Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft
File:                     6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft (raw, json)
Hash identifier:          M0bzKxfFa8+OH3ztF14A18NGAox+AOI6EYhKVOUGdfs=
Subject key identifier:   BE:D2:0A:47:09:B0:A7:79:8B:FA:D4:AE:82:50:05:6A:D2:7F:D8:3D
Authority key identifier: 6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3
Certificate issuer:       /CN=6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3
Certificate serial:       1DF7D4409239FEB9143FDDDA18DBC040FD900973
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft
Manifest number:          0279
Signing time:             Mon 15 Apr 2024 07:01:30 +0000
Manifest this update:     Mon 15 Apr 2024 06:56:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:06:30 +0000
Files and hashes:         1: 323830343a346363343a3a2f33322d3332203d3e20323637333930.roa (hash: zYnFnnKo/Y/GCon8igiDUR5xpHKnCiBDzYcUhydEW6g=)
                          2: 34352e3233352e302e302f32322d3232203d3e20323637333930.roa (hash: Hhk69iQ/BU189HHEvcRLGys7xXf8jpujjOworwNG96c=)
                          3: 6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.crl (hash: 3D5tZ11SRSrhoOj8nPiz4WUUoXeh7I67YaVujA3fJOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f7:d4:40:92:39:fe:b9:14:3f:dd:da:18:db:c0:40:fd:90:09:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3
        Validity
            Not Before: Apr 15 06:56:30 2024 GMT
            Not After : Apr 16 10:06:30 2024 GMT
        Subject: CN=BED20A4709B0A7798BFAD4AE8250056AD27FD83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:10:78:1b:c4:c8:b5:00:fc:ab:da:d7:8b:
                    ca:df:43:88:39:30:42:16:8d:0c:22:97:58:0b:81:
                    73:32:94:c6:83:6c:2c:15:19:7f:83:35:9f:6c:88:
                    be:6a:49:cd:2f:4a:bb:25:76:0e:1a:97:04:ef:2b:
                    e5:10:ec:52:3d:6a:67:d1:38:eb:cf:f0:7e:10:91:
                    67:24:f7:e1:d9:95:89:6f:8d:02:da:7e:82:06:f7:
                    10:3d:95:23:4d:8c:67:f9:a7:03:1c:26:79:58:8f:
                    16:f8:09:b4:1f:68:71:9d:d3:52:99:24:73:47:88:
                    37:c6:86:3c:19:a5:02:d0:df:45:b9:73:ad:4a:38:
                    37:55:2f:74:ce:a4:9a:58:32:f1:ca:f5:fe:12:39:
                    20:fa:17:68:bc:11:e8:f4:85:8c:ab:d2:7a:a0:5d:
                    74:c9:55:d6:4b:6f:50:6e:c0:af:d7:a6:fa:13:94:
                    c3:8c:e9:2a:68:2e:dc:f1:88:6d:19:0f:16:b0:05:
                    9a:91:1d:2e:4f:55:c2:3f:12:f7:18:88:cb:50:d0:
                    6e:4f:a3:2d:23:15:09:eb:eb:c8:6e:79:38:95:cc:
                    cd:20:98:31:93:78:33:5c:fe:84:7a:5d:3b:1f:b9:
                    f2:b0:47:c4:1c:93:ec:fc:8b:5e:6b:42:f8:44:2f:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:0A:47:09:B0:A7:79:8B:FA:D4:AE:82:50:05:6A:D2:7F:D8:3D
            X509v3 Authority Key Identifier:
                keyid:6E:99:97:71:E1:C5:D8:3D:71:C5:E0:A3:FF:05:BD:7A:0B:F9:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/6E999771E1C5D83D71C5E0A3FF05BD7A0BF931A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:07:ea:50:a9:f9:38:7d:22:7d:4b:f1:ac:c9:62:5f:f3:f2:
         49:27:78:4a:d6:4b:e7:78:dd:ab:94:1e:79:51:ff:08:a7:0d:
         44:24:e9:79:ae:51:00:53:eb:04:44:10:c0:2f:95:23:3b:4d:
         8c:8b:a0:3d:83:7a:54:40:89:ba:52:85:7c:85:84:5c:2c:a7:
         3e:35:a1:18:94:b9:f5:d5:37:36:07:29:52:6a:74:f3:cc:14:
         2b:5e:cd:5c:e6:8e:b1:d5:a8:42:66:0b:f3:21:f7:59:84:8b:
         e0:cb:ff:52:a7:b2:18:7b:3e:91:20:39:c7:46:c7:df:cf:fe:
         f7:63:7e:8a:31:f7:41:af:34:0a:ff:7d:0e:1f:e7:30:b3:29:
         98:71:f2:6d:7e:7c:aa:1d:5b:9b:36:86:aa:d1:01:14:36:03:
         34:a6:62:9b:c8:b1:ea:5c:31:a3:b1:8e:0a:f1:b7:21:d6:83:
         24:27:00:75:eb:fb:da:7c:29:a6:5a:0f:42:e4:57:49:a9:54:
         ab:4e:1c:71:f9:f9:af:02:fe:ca:37:a5:06:72:27:f3:a3:38:
         00:4e:00:77:50:2d:ee:63:23:e9:97:55:e0:86:79:e0:2d:91:
         f2:46:f2:45:51:46:9f:52:ca:b2:3a:74:18:7b:f4:a0:96:91:
         2d:08:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----