Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft
File:                     61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft (raw, json)
Hash identifier:          o9MJL90ydLxraQbOC91WcaE7JFZLt6pwIPD8xbIphnw=
Subject key identifier:   70:F5:42:E8:ED:D2:97:11:1D:8B:70:CB:39:26:06:31:57:78:7C:2A
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       07060DEAF05C9B1D73146DC1133893D647CBBA6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft
Manifest number:          04E6
Signing time:             Sun 14 Apr 2024 21:36:23 +0000
Manifest this update:     Sun 14 Apr 2024 21:31:23 +0000
Manifest next update:     Mon 15 Apr 2024 23:12:23 +0000
Files and hashes:         1: 61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl (hash: Xu64p0iRHFCqID226o6nzSCgG1gyFw4LMJ7snVkUV6E=)
                          2: 323830343a366163383a3a2f33322d3438203d3e20323730333538.roa (hash: G0x9ZSSQBKeao9TGroBKdQ3KUhrGAzTrr0KTh60rFJU=)
                          3: 3139302e38392e37322e302f32322d3234203d3e20323730333538.roa (hash: k1nifSLPnA3C3teEr+owXsf3cyQEwIWzzyXhKpGPM4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:06:0d:ea:f0:5c:9b:1d:73:14:6d:c1:13:38:93:d6:47:cb:ba:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Apr 14 21:31:23 2024 GMT
            Not After : Apr 15 23:12:23 2024 GMT
        Subject: CN=70F542E8EDD297111D8B70CB3926063157787C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:7b:51:82:8e:08:9f:18:66:69:11:cd:ed:
                    c1:b4:45:32:dd:b2:54:99:9b:51:32:d6:de:b3:6b:
                    37:5a:fa:32:21:90:7c:cb:20:cf:1d:e0:17:82:e2:
                    24:d9:11:7b:52:16:90:1b:22:44:46:56:e9:0d:36:
                    37:7e:fa:8e:42:60:b3:06:d4:cb:ab:c6:dc:d5:11:
                    e2:4c:d8:fa:34:7b:dc:0e:9c:26:c7:5e:de:4c:fa:
                    e7:80:97:42:32:89:39:f4:ae:e8:7f:e9:9b:e7:d7:
                    71:ec:52:9a:8d:2f:0d:92:eb:d9:1f:e6:bb:6b:91:
                    6f:11:83:f7:34:cf:ae:2e:d3:16:3f:cb:69:91:a1:
                    98:6f:bf:7a:87:7c:c7:2c:7e:44:bb:0a:7d:4b:80:
                    aa:3c:b1:95:81:5d:9b:44:88:3e:db:31:5b:43:a8:
                    77:52:1a:39:77:a3:06:4f:0a:2b:ed:89:06:cf:a6:
                    c5:89:65:bf:74:7b:a3:95:9f:03:48:85:61:66:18:
                    9b:6d:93:a4:d5:0e:86:db:fc:46:e6:cf:c5:66:87:
                    d7:72:9b:05:ae:45:73:13:ff:a6:d9:20:f7:34:ec:
                    ee:3c:f9:54:4a:cf:e8:1d:91:12:52:71:87:a0:55:
                    e9:7b:da:d4:39:14:d5:ed:9b:9d:69:4b:e6:dc:3e:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:42:E8:ED:D2:97:11:1D:8B:70:CB:39:26:06:31:57:78:7C:2A
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:a4:5b:71:02:27:ec:a2:79:d8:58:55:fc:00:65:22:32:
         f0:c5:0b:34:1b:0e:94:b8:52:61:a8:99:83:38:ca:57:b4:1c:
         c1:e0:0e:c1:06:0b:09:48:07:ff:44:e0:47:de:9b:f4:c1:33:
         71:f5:9d:5f:0d:ae:56:5f:e4:44:61:cd:ab:c9:d8:5e:5a:37:
         58:b2:17:8b:5e:dd:2b:94:65:45:76:f1:11:c3:3d:06:f3:eb:
         82:1d:01:67:5b:66:22:33:bd:c6:d3:1e:b2:b4:d9:04:ee:ca:
         97:66:5e:a0:f0:0e:b5:3d:dc:11:09:97:1f:90:90:af:21:65:
         85:a8:7f:a8:d5:4e:63:ed:d0:34:c7:0f:ad:53:f4:fe:20:50:
         18:b6:44:da:93:84:48:aa:9b:fa:11:b4:c8:a4:59:0d:b0:72:
         14:d0:9a:c5:f4:d8:e5:c4:29:9b:99:e0:f9:df:ce:4b:44:5f:
         42:26:4f:fa:5b:93:6d:39:16:f8:f6:6d:07:ad:a5:6c:57:f8:
         9a:41:f9:c4:a1:16:32:07:39:5c:85:d6:28:97:66:22:49:2f:
         ea:57:32:5f:9e:5a:05:09:50:ef:08:66:59:98:a5:15:de:a8:
         64:dd:8b:ce:b3:89:20:d4:38:11:f9:86:74:ad:ea:46:c0:9d:
         f5:39:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----