Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.mft
File:                     D0FDDFD00693149E10422185188F22AE97C6A48A.mft (raw, json)
Hash identifier:          VaW8+47orS8nWYYgRTB3Qz7dSunfxxOMLXtJR3Aa4mQ=
Subject key identifier:   AB:69:9C:9B:16:BF:95:03:BA:FA:FC:C3:1E:C7:6C:51:1C:94:5C:1E
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       02A4F3A52403BA3C81A27EA4F07B21D6B2DFF625
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.mft
Manifest number:          05BC
Signing time:             Mon 15 Apr 2024 09:40:01 +0000
Manifest this update:     Mon 15 Apr 2024 09:35:01 +0000
Manifest next update:     Tue 16 Apr 2024 09:40:01 +0000
Files and hashes:         1: 3137392e34332e31362e302f32342d3234203d3e20323730393736.roa (hash: 2pYcAhmjQLZLcK44lUMtd6uPvA1JXGN10ANbjJLq5+s=)
                          2: 323830343a373435633a3a2f33322d3332203d3e20323730393736.roa (hash: PS5SP3Y3W4jrbQ1QydRtW0t5ROxuUjtMme4nq1r5OxU=)
                          3: D0FDDFD00693149E10422185188F22AE97C6A48A.crl (hash: H3+Pt07qxlpPkozpf6k8pZV4teSXHJLWM6v4Dcz0q1U=)
                          4: 323830343a373435633a3a2f33342d3334203d3e20323730393736.roa (hash: /J3b7HDrPxpggRDvcfpJtmVOblJJQ1dTA0cO7e1OsYU=)
                          5: 3137392e34332e31382e302f32342d3234203d3e20323730393736.roa (hash: UxIuUafzCN0VxVw1Ue6sxITPSbFssSo/CAirRDYv2YA=)
                          6: 323830343a373435633a633030303a3a2f33342d3334203d3e20323730393736.roa (hash: wJA9cQ/wpcyf+zF6tFznJ7WYPbsriYxAv4NdsqejS7g=)
                          7: 323830343a373435633a343030303a3a2f33342d3334203d3e20323730393736.roa (hash: p4rQS591SI0CPDtSLmUAOAVUJSlQWI7sJi9xmaH4iFU=)
                          8: 3137392e34332e31372e302f32342d3234203d3e20323730393736.roa (hash: i0M/4gCZnL1ATkJFx/0wc+/j/bxRJoTwCefP1jVzOb8=)
                          9: 323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa (hash: EMcjGN7716mavrDEm0XJNSYfgI5NJS7bHowhYsOzRn0=)
                          10: 3137392e34332e31392e302f32342d3234203d3e20323730393736.roa (hash: oq3oHFaVHmZUl36rA9oSFIY6OSvf9wBCorilVcPmOyY=)
                          11: 3137392e34332e31362e302f32322d3232203d3e20323730393736.roa (hash: 41Ur6l+0t/GWMAEbZeNpOU7gm7kliYM96SgR/ssb06o=)
                          12: 3137392e34332e31382e302f32332d3233203d3e20323730393736.roa (hash: Rp+NG9ft8O/eN98QdJDyXF0Qqgvmp9AuYDO44KKxulU=)
                          13: 3137392e34332e31362e302f32332d3233203d3e20323730393736.roa (hash: J+FlgVoa8GXPovt3i3WybBC6flzpBKTM0jZdvYmkSEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a4:f3:a5:24:03:ba:3c:81:a2:7e:a4:f0:7b:21:d6:b2:df:f6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Apr 15 09:35:01 2024 GMT
            Not After : Apr 22 09:40:01 2024 GMT
