Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.mft
File:                     0C06F299E571AF48038962731D4987C4DAF36E15.mft (raw, json)
Hash identifier:          WQ7g+0E7ie16QqLlO8rpTQhipzzs5nHlzN+gdsCOxVI=
Subject key identifier:   67:EA:2D:3A:5C:EA:BE:98:5E:27:FD:5B:B6:1F:F5:FE:7D:44:2B:3C
Authority key identifier: 0C:06:F2:99:E5:71:AF:48:03:89:62:73:1D:49:87:C4:DA:F3:6E:15
Certificate issuer:       /CN=0C06F299E571AF48038962731D4987C4DAF36E15
Certificate serial:       28E967BCCE3D597EDA96BBC2F36B1810CB7A8DF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C06F299E571AF48038962731D4987C4DAF36E15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.mft
Manifest number:          49
Signing time:             Mon 27 May 2024 16:50:00 +0000
Manifest this update:     Mon 27 May 2024 16:45:00 +0000
Manifest next update:     Tue 28 May 2024 20:39:00 +0000
Files and hashes:         1: 0C06F299E571AF48038962731D4987C4DAF36E15.crl (hash: aGqk3Et/7Kt5tj+tTLI7xpH+SsYO0ukW324sH0QOUtI=)
                          2: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: EFFTtvuJika6eo/9ROd6RvHoKcJdMxC9ZyYVG1bJsIA=)
                          3: 323830343a346464303a3a2f33322d3334203d3e20323638323231.roa (hash: 0ghkon4bp+PwkeO2RRhdkpM2weFJBvTFEPdPTxlv17s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e9:67:bc:ce:3d:59:7e:da:96:bb:c2:f3:6b:18:10:cb:7a:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C06F299E571AF48038962731D4987C4DAF36E15
        Validity
            Not Before: May 27 16:45:00 2024 GMT
            Not After : May 28 20:39:00 2024 GMT
        Subject: CN=67EA2D3A5CEABE985E27FD5BB61FF5FE7D442B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:d1:ab:78:60:e8:bf:9f:a6:22:93:e7:74:
                    78:18:0d:20:ef:11:f9:91:39:5b:0b:7f:98:b4:95:
                    18:d7:f3:a7:8d:17:61:db:22:ea:07:35:32:a2:b8:
                    c1:89:c8:75:26:4b:e4:07:a0:e0:1f:a9:e7:b6:2b:
                    7c:83:92:b5:23:46:b9:76:35:c7:f6:27:d2:eb:2c:
                    ba:3b:94:5a:5f:5c:b6:16:88:8c:69:73:5d:00:0a:
                    54:ef:df:58:e5:13:1e:66:09:16:e6:82:b6:69:41:
                    6b:f6:52:36:50:f3:35:58:61:93:2c:d3:36:c8:85:
                    c1:d4:3e:9d:d6:f2:78:06:51:3c:db:dc:43:82:50:
                    10:0d:2b:c4:d3:28:d0:b8:79:0e:66:aa:3c:e1:ed:
                    a3:c6:d4:a9:57:30:a2:7c:ea:23:e5:c9:7b:fb:db:
                    b2:b4:83:6f:48:bb:b8:81:67:33:f1:a1:a7:18:be:
                    a6:3c:3d:06:1b:d8:ba:5e:06:90:76:01:0f:05:e8:
                    73:a8:be:4f:ae:88:d6:9f:99:3d:e6:f2:92:10:2d:
                    5d:94:ec:1d:d7:0d:3b:43:38:3b:95:3c:a6:62:ab:
                    54:e8:d5:83:43:66:e5:46:73:3c:3a:c5:bd:28:f0:
                    8d:7e:6e:7d:44:b1:56:65:bf:10:20:df:06:36:2d:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:2D:3A:5C:EA:BE:98:5E:27:FD:5B:B6:1F:F5:FE:7D:44:2B:3C
            X509v3 Authority Key Identifier:
                keyid:0C:06:F2:99:E5:71:AF:48:03:89:62:73:1D:49:87:C4:DA:F3:6E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C06F299E571AF48038962731D4987C4DAF36E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/1/0C06F299E571AF48038962731D4987C4DAF36E15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:44:6c:fa:f4:2d:07:7e:f1:e4:a4:4f:6a:e2:04:d8:a6:
         fc:9a:e2:ec:fb:27:d0:ed:16:67:a0:8c:36:f2:56:7f:fa:69:
         5e:4a:ab:33:5e:87:1b:0b:e8:bf:6c:80:d8:94:c2:a7:c1:5e:
         6a:83:a4:26:58:bd:03:a3:ea:1b:14:83:05:01:11:01:61:e8:
         c3:44:41:ad:4d:b6:c7:c9:45:70:48:68:c5:bd:3d:79:d9:60:
         ab:6d:e3:af:ef:4d:aa:43:1b:ce:64:9c:b9:14:d9:6c:45:11:
         80:c4:a7:0a:5f:9a:77:66:bb:bf:f9:ef:7f:47:e8:3b:16:fb:
         4d:05:5a:1f:e9:f3:4c:c0:9e:bd:01:50:e1:b9:6e:68:8f:95:
         0e:63:50:59:ab:80:8b:0e:2c:32:c3:36:2c:05:a9:f5:51:42:
         37:8b:ab:a1:6c:4b:51:e8:24:45:ae:50:ec:00:88:b3:67:ce:
         b8:3b:fc:8d:65:2b:32:2f:79:ac:99:78:4f:9b:9b:69:9d:b2:
         97:f6:cc:7d:fa:21:4f:ce:61:1b:63:db:45:31:f7:19:41:d5:
         3f:f4:a5:d7:04:94:00:3b:ff:d2:64:d3:fe:c4:d4:de:b7:54:
         e9:a7:7a:55:a3:cd:33:9b:de:ae:ad:c2:c2:c6:58:f5:70:04:
         85:ec:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----