Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.mft
File:                     62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.mft (raw, json)
Hash identifier:          TLsJm+C+NtCkcANE8N/bGTBU4Vr4xVnInOS3BhbPaIw=
Subject key identifier:   4D:50:1F:28:4B:9E:36:46:F3:C9:A3:F3:C4:89:57:07:09:D5:D3:6D
Authority key identifier: 62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED
Certificate issuer:       /CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
Certificate serial:       3EDA842972544519CA02E1DE1B34E59BD3C67AE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.mft
Manifest number:          D6
Signing time:             Mon 15 Apr 2024 07:38:46 +0000
Manifest this update:     Mon 15 Apr 2024 07:33:46 +0000
Manifest next update:     Tue 16 Apr 2024 08:29:46 +0000
Files and hashes:         1: 3137392e36332e3136332e302f32342d3234203d3e20323731363530.roa (hash: 1qrJKIgXZqVMQDvIzFMymZUxh7lY/nPXfshTLSpgAPM=)
                          2: 323830343a376564343a3a2f33322d3332203d3e20323731363530.roa (hash: 5cUQJDanyqiSk3V9QGyo2JT0/pkjVr5NKNgY2DTMjvg=)
                          3: 3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa (hash: eg/xbX3m6sykG9PDPXUOt5TAuueLqjAObPF3Mjl4XOk=)
                          4: 3137392e36332e3136312e302f32342d3234203d3e20323731363530.roa (hash: mZtez1OtSi5C8MZ0FfmfXDkAJc6ASnxuOpdBhYwUh0E=)
                          5: 3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa (hash: bx3L4nsDBZ8AKYN9yEXfwcil/2oOWnsx8gLNTCvLgcQ=)
                          6: 3137392e36332e3136322e302f32342d3234203d3e20323731363530.roa (hash: 71AXoODrlYOEeSDWumgbHnM9XOOV0v46WLATsybfxDM=)
                          7: 62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl (hash: /5C1Ego1nP38TPsI+pXczK6x88dBW5R/yipSXQarVQg=)
                          8: 323830343a376564343a383030303a3a2f33332d3333203d3e20323731363530.roa (hash: VMiBDxy82G+T50FLeIZKsWFKjEYtjT0/x1Zez31zscw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:da:84:29:72:54:45:19:ca:02:e1:de:1b:34:e5:9b:d3:c6:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
        Validity
            Not Before: Apr 15 07:33:46 2024 GMT
            Not After : Apr 16 08:29:46 2024 GMT
        Subject: CN=4D501F284B9E3646F3C9A3F3C489570709D5D36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:4e:0c:5e:60:a6:09:68:87:94:d1:45:cd:
                    b5:7b:75:99:50:bf:b0:b9:7e:b9:a9:61:2d:1b:c7:
                    c9:91:7f:90:54:84:0d:98:94:eb:ec:f9:d7:04:bb:
                    34:38:7a:32:2c:62:42:09:ce:6f:91:41:95:2a:4b:
                    1c:75:ec:74:43:02:90:22:ee:7d:70:ea:58:c5:50:
                    f5:d4:fe:b1:61:b9:f2:43:05:ed:1f:42:20:9c:bb:
                    27:2f:02:84:03:f8:54:d0:3f:f3:0f:74:76:8f:c1:
                    ba:68:af:17:88:c4:6e:9e:ac:47:c3:b7:1d:d0:45:
                    79:c6:68:33:f0:16:08:75:b8:5d:03:54:46:d0:9d:
                    2d:5c:35:ea:b2:3a:0c:4b:0f:00:50:08:45:67:59:
                    e3:38:04:99:1a:30:b0:27:24:59:f8:f6:8e:fd:6f:
                    d8:63:18:e3:22:c2:e7:b1:94:0a:25:fe:b1:ce:f7:
                    1e:d6:bd:2e:c9:19:54:21:af:11:0f:30:7a:4c:09:
                    47:ee:2e:67:4e:ab:ca:cb:5c:37:b1:07:22:44:f3:
                    05:02:24:6e:d8:44:ea:eb:3c:74:84:96:0b:86:b3:
                    1e:47:bc:ae:f6:8c:15:df:a1:4b:13:5f:a5:54:c1:
                    21:96:cb:95:40:fe:43:58:5b:8e:96:81:48:60:42:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:1F:28:4B:9E:36:46:F3:C9:A3:F3:C4:89:57:07:09:D5:D3:6D
            X509v3 Authority Key Identifier:
                keyid:62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:34:da:fa:0d:b8:77:18:59:3a:00:6c:f2:4e:7e:c6:f3:
         a4:1d:be:13:b2:82:21:a8:f5:26:ed:f1:34:6e:ed:46:54:1b:
         50:a2:c2:11:db:c4:f0:2b:47:4e:13:07:bc:46:3b:75:3b:ab:
         3b:7b:11:06:48:2d:33:b6:53:36:eb:39:36:5a:9e:4a:ad:ba:
         84:ce:e0:99:1d:35:8d:56:0a:79:ce:20:4b:1a:f9:db:ae:41:
         5b:62:f0:2a:90:2c:ea:94:47:a9:00:2b:74:65:23:ed:9c:22:
         e4:c3:6e:ed:6d:0f:8c:32:81:b3:9d:d9:9f:e4:81:e4:20:fb:
         fc:ac:c8:fd:d7:e2:5c:d2:a6:98:84:a5:0f:d8:9f:c7:58:2e:
         2c:d8:15:ed:3f:bc:13:18:3f:62:4f:28:2d:ef:84:82:79:f9:
         92:7f:36:46:65:89:f4:47:9f:fd:d8:ab:3a:1c:a0:ed:18:a9:
         11:51:64:9f:9c:d0:52:f3:81:48:1a:c2:86:3e:fe:38:e4:9e:
         77:90:33:7a:eb:44:6f:da:92:2e:86:80:ef:10:1e:1e:c2:68:
         01:e8:2b:8c:35:e8:38:2b:9e:81:d5:18:27:14:48:4f:2b:d5:
         2b:21:ba:0f:02:6c:d7:28:bb:85:33:2d:48:3e:81:e5:50:c0:
         26:c8:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----