        Subject: CN=3082010A0282010100C1E1655061C6A4403B54447058D11642E31D1AE4B1A092A6FDB1DB53348F71516976487114AD5A3AA86B9D154DA536B3C145634FA94CF51E4C94DC69D35754D1017AB17A8C9EF4608C94FFDDEE61A5708BAADC93C33D86685695F66846F53BB9A463F17452077A3B32F3D9DA01C7BE7B8C790A749D9967BFFBFA77D495B9A76E1F2FA9C3ADDDA1674E6E7979C8F44CB8DD2199842A7414C505230B12BC48FD60EF9752692D83C387C801B1ADB59B3167E2E0AD4AE997DA577E7B560CFD31001D825B3CEEB9C5667E14B0EAC590B87A2A51D681B2C5F1B0FFC72B809DE6173222FFB771C5B25E8FEFADD54B421D4AC9A9A2CCDB1E40FC5A573BF301E81DEC93730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:65:50:61:c6:a4:40:3b:54:44:70:58:d1:
                    16:42:e3:1d:1a:e4:b1:a0:92:a6:fd:b1:db:53:34:
                    8f:71:51:69:76:48:71:14:ad:5a:3a:a8:6b:9d:15:
                    4d:a5:36:b3:c1:45:63:4f:a9:4c:f5:1e:4c:94:dc:
                    69:d3:57:54:d1:01:7a:b1:7a:8c:9e:f4:60:8c:94:
                    ff:dd:ee:61:a5:70:8b:aa:dc:93:c3:3d:86:68:56:
                    95:f6:68:46:f5:3b:b9:a4:63:f1:74:52:07:7a:3b:
                    32:f3:d9:da:01:c7:be:7b:8c:79:0a:74:9d:99:67:
                    bf:fb:fa:77:d4:95:b9:a7:6e:1f:2f:a9:c3:ad:dd:
                    a1:67:4e:6e:79:79:c8:f4:4c:b8:dd:21:99:84:2a:
                    74:14:c5:05:23:0b:12:bc:48:fd:60:ef:97:52:69:
                    2d:83:c3:87:c8:01:b1:ad:b5:9b:31:67:e2:e0:ad:
                    4a:e9:97:da:57:7e:7b:56:0c:fd:31:00:1d:82:5b:
                    3c:ee:b9:c5:66:7e:14:b0:ea:c5:90:b8:7a:2a:51:
                    d6:81:b2:c5:f1:b0:ff:c7:2b:80:9d:e6:17:32:22:
                    ff:b7:71:c5:b2:5e:8f:ef:ad:d5:4b:42:1d:4a:c9:
                    a9:a2:cc:db:1e:40:fc:5a:57:3b:f3:01:e8:1d:ec:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:69:9C:9B:16:BF:95:03:BA:FA:FC:C3:1E:C7:6C:51:1C:94:5C:1E
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ad:f8:09:95:89:95:e2:bf:fd:1d:bc:bc:67:0c:38:8a:70:
         d0:9c:17:f8:00:9c:81:a0:48:7f:5b:6e:80:d3:a9:98:28:16:
         55:03:b2:7b:2c:bd:04:e2:44:98:67:d4:f2:2c:1a:ef:2b:15:
         53:d4:a5:50:be:70:fc:f4:17:d1:b0:01:a1:90:7b:d0:a4:49:
         72:7b:36:49:60:70:55:bf:b6:bf:21:aa:9d:80:e0:7d:7d:b5:
         58:dc:cb:a4:58:05:5c:60:4e:cb:e4:95:53:e6:91:28:9f:ce:
         f5:68:56:e3:ed:f9:8d:b3:e1:33:70:85:f1:81:05:df:15:33:
         7a:fd:3d:d7:37:17:23:37:63:9b:73:aa:e6:e4:a3:78:ac:60:
         16:d9:8d:3e:6a:0f:c9:8d:70:11:cf:20:4d:ad:b9:5d:17:ee:
         6c:7b:2d:a9:87:74:b9:0d:f7:91:92:2b:da:ae:57:d6:8d:61:
         91:28:74:b1:03:09:9d:01:f5:f5:e0:bc:00:8b:b4:6c:05:86:
         df:60:43:12:bd:3d:7f:d6:bb:29:b4:2e:3c:40:04:c5:9f:3b:
         5f:06:61:cd:1e:61:8b:22:c2:17:73:bd:ee:46:ee:39:6b:b3:
         0d:0e:7b:e1:2a:d3:99:4e:ca:e5:9e:b8:03:74:76:6c:a7:fb:
         33:6e:69:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----