Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.mft
File:                     6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.mft (raw, json)
Hash identifier:          f3xYd8heHz+QO0oQrEkl2dv5hLIhN3Q5LIsShW7z3NA=
Subject key identifier:   83:DC:54:B0:33:C6:78:08:24:4B:6F:EF:E5:97:3C:E7:4B:1F:DD:9F
Authority key identifier: 6D:A9:FD:C6:0E:BC:4E:0B:19:1B:AE:1C:F5:5C:37:76:E8:20:9F:DC
Certificate issuer:       /CN=6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC
Certificate serial:       6AE830CCF0977B24661A3B017BE47CC10D173CC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.mft
Manifest number:          A4
Signing time:             Mon 15 Apr 2024 01:03:11 +0000
Manifest this update:     Mon 15 Apr 2024 00:58:11 +0000
Manifest next update:     Tue 16 Apr 2024 03:20:11 +0000
Files and hashes:         1: 6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.crl (hash: aUivGfLfh+lKh88QQ3xrStdm+JuAAk8f4M0g2Ien59Q=)
                          2: 3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (hash: PLCk5u+feg5suZv8diy1FmUR9EEsE8VTQKfEwYmlI24=)
                          3: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (hash: 7XB4eFXVkBKPeC/B2BCZ65TZcOdCj8+fzu4+/5iOgwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e8:30:cc:f0:97:7b:24:66:1a:3b:01:7b:e4:7c:c1:0d:17:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC
        Validity
            Not Before: Apr 15 00:58:11 2024 GMT
            Not After : Apr 16 03:20:11 2024 GMT
        Subject: CN=83DC54B033C67808244B6FEFE5973CE74B1FDD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:27:58:0c:26:bd:cc:1d:40:c1:c0:ae:60:
                    b9:5d:88:31:c7:a8:c6:40:79:3a:b7:a3:a5:16:9b:
                    4c:21:bc:13:d2:cd:32:85:06:04:72:60:2e:8e:46:
                    c8:19:a3:d8:94:fe:7f:30:bb:71:83:4f:a3:67:c9:
                    d0:a3:6e:0a:e8:0d:dc:2a:07:ea:78:89:a8:29:0d:
                    17:b8:37:13:3e:5a:fb:1a:04:f7:f6:0f:f0:0f:a2:
                    67:7c:94:bc:91:52:2d:d9:bf:c4:3c:ed:bf:d6:c2:
                    78:7f:88:e1:80:b5:67:12:31:57:44:75:a9:31:54:
                    61:eb:24:e6:02:db:b2:d5:33:3b:d4:5b:21:6a:73:
                    52:f3:1a:7b:af:27:7b:3f:e1:27:ba:be:dd:b0:77:
                    0f:e4:4b:f9:00:61:29:45:45:6b:de:f0:c5:4e:05:
                    42:68:64:28:ba:ef:94:7f:83:9e:c2:38:bf:63:22:
                    1c:1e:e1:fe:f1:31:81:28:9b:a0:b9:9c:08:79:a0:
                    20:95:dd:ec:b6:89:af:33:44:03:5f:75:10:d6:07:
                    c3:e8:5a:b7:78:9d:f0:53:bf:d4:1c:08:e3:92:67:
                    55:d9:5e:ed:68:ca:e7:12:f3:bc:ca:f7:08:5e:29:
                    bd:d2:e9:8f:43:d2:63:0c:6e:3a:1f:a4:77:cf:fd:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:54:B0:33:C6:78:08:24:4B:6F:EF:E5:97:3C:E7:4B:1F:DD:9F
            X509v3 Authority Key Identifier:
                keyid:6D:A9:FD:C6:0E:BC:4E:0B:19:1B:AE:1C:F5:5C:37:76:E8:20:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:4f:14:0c:0a:7e:ec:66:2b:f9:1a:1e:6f:63:f5:59:02:
         09:eb:23:e4:c4:4e:f3:b5:b1:ba:ae:d3:af:6c:cd:68:45:ad:
         e2:c1:df:08:96:ce:16:7c:84:95:ac:e7:c4:40:8f:2c:8d:f9:
         d5:9a:84:f9:6f:82:f8:4a:5b:c3:64:02:27:cf:b7:cf:6c:28:
         b5:ba:c7:8e:88:f2:69:59:f2:97:b3:0b:ae:d4:19:17:26:b6:
         89:a6:ac:7b:90:63:52:ac:5d:15:7a:e2:8b:67:82:5b:a9:c7:
         5a:59:30:ce:91:9d:47:74:17:6e:a7:2b:5b:d0:b4:c4:66:cc:
         9d:aa:3f:ce:bd:2b:3c:c6:2d:50:a5:a7:db:45:85:55:90:21:
         c6:ee:28:b1:44:ea:af:3f:7f:48:72:50:1c:35:7e:87:b3:b4:
         4e:02:20:df:51:19:54:74:d6:26:7c:d5:0f:ae:64:fd:78:a6:
         bf:35:21:96:ae:12:0f:a2:ce:84:5e:71:72:80:a1:59:98:9b:
         ce:93:3d:b3:ae:2e:67:bf:9b:bb:3a:d7:b8:c0:d4:28:b3:89:
         79:5d:12:86:94:15:65:70:ea:39:4e:6c:5f:d0:00:6a:e3:c6:
         c9:29:9b:b2:35:54:4e:d9:72:81:0f:27:51:01:eb:7d:7f:4f:
         ae:78:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----