Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.mft
File:                     91A109306203E9750B3E069A581DA2CCB36E009F.mft (raw, json)
Hash identifier:          Eh3psTvfiQgj0fhukd0Ms5s8oYkXse+YYuzCMcX2gj8=
Subject key identifier:   C0:6A:01:50:15:D4:5A:54:AD:F8:F2:D1:6B:57:78:F8:7E:B8:0C:50
Authority key identifier: 91:A1:09:30:62:03:E9:75:0B:3E:06:9A:58:1D:A2:CC:B3:6E:00:9F
Certificate issuer:       /CN=91A109306203E9750B3E069A581DA2CCB36E009F
Certificate serial:       6BDD314D8875F5A8856EEEDC5D4161C5368A40FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A109306203E9750B3E069A581DA2CCB36E009F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.mft
Manifest number:          2E
Signing time:             Sat 18 Mar 2023 01:34:05 +0000
Manifest this update:     Sat 18 Mar 2023 01:29:05 +0000
Manifest next update:     Sun 19 Mar 2023 05:07:05 +0000
Files and hashes:         1: 91A109306203E9750B3E069A581DA2CCB36E009F.crl (hash: aonX+3RP+CV1P2ld66sOD3qitSA7cwDHpfD/YLwBoSY=)
                          2: 3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (hash: Stw+W9bBRxPjTFlhpBRhO+VJng0G5QA0g7ODAjBOYEI=)
                          3: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: 0LXxAKrnFAvmy6tA4hMUBPyE8aqVLckFrvHN1lM4T3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dd:31:4d:88:75:f5:a8:85:6e:ee:dc:5d:41:61:c5:36:8a:40:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A109306203E9750B3E069A581DA2CCB36E009F
        Validity
            Not Before: Mar 18 01:29:05 2023 GMT
            Not After : Mar 19 05:07:05 2023 GMT
        Subject: CN=C06A015015D45A54ADF8F2D16B5778F87EB80C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:6e:9e:65:d2:b1:bd:e6:25:3b:0b:ae:35:
                    b5:1c:4c:f5:ba:1b:ff:8f:ec:5c:fe:2e:79:84:3e:
                    06:00:b5:6c:6c:30:3b:8d:2b:1d:1b:26:42:08:60:
                    f2:e3:86:f1:23:0a:a0:05:a7:d4:d1:9c:fd:96:2f:
                    91:b8:8f:04:bd:27:63:62:45:95:ee:bd:bc:fe:fd:
                    fd:88:f5:4e:cc:6f:b8:5b:cc:19:0c:ee:c7:c4:da:
                    73:b6:99:90:1a:22:d7:68:01:01:bb:1b:f1:8a:ab:
                    d8:97:45:41:99:8a:f8:d0:e7:75:49:e2:7c:8c:87:
                    df:3f:7b:9a:b7:b1:c0:3b:26:65:1b:af:e0:79:e2:
                    8b:e7:da:4f:f5:39:d6:3c:cf:a1:6e:3e:eb:fc:62:
                    6e:9f:a7:f1:ac:38:fd:dc:8c:4b:ad:73:61:ba:a3:
                    c1:42:da:5c:b4:78:6a:2f:ea:4b:df:16:4b:df:84:
                    0a:03:fc:44:d4:8e:e8:07:e7:84:9e:cc:77:c3:d2:
                    eb:be:f0:14:68:e0:83:39:14:96:26:f9:0a:61:91:
                    6e:c7:2f:b5:f5:8b:f6:5c:ba:e8:82:b5:8d:82:46:
                    36:7c:48:c9:4a:6c:e5:a9:42:0c:93:3d:b6:7c:d9:
                    ff:b0:cd:b4:b8:44:ef:4c:5b:75:3b:ce:2f:d5:75:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6A:01:50:15:D4:5A:54:AD:F8:F2:D1:6B:57:78:F8:7E:B8:0C:50
            X509v3 Authority Key Identifier:
                keyid:91:A1:09:30:62:03:E9:75:0B:3E:06:9A:58:1D:A2:CC:B3:6E:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91A109306203E9750B3E069A581DA2CCB36E009F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:8e:c0:8e:ce:a9:8a:2f:d4:dc:f6:3c:04:30:69:a4:3f:
         8f:5e:b9:88:88:b9:0c:68:f5:13:86:74:8c:66:13:87:48:af:
         29:19:90:34:62:8b:c0:69:af:4a:68:62:17:08:fe:2f:f3:dc:
         f7:ef:57:46:8c:38:73:f9:37:8c:b0:b3:9f:33:05:cf:26:81:
         5e:0d:17:e4:7b:03:ed:31:c4:50:04:5c:f7:87:10:37:dc:d1:
         f1:67:49:3d:b3:65:59:0a:42:44:a4:28:2f:e6:0e:25:db:51:
         7f:c0:46:ed:96:26:a5:9e:7a:54:70:77:ff:62:1f:86:a3:3e:
         e6:8d:79:d5:64:74:86:99:2f:f2:75:aa:8f:40:0d:b6:b9:23:
         55:a7:15:ed:9a:b8:0d:6b:06:9f:4c:8f:21:ea:08:72:b2:ac:
         54:09:46:15:03:fc:80:e7:e6:28:df:71:d8:c4:ea:37:97:57:
         a8:40:a5:ee:23:a6:0e:c1:42:13:e6:40:9e:d8:30:1e:c3:61:
         33:3b:d4:35:ca:4d:e5:27:2b:16:3f:72:f5:0c:78:d3:69:a6:
         cc:fb:2b:c8:9b:c8:40:1e:ef:ad:f9:90:c0:40:56:b7:ff:3d:
         1d:57:cf:af:71:05:ae:ae:14:19:10:cf:d2:9c:39:25:89:c6:
         92:dd:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----