Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.mft
File:                     86F6097D5D41474A984E795588A70420B258E351.mft (raw, json)
Hash identifier:          DcUden++fS0CYuEv2aULES4FWwuN0TkHUIhRelFzO3M=
Subject key identifier:   89:37:28:00:D3:82:BF:1F:52:07:F3:99:97:31:6F:A7:89:32:39:E5
Authority key identifier: 86:F6:09:7D:5D:41:47:4A:98:4E:79:55:88:A7:04:20:B2:58:E3:51
Certificate issuer:       /CN=86F6097D5D41474A984E795588A70420B258E351
Certificate serial:       14CC7AE604E1E7699ABBA25EE96A1C6A070B66EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F6097D5D41474A984E795588A70420B258E351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.mft
Manifest number:          0372
Signing time:             Sun 14 Apr 2024 18:57:00 +0000
Manifest this update:     Sun 14 Apr 2024 18:52:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:09:00 +0000
Files and hashes:         1: 86F6097D5D41474A984E795588A70420B258E351.crl (hash: GTI3JP0hkRn+DmAhl5cgxi4TxgjOCQZN1//9wqiXihI=)
                          2: 323830343a363939383a3a2f33322d3333203d3e20323632353734.roa (hash: Qo1ZtlmopeQrumq9ZbfxN0EvFzPRcaJewKFIoxlNN0Y=)
                          3: 3137372e37332e3232342e302f32322d3234203d3e20323632353734.roa (hash: UBmXW90/bV9dR2LoNgML2YnqiHZMOd63TeD6SyCnZOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:7a:e6:04:e1:e7:69:9a:bb:a2:5e:e9:6a:1c:6a:07:0b:66:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F6097D5D41474A984E795588A70420B258E351
        Validity
            Not Before: Apr 14 18:52:00 2024 GMT
            Not After : Apr 15 20:09:00 2024 GMT
        Subject: CN=89372800D382BF1F5207F39997316FA7893239E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:97:0e:b4:68:55:64:d4:54:59:23:66:bf:
                    20:a5:df:4f:b9:1a:53:e7:c5:03:06:8a:59:7e:94:
                    c7:e2:f8:fd:b3:d8:27:52:2f:60:cf:74:67:7f:af:
                    0a:26:e8:0e:61:ed:5c:3a:75:df:a6:dd:ae:18:6c:
                    74:fe:fc:95:ac:d1:18:c4:31:37:3d:53:c2:66:5a:
                    e2:a6:b3:0f:72:78:7a:98:e0:ec:f7:df:96:68:0d:
                    ba:97:1a:c5:ea:8d:e8:80:54:5a:53:4a:55:fc:a7:
                    dc:9a:da:fa:0f:22:d5:90:cb:98:8e:f9:51:5b:71:
                    8a:77:0a:6d:a0:a6:1d:38:c8:e3:50:df:8c:4b:52:
                    26:80:f4:17:9d:4d:5c:90:94:64:e3:18:33:ce:8a:
                    92:62:91:f9:3c:c0:34:c5:3d:c2:90:a1:ce:6d:21:
                    ea:6f:a7:e1:b7:46:3c:d7:f7:d8:60:5d:75:58:de:
                    0b:df:dc:57:fa:bb:84:e6:98:3f:2d:44:b8:d5:a7:
                    e0:69:d1:f5:f1:ee:31:f7:93:df:2d:90:9a:7f:c3:
                    31:26:49:68:7e:4f:2e:34:7f:39:de:b4:55:38:41:
                    74:1e:9e:bb:69:45:df:56:f8:bf:48:e2:07:c1:cc:
                    80:e5:5a:4b:9e:e1:78:e5:54:4b:53:68:e5:19:4c:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:28:00:D3:82:BF:1F:52:07:F3:99:97:31:6F:A7:89:32:39:E5
            X509v3 Authority Key Identifier:
                keyid:86:F6:09:7D:5D:41:47:4A:98:4E:79:55:88:A7:04:20:B2:58:E3:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F6097D5D41474A984E795588A70420B258E351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:dc:b7:22:28:e9:25:64:fe:6f:04:5c:0a:68:b3:9b:55:
         7b:0b:43:18:01:83:e4:71:e3:fd:15:9c:62:9c:ee:d9:b3:54:
         11:a1:f4:ac:64:c6:45:c8:8e:a1:92:1c:cd:48:80:c9:f8:70:
         68:39:2f:5a:b3:26:90:4a:42:b4:bf:f5:22:33:0e:47:49:94:
         57:aa:6b:92:5a:8c:c3:fc:4a:92:c8:15:d8:1d:34:f0:1d:58:
         38:47:e4:fc:a1:67:30:a0:c0:1e:aa:58:6f:fa:4d:5c:d5:0f:
         25:c5:8d:a1:17:6a:53:de:68:3b:d7:76:c8:c5:08:8d:15:6b:
         5f:0c:52:ef:e4:4e:1c:71:b6:88:b9:4d:38:31:b7:0b:a9:6b:
         ed:93:ab:79:5c:28:42:25:29:53:e8:38:8e:02:da:60:69:23:
         82:2e:93:3d:f5:e7:90:1f:96:ab:43:30:1e:3f:73:d5:b6:49:
         c2:f6:d0:9e:12:18:1f:5c:a7:2e:26:d0:a9:3c:8f:b9:00:9c:
         89:59:cb:33:2a:0c:cf:67:03:7d:24:38:18:1c:3c:33:db:07:
         d2:ca:97:80:11:2f:62:6f:6b:8b:f2:71:d6:db:a7:91:32:d1:
         87:27:1b:78:cf:c8:d5:a4:63:26:24:ca:74:2b:c5:be:af:5e:
         7a:e6:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----