Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.mft
File:                     2B36A526D06D86847A393BEA10A2E899D81E57EE.mft (raw, json)
Hash identifier:          sKJHrurWRrK7se0fQfCpmcOMt+BNYGBXWIucfqzOkc8=
Subject key identifier:   75:72:6C:D2:7E:2B:74:40:1D:89:BC:75:61:F0:2D:D9:80:35:63:1E
Authority key identifier: 2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE
Certificate issuer:       /CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
Certificate serial:       07DC3E7AF240C7DF8481742B3969AC3F7F83BFB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.mft
Manifest number:          16
Signing time:             Wed 25 Oct 2023 11:12:12 +0000
Manifest this update:     Wed 25 Oct 2023 11:07:12 +0000
Manifest next update:     Thu 26 Oct 2023 14:20:12 +0000
Files and hashes:         1: 2B36A526D06D86847A393BEA10A2E899D81E57EE.crl (hash: aXSo4j1biaIFBF3sqgJM2Hjyavx1iO/4wyvAyNm/B6o=)
                          2: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: YsnDad9jjTveyfGC/v5uuKZmwCdpm6Uv3iFXCcbzOgY=)
                          3: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: 1PgGERrQW7S2cNhHLI4+lbbZptmQDKlE+AUj5En+Y3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:dc:3e:7a:f2:40:c7:df:84:81:74:2b:39:69:ac:3f:7f:83:bf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
        Validity
            Not Before: Oct 25 11:07:12 2023 GMT
            Not After : Oct 26 14:20:12 2023 GMT
        Subject: CN=75726CD27E2B74401D89BC7561F02DD98035631E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:5b:f0:9a:b2:73:8e:2a:88:c3:73:4c:e2:
                    dd:35:a0:36:0b:89:5d:54:45:22:d4:a3:f3:43:e2:
                    84:cc:91:9b:0f:6a:ad:3a:e0:91:58:66:cd:c0:c4:
                    ff:b0:71:2c:08:25:00:73:b3:2f:24:76:20:49:f8:
                    49:ac:66:97:57:5a:a9:e0:4d:53:06:ab:4e:b3:8a:
                    17:cf:7a:e9:56:83:da:6b:79:30:d5:1a:fe:36:c5:
                    91:28:49:43:3a:fe:42:db:f8:58:29:19:04:54:af:
                    c4:07:d5:f1:ae:bf:60:5a:ab:bc:89:4b:6f:4c:d2:
                    32:ed:01:5d:13:ec:14:e6:c4:33:1d:c1:85:cc:98:
                    22:8b:d5:e6:92:74:d9:14:9f:ba:90:d3:1f:84:ba:
                    cc:c5:01:09:34:a3:85:ef:49:9b:00:0b:25:31:a2:
                    19:1c:6a:5a:ad:40:47:87:fc:4a:22:d5:91:51:6b:
                    b2:2b:5d:25:09:9b:78:67:92:9d:93:b8:ab:df:56:
                    15:07:60:e4:b9:03:e8:71:e4:d3:3e:42:97:92:ea:
                    6b:53:9f:41:b7:00:35:bb:02:88:a9:16:3b:52:ce:
                    5c:df:2b:62:8e:79:d4:e7:80:79:ea:62:8a:2e:e1:
                    89:75:f2:99:f8:a9:1a:db:c5:d6:b3:04:58:5c:dd:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:6C:D2:7E:2B:74:40:1D:89:BC:75:61:F0:2D:D9:80:35:63:1E
            X509v3 Authority Key Identifier:
                keyid:2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:55:f8:6f:63:12:76:84:0d:dd:29:01:29:2a:f2:67:00:
         06:db:19:61:b8:7b:12:f5:90:61:65:19:30:27:27:1a:70:5c:
         48:7d:d9:50:dc:98:ed:be:16:7f:5e:08:1d:b3:12:6a:0a:9d:
         a0:a3:ae:b5:5f:81:12:29:31:79:c0:72:36:fe:46:e0:1e:29:
         26:63:d1:25:79:6f:4d:a7:53:e1:c9:0b:00:5d:56:69:cb:79:
         7b:7f:84:6a:d4:e1:c9:c3:41:3e:9a:0f:03:bc:10:77:97:58:
         1d:e0:85:6b:4d:f9:b8:49:e6:21:47:18:a7:c9:96:f6:8e:d6:
         29:1c:49:76:92:8c:c6:a4:a2:37:17:24:66:c7:1c:71:da:41:
         11:03:dc:d4:b5:23:38:4a:39:56:fb:06:04:00:3a:b3:4c:2e:
         f5:8f:d0:71:11:56:02:d3:93:b5:16:96:c8:2f:11:ef:b8:d2:
         04:eb:47:b7:ba:9e:cf:f6:51:d0:b0:9b:51:8b:48:7a:6e:bc:
         86:fc:91:84:d7:f3:60:e2:f0:29:46:74:c7:9a:7b:65:5e:c2:
         13:58:8f:f1:08:bc:4a:cd:dc:3c:13:0b:0c:de:43:2f:77:2d:
         f0:17:b4:84:f2:fb:60:0d:5a:b8:47:70:62:de:72:89:5d:4f:
         82:20:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----