Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.mft
File:                     6FF8AADDFC591015FA1AADC08B1B258BB6366A79.mft (raw, json)
Hash identifier:          oQmlhpS6W4qXFXgYsbKiktITVgP1u5o2ZSxLuZB3Ahw=
Subject key identifier:   B5:C7:07:8A:BD:71:E9:EB:98:92:F2:CA:09:46:99:59:3A:8A:73:56
Authority key identifier: 6F:F8:AA:DD:FC:59:10:15:FA:1A:AD:C0:8B:1B:25:8B:B6:36:6A:79
Certificate issuer:       /CN=6FF8AADDFC591015FA1AADC08B1B258BB6366A79
Certificate serial:       1708251DB49B0E173F411A632958E879F4D75182
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.mft
Manifest number:          4D
Signing time:             Tue 10 Oct 2023 09:54:53 +0000
Manifest this update:     Tue 10 Oct 2023 09:49:53 +0000
Manifest next update:     Wed 11 Oct 2023 11:29:53 +0000
Files and hashes:         1: 323830343a376663383a3a2f33322d3336203d3e20323731373039.roa (hash: xth6sWS7jnU25I+UtzaXn0cHM3qQsQSJME8m1cm/te4=)
                          2: 6FF8AADDFC591015FA1AADC08B1B258BB6366A79.crl (hash: AANa2IEP7ejAT5RIkOCfw8ohChYgL+CPYgAo50HeZNg=)
                          3: 3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (hash: euyPt7ojSVH5CU1zc9qPp0lH+zrWN+6QRK3/cv/MkLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:25:1d:b4:9b:0e:17:3f:41:1a:63:29:58:e8:79:f4:d7:51:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF8AADDFC591015FA1AADC08B1B258BB6366A79
        Validity
            Not Before: Oct 10 09:49:53 2023 GMT
            Not After : Oct 11 11:29:53 2023 GMT
        Subject: CN=B5C7078ABD71E9EB9892F2CA094699593A8A7356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:26:ba:fe:bd:32:41:61:c9:08:f1:fe:31:
                    96:28:93:04:2e:3f:93:06:11:47:7e:ac:c7:cd:5e:
                    9b:0e:b1:ec:4e:9b:62:a8:89:37:11:b8:13:85:72:
                    9f:e7:68:91:a0:90:7a:fb:75:05:ae:48:3f:65:be:
                    0a:7d:22:db:e6:d9:0a:72:83:e3:ef:27:09:9e:81:
                    96:c6:8f:20:4d:03:d9:ce:d2:9d:1c:0b:78:9c:93:
                    87:99:0b:7b:18:c0:b5:fb:35:61:c8:04:77:e4:e4:
                    f5:61:4e:fb:42:da:ff:de:95:ae:1f:30:24:ed:68:
                    c5:21:a5:5e:6b:03:fa:9c:7a:36:59:1d:f7:a0:b5:
                    10:bb:26:55:44:b7:32:9d:a8:08:03:2e:7d:aa:57:
                    9f:f7:33:26:fb:21:30:ca:63:e8:20:f9:92:eb:e6:
                    db:f4:70:5f:5f:e0:0c:7b:67:bb:91:98:87:77:20:
                    0c:9f:6a:ca:94:8e:9d:e3:c3:43:06:14:f1:09:7f:
                    ae:04:59:41:95:c6:4b:7d:ee:d3:75:fb:de:36:ef:
                    12:8a:2f:7d:26:b1:2a:e4:f1:88:fe:d9:ea:63:59:
                    12:7b:10:a7:74:f5:ac:b1:d0:12:c5:a6:90:a6:3d:
                    b0:d7:10:f5:16:9c:42:34:16:6c:74:3e:19:4d:b1:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:07:8A:BD:71:E9:EB:98:92:F2:CA:09:46:99:59:3A:8A:73:56
