Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.mft
File:                     A23F9D523721BD066E73994B585CD51B446971F4.mft (raw, json)
Hash identifier:          dShNIk24C2GnhhJIjaewokDB3dqXC+wEN73HVrkdZlo=
Subject key identifier:   DE:9A:6B:9D:07:73:83:A4:46:41:CB:CD:CD:3A:52:59:32:94:4C:B9
Authority key identifier: A2:3F:9D:52:37:21:BD:06:6E:73:99:4B:58:5C:D5:1B:44:69:71:F4
Certificate issuer:       /CN=A23F9D523721BD066E73994B585CD51B446971F4
Certificate serial:       4DAB40A4B0F15C4F656768F7F74623B5527C397A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23F9D523721BD066E73994B585CD51B446971F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.mft
Manifest number:          94
Signing time:             Tue 15 Aug 2023 18:10:59 +0000
Manifest this update:     Tue 15 Aug 2023 18:05:59 +0000
Manifest next update:     Wed 16 Aug 2023 19:58:59 +0000
Files and hashes:         1: 34352e3136342e3139372e302f32342d3234203d3e20323638363430.roa (hash: 7+av5GfQby0GLApiD5wvL+B1rsiklnjuZIuQMW3Zf3Y=)
                          2: A23F9D523721BD066E73994B585CD51B446971F4.crl (hash: 0Aqhl8yNHbBRh7iepTQ07f8WPNVnJR9lH5D1KGIpXog=)
                          3: 34352e3136342e3139362e302f32342d3234203d3e20323638363430.roa (hash: 5vRkDBSBsOpVc++s35Z+O+F1AyavXKIhmklTuPr/F/M=)
                          4: 34352e3136342e3139382e302f32332d3233203d3e20323638363430.roa (hash: dG1FlE0uzQ3E0Z4iQM6cQD9mvjjD9oMr+DAoFUKigkE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ab:40:a4:b0:f1:5c:4f:65:67:68:f7:f7:46:23:b5:52:7c:39:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A23F9D523721BD066E73994B585CD51B446971F4
        Validity
            Not Before: Aug 15 18:05:59 2023 GMT
            Not After : Aug 16 19:58:59 2023 GMT
        Subject: CN=DE9A6B9D077383A44641CBCDCD3A525932944CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:02:49:d5:a3:fe:75:31:71:cb:a6:1f:77:
                    83:a2:d1:12:bb:57:b0:30:cd:74:0e:7a:e2:11:4a:
                    ca:04:d1:74:ca:0c:72:a6:0a:a9:a1:29:fb:11:0e:
                    d7:73:76:11:12:00:a7:8a:48:f0:b9:9d:a0:31:68:
                    11:21:fe:ee:8d:de:06:01:cd:f3:49:47:a6:43:12:
                    1f:c0:f9:83:fb:ed:00:4e:f7:5d:dc:da:ce:e5:e8:
                    92:76:f3:5d:ea:ae:75:62:4c:20:7b:a1:ed:6e:05:
                    32:74:21:30:03:31:32:63:56:77:a5:e0:0a:50:73:
                    53:3a:66:dc:55:32:b5:30:45:ee:6b:8d:7a:bb:59:
                    97:67:97:eb:07:36:05:15:43:b6:d0:a1:20:41:6c:
                    ea:1f:95:8c:a6:1d:35:8c:ad:32:af:e5:15:40:ec:
                    4c:8a:37:bc:c2:fb:bc:40:b3:c8:05:64:b7:8b:c0:
                    87:27:c3:d4:8a:dd:82:ad:4f:f9:a5:2f:a8:68:12:
                    b3:5d:ac:6f:a0:50:7f:31:49:1b:e5:d1:f7:5d:88:
                    e8:00:0a:09:05:95:24:59:6b:68:27:b3:86:23:1f:
                    ef:f0:20:96:42:ae:f0:86:2a:01:f7:64:2b:9b:22:
                    0d:bf:6c:28:7e:99:bb:c0:4c:9f:cd:07:2c:3f:4d:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9A:6B:9D:07:73:83:A4:46:41:CB:CD:CD:3A:52:59:32:94:4C:B9
            X509v3 Authority Key Identifier:
                keyid:A2:3F:9D:52:37:21:BD:06:6E:73:99:4B:58:5C:D5:1B:44:69:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23F9D523721BD066E73994B585CD51B446971F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/A23F9D523721BD066E73994B585CD51B446971F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:1f:ab:fb:c1:d8:00:b0:a1:bb:61:6b:38:ee:f0:c7:81:
         36:a6:63:81:bf:3d:73:ea:c5:0b:ae:d0:65:be:76:dd:4f:50:
         94:ec:7c:92:cf:46:39:a7:d6:bb:8f:4d:6d:5a:70:b8:11:8a:
         48:52:dd:a9:9f:41:ff:4f:ec:ea:4a:7c:08:c9:68:d6:65:ae:
         7a:cd:c7:c7:f3:14:08:d4:1a:54:f0:b5:13:fd:4e:9e:fe:98:
         29:76:69:7e:51:67:79:39:be:49:69:60:8a:b0:cd:e0:e7:9d:
         25:c8:0b:17:f4:c5:82:fc:ec:6b:2f:c4:b3:ea:48:d4:71:d9:
         45:da:f2:c0:d3:de:5f:eb:bf:6e:55:4d:34:cf:ab:36:70:92:
         75:4f:3e:9b:0d:1a:8e:a6:03:87:ac:82:8a:ff:df:47:c0:42:
         a2:21:8c:21:67:ea:ab:fc:24:7d:a0:1a:43:d7:ed:32:37:1f:
         3e:12:98:d7:75:1d:6a:a4:82:3c:d6:2d:dd:6b:74:90:39:58:
         3b:df:22:9c:73:9e:73:56:12:75:c7:94:c4:25:13:a3:9d:28:
         a4:18:e3:13:fd:7a:64:ca:b8:fa:d7:4d:11:f5:51:66:7c:73:
         7b:0c:2f:40:e4:25:5d:98:1b:60:85:ff:d0:a7:a5:f8:28:96:
         a8:bc:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----