Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.mft
File:                     7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.mft (raw, json)
Hash identifier:          DTVySmVQmwI/V6tRvHjzCOFljgwowyDch6l3WdTA7KY=
Subject key identifier:   A4:E3:1B:E8:83:93:67:36:6E:BF:BE:5F:5A:4E:46:5D:A0:EB:5D:7C
Authority key identifier: 7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99
Certificate issuer:       /CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
Certificate serial:       59D387A9D2A5151524B5235B8C337C75AE580745
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.mft
Manifest number:          0629
Signing time:             Mon 15 Apr 2024 04:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:20:00 +0000
Files and hashes:         1: 3136382e3139352e3135362e302f32322d3234203d3e20323731303237.roa (hash: TBeCIAZ824/725Nh0ORzPJOSL6GpwGXeqJuFJVLLKvw=)
                          2: 7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.crl (hash: qyyRJs2Zjft/0FZBQcGmQ+DVx5uQxdOJtHgCPVJS1x4=)
                          3: 323830343a373532383a3a2f33322d3334203d3e20323731303237.roa (hash: T1Fpes5RK9CuTKFWq9Y88pdLX8w9FjzIaAIosmoZ64Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:87:a9:d2:a5:15:15:24:b5:23:5b:8c:33:7c:75:ae:58:07:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199
        Validity
            Not Before: Apr 15 04:15:00 2024 GMT
            Not After : Apr 22 04:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:15:94:98:18:be:81:08:da:23:e5:98:a6:
                    41:97:62:b5:45:11:a8:88:1e:c9:c3:57:89:eb:f2:
                    29:b4:10:f6:77:21:47:f8:60:ec:46:3b:d4:17:8a:
                    92:5a:bf:13:cf:9a:ae:23:d2:a5:6d:9c:4f:a4:44:
                    a1:fa:34:ba:d1:5b:cd:47:17:79:33:01:73:91:e7:
                    09:ed:b5:38:7e:67:df:13:db:fb:93:75:3d:f5:03:
                    ce:d5:fc:89:3e:2e:ec:6d:21:13:8e:2f:5d:8a:df:
                    8f:80:dc:de:2e:bd:bc:f2:fd:de:56:2c:32:58:b9:
                    7a:f6:a9:3e:9b:b0:ef:41:b7:ec:0e:da:a7:de:9b:
                    1a:20:88:c0:c7:55:3a:b7:01:1d:16:4a:ff:d2:7d:
                    1f:92:cc:1b:44:55:f7:c0:39:a3:c6:d0:39:92:e8:
                    b2:d2:36:ae:16:44:ed:fb:64:14:15:43:f7:23:20:
                    46:34:0c:53:cb:9e:87:76:61:64:b2:6d:e7:49:f5:
                    0c:9d:7a:13:52:90:15:14:51:d4:d5:4c:ce:49:10:
                    bc:0c:7f:ab:6c:4e:0c:bb:a4:89:d9:7e:40:32:e6:
                    f7:ef:b3:b2:df:16:a1:52:b7:18:30:e2:3b:0b:6e:
                    53:28:87:2a:7c:2d:d4:a0:c8:85:43:f4:ae:bc:ff:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:1B:E8:83:93:67:36:6E:BF:BE:5F:5A:4E:46:5D:A0:EB:5D:7C
            X509v3 Authority Key Identifier:
                keyid:7B:6D:E9:E0:75:C8:AF:DB:CA:50:A9:34:4C:92:1B:A3:9A:6F:31:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/0/7B6DE9E075C8AFDBCA50A9344C921BA39A6F3199.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:bc:f0:80:2d:f3:1c:03:15:af:af:e6:90:69:a3:5c:aa:
         ce:6b:32:70:3e:8a:6c:8c:ad:e8:37:cc:84:8d:c7:74:3e:7a:
         11:e3:1e:5b:7f:c7:5d:76:b4:b4:93:a9:37:17:47:c5:70:fd:
         79:c7:e2:89:5f:6b:53:07:2f:a2:30:31:8a:12:27:7b:0c:60:
         db:cc:22:81:53:e3:d1:a7:fc:1c:79:2b:30:b2:e8:1d:ee:cc:
         23:4a:c0:ce:aa:a9:9a:ec:db:a4:5a:00:cb:51:70:6d:88:6c:
         64:92:2f:10:a4:e5:41:af:0f:56:9d:db:bf:70:2f:82:6c:ce:
         a0:53:32:ff:60:fe:15:b2:3f:ed:e3:12:39:b9:52:82:d1:84:
         45:21:dd:79:f8:df:a4:e6:92:13:0f:b6:9c:cf:88:50:2b:67:
         10:29:8f:5e:b1:cf:ce:64:77:71:40:4e:1d:65:96:c0:6f:f1:
         bb:4d:19:a0:70:ed:34:e3:43:3b:87:5e:5c:6b:57:dd:f4:b2:
         e7:de:a8:23:04:c1:d6:07:f8:e9:12:cb:18:63:05:cd:d0:c7:
         65:ed:e4:1a:ac:99:13:cb:eb:ca:96:a5:c5:27:a3:f0:41:ec:
         b1:b5:67:7f:68:78:f5:95:71:19:5b:ad:e1:98:8d:31:32:65:
         1b:8a:35:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----