Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft
File:                     6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft (raw, json)
Hash identifier:          RFjfxUcWH7agpGF0B1lStU+YOkU++aZ4g6Fo8YyEPwE=
Subject key identifier:   79:02:CE:48:BD:A4:25:EA:7E:63:10:5A:B5:77:C8:56:E9:65:58:6A
Authority key identifier: 6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F
Certificate issuer:       /CN=6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F
Certificate serial:       1F0BE0A28F86BF59DE276DD0CFA53A0807AFF0F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft
Manifest number:          3A
Signing time:             Mon 15 Apr 2024 05:55:25 +0000
Manifest this update:     Mon 15 Apr 2024 05:50:25 +0000
Manifest next update:     Tue 16 Apr 2024 06:57:25 +0000
Files and hashes:         1: 6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.crl (hash: F1hNjBhPCzAlLMJywVRnNFdhV+T9Pv9KO1RwlqbCWTY=)
                          2: AS61592.roa (hash: ZgbmXuMTCrD5g/Ssmy2RLfvb6fAQqwaGppmYt9+Xhog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0b:e0:a2:8f:86:bf:59:de:27:6d:d0:cf:a5:3a:08:07:af:f0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F
        Validity
            Not Before: Apr 15 05:50:25 2024 GMT
            Not After : Apr 16 06:57:25 2024 GMT
        Subject: CN=7902CE48BDA425EA7E63105AB577C856E965586A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:99:84:bb:4b:df:0e:0e:31:b2:8f:61:50:
                    60:56:04:2c:b5:42:5e:ba:0f:57:fc:bb:b4:cf:b5:
                    80:9a:1a:c1:cc:e0:2b:41:56:20:b7:3d:ca:c5:41:
                    ce:1f:e0:ba:67:60:93:7a:c9:1b:0d:f3:ba:15:29:
                    b8:95:d0:b9:79:5c:01:d4:6a:23:89:f6:af:48:69:
                    0b:d1:a4:1d:6b:67:53:61:d4:ed:a3:76:bf:b2:34:
                    97:88:83:e8:57:9d:f1:5f:fd:0d:8c:57:0f:39:ff:
                    ca:fc:bb:2c:01:02:ed:bb:a0:5f:e5:8c:d4:ef:82:
                    b9:aa:65:53:25:c7:d6:ed:16:3c:a8:bd:45:71:e0:
                    ab:fb:de:61:7a:ce:75:fb:4f:a7:4f:85:6a:b6:ce:
                    c0:58:70:ed:6e:68:2f:4b:f1:54:d2:5f:72:13:af:
                    56:af:af:0e:33:51:c3:d0:44:00:d9:5f:4b:63:90:
                    01:2e:50:6e:44:c0:60:c8:87:67:f2:e0:e0:60:a3:
                    82:56:45:a5:58:ab:c0:dc:f5:d2:c3:49:34:40:ec:
                    a7:c9:3b:fe:17:6c:9f:88:04:41:2d:75:60:d6:1e:
                    06:4b:ca:d9:f0:34:b8:88:8a:73:25:5a:f7:dc:a7:
                    d1:5c:76:6f:cd:02:ac:f8:b0:b8:e9:a4:c3:a9:ef:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:CE:48:BD:A4:25:EA:7E:63:10:5A:B5:77:C8:56:E9:65:58:6A
