Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft
File:                     9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft (raw, json)
Hash identifier:          eb99KBnY1eA08NWBcS7JBI+5tlTD0df8x82PPWRoIFs=
Subject key identifier:   A7:59:9B:89:8E:B6:4D:D7:CA:3B:55:32:6E:B3:21:F6:02:02:07:8C
Authority key identifier: 9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8
Certificate issuer:       /CN=9D2636456069EFE8481331BCAD68D241BFEAD9E8
Certificate serial:       7524E749360F2F0F788C3354FEE0D62B520FDC1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft
Manifest number:          0181
Signing time:             Thu 10 Aug 2023 16:27:44 +0000
Manifest this update:     Thu 10 Aug 2023 16:22:44 +0000
Manifest next update:     Fri 11 Aug 2023 18:31:44 +0000
Files and hashes:         1: 323830343a363661383a3a2f33322d3438203d3e20323639353734.roa (hash: C52RZY9onMHt3wxQGOUJiCyRzWPXdLgfOG6BrG+SrYY=)
                          2: 9D2636456069EFE8481331BCAD68D241BFEAD9E8.crl (hash: Vou4CQF6GgTkc3VjXapO/hxLqgzBQZL4fsgIpspxcHs=)
                          3: 34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (hash: +PEOjjtJMICWyOvedd2IdgOetW6haQo14tywgVZ/WhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:e7:49:36:0f:2f:0f:78:8c:33:54:fe:e0:d6:2b:52:0f:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D2636456069EFE8481331BCAD68D241BFEAD9E8
        Validity
            Not Before: Aug 10 16:22:44 2023 GMT
            Not After : Aug 11 18:31:44 2023 GMT
        Subject: CN=A7599B898EB64DD7CA3B55326EB321F60202078C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:25:c6:44:9e:46:70:68:52:2b:44:e5:b2:
                    0d:da:08:d3:5d:b3:59:16:20:f1:b0:34:19:82:bf:
                    fd:5a:d8:02:39:f5:2e:8d:8f:c9:02:08:f3:49:a0:
                    15:2a:98:3b:76:d1:65:29:10:b9:27:bf:95:7e:1e:
                    3b:d5:9c:69:f0:f2:8e:1c:6e:83:e5:05:28:07:f9:
                    25:d1:de:c6:bf:87:d3:ec:52:89:48:17:f3:43:57:
                    b8:d0:7b:78:fd:06:93:e2:74:bf:d0:61:a4:1c:10:
                    e4:5d:10:21:38:3e:89:0b:4a:be:38:cc:13:1b:37:
                    51:a2:4c:c0:21:3f:05:0a:80:05:4c:aa:a3:c7:2b:
                    99:3b:ec:45:dc:31:e1:42:24:ed:cd:a5:5f:c3:26:
                    f7:cc:a2:55:42:da:42:48:c6:1b:77:a1:5f:cb:0f:
                    56:30:84:f9:44:07:bf:4a:f1:fe:f0:fc:4e:49:6c:
                    ce:30:ad:a1:73:08:af:a1:57:69:98:8e:38:28:c7:
                    73:64:20:6c:16:8f:d7:ed:03:ce:c3:a3:eb:b8:46:
                    1f:13:93:fa:0d:b1:7c:61:33:28:a7:17:1c:c2:7e:
                    93:63:84:0a:d4:e2:40:b3:ab:28:0a:c6:b0:50:4d:
                    20:d5:9d:91:a2:68:5a:ba:b3:66:1f:f5:4b:8c:67:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:9B:89:8E:B6:4D:D7:CA:3B:55:32:6E:B3:21:F6:02:02:07:8C
            X509v3 Authority Key Identifier:
                keyid:9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:4d:19:d5:11:e4:f4:ab:9f:b0:df:8d:99:9d:8f:d3:71:
         12:aa:69:a4:1f:1c:a8:cf:94:0e:55:11:60:30:b0:e5:fe:7c:
         7a:8d:ab:77:be:d2:80:ae:1c:bd:12:10:1e:9e:b2:1e:ff:fa:
         da:47:57:b8:b9:25:9f:bc:7a:14:b8:57:32:d7:72:3e:ad:7f:
         f0:0e:cd:dd:a2:67:ed:62:2d:06:1e:21:8b:b9:a4:32:19:97:
         ef:87:3c:c6:07:07:d3:8d:5e:de:75:86:cb:23:b3:e7:6e:97:
         86:f0:3f:2a:22:ca:12:64:1e:5f:aa:c2:72:ef:73:dd:05:04:
         e8:be:73:07:86:cf:30:d7:45:87:c3:fc:dc:3e:04:51:6e:fa:
         1f:c1:ae:74:aa:7a:3a:64:01:96:fd:40:ea:11:45:30:b7:30:
         f2:e8:a6:99:92:7a:34:f3:dd:8e:c3:46:07:1f:07:ae:23:de:
         22:51:f1:ba:07:2f:83:e3:67:19:95:05:e6:a5:a5:ab:72:92:
         6a:42:69:68:64:5b:f6:f3:16:97:08:a9:29:0f:0f:93:9e:7f:
         c6:a4:03:41:da:6d:31:6d:a9:ad:dc:e4:6b:00:67:0e:1f:31:
         80:7f:e4:76:59:4e:55:48:f9:f7:f9:af:6d:3f:21:e9:55:12:
         15:b6:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----