            X509v3 Authority Key Identifier:
                keyid:6F:F8:AA:DD:FC:59:10:15:FA:1A:AD:C0:8B:1B:25:8B:B6:36:6A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/0/6FF8AADDFC591015FA1AADC08B1B258BB6366A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:b7:ab:7b:61:fe:e4:a7:7e:d8:eb:c3:00:57:91:55:8b:
         9e:d8:de:c5:7e:c0:e8:07:b9:f4:1b:d5:a7:d1:e8:dc:c4:fa:
         ab:0c:73:7a:28:24:7a:24:05:56:fc:e6:b5:0a:b5:5b:10:03:
         e6:be:79:09:8c:a5:6f:b8:83:86:b5:eb:7f:57:38:82:84:4f:
         3f:66:16:69:ed:c5:a4:9e:b6:3f:d5:b2:91:57:7e:be:db:bf:
         3a:96:fa:ba:71:55:67:3e:a3:77:b9:cf:94:53:28:91:d4:d8:
         a2:a8:cd:85:79:e8:47:14:ef:b1:97:96:2c:5d:f7:8a:9f:9a:
         6a:bc:33:ff:a0:2d:57:2b:f1:0d:91:4f:99:3c:ad:11:08:72:
         24:67:03:b7:88:f1:5d:e4:39:f3:2e:7e:51:6f:bf:aa:e3:29:
         d1:ce:6c:78:6c:b7:b9:c2:ff:b3:d0:c3:58:54:84:04:9e:73:
         33:f3:27:b0:ef:e9:a2:8f:d7:d0:db:e8:e4:51:72:3c:2f:90:
         05:ad:75:98:e1:4f:a2:c7:36:0d:51:72:2d:ee:40:cb:5a:bb:
         92:20:fe:8d:f5:64:41:d4:5b:e2:a4:c4:a0:80:b1:01:14:d9:
         48:26:06:ed:6a:f2:ce:04:6d:ff:61:b2:e4:34:9f:9b:02:2a:
         4a:2a:85:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFwglHbSbDhc/QRpjKVjoefTXUYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGOEFBRERGQzU5MTAxNUZBMUFBREMwOEIxQjI1OEJC
NjM2NkE3OTAeFw0yMzEwMTAwOTQ5NTNaFw0yMzEwMTExMTI5NTNaMDMxMTAvBgNV
BAMTKEI1QzcwNzhBQkQ3MUU5RUI5ODkyRjJDQTA5NDY5OTU5M0E4QTczNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzya6/r0yQWHJCPH+MZYokwQu
P5MGEUd+rMfNXpsOsexOm2KoiTcRuBOFcp/naJGgkHr7dQWuSD9lvgp9Itvm2Qpy
g+PvJwmegZbGjyBNA9nO0p0cC3ick4eZC3sYwLX7NWHIBHfk5PVhTvtC2v/ela4f
MCTtaMUhpV5rA/qcejZZHfegtRC7JlVEtzKdqAgDLn2qV5/3Myb7ITDKY+gg+ZLr
5tv0cF9f4Ax7Z7uRmId3IAyfasqUjp3jw0MGFPEJf64EWUGVxkt97tN1+9427xKK
L30msSrk8Yj+2epjWRJ7EKd09ayx0BLFppCmPbDXEPUWnEI0Fmx0PhlNsSkXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtccHir1x6euYkvLKCUaZWTqKc1YwHwYDVR0j
BBgwFoAUb/iq3fxZEBX6Gq3Aixsli7Y2ankwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3
YVUvMC82RkY4QUFEREZDNTkxMDE1RkExQUFEQzA4QjFCMjU4QkI2MzY2QTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGRjhBQURERkM1OTEwMTVG
QTFBQURDMDhCMUIyNThCQjYzNjZBNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3YVUvMC82
RkY4QUFEREZDNTkxMDE1RkExQUFEQzA4QjFCMjU4QkI2MzY2QTc5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdKa3q3th/uSnftjrwwBXkVWLntjexX7A6Ae59BvVp9Ho3MT6qwxzeigkeiQF
VvzmtQq1WxAD5r55CYylb7iDhrXrf1c4goRPP2YWae3FpJ62P9WykVd+vtu/Opb6
unFVZz6jd7nPlFMokdTYoqjNhXnoRxTvsZeWLF33ip+aarwz/6AtVyvxDZFPmTyt
EQhyJGcDt4jxXeQ58y5+UW+/quMp0c5seGy3ucL/s9DDWFSEBJ5zM/MnsO/poo/X
0Nvo5FFyPC+QBa11mOFPosc2DVFyLe5Ay1q7kiD+jfVkQdRb4qTEoICxARTZSCYG
7WryzgRt/2Gy5DSfmwIqSiqFhw==
-----END CERTIFICATE-----