            X509v3 Authority Key Identifier:
                keyid:6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:27:07:e6:f3:dd:c2:22:85:39:99:c8:40:82:fb:03:96:
         a5:1d:83:d4:2b:f7:be:3c:81:00:91:92:c7:1e:32:03:a2:6b:
         79:4c:13:72:d6:71:a3:72:01:33:22:97:1d:c9:8f:5d:2d:e3:
         8c:81:0f:07:72:19:9c:b9:51:f6:a0:6f:92:b1:6b:49:ba:d2:
         99:8a:0b:6c:54:d0:14:36:6f:af:5d:9c:6a:0a:5d:cd:0f:39:
         28:aa:42:8c:01:cc:4a:77:7f:31:fc:89:5b:26:16:3e:2e:ab:
         95:c6:ed:3b:2b:74:ef:fb:67:fa:3d:0b:f0:cb:ee:c7:ca:66:
         84:5a:99:a9:5f:07:b8:7b:3d:83:04:21:a1:42:b6:d6:61:63:
         e4:80:2a:e5:1a:84:35:32:8b:5d:75:94:14:0e:64:91:5f:77:
         7f:5e:19:1a:96:8b:32:14:36:02:c3:e7:9f:d0:2d:cd:13:b1:
         ec:e7:1d:0a:1c:f9:00:e5:6b:1c:10:d2:04:6f:1e:36:69:25:
         5a:09:95:e8:d4:d1:4c:83:b8:ec:39:5e:3e:33:1b:79:16:0c:
         cb:ff:a9:68:2d:50:55:5a:a0:89:ae:16:00:bf:7d:e5:ad:5c:
         b3:7f:e1:89:bc:3e:9b:32:36:35:23:b7:c1:6f:12:8b:1f:f9:
         15:c3:b6:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHwvgoo+Gv1neJ23Qz6U6CAev8PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFCNkUxNkU4RjE2MTY5NzBGMUJDRTRDQ0EyM0RGQ0ZG
N0IwRkI5RjAeFw0yNDA0MTUwNTUwMjVaFw0yNDA0MTYwNjU3MjVaMDMxMTAvBgNV
BAMTKDc5MDJDRTQ4QkRBNDI1RUE3RTYzMTA1QUI1NzdDODU2RTk2NTU4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4ZmEu0vfDg4xso9hUGBWBCy1
Ql66D1f8u7TPtYCaGsHM4CtBViC3PcrFQc4f4LpnYJN6yRsN87oVKbiV0Ll5XAHU
aiOJ9q9IaQvRpB1rZ1Nh1O2jdr+yNJeIg+hXnfFf/Q2MVw85/8r8uywBAu27oF/l
jNTvgrmqZVMlx9btFjyovUVx4Kv73mF6znX7T6dPhWq2zsBYcO1uaC9L8VTSX3IT
r1avrw4zUcPQRADZX0tjkAEuUG5EwGDIh2fy4OBgo4JWRaVYq8Dc9dLDSTRA7KfJ
O/4XbJ+IBEEtdWDWHgZLytnwNLiIinMlWvfcp9Fcdm/NAqz4sLjppMOp7+BxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeQLOSL2kJep+YxBatXfIVullWGowHwYDVR0j
BBgwFoAUarbhbo8WFpcPG85MyiPfz/ew+58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC82QUI2RTE2RThGMTYxNjk3MEYxQkNFNENDQTIzREZDRkY3QjBGQjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBQjZFMTZFOEYxNjE2OTcw
RjFCQ0U0Q0NBMjNERkNGRjdCMEZCOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84bXAvMC82
QUI2RTE2RThGMTYxNjk3MEYxQkNFNENDQTIzREZDRkY3QjBGQjlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi+MnB+bz3cIihTmZyECC+wOWpR2D1Cv3vjyBAJGSxx4yA6JreUwTctZxo3IB
MyKXHcmPXS3jjIEPB3IZnLlR9qBvkrFrSbrSmYoLbFTQFDZvr12cagpdzQ85KKpC
jAHMSnd/MfyJWyYWPi6rlcbtOyt07/tn+j0L8Mvux8pmhFqZqV8HuHs9gwQhoUK2
1mFj5IAq5RqENTKLXXWUFA5kkV93f14ZGpaLMhQ2AsPnn9AtzROx7OcdChz5AOVr
HBDSBG8eNmklWgmV6NTRTIO47DlePjMbeRYMy/+paC1QVVqgia4WAL995a1cs3/h
ibw+mzI2NSO3wW8Six/5FcO2UQ==
-----END CERTIFICATE-----