Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.mft
File:                     6DA94CC9665217B326F33F62EEC20C2091A6ECEC.mft (raw, json)
Hash identifier:          oPdjd49IvAbtJ5jxUqIH1r6JUqSWsRCWWfTR8JiuNpM=
Subject key identifier:   3D:D7:3F:40:36:82:B5:9B:96:05:FE:49:DB:CE:98:0E:C1:45:50:B1
Authority key identifier: 6D:A9:4C:C9:66:52:17:B3:26:F3:3F:62:EE:C2:0C:20:91:A6:EC:EC
Certificate issuer:       /CN=6DA94CC9665217B326F33F62EEC20C2091A6ECEC
Certificate serial:       7208529ACF77A1DB30932A74BF179764DF1935ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.mft
Manifest number:          07A2
Signing time:             Sun 14 Apr 2024 17:41:45 +0000
Manifest this update:     Sun 14 Apr 2024 17:36:45 +0000
Manifest next update:     Mon 15 Apr 2024 20:56:45 +0000
Files and hashes:         1: 3136382e302e3134342e302f32322d3234203d3e203532353630.roa (hash: EB8TZX7rr92+d1xd0YSxJnXkllZg+WLyyZ79ZpDpRHQ=)
                          2: 3138362e3233352e39322e302f32322d3234203d3e203532353630.roa (hash: c2Nq63VTtukXKwK0bwF9k7HuLfoHFriwOz9whqHOC+Y=)
                          3: 323830343a313636303a3a2f33322d3438203d3e203532353630.roa (hash: a7dDELdvdg6fA6UWW730DBMlDKRZSGXomV71zzwz0KY=)
                          4: 6DA94CC9665217B326F33F62EEC20C2091A6ECEC.crl (hash: iMy0Cs5UUGi4KMpvctEfw5XPtipcweUE9NDDujzhots=)
                          5: 3137372e38362e36382e302f32322d3234203d3e203532353630.roa (hash: 8i0aVBkAMIEbGSwIPAEIAfM394ZZGf5whp0bRK6MqiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:08:52:9a:cf:77:a1:db:30:93:2a:74:bf:17:97:64:df:19:35:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA94CC9665217B326F33F62EEC20C2091A6ECEC
        Validity
            Not Before: Apr 14 17:36:45 2024 GMT
            Not After : Apr 15 20:56:45 2024 GMT
        Subject: CN=3DD73F403682B59B9605FE49DBCE980EC14550B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:f2:95:77:8b:5b:82:d7:94:4a:fb:b7:f8:
                    71:c7:39:df:05:0f:fb:be:82:69:20:68:9f:8b:0c:
                    0a:b5:b2:25:0a:e9:7b:6f:a4:a4:26:20:1b:13:98:
                    57:a3:7f:bd:7b:fb:11:80:ba:38:4f:59:6b:b9:cd:
                    5e:7d:4a:fc:11:70:61:9a:27:26:d4:94:90:74:31:
                    d0:16:f4:73:47:29:4b:8c:6d:6c:0d:06:8c:72:18:
                    9b:4f:7d:c4:59:8a:0b:8c:2b:6f:67:0b:00:55:65:
                    4e:83:b4:d5:0e:02:25:d7:07:90:f3:82:46:cf:fd:
                    97:2a:fc:50:00:c6:ac:f5:ef:77:ee:d0:c6:2f:ac:
                    3b:33:a9:d0:90:0b:9a:5a:8a:e6:0d:8d:ea:b7:0e:
                    f8:39:df:24:39:a3:49:9c:46:5b:8e:4f:c0:3a:28:
                    cd:20:88:53:89:e3:c3:80:22:29:39:22:b6:d1:bc:
                    e1:aa:00:55:56:fe:a9:24:73:a0:11:fd:ee:7d:91:
                    ef:a1:ce:48:1b:65:6a:1c:45:b0:94:dd:23:57:e6:
                    ca:20:2c:f8:fa:23:36:5f:f9:42:f3:fe:3d:5c:9a:
                    56:06:d9:a8:37:6e:6a:dc:6f:82:ac:81:f9:25:26:
                    b6:d6:78:bc:75:9e:ae:22:20:8c:f2:b9:f2:90:07:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:3F:40:36:82:B5:9B:96:05:FE:49:DB:CE:98:0E:C1:45:50:B1
            X509v3 Authority Key Identifier:
                keyid:6D:A9:4C:C9:66:52:17:B3:26:F3:3F:62:EE:C2:0C:20:91:A6:EC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:be:03:33:81:8e:e7:ea:17:0e:a6:3e:95:15:4c:34:42:52:
         0a:de:10:3d:a8:a4:e2:63:fc:2c:54:8e:65:1e:e4:fd:65:cf:
         0e:00:1c:4f:f8:65:56:8d:25:d4:1f:a4:ff:5c:78:d7:5e:5c:
         37:3f:60:4e:42:9a:a1:1f:dc:44:e9:5c:cf:a0:fd:4d:8d:9e:
         f3:71:fb:9c:7a:95:67:8b:1b:7c:ad:77:22:fa:22:77:a9:38:
         a2:2d:24:f8:2d:26:6d:1d:ee:f7:ca:0d:01:2f:77:7e:f3:a4:
         6a:63:7a:01:31:fd:fc:34:69:22:0a:99:a5:21:9d:8a:59:c9:
         67:26:0f:18:05:2a:46:8c:b1:d8:d8:32:b7:81:9e:28:2b:30:
         5d:49:98:3e:90:5b:cd:03:48:1a:ab:ad:9a:a4:ef:e9:6e:d6:
         47:1f:d7:24:b0:2e:70:b0:08:9c:fd:52:28:b6:c6:2f:06:7e:
         99:ff:28:a4:76:66:10:2c:1c:25:8a:19:8a:25:51:e2:f8:05:
         ce:90:d1:36:41:65:7e:15:c7:af:32:b2:6a:d4:0d:48:63:2f:
         78:ea:52:ab:ac:d2:3c:4f:60:3d:5f:46:e4:0a:ba:21:18:9e:
         18:76:47:e6:f7:08:82:8e:d1:dc:7d:04:89:91:d4:32:09:4f:
         61:57:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----