Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
File:                     68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft (raw, json)
Hash identifier:          WDweUKjUCdjGFmObRkqJz+GyHQD+jDsvFDHqt6Y0Dmo=
Subject key identifier:   24:17:AE:6D:12:5F:A3:89:1B:A0:7D:9C:A1:12:94:22:47:F3:5B:D2
Authority key identifier: 68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Certificate issuer:       /CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
Certificate serial:       57A3EB216AEB8F23CE43E59B728AE656741A4BA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
Manifest number:          25
Signing time:             Mon 15 Apr 2024 01:05:03 +0000
Manifest this update:     Mon 15 Apr 2024 01:00:03 +0000
Manifest next update:     Tue 16 Apr 2024 01:36:03 +0000
Files and hashes:         1: 3137302e37392e32302e302f32322d3332203d3e20323634383831.roa (hash: i1HdKTXseoyBAMENkgnXEQj+FD6q9479q4uIvM0pyo4=)
                          2: 68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.crl (hash: UxVkK8k61eJcp4tRMKMP/4a4mHImmVJbjfMslij/4xg=)
                          3: 3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa (hash: Hfzbx+Vb3oLyJ8+U6qiS4g3OdxhFHDYjmaQ1FdAH2ng=)
                          4: 323830343a326634343a3a2f33322d313238203d3e20323634383831.roa (hash: tgSKg8NR1Bo0k9iAdQKUKcgyKRI3gGAhgv8mzVnNIG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a3:eb:21:6a:eb:8f:23:ce:43:e5:9b:72:8a:e6:56:74:1a:4b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
        Validity
            Not Before: Apr 15 01:00:03 2024 GMT
            Not After : Apr 16 01:36:03 2024 GMT
        Subject: CN=2417AE6D125FA3891BA07D9CA112942247F35BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:1d:bc:81:51:14:7a:cb:69:84:7f:05:7d:
                    2b:84:a8:26:79:3d:fc:ea:a1:7b:98:8f:a2:d0:39:
                    3e:e2:82:c1:e1:06:d0:75:6e:61:5f:36:cb:0c:fc:
                    6d:53:b2:ee:44:9c:3a:b9:97:a5:34:13:40:c0:94:
                    dd:37:13:cc:c8:d1:46:84:bf:30:f7:b3:15:51:e8:
                    1b:c5:a5:f9:00:ba:45:93:4f:d6:97:dd:0c:29:fd:
                    5e:55:1a:e6:88:3b:a4:1e:6d:0f:40:18:27:85:fb:
                    e4:0b:b6:83:46:3d:d5:71:24:d7:01:54:02:47:b6:
                    75:4a:77:3a:a6:3c:dd:95:7a:3f:8a:b5:8b:3c:a2:
                    1d:39:82:03:1e:a8:ea:7f:39:cd:b9:fb:66:e0:35:
                    ca:85:58:fe:6f:49:5b:b8:26:3e:d6:8a:db:0c:6a:
                    0d:d2:2b:c0:9c:f6:87:fa:87:d9:fc:dc:c2:e7:b9:
                    c9:ff:86:d4:cf:f1:1b:cf:86:d0:2a:a4:32:37:f3:
                    44:b0:5b:ab:70:04:88:a2:e9:a9:3f:d9:e7:88:26:
                    92:58:25:55:ea:2b:14:4e:e2:dd:d3:16:63:c0:df:
                    07:7a:73:b9:6a:78:af:df:00:2f:c7:aa:aa:0d:39:
                    a8:90:6d:ec:91:ed:8d:ed:f3:d3:8e:5b:9b:76:ba:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:AE:6D:12:5F:A3:89:1B:A0:7D:9C:A1:12:94:22:47:F3:5B:D2
            X509v3 Authority Key Identifier:
                keyid:68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:15:1a:86:61:fd:4d:44:e3:45:8a:18:b8:ac:ce:d9:f4:78:
         02:ae:70:61:cb:ed:df:2c:55:03:ba:38:ff:b2:17:fc:a0:33:
         35:2d:bf:e3:b6:65:28:4e:6b:f9:91:2f:3f:33:a7:28:bb:40:
         c5:ce:6d:63:d2:7f:0f:97:50:d7:1b:da:ef:25:29:3b:74:3c:
         58:74:c7:84:ae:93:b6:08:81:b7:58:53:87:57:f5:24:a0:16:
         89:ec:7e:ac:6a:9f:f4:95:00:7c:d8:38:c7:f7:cb:69:92:51:
         72:d8:6f:e9:cb:26:57:fe:b4:36:f6:4d:37:4e:c6:91:9a:ab:
         49:8f:5e:67:c1:d8:9e:01:0c:17:39:4a:3e:af:b1:97:c3:20:
         de:72:27:8c:79:21:61:93:d6:c2:eb:21:07:78:3c:f2:04:b3:
         cf:40:3d:46:25:99:54:cf:24:91:3c:3c:91:11:92:71:25:17:
         7a:ba:16:be:76:b4:b0:29:c7:81:16:a6:57:88:45:7c:18:26:
         31:44:92:33:81:df:ae:d7:22:10:9e:f3:31:dd:0b:29:d4:12:
         0d:38:17:90:c4:8a:83:df:16:c6:51:c4:3b:5d:03:69:5b:3c:
         5e:e1:76:10:fb:43:80:d9:fa:05:2c:92:8e:17:f0:6a:f7:ac:
         91:21:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----