Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft
File:                     6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft (raw, json)
Hash identifier:          5TE/ILBIEGL1AanPErGVtyJ1Su5M28C2t7hiCy+vQKs=
Subject key identifier:   2C:0D:5A:94:FC:EF:B3:A1:D4:A8:FD:94:A2:B5:67:AB:9C:55:2B:A0
Authority key identifier: 6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8
Certificate issuer:       /CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
Certificate serial:       52B45A5E52F7E7462953E896493D9BAF8634C2D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft
Manifest number:          011E
Signing time:             Sun 14 Apr 2024 18:50:52 +0000
Manifest this update:     Sun 14 Apr 2024 18:45:52 +0000
Manifest next update:     Mon 15 Apr 2024 21:34:52 +0000
Files and hashes:         1: 3137302e38312e3136342e302f32322d3234203d3e20323636343138.roa (hash: SsVcRcCR9kcw27JLg8Nm6mcw7tUXYSMSOE2uDFBvG9Q=)
                          2: 323830343a333737633a3a2f33322d3438203d3e20323636343138.roa (hash: 6/CrmkQtff1g3nDPEo/3X9xmfUKgIft++LwEM1XQIhE=)
                          3: 6C09F94E9C74C1F19763139DE321D52AD02F1DB8.crl (hash: QaW2ArVpuBNbK3UALtO5KQ6RX+/Je+z9HVK7NTfXks0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b4:5a:5e:52:f7:e7:46:29:53:e8:96:49:3d:9b:af:86:34:c2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C09F94E9C74C1F19763139DE321D52AD02F1DB8
        Validity
            Not Before: Apr 14 18:45:52 2024 GMT
            Not After : Apr 15 21:34:52 2024 GMT
        Subject: CN=2C0D5A94FCEFB3A1D4A8FD94A2B567AB9C552BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:93:1c:6b:22:3f:df:62:e7:fe:44:86:b0:
                    08:cb:61:02:0c:d9:19:43:1a:d4:a0:c8:31:4f:07:
                    eb:6c:8a:5e:8d:af:07:49:72:69:61:c2:93:ba:6b:
                    94:15:79:54:7a:bf:12:8e:cf:1b:5b:ec:d7:92:7c:
                    83:c4:4e:a9:a7:48:70:0c:df:77:e4:b8:c5:10:8e:
                    2e:24:97:85:29:88:7e:d3:c2:63:70:f5:41:82:1d:
                    db:30:b4:58:4d:ea:26:8c:60:dd:7c:6f:de:94:75:
                    b0:ce:f4:b8:7d:25:63:26:1f:4e:3b:5f:99:14:1a:
                    44:eb:90:41:a8:ed:e4:f6:54:9e:24:ed:7d:b8:5d:
                    da:a8:8b:af:b4:38:81:44:97:43:c9:c2:7a:b0:3c:
                    f4:7b:c3:f1:eb:a2:e5:95:76:98:18:37:f3:c6:49:
                    5b:a5:b0:d8:46:f7:13:10:28:42:01:21:f8:99:10:
                    1b:c9:65:1e:c7:25:60:28:06:88:17:4f:f1:ce:f9:
                    b1:e0:3c:48:a0:44:37:6a:72:90:ba:a1:a5:72:94:
                    55:ea:9c:85:bc:b5:15:bd:12:bc:87:37:90:ce:e7:
                    94:bd:7d:3d:ae:52:db:5e:eb:1e:bc:4a:47:a8:33:
                    02:37:29:73:9c:83:20:17:a9:86:5d:a8:e8:70:6b:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:5A:94:FC:EF:B3:A1:D4:A8:FD:94:A2:B5:67:AB:9C:55:2B:A0
            X509v3 Authority Key Identifier:
                keyid:6C:09:F9:4E:9C:74:C1:F1:97:63:13:9D:E3:21:D5:2A:D0:2F:1D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/6C09F94E9C74C1F19763139DE321D52AD02F1DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:71:d1:fb:1e:cb:9a:98:79:bf:e3:00:ca:a9:a7:c5:fe:
         9b:ea:e2:79:01:8c:bd:5a:49:e5:7c:df:47:db:f5:30:62:63:
         8e:48:0a:bf:20:c1:0b:67:b0:15:16:9f:33:a1:85:c5:a3:aa:
         72:5d:95:d2:69:41:a9:a7:bc:57:c5:6b:a5:97:e3:f2:7d:a0:
         3a:41:13:43:95:6c:36:d4:26:dc:2d:3e:92:db:5c:4e:a6:f5:
         df:6c:4d:bc:47:ac:73:1c:c6:f9:47:f9:b8:b5:22:8f:5d:c0:
         1b:f2:f3:fb:a1:e5:fa:a3:ef:1b:31:93:27:c5:ca:f7:89:c0:
         88:f2:f4:e4:08:df:b5:37:c1:e4:72:bc:11:e9:9a:67:f9:8a:
         25:cf:7c:7a:40:69:0b:36:cf:11:85:8f:a6:fc:3f:b6:5c:32:
         7c:2d:68:2e:19:3e:7c:9f:40:d9:33:47:16:f0:04:cb:45:cc:
         db:d5:ff:48:66:61:b1:4b:e1:b9:d5:50:22:56:31:bb:c8:53:
         36:f5:83:24:31:d9:8d:68:98:8c:2f:a4:77:6c:e9:78:a9:09:
         0a:b7:fc:d2:8a:5d:84:92:68:9e:b2:c3:f9:58:16:94:71:3e:
         86:c5:3c:4b:cc:80:bc:64:ab:6a:38:2a:0d:b1:12:80:23:ae:
         fa:1c:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----