Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft
File:                     6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft (raw, json)
Hash identifier:          xea0f9rM0zinf5wIMwuL3ndUj4tMyWYgCytImClCrXk=
Subject key identifier:   41:85:91:EF:0F:95:63:DC:E6:CD:D8:B2:29:88:06:86:BB:34:55:A2
Authority key identifier: 6B:8F:D9:13:CF:AA:17:FF:CD:B8:CA:43:F4:34:1E:11:E9:52:B5:DA
Certificate issuer:       /CN=6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA
Certificate serial:       3CC26E810B11A76D4C0114A6B232CEF07B2DEE5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft
Manifest number:          2E
Signing time:             Sat 23 Mar 2024 04:25:24 +0000
Manifest this update:     Sat 23 Mar 2024 04:20:24 +0000
Manifest next update:     Sun 24 Mar 2024 04:44:24 +0000
Files and hashes:         1: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: r0IDWFER620hDJU/gEOed7apdmcMCVHVPpV3xjJYrMA=)
                          2: 6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.crl (hash: 8ARrEingO1GpXoQVxCNFiGFtRqFwPRQJSVe7EwbZW+4=)
                          3: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 1KBwWQwHY4lXEhI2MM1kGYw/7IHY8joEQOHK9XP/YeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c2:6e:81:0b:11:a7:6d:4c:01:14:a6:b2:32:ce:f0:7b:2d:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA
        Validity
            Not Before: Mar 23 04:20:24 2024 GMT
            Not After : Mar 24 04:44:24 2024 GMT
        Subject: CN=418591EF0F9563DCE6CDD8B229880686BB3455A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:e9:85:85:4a:f9:ec:f6:86:18:c2:73:9e:
                    9a:48:13:02:13:c0:db:54:b7:3e:a5:a4:1a:f7:a3:
                    9e:af:43:d1:b3:81:d2:cd:2c:cb:4a:c6:7e:5b:14:
                    42:1a:c4:d5:68:13:18:f9:fe:9c:2d:21:7d:bd:b1:
                    dd:ab:82:e8:23:f7:7f:bc:17:10:da:18:3b:46:53:
                    89:c2:10:31:0d:8e:33:fc:10:6b:36:5e:c5:02:e6:
                    19:39:93:23:66:84:eb:b5:04:3d:da:75:2b:ed:0b:
                    fc:8f:c0:db:68:d6:71:09:80:74:4f:74:dd:b6:4e:
                    0e:d3:31:30:6b:07:82:08:e0:ed:62:2e:2a:13:79:
                    e8:d0:f3:65:48:b7:ab:80:55:50:66:44:0c:0c:47:
                    d0:87:18:75:73:6d:c5:3c:e2:77:f3:f8:f7:bb:9f:
                    7c:c7:b2:88:4c:a2:6d:a7:ec:45:57:f0:c7:d3:ba:
                    f0:5f:58:aa:81:7a:65:df:80:0d:f8:b8:a3:94:2b:
                    03:ad:8e:f3:65:be:ce:66:30:59:99:94:84:51:d8:
                    a5:a9:3b:81:31:d2:66:df:6b:54:cb:cc:38:98:8d:
                    44:8f:c3:b0:39:9f:96:b2:b9:5d:d5:7e:18:9d:17:
                    70:ea:09:fb:f5:ad:89:ba:37:e4:33:4d:79:a6:10:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:91:EF:0F:95:63:DC:E6:CD:D8:B2:29:88:06:86:BB:34:55:A2
            X509v3 Authority Key Identifier:
                keyid:6B:8F:D9:13:CF:AA:17:FF:CD:B8:CA:43:F4:34:1E:11:E9:52:B5:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/6B8FD913CFAA17FFCDB8CA43F4341E11E952B5DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:f2:2f:9a:32:5c:89:c5:41:ad:e9:f2:72:32:fd:39:d1:
         6a:55:f7:00:f8:d6:b5:6e:c8:20:dc:ec:32:b1:bf:f2:cd:de:
         c2:3c:91:d6:10:62:7f:c3:cf:a4:1f:7b:1f:13:17:30:fd:f1:
         68:92:4d:33:66:2a:b4:23:4e:57:e2:e8:46:ed:00:fd:2c:2b:
         d4:5f:aa:9e:b3:45:f3:85:e4:46:37:e2:5e:c1:d2:2c:b0:d4:
         bd:4d:f5:90:7b:2f:48:42:d3:b5:91:5d:84:93:ea:bb:22:5f:
         c5:8e:89:48:d4:d0:3f:61:35:39:03:cd:40:a5:bc:dd:07:bb:
         24:e2:a7:3a:b1:71:e4:1e:0d:f0:36:39:8b:5a:63:05:a9:f0:
         3a:87:46:fa:a5:0b:45:41:c6:8d:ba:ea:65:4a:c3:59:84:8b:
         2d:69:ee:35:82:12:cb:10:38:4d:9f:43:f5:30:7a:05:51:5d:
         9e:d2:c6:da:ad:75:17:ad:34:ef:d4:d9:c4:1c:34:fc:2f:17:
         e4:b7:19:8d:58:ae:9a:bf:69:78:18:10:ae:33:a3:fc:0f:f7:
         ed:20:4c:f1:85:13:3a:04:46:96:f7:1b:37:11:11:fb:16:be:
         29:48:56:11:44:33:51:cf:ba:d3:21:05:7e:20:51:24:c3:64:
         e4:a9:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----