Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.mft
File:                     491DF027C89335A18A3A28961D8C093B7FAF2B03.mft (raw, json)
Hash identifier:          PTXNwuQRQiy47MiS7t2l+e1WuF/jvV6Hzhp+vvaXlcU=
Subject key identifier:   62:4E:C5:72:53:03:13:2C:C4:DC:D5:97:D1:39:A3:64:A4:42:DB:4D
Authority key identifier: 49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03
Certificate issuer:       /CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
Certificate serial:       65652EDF2DBA886B0C5DC5E835A316E69C36E37F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.mft
Manifest number:          06
Signing time:             Thu 10 Oct 2024 20:30:50 +0000
Manifest this update:     Thu 10 Oct 2024 20:25:50 +0000
Manifest next update:     Fri 11 Oct 2024 22:35:50 +0000
Files and hashes:         1: 323830343a366264343a3a2f33322d3336203d3e20323730343238.roa (hash: 2rVZv2QBEVkF2bLrXfeYtc3hvBKYjeFGOl6+nIRgAn8=)
                          2: 491DF027C89335A18A3A28961D8C093B7FAF2B03.crl (hash: 11RcDmyundiesHtzwAJeryNekuEwnIm4GAsW7uIb4js=)
                          3: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: F6N5Km5oG7UEOJjoellJmKh/r8SI/PuXdrzF9FJXhqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:2e:df:2d:ba:88:6b:0c:5d:c5:e8:35:a3:16:e6:9c:36:e3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
        Validity
            Not Before: Oct 10 20:25:50 2024 GMT
            Not After : Oct 11 22:35:50 2024 GMT
        Subject: CN=624EC5725303132CC4DCD597D139A364A442DB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:fc:64:f3:ca:05:f0:d7:fe:bb:94:ba:67:
                    eb:8b:98:c5:7b:a0:03:ca:6f:1c:22:00:e8:93:89:
                    a7:ab:7f:75:20:59:fe:30:40:eb:cd:ce:ba:43:bf:
                    fe:50:52:ed:81:90:34:2c:78:f8:29:db:40:1c:e3:
                    2a:f8:49:2e:33:f1:66:b6:e5:12:f5:14:1b:ec:1e:
                    aa:78:56:21:5a:ec:7c:67:63:49:ac:56:f1:78:59:
                    f2:f1:09:77:c2:26:dc:65:33:ef:67:21:79:44:44:
                    bb:03:3d:7d:8a:8d:d2:a0:73:14:12:1a:d5:b6:1b:
                    58:2e:e6:94:a0:ff:21:91:c3:9b:96:93:7b:79:a7:
                    78:f1:e3:fd:06:65:a1:03:09:dd:aa:38:12:af:65:
                    64:a5:10:d1:47:de:69:ba:34:a5:c2:6a:46:12:62:
                    dc:be:09:5d:99:13:ab:c4:6d:47:be:12:2a:f8:9d:
                    ee:b7:ea:80:c7:f1:43:fd:38:9a:5d:4a:ff:e0:10:
                    ca:d5:85:19:ab:3b:b0:15:fa:5e:72:fd:8e:19:8a:
                    f4:25:31:a8:95:0a:0f:b9:ec:3e:98:97:95:1d:73:
                    de:01:df:9d:99:26:32:58:e9:29:c0:62:29:e5:3f:
                    a8:ab:26:73:77:0f:42:f3:99:a2:d9:b6:98:7f:ae:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4E:C5:72:53:03:13:2C:C4:DC:D5:97:D1:39:A3:64:A4:42:DB:4D
            X509v3 Authority Key Identifier:
                keyid:49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:58:26:49:13:a3:a0:da:a4:42:dd:0d:80:5b:fe:8f:e3:
         1f:d5:44:d9:cc:d5:36:f2:bf:68:30:2a:d9:e2:e1:da:41:41:
         b9:7e:9a:62:b3:4b:0a:99:3b:69:b0:02:0a:3d:3b:eb:6e:74:
         29:bd:f0:15:c8:da:ec:17:d8:85:09:14:99:d4:ce:ad:cf:4a:
         7b:33:22:41:5e:81:1c:fd:50:03:5e:01:f0:68:30:d4:39:54:
         37:4c:29:29:e5:f5:b3:9e:29:8d:c5:d3:7d:fa:72:e5:2d:fa:
         85:50:56:b0:5f:9f:18:7c:a0:33:be:cc:b7:dc:6f:b8:6f:82:
         4c:97:77:dd:e5:3c:22:90:b7:fe:7b:01:fb:49:f5:c8:75:ff:
         50:50:9d:28:3d:77:8f:05:f5:30:49:66:c3:3b:80:b4:d0:f4:
         e6:d1:a4:48:a2:e5:9f:88:36:ca:bb:9d:ac:0c:b2:58:53:c6:
         89:9e:43:c2:58:d5:1e:63:74:d2:f1:6b:10:67:4e:51:18:86:
         ea:d4:03:ae:ba:1b:13:fd:7e:84:3e:b3:bf:f8:05:e3:6c:9b:
         22:64:b5:5b:9a:f5:02:e7:55:1d:82:f7:89:53:8c:69:ea:2a:
         30:b3:a7:c3:e9:de:a1:cb:2f:5f:67:ec:66:73:d6:9e:b4:dc:
         20:fe:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----