Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.mft
File:                     236D256AE314CF2825B4CB4389237A1341E863DE.mft (raw, json)
Hash identifier:          cSg9kTDDJFUBzCqkFAfrcLtg9mLuguvDngjtVKyaCFo=
Subject key identifier:   36:4F:8C:D3:68:77:4C:2E:08:57:DE:EA:76:C9:95:D3:42:F9:73:6E
Authority key identifier: 23:6D:25:6A:E3:14:CF:28:25:B4:CB:43:89:23:7A:13:41:E8:63:DE
Certificate issuer:       /CN=236D256AE314CF2825B4CB4389237A1341E863DE
Certificate serial:       198D570A0ED8A8AE73720B26EEA39CD7F4B44E93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/236D256AE314CF2825B4CB4389237A1341E863DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.mft
Manifest number:          7C
Signing time:             Thu 22 Jun 2023 11:57:07 +0000
Manifest this update:     Thu 22 Jun 2023 11:52:07 +0000
Manifest next update:     Fri 23 Jun 2023 14:37:07 +0000
Files and hashes:         1: 3230302e3134322e3137362e302f32312d3332203d3e203631393439.roa (hash: 4gb/8RwqqmuUupURml3uXgyu7AgAeOuiu6Xe91m/frU=)
                          2: 236D256AE314CF2825B4CB4389237A1341E863DE.crl (hash: SbomJouMxyr+2UH7d1240x/ZQ487g0caU6uz30kDtxk=)
                          3: 323830343a313862383a3a2f33322d313238203d3e203631393439.roa (hash: sZECCJ2QuMglw9l3dHS1go6wSlTyg6OJt1J0srGtEmg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:57:0a:0e:d8:a8:ae:73:72:0b:26:ee:a3:9c:d7:f4:b4:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236D256AE314CF2825B4CB4389237A1341E863DE
        Validity
            Not Before: Jun 22 11:52:07 2023 GMT
            Not After : Jun 23 14:37:07 2023 GMT
        Subject: CN=364F8CD368774C2E0857DEEA76C995D342F9736E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:18:71:98:5c:dc:71:94:4e:67:2a:68:65:
                    c4:84:c0:39:d2:7c:77:a5:b6:c7:4d:0c:22:ce:ef:
                    2d:2c:05:fa:58:fe:a3:37:e9:58:b9:f4:a7:62:cf:
                    a1:3e:0f:61:a0:33:04:bf:53:7a:6e:58:f4:8c:e1:
                    ce:7a:26:51:04:ad:82:fe:da:36:23:7b:c8:99:3d:
                    7b:35:9c:54:2b:0f:16:3a:af:20:0f:e6:83:b2:e0:
                    a9:1d:34:5b:96:86:96:21:8d:e1:21:c4:0d:42:12:
                    ce:52:99:e2:bd:da:93:63:52:e8:18:a9:50:69:3d:
                    65:24:48:17:e4:28:c5:42:14:77:18:10:c0:e4:39:
                    67:77:29:cb:29:b9:ee:36:9f:b9:37:b5:b8:fe:40:
                    61:52:61:29:ad:56:59:cf:98:25:19:f0:ec:d5:00:
                    2f:a8:57:0a:f3:f4:b5:50:6f:a6:a9:5b:92:7f:d9:
                    d7:af:83:5d:28:a4:d2:49:2a:34:ac:6f:59:e7:01:
                    55:5f:05:a7:67:e3:6b:ec:4b:84:22:7a:8c:fc:6b:
                    93:da:4a:e6:52:d4:34:38:ed:75:35:f9:db:d1:1a:
                    d3:0c:68:ca:b9:06:1f:cc:77:4b:d4:9c:8d:4b:05:
                    ba:a5:af:c5:b6:93:40:5d:0d:cf:fe:df:b0:80:e4:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:8C:D3:68:77:4C:2E:08:57:DE:EA:76:C9:95:D3:42:F9:73:6E
            X509v3 Authority Key Identifier:
                keyid:23:6D:25:6A:E3:14:CF:28:25:B4:CB:43:89:23:7A:13:41:E8:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/236D256AE314CF2825B4CB4389237A1341E863DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:eb:c3:71:a7:a9:39:e2:bf:09:fb:7f:d2:63:ef:76:7c:80:
         20:3e:84:1c:c2:d2:d1:42:c2:2a:e7:dd:8a:c5:c9:2d:3d:c8:
         a0:7a:95:03:4d:24:e5:1d:04:1d:59:d7:40:d6:dc:14:ac:e6:
         40:04:1c:64:44:2c:cd:96:21:b2:23:f2:5d:c9:57:46:db:35:
         6e:6f:1f:49:78:a0:fb:79:47:9d:a3:5c:74:03:3c:cf:e1:31:
         0b:b9:50:75:25:7c:61:39:4f:6d:e7:2e:f7:77:f7:9a:ba:bb:
         aa:01:e6:6e:fe:68:a9:10:b4:28:6a:3b:a8:05:31:fe:f1:ec:
         bc:85:25:b2:f9:d3:de:59:19:23:9c:42:3e:af:57:e6:8e:1d:
         7d:29:00:76:6a:b9:89:a8:db:19:7f:d2:ca:eb:e0:58:c5:95:
         4f:0e:99:79:65:5b:b9:24:dc:5a:12:4f:a3:61:b4:e6:86:d0:
         91:a4:2c:0f:3d:4a:a1:42:3d:93:bd:d1:70:c2:f4:6b:0f:4d:
         04:33:26:f7:53:f0:01:71:15:73:ea:05:15:9d:3b:04:0c:4c:
         a6:f7:fa:62:b1:79:b5:5a:a2:c0:25:7d:12:c0:7c:c1:57:41:
         33:57:02:49:d2:77:71:b5:36:5b:d8:fd:56:2f:9c:f6:4b:82:
         5d:04:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----