Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.mft
File:                     C2D6DB4889AAB61CF2394BF662E1E490795A4EED.mft (raw, json)
Hash identifier:          JJ+6LlZV6Ac8DkYNCn1yJ1Aadzrdk3DbJcUIvcjCgvY=
Subject key identifier:   24:78:94:92:B9:30:A9:31:67:09:BF:27:0C:C4:01:59:B7:CD:C2:E0
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       3CCB5CBE630865466C3493A28CE72D298D65A6AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.mft
Manifest number:          F6
Signing time:             Sun 06 Oct 2024 00:04:00 +0000
Manifest this update:     Sat 05 Oct 2024 23:59:00 +0000
Manifest next update:     Mon 07 Oct 2024 02:51:00 +0000
Files and hashes:         1: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: NLTxSRr/joTK3cS+e0uW/5vLIESLmIH9/pKItVFkjkY=)
                          2: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: eBqyfM44qtxC0rAorTVIyircZ62CS8ofT2moz1pXu+s=)
                          3: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: QcR5X8zoT+cKHM5/5/puNOCH7HSVQGjwV8TdHgOlbo8=)
                          4: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: k3xQYgSg6oK20lvvPXTAwA0GHfxbq6Apy1ijPFGenX4=)
                          5: C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl (hash: enp4n/+Ad7Wx2cN88qhWJI3gl6D4iZEcfGJBtAuVda4=)
                          6: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: tusF0qV1LUEcvQ0WsmBFnUrHWETiQ2s17wGEL61I4HM=)
                          7: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: NC2GFn8kU3eVkA3RzSZPoh7uINYz74qQK6nMsP4cUtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:5c:be:63:08:65:46:6c:34:93:a2:8c:e7:2d:29:8d:65:a6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Oct  5 23:59:00 2024 GMT
            Not After : Oct  7 02:51:00 2024 GMT
        Subject: CN=24789492B930A9316709BF270CC40159B7CDC2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:4f:cd:73:17:2b:ef:3e:fb:e4:7c:f6:d3:
                    ad:c9:ae:e4:85:79:cb:7e:23:89:6f:9c:63:8a:0a:
                    fc:a6:69:d7:d8:10:dd:f4:d6:19:92:b1:e3:db:97:
                    76:90:8f:b0:0d:ef:7a:53:63:15:00:a4:3f:e7:08:
                    5f:94:1e:12:fc:6d:9e:c7:e3:91:28:7b:09:ed:c8:
                    f4:ab:ee:18:84:84:e6:9f:0e:a7:d3:0d:c3:ae:33:
                    45:63:04:29:e0:19:59:fa:84:f0:56:db:e7:db:89:
                    f2:2e:d4:09:20:86:93:07:aa:91:5a:52:a1:92:c5:
                    68:66:31:12:f4:88:9a:52:61:dc:53:f1:85:f1:54:
                    66:c4:1d:c5:f7:07:aa:42:d4:c0:ee:41:71:ec:da:
                    7d:e0:6a:c2:a3:35:1c:57:dc:55:91:0e:eb:87:c0:
                    cf:db:ed:34:00:72:8a:f6:0d:8e:ac:1b:a3:b2:4b:
                    ce:9c:d7:41:fc:fe:1c:d7:75:56:71:00:4b:a3:92:
                    bd:16:a9:57:b7:69:90:ad:f1:0c:46:44:33:85:16:
                    79:01:39:78:61:fa:d7:ac:d2:f9:04:78:9a:90:ee:
                    96:af:69:4b:08:55:93:28:63:48:45:e7:db:b5:20:
                    db:69:4c:4e:a3:5c:24:07:0c:be:6d:f5:0d:c4:3c:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:94:92:B9:30:A9:31:67:09:BF:27:0C:C4:01:59:B7:CD:C2:E0
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:08:fd:5b:0e:14:18:6b:fa:cd:8e:1e:9c:cb:3b:60:bd:ea:
         de:c6:ee:97:68:32:df:f1:e2:60:16:97:40:e0:d3:78:d7:5f:
         86:9a:5d:f7:82:6b:e4:f8:52:51:4e:93:94:fb:ad:79:31:96:
         1b:f8:65:b1:ad:bf:55:72:e0:53:2e:2b:9a:b7:ca:25:ba:af:
         36:2e:ad:e6:70:7f:3b:ea:6b:49:d4:b6:47:8e:e4:2e:a5:fd:
         12:20:bf:02:c4:33:67:fa:2e:62:08:bb:13:09:a5:94:7d:44:
         df:c7:7f:11:41:dc:18:e4:e7:9a:4f:d0:89:ad:5d:25:81:1b:
         9e:cd:e0:c3:73:2c:d7:47:ad:38:7c:91:58:d7:ac:13:b1:72:
         af:23:41:0c:9b:1e:c3:7d:43:74:c9:61:ec:d0:0a:93:4a:18:
         06:10:c6:4c:78:6a:2c:36:8b:ff:80:cc:b1:28:19:a0:10:d7:
         31:05:31:c2:42:f3:9b:ec:b9:f9:6b:03:04:d6:46:79:8d:5b:
         98:d7:c9:1a:69:90:9c:2d:2b:20:00:07:db:53:37:9f:ca:49:
         15:d6:6d:18:10:94:d3:ac:6a:d9:2b:f9:4a:8b:50:93:a7:0b:
         70:cb:dc:3b:b0:b1:38:e4:49:b6:31:43:84:ff:95:8e:f6:6c:
         d1:43:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 23:51:30 2024 by rpki-client on console-ams.rpki-client.org