Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft
File:                     6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft (raw, json)
Hash identifier:          syj2gHIKqYTl7e2nl9Clwml9+P4DCEaleGBF9XuCC+I=
Subject key identifier:   97:B6:3C:37:05:38:22:38:46:7C:E9:93:B2:54:B5:2A:B4:57:72:42
Authority key identifier: 62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Certificate issuer:       /CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
Certificate serial:       1027B044F0BD01C492A769C890DC340E74CAB6CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft
Manifest number:          0554
Signing time:             Mon 15 Apr 2024 07:12:15 +0000
Manifest this update:     Mon 15 Apr 2024 07:07:15 +0000
Manifest next update:     Tue 16 Apr 2024 11:10:15 +0000
Files and hashes:         1: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: F//B+mSw6WFD2oPT4ONPSeHbNZThs0VNjtWdbvxJ3Y0=)
                          2: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: mkvhxvyXh5UDKiCLaIQ3SK/IJeOkrn1UMz5MiFMkBy4=)
                          3: 6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl (hash: QGU0PN6D8H0ozHxo5sf9Zb7Q5RV2L9h0n9xnG6bw7RE=)
                          4: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: r4xLc/olycnl/A5L8qxro/IKZTNpZZbDTgc4/MH8NZQ=)
                          5: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: VJOg0I4TMwBhjVozPE3ysczV0SIxHCXlo/8nrsDM1sE=)
                          6: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: KneuCpI3EXoJ2Xva4RZlwgdUiROvyjP1UKdjsJi+wI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:b0:44:f0:bd:01:c4:92:a7:69:c8:90:dc:34:0e:74:ca:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Validity
            Not Before: Apr 15 07:07:15 2024 GMT
            Not After : Apr 16 11:10:15 2024 GMT
        Subject: CN=97B63C3705382238467CE993B254B52AB4577242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:bf:d8:88:f6:a5:9e:26:a6:f8:bf:cb:b3:
                    9e:e9:11:45:6c:0a:e3:49:dc:66:8b:2b:43:c9:5e:
                    d4:7e:7a:a0:57:7a:36:2f:16:ab:2d:ad:8b:22:4f:
                    2d:e0:bb:f4:61:4d:38:77:48:e6:7c:22:27:09:71:
                    a3:5c:43:af:3e:6d:8e:ab:7e:6e:1a:9b:1d:2f:ee:
                    bb:c2:2f:d5:eb:78:06:ae:cf:c1:55:5b:12:46:fa:
                    d9:a4:89:47:8c:dc:89:74:fe:30:5f:ed:eb:0b:e1:
                    38:85:ed:1b:d2:2c:00:38:f4:b0:c2:39:d6:ce:ee:
                    4e:84:cc:ef:9c:87:36:4b:7d:c4:52:9c:df:da:46:
                    b9:2d:cd:6e:28:91:01:f0:b1:e6:2f:bf:62:ca:7d:
                    2b:21:48:00:47:9f:90:0b:28:7e:9b:bf:0e:fc:84:
                    1b:2d:d4:6e:6d:c6:27:8d:31:b7:8e:d0:81:a7:c3:
                    71:78:20:7c:1c:33:19:21:61:48:9b:f4:89:86:59:
                    1e:9e:42:04:5f:29:12:7a:ba:91:2c:54:61:8f:ff:
                    55:23:07:44:b0:54:f9:86:69:76:64:36:9c:b6:2c:
                    7b:ed:90:01:1f:9b:d8:09:25:7d:38:5a:8f:28:8e:
                    db:cc:7c:1e:c2:94:3f:66:34:24:8a:28:28:b9:7b:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:3C:37:05:38:22:38:46:7C:E9:93:B2:54:B5:2A:B4:57:72:42
            X509v3 Authority Key Identifier:
                keyid:62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1d:9a:0f:81:3b:b6:07:c8:b2:24:e3:d6:e0:e6:b9:ae:d5:
         91:be:3a:7e:dd:78:41:87:a1:33:7e:7c:84:53:54:59:af:94:
         e0:e0:28:02:69:9d:40:e1:aa:8e:fb:a7:61:2d:fb:e2:7b:56:
         62:c5:ad:48:4d:48:43:60:5f:17:f9:89:97:a9:41:1e:3d:de:
         2e:d3:f0:8b:7c:65:2d:76:89:c6:4a:f6:ab:19:93:2d:43:83:
         59:07:bc:75:86:ba:bc:ca:55:20:c6:35:85:9a:00:64:fa:92:
         ba:01:dc:83:8c:ab:3e:6f:9e:0d:8f:80:0d:7f:e6:45:4f:f6:
         6f:a1:f4:ba:b5:50:ab:ba:a2:b9:cf:9d:ce:1f:43:6a:4c:3b:
         6e:3a:33:79:f1:29:83:dd:09:f2:8b:13:2a:7d:05:56:3b:ec:
         de:eb:5d:1e:87:57:21:52:67:e4:91:a0:e5:76:1d:68:60:20:
         5f:d9:b4:72:44:db:82:39:93:c0:7b:3c:5b:3d:10:8c:7b:a0:
         e2:ef:38:34:47:f9:b8:0b:8c:bd:99:72:01:5c:67:51:8f:ac:
         eb:ea:73:59:3a:7d:f0:5a:83:d6:66:63:8f:a5:21:ca:35:7d:
         da:13:7a:d5:d6:d5:23:c5:d9:05:4c:97:6f:24:c2:c2:ae:f7:
         cb:ca:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----