer:       /CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
Certificate serial:       19F1327608BF3C0F210E667010428899950FAEB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft
Manifest number:          90
Signing time:             Tue 09 Jul 2024 10:31:28 +0000
Manifest this update:     Tue 09 Jul 2024 10:26:28 +0000
Manifest next update:     Wed 10 Jul 2024 12:12:28 +0000
Files and hashes:         1: 34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa (hash: tn2NypTNFPPblkHVP0n556GS/nUf/MNCmDXnVmyU2lk=)
                          2: 323830343a346364343a3a2f33322d3438203d3e20323637333935.roa (hash: bHP+EusVtEKflWKidFL4WOnxQr6h0rtfwuAamqdAHQI=)
                          3: BDA2C36D7477B1F475B472C3C370EAC274EA0272.crl (hash: kTIC+yVpCMN4LhUUp7q7yV8091QoWO48aMHzqCdnnrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f1:32:76:08:bf:3c:0f:21:0e:66:70:10:42:88:99:95:0f:ae:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
        Validity
            Not Before: Jul  9 10:26:28 2024 GMT
            Not After : Jul 10 12:12:28 2024 GMT
        Subject: CN=F4ED1EB3B4C0AC5BA7601E8310481C34341D1736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:c1:1b:ac:80:e3:95:1d:e6:89:dd:e8:99:
                    f8:dc:8c:84:9d:12:73:ff:f2:79:91:f0:e7:b5:72:
                    7c:1a:9d:0b:ba:cc:12:c5:95:4a:b8:ec:f4:48:99:
                    7b:51:23:c1:d8:b8:7b:5a:d7:49:a5:22:bb:d9:a5:
                    3d:74:a6:c9:78:18:7b:be:0a:c5:a1:c5:31:47:ca:
                    33:c9:e8:43:ef:3e:ad:cf:51:55:7d:c0:ab:92:7b:
                    0d:12:06:e2:2e:d5:97:d8:01:b8:32:1d:bb:a5:af:
                    0d:ee:51:90:69:5d:52:c6:30:d6:43:37:08:1c:d8:
                    a0:b0:8d:b0:57:bd:ad:b0:57:28:dc:f9:c3:24:71:
                    c6:3d:0f:be:15:24:b1:eb:63:a1:4e:45:55:b4:8b:
                    35:ba:99:59:50:08:bb:94:8f:2e:93:e0:f6:4b:e3:
                    64:86:73:ce:31:20:1c:e4:f4:09:7d:16:89:cc:e9:
                    0d:66:58:b2:21:11:ac:45:28:b4:86:04:09:e4:64:
                    5b:53:41:2c:99:31:cf:29:71:f3:42:24:1e:9a:50:
                    cd:63:21:03:92:56:4e:32:e4:04:6a:93:85:af:2b:
                    67:bd:4e:aa:ea:6c:af:2f:a0:be:4a:6b:97:fc:0b:
                    56:03:54:16:74:68:b6:73:fd:68:02:3a:fd:f4:7b:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:1E:B3:B4:C0:AC:5B:A7:60:1E:83:10:48:1C:34:34:1D:17:36
            X509v3 Authority Key Identifier:
                keyid:BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:b2:82:f9:d0:1f:04:41:81:70:18:b9:fe:88:fa:b3:21:
         35:e4:2a:3b:3d:39:a1:7f:e4:44:bb:4d:1d:a8:9d:15:7d:50:
         42:2e:e2:a2:fd:f1:d0:d5:42:16:ff:66:c0:e7:9b:ed:0d:b3:
         df:29:53:f2:06:c6:c4:3b:b0:33:ab:ad:09:92:03:da:d4:b0:
         34:8d:b8:4d:8c:a3:be:a2:ce:85:22:35:66:d5:11:50:bd:8c:
         2f:cc:f6:bb:65:00:81:2f:4a:8e:71:6d:35:62:f7:d5:83:d4:
         93:02:a7:06:cb:2b:d5:c8:56:9c:aa:80:8b:5f:b2:6a:fa:c6:
         64:51:e8:7f:4c:02:38:9b:e0:89:03:77:00:7d:c5:1f:7e:de:
         b0:15:fa:7e:24:b9:71:72:cc:2c:c6:a5:4a:e9:bd:5e:c1:20:
         6d:98:48:28:2c:eb:e7:f2:11:8b:15:f8:83:a7:13:fe:9c:20:
         58:68:3c:49:5a:17:5a:03:eb:2a:7a:f2:87:48:58:f6:bd:ac:
         95:72:5c:d2:1d:1e:82:35:29:bb:24:3d:b9:0e:25:28:90:c2:
         93:d0:a5:83:f6:a0:00:2d:63:5c:be:ca:a9:32:33:28:6c:cc:
         d4:b3:9a:87:06:32:51:fc:03:06:36:ba:df:b9:4d:19:13:00:
         5f:11:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----