Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft
File:                     36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft (raw, json)
Hash identifier:          oJKFHR9BMSQgCfzi3kWmiucxSdkI9JVyMcT3MN7jz5I=
Subject key identifier:   1E:0B:4F:2B:D1:E8:B5:5A:97:B5:DA:CC:2C:37:F2:B5:1F:C2:BA:3A
Authority key identifier: 36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A
Certificate issuer:       /CN=36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A
Certificate serial:       73B2888B0A5983ACCA38888A1EB811BDE28DE819
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft
Manifest number:          5E
Signing time:             Wed 29 Nov 2023 05:40:41 +0000
Manifest this update:     Wed 29 Nov 2023 05:35:41 +0000
Manifest next update:     Thu 30 Nov 2023 08:57:41 +0000
Files and hashes:         1: 3139312e362e302e302f32322d3332203d3e20323633353435.roa (hash: mj9BqxowbI+3KT01r9CjIdz9U6Zw7bQQT8Ogwm2xK/0=)
                          2: 323830343a313361633a3a2f33322d313238203d3e20323633353435.roa (hash: UV4zqqYOJn/FW1l+oChmIQ1wYonjjnqAaRtt0PjrWuY=)
                          3: 36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.crl (hash: 5gUH6dEkWHuAcq9PhTICp/tmdYGkK48WfFb9oJhjoP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b2:88:8b:0a:59:83:ac:ca:38:88:8a:1e:b8:11:bd:e2:8d:e8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A
        Validity
            Not Before: Nov 29 05:35:41 2023 GMT
            Not After : Nov 30 08:57:41 2023 GMT
        Subject: CN=1E0B4F2BD1E8B55A97B5DACC2C37F2B51FC2BA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:a0:10:30:1e:73:97:2d:aa:2c:74:71:89:
                    22:ba:9e:88:c5:5e:4d:14:40:e3:d7:8e:b8:cc:2a:
                    a6:4c:de:f2:75:fc:2a:22:03:16:1e:f1:8a:5b:25:
                    da:32:b6:6a:01:2b:27:9d:61:85:1f:80:b2:a7:88:
                    a7:91:2d:f9:94:8b:0e:66:e0:69:02:df:ec:e5:c2:
                    ed:c0:09:59:fc:7c:58:03:b5:bc:06:d6:72:57:a8:
                    0c:30:30:46:a5:9c:11:c6:dc:60:d3:1f:9a:62:55:
                    72:95:fa:e9:22:d2:fe:63:c5:4c:a5:58:28:da:1e:
                    cf:1b:54:8a:b6:14:bc:a7:df:52:26:de:55:61:5e:
                    ce:63:f4:67:35:43:51:00:dd:07:c8:d6:fb:ee:ba:
                    be:59:0f:9e:aa:c2:70:be:da:e0:db:22:ad:d0:73:
                    04:94:28:83:94:9e:12:19:c2:a4:b6:06:be:20:80:
                    fa:12:59:af:93:90:98:96:cd:42:d0:1c:16:64:df:
                    b1:f0:fc:7f:99:a0:11:85:c5:2b:3a:eb:ec:23:30:
                    0c:e2:54:92:04:79:3e:c9:44:e2:da:4d:02:06:1c:
                    e2:37:7a:39:57:c2:ce:96:fa:b4:ba:84:e5:ea:e1:
                    81:c0:f8:78:91:9d:10:17:68:31:ea:42:fb:4a:85:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0B:4F:2B:D1:E8:B5:5A:97:B5:DA:CC:2C:37:F2:B5:1F:C2:BA:3A
            X509v3 Authority Key Identifier:
                keyid:36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:51:63:b6:3c:3b:6d:03:1c:35:03:1e:ca:d2:01:dc:9e:
         33:59:bc:ec:b7:73:dc:3a:d4:03:29:a6:ce:92:22:c8:dd:19:
         02:c0:2a:ee:dd:5e:83:dc:d9:e8:ee:1f:f5:83:85:e3:4a:20:
         0a:d4:bd:a8:43:08:d0:79:5f:cb:4e:77:4a:54:61:d7:c3:72:
         0c:d9:d6:72:98:d8:f4:15:6e:ea:e5:19:77:18:ac:d2:18:fa:
         d1:62:16:cb:09:2f:1d:f2:e4:4e:6a:35:2b:2e:5e:15:c8:e3:
         45:f2:d0:f7:aa:5c:8b:ac:d8:fc:7f:4a:fc:ab:55:f0:8f:56:
         f5:c1:b0:0f:f4:1c:bc:d4:b3:35:f9:1d:ca:45:ac:92:63:3e:
         02:42:be:83:0e:62:52:84:0b:46:b7:b2:61:4e:9e:69:cd:ad:
         62:55:6a:f8:4a:0c:47:8c:b8:13:29:ae:0f:a8:ba:1f:66:6b:
         c1:5e:fd:46:13:59:7d:d3:33:a0:d1:bb:03:f1:07:b2:45:b9:
         4b:af:1a:12:7b:90:9d:e4:53:b3:9a:9d:50:0d:db:4b:50:b2:
         69:f1:9d:27:0a:41:94:7b:09:c7:ce:29:5e:33:af:0b:1e:58:
         e3:f0:83:f0:d2:0a:cf:07:66:db:2c:f7:ca:00:72:5c:08:85:
         a6:1d:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----