Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft
File:                     91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft (raw, json)
Hash identifier:          QElHCMWt3FIC31eWjbLY+GllSmh0fXUQgq4+9nzZsvE=
Subject key identifier:   9C:55:53:B7:8D:F8:56:7D:9D:95:82:A0:00:DD:C0:58:60:88:20:00
Authority key identifier: 91:BD:15:EB:17:56:91:9E:88:F6:D9:C2:E4:F6:F4:F7:8D:85:33:20
Certificate issuer:       /CN=91BD15EB1756919E88F6D9C2E4F6F4F78D853320
Certificate serial:       257E6D60BCF2EE9E4A04B4A03470096DE14CE266
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft
Manifest number:          DA
Signing time:             Thu 06 Jul 2023 16:45:46 +0000
Manifest this update:     Thu 06 Jul 2023 16:40:46 +0000
Manifest next update:     Fri 07 Jul 2023 19:24:46 +0000
Files and hashes:         1: 323830343a316235343a343030303a3a2f33342d3334203d3e203631373232.roa (hash: IOfH4YNAAI7DO2Bnf1sRWJ8cngVaVvDJX2kqEGuPu/U=)
                          2: 3133312e37322e33382e302f32342d3234203d3e203631373232.roa (hash: wZZDSMhHLwbnHUgKFOHcqtBkwR3bVJJrW6oEn2ccxTU=)
                          3: 3133312e37322e33372e302f32342d3234203d3e203631373232.roa (hash: PC3r5RVw0tqYBkkYsdKBJzCqM6A+sJcINc32wHYIEys=)
                          4: 3133312e37322e33362e302f32342d3234203d3e203631373232.roa (hash: OXN1ICt0nJNSxLxThFU8EHig8JHPI3c9MT5UrJtuTrE=)
                          5: 91BD15EB1756919E88F6D9C2E4F6F4F78D853320.crl (hash: r8BJxDaNEIGFT7loO9Ik9yknE3TGGwkppLlbdN0VB5A=)
                          6: 3133312e37322e33392e302f32342d3234203d3e203631373232.roa (hash: Z5+wFyYMEG8izU/L3vQNYGY5XSThkx3j2uqHzvzGHPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:6d:60:bc:f2:ee:9e:4a:04:b4:a0:34:70:09:6d:e1:4c:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BD15EB1756919E88F6D9C2E4F6F4F78D853320
        Validity
            Not Before: Jul  6 16:40:46 2023 GMT
            Not After : Jul  7 19:24:46 2023 GMT
        Subject: CN=9C5553B78DF8567D9D9582A000DDC05860882000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:f8:ed:ba:ad:f5:53:db:43:0b:e1:20:5c:
                    19:a1:10:36:e9:7c:bc:4f:22:5e:da:5d:5a:67:1f:
                    b0:74:0a:8f:2b:b8:ab:07:a8:12:c0:bd:a3:e2:5e:
                    e1:07:b4:06:29:1d:8c:d7:22:ed:0c:06:e6:13:15:
                    c9:b1:1a:fa:bb:f7:d9:41:a9:f1:8c:2e:c2:2c:90:
                    29:75:8f:22:fb:e4:8b:56:a6:6f:de:3e:a9:f3:32:
                    34:69:f7:2a:6e:0c:1e:7b:7f:30:39:af:a4:78:ea:
                    23:75:47:84:11:68:d4:b0:cc:1d:57:f3:8e:cb:15:
                    34:e5:dd:29:c0:ee:b3:fb:47:7b:bf:3f:8e:61:cb:
                    1b:f4:f7:c8:0c:ff:00:4f:d6:22:95:e3:ea:a1:21:
                    8b:ba:a3:8b:20:2d:08:f7:d2:b9:e5:81:42:f5:17:
                    d4:a9:a9:b1:85:0e:d1:71:93:4f:75:2c:bd:af:d4:
                    1d:e2:c6:fc:d7:31:0b:34:66:25:e2:57:b8:6b:6c:
                    63:0b:b5:f3:f8:48:ac:ce:00:14:f7:80:a0:f7:46:
                    1c:bf:fd:f4:17:2e:6f:53:ef:87:99:da:6f:00:b8:
                    e9:98:90:6c:fb:0a:b8:94:9e:a3:60:a1:d1:0c:ef:
                    f0:07:2e:ec:43:35:d2:44:f6:5e:3f:0e:bf:46:15:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:53:B7:8D:F8:56:7D:9D:95:82:A0:00:DD:C0:58:60:88:20:00
            X509v3 Authority Key Identifier:
                keyid:91:BD:15:EB:17:56:91:9E:88:F6:D9:C2:E4:F6:F4:F7:8D:85:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:44:61:55:17:2e:2a:44:0d:fc:f1:6a:21:79:02:7e:c0:db:
         38:cc:33:c2:7e:47:84:fb:8b:d2:fa:7e:28:fd:84:ff:86:f5:
         fb:56:d4:a5:46:31:1b:1c:db:81:6e:c5:7c:80:2e:ed:67:ad:
         7c:e7:74:3a:60:9e:4d:bc:af:fa:a9:96:93:11:53:e3:27:9e:
         9d:08:96:a3:29:6e:c5:35:7c:c4:0b:94:41:55:e1:54:91:70:
         78:ed:cb:1f:7a:c2:0b:53:f0:51:b4:e0:9b:51:9e:66:84:ee:
         12:79:9d:f8:87:1a:34:71:e6:f1:ef:0f:28:be:7f:9f:4b:d9:
         aa:cc:23:a6:7d:61:73:6c:b1:f4:af:2b:82:ca:62:40:cc:cd:
         52:62:df:e6:8b:e6:b0:84:29:c8:2d:b9:6a:48:a7:fb:32:be:
         07:35:87:e1:1a:a7:0b:a9:72:3f:44:64:15:9e:6f:d0:bf:7f:
         be:73:a6:5d:16:1c:ed:88:f2:04:e5:c5:70:1b:fc:dd:8b:21:
         b8:67:a7:81:2f:d6:8f:b3:50:96:32:b3:0a:5c:b3:81:99:b3:
         2c:6a:74:51:7f:29:d8:d6:6d:b9:9a:29:56:d5:39:a6:f7:68:
         7b:da:a1:ac:2e:a8:55:0d:15:72:33:7e:c5:b6:a2:5f:ff:ed:
         a7:f8:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----