Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft
File:                     68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft (raw, json)
Hash identifier:          fVi8UUL0mcsD20/VY9g0DbxyWGItiFZ4l3ji2ZL2YsM=
Subject key identifier:   61:AE:E1:4C:E3:A3:E7:CD:52:1E:14:31:F9:25:F4:AF:D8:92:36:D3
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       24398654AD50C012BAC4319E13120873E4C5BB10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft
Manifest number:          0444
Signing time:             Mon 15 Apr 2024 05:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 08:22:00 +0000
Files and hashes:         1: 3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (hash: HtJ+N1aiWT0Cx6G0jdtrkhh6S3CS2SeJqfCA65Su9yA=)
                          2: 68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl (hash: H6Zo1zKs6m6Cs13JJ1/Mn5kJ0wUsK6omlr04sudOpBI=)
                          3: 3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (hash: hkRwjcqWA365jgfNqxInrHD63vYxjHQLWVBijTY89Vs=)
                          4: 323830343a6432383a3a2f33322d3430203d3e203532363034.roa (hash: hjegMkes29ZY1hPIMgiYA0L46u/qK8Fcy9hQ94JYs9Y=)
                          5: 3133382e39372e31362e302f32322d3234203d3e203532363034.roa (hash: BY3Pc0WQtYk5KfgIi89HcNAjjuVRrC4adwRVWmmeyj8=)
                          6: 3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (hash: Od4oPjY//BFVXY5U6S1OovxvPX2mPYJtnci6RABtZng=)
                          7: 3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (hash: 5NjxXyIfZ0h4m4+mUQRQZGMM1T4GctqV7T/S1e877ok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:39:86:54:ad:50:c0:12:ba:c4:31:9e:13:12:08:73:e4:c5:bb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Apr 15 05:45:00 2024 GMT
            Not After : Apr 16 08:22:00 2024 GMT
        Subject: CN=61AEE14CE3A3E7CD521E1431F925F4AFD89236D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:e0:da:b8:27:71:ad:46:7b:2f:d1:2f:04:
                    b7:9f:1c:c6:f9:a0:6f:61:0d:d8:74:69:e5:0f:a3:
                    e5:1c:2d:f4:8d:19:48:55:b3:19:86:d1:3d:e1:1b:
                    d3:41:03:d6:0f:5f:33:d8:8d:b7:2d:6b:bf:d4:f0:
                    0d:e0:08:73:26:16:e6:7e:00:cd:9d:fc:5e:0e:da:
                    6b:43:cb:bb:8b:5f:fa:2c:a7:c2:ee:94:eb:4f:45:
                    61:0a:7a:5b:2c:4e:c0:00:b0:94:cc:70:23:53:8b:
                    ee:0a:e2:d1:aa:10:cf:2e:bb:cb:f1:d6:79:0a:e0:
                    26:e6:9f:1e:37:3b:fc:f6:50:1b:44:aa:62:f8:9c:
                    d3:c8:20:f9:22:2b:80:84:67:ee:13:f5:8e:28:8c:
                    3f:6d:a8:e9:5c:88:f7:c1:ae:99:22:dd:1f:7f:29:
                    6a:3e:62:48:5b:3a:6b:4c:f6:61:e5:29:42:25:e8:
                    3e:f7:8c:6b:ef:34:3a:1b:3c:e5:19:1b:db:a3:ff:
                    e1:0a:14:23:ce:82:72:b0:4b:9d:af:a7:7d:24:68:
                    8e:e7:7b:e2:d1:5a:56:b3:dc:b9:28:14:ae:5f:67:
                    48:d3:61:57:e8:5c:2b:cc:28:2e:09:97:77:04:a2:
                    19:8c:56:be:93:0e:ba:c1:c1:25:7e:4a:82:4a:ed:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AE:E1:4C:E3:A3:E7:CD:52:1E:14:31:F9:25:F4:AF:D8:92:36:D3
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:86:f1:ff:13:ba:83:37:9b:8e:34:35:2f:c9:e0:1c:05:ad:
         6f:cf:dd:2b:20:56:b9:ff:de:32:7e:4e:89:02:3e:d7:51:51:
         ee:e0:31:15:e3:64:b0:1a:e8:9a:61:42:20:40:01:b7:38:29:
         4a:1b:05:11:f9:59:a2:28:6d:da:39:29:15:50:0d:f8:89:61:
         f5:c4:cc:42:66:a1:6b:a4:3f:a5:33:8d:61:6a:a4:96:82:72:
         c2:3a:75:ad:31:44:8e:4c:f9:fc:be:b6:6c:f2:d3:a6:ff:a4:
         89:ae:b2:a9:cc:09:cd:d4:c8:3c:c3:34:49:b0:ab:4b:5d:67:
         76:64:ab:17:4e:9d:e1:1b:9c:c1:92:59:92:57:db:e0:af:c2:
         48:a6:00:d6:89:03:18:ee:96:f4:95:d3:8f:c1:4e:b7:eb:5f:
         88:06:45:61:45:49:86:42:1c:e7:7d:79:9c:c6:8e:f3:1f:44:
         ec:3f:7a:8e:f5:48:60:a2:88:51:3a:89:41:7e:ab:28:06:53:
         b5:db:76:8d:1d:c4:7a:2a:da:0f:9f:d8:a8:7f:be:8a:86:10:
         30:48:4e:1c:f9:99:94:2b:98:06:74:77:aa:ad:f5:7c:f3:1b:
         49:6c:63:61:8b:eb:8e:23:8b:81:93:a6:69:c2:97:7b:14:70:
         e2:f0:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----