Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft
File:                     86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft (raw, json)
Hash identifier:          EAhSOl+ONOykZkiBm5z0EwGnyzaDRbyPCb7jdLp/W7w=
Subject key identifier:   50:07:6D:29:31:01:5C:84:82:87:A6:A6:40:2C:57:5C:A5:EA:C9:4F
Authority key identifier: 86:A7:72:4E:37:C4:CF:9F:B7:00:2E:D5:38:1C:76:9A:74:ED:C5:99
Certificate issuer:       /CN=86A7724E37C4CF9FB7002ED5381C769A74EDC599
Certificate serial:       507485C5B1E15ECD08BB3EB72F6FC8371DCC70B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft
Manifest number:          32
Signing time:             Wed 18 May 2022 11:10:00 +0000
Manifest this update:     Wed 18 May 2022 11:05:00 +0000
Manifest next update:     Thu 19 May 2022 13:54:00 +0000
Files and hashes:         1: 86A7724E37C4CF9FB7002ED5381C769A74EDC599.crl (hash: VmZab6REt0rYIbj+npakQl7lH0CNXX4u0G4VcYB+RFo=)
                          2: 323830343a343266633a3a2f33322d3438203d3e20323637353431.roa (hash: pJmd0lD5fhs+eseLlxMktN/39kDf9gM9sbGqFkyW/Mc=)
                          3: 3230312e3138322e3232302e302f32322d3234203d3e20323637353431.roa (hash: Obnx6T7BHGH0qmWin/tJa51TCBNxnhOP/qPFyNrjSA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:85:c5:b1:e1:5e:cd:08:bb:3e:b7:2f:6f:c8:37:1d:cc:70:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A7724E37C4CF9FB7002ED5381C769A74EDC599
        Validity
            Not Before: May 18 11:05:00 2022 GMT
            Not After : May 19 13:54:00 2022 GMT
        Subject: CN=50076D2931015C848287A6A6402C575CA5EAC94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:9d:23:76:9f:00:8c:5f:c0:b3:c0:1c:2e:
                    21:e6:0d:75:b9:5b:0c:27:75:ab:25:1c:84:0c:28:
                    4f:2a:07:94:bc:c8:80:45:8b:8d:c2:18:12:c5:30:
                    f5:95:33:3c:c1:e8:e2:c2:65:4a:db:5d:3c:79:f0:
                    16:33:24:ad:7c:54:59:5c:d8:89:57:95:76:08:8f:
                    ac:4b:7d:9e:5c:71:3d:9a:b5:c5:b0:a2:48:e8:6a:
                    85:dc:a8:45:32:d5:97:30:20:36:d6:f2:ec:60:d8:
                    f3:33:a8:90:c8:74:78:0e:68:a1:d0:96:d3:3a:39:
                    02:18:f2:64:53:72:f4:b2:de:13:5b:31:ca:fa:5c:
                    17:95:eb:8e:25:c1:3d:18:40:b6:b2:5f:e5:54:2e:
                    97:d2:74:39:03:f8:7d:61:26:1b:b3:b9:ce:b3:25:
                    d9:32:de:ce:d1:34:f3:12:8c:6d:ea:be:96:25:bd:
                    77:83:98:1c:c3:1a:0c:bf:ef:c2:18:27:f9:f6:96:
                    df:23:c2:c0:52:94:22:bc:aa:e5:53:ef:f1:5f:cf:
                    8d:3b:f6:d4:02:6e:ea:93:3f:7c:0e:70:14:8f:a1:
                    e3:17:5a:f9:eb:7c:e2:40:16:be:75:ad:86:df:b9:
                    49:03:a7:f9:42:52:27:06:dd:57:4a:bc:6e:60:82:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:6D:29:31:01:5C:84:82:87:A6:A6:40:2C:57:5C:A5:EA:C9:4F
            X509v3 Authority Key Identifier:
                keyid:86:A7:72:4E:37:C4:CF:9F:B7:00:2E:D5:38:1C:76:9A:74:ED:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:de:48:b7:e0:51:02:de:3b:e6:fc:0f:8d:3e:8f:53:40:
         47:6d:81:72:73:1b:9a:3a:f0:a8:ff:af:15:1b:99:79:b7:62:
         eb:71:b7:e8:b1:02:f4:1b:ad:9d:11:90:e9:6b:2f:8c:ce:3a:
         7c:cf:8f:a1:ec:1b:00:78:aa:a2:47:46:50:cc:52:77:15:a1:
         ae:b7:39:b7:2d:87:b4:4a:2b:ed:ed:b0:34:02:ae:ff:f6:aa:
         38:13:5f:9c:52:ce:56:53:c2:92:05:dc:2f:d3:46:0e:a9:1d:
         c3:05:04:6d:e9:4a:f4:f7:44:df:27:f4:06:9f:86:7f:65:07:
         df:8a:93:32:61:50:b3:57:a5:55:e5:bc:2a:04:ba:83:7d:ef:
         ac:fd:35:26:e2:a7:14:d7:94:62:e1:b7:4d:21:6d:20:be:06:
         4c:3b:eb:a5:ee:51:78:a1:a9:85:49:b6:73:21:b0:a8:3e:94:
         bc:dd:27:6d:ce:8f:34:5c:94:d1:46:c5:e3:64:e5:73:c8:68:
         dd:6d:e7:a5:b8:f5:0d:4f:47:d7:7d:0a:40:c9:4f:f8:d4:02:
         a2:6c:f8:8d:23:f6:da:e4:0c:c0:74:80:f1:f0:74:5e:47:11:
         8a:07:91:8f:67:a7:89:02:76:a3:52:ff:55:65:7d:c9:c1:a8:
         d6:79:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----