Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.mft
File:                     6CD173FF9D505DB98451806A0F566316FA5AF573.mft (raw, json)
Hash identifier:          Wb4V2U50nI5JAOpu4jc92BFBMZelt5LQ3DOsC4nL3p4=
Subject key identifier:   07:48:99:9B:72:90:38:9E:02:A2:2C:FC:3A:FD:A3:39:1F:CC:6E:B1
Authority key identifier: 6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73
Certificate issuer:       /CN=6CD173FF9D505DB98451806A0F566316FA5AF573
Certificate serial:       1CA3C092CEB0167266D4F882808CEFB21F9A6AF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.mft
Manifest number:          024E
Signing time:             Mon 15 Apr 2024 01:46:47 +0000
Manifest this update:     Mon 15 Apr 2024 01:41:47 +0000
Manifest next update:     Tue 16 Apr 2024 04:52:47 +0000
Files and hashes:         1: 6CD173FF9D505DB98451806A0F566316FA5AF573.crl (hash: NL9NEi6yhARZffaDfjhJw/WIG+KZ22bdEzw9DDW48HM=)
                          2: 323830343a6463383a3a2f33322d3332203d3e203238363336.roa (hash: xW+Q2tiLGOtYLuqJHTMT1oI9jOZJWOYpOYrYXDZDG2o=)
                          3: 3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (hash: KcxfM0Hm8EYyeGhSd0rIfZoUqUoXOT+6JGMLu1ljn3g=)
                          4: 3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (hash: l65iU53P/rrUHtMEtffP4D3Z4a8bmdzDjIQQv+qo/TM=)
                          5: 3137392e39372e3132302e302f32312d3234203d3e203238363336.roa (hash: dsk5d6QAUZ5EpFd0BaZnX9MkuY9x/uNhsrrcwncgSQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a3:c0:92:ce:b0:16:72:66:d4:f8:82:80:8c:ef:b2:1f:9a:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD173FF9D505DB98451806A0F566316FA5AF573
        Validity
            Not Before: Apr 15 01:41:47 2024 GMT
            Not After : Apr 16 04:52:47 2024 GMT
        Subject: CN=0748999B7290389E02A22CFC3AFDA3391FCC6EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:40:6e:02:3e:31:dd:00:57:d0:b2:3c:42:
                    69:15:75:3d:e8:c1:30:f3:0d:de:de:51:7d:fd:9a:
                    03:d8:74:6c:b6:8b:11:6b:2d:7f:4f:66:ab:ca:98:
                    11:63:1b:d9:e4:93:70:d2:5a:a5:2a:58:05:6f:cd:
                    86:32:83:01:62:c6:e9:52:c4:38:86:dd:bb:4f:c2:
                    90:94:69:db:2d:aa:9c:41:63:85:57:fb:d5:ae:9b:
                    cd:b1:4f:26:6c:c2:95:80:f2:0f:96:6e:05:50:97:
                    1f:27:e8:86:ec:52:b8:40:ce:51:64:79:c9:20:9f:
                    0b:d5:2d:dc:f0:6d:28:02:ea:fe:c7:22:e1:51:b5:
                    d6:f2:24:bf:a9:94:c9:cf:4d:b3:a3:a8:75:0d:38:
                    5d:63:b2:0c:3a:de:e3:d1:91:b5:09:21:86:4f:e8:
                    77:a2:5c:90:66:30:70:e6:1b:4d:ce:8f:3d:f3:c5:
                    f2:0f:ff:ad:ea:3f:0c:3d:38:2f:81:4f:c1:92:41:
                    10:42:3d:17:4f:34:d9:e2:2c:81:68:f2:6b:f8:4d:
                    90:ed:a0:7f:95:ba:d7:7c:66:1e:6e:5b:5b:94:f3:
                    b4:c6:93:27:7f:17:5e:73:41:03:ed:90:29:ac:34:
                    90:f8:37:47:d5:18:69:93:51:60:73:f9:a6:d9:64:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:48:99:9B:72:90:38:9E:02:A2:2C:FC:3A:FD:A3:39:1F:CC:6E:B1
            X509v3 Authority Key Identifier:
                keyid:6C:D1:73:FF:9D:50:5D:B9:84:51:80:6A:0F:56:63:16:FA:5A:F5:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD173FF9D505DB98451806A0F566316FA5AF573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/6CD173FF9D505DB98451806A0F566316FA5AF573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:5b:61:c9:5a:64:e5:ba:12:15:b8:0b:66:fe:db:5c:c4:
         b0:c2:5d:bf:31:28:bc:27:ef:19:25:ad:67:21:5b:d3:35:76:
         87:83:45:85:8a:39:d9:72:68:3e:9f:bf:07:56:4a:89:21:11:
         67:c6:93:11:7a:6b:d9:57:47:cd:1c:a5:25:89:63:69:9a:7f:
         58:97:51:8c:e0:0d:b5:12:a2:42:d1:ae:d6:fa:d3:03:50:4c:
         61:af:44:37:eb:26:a0:e0:77:9f:f6:f0:d0:3a:fb:d6:24:80:
         61:4e:89:41:7f:13:4d:69:9d:21:e0:80:c2:1d:a2:8d:1c:c5:
         8a:80:1c:63:8b:6c:b1:e7:43:8d:f7:dc:b8:81:84:a5:19:4e:
         db:57:c8:21:7d:89:6e:c5:19:82:3a:e0:81:51:48:91:33:ed:
         e2:b8:a4:31:f5:e5:de:29:d4:1d:33:d2:50:b9:ea:1d:37:33:
         05:e6:c7:71:9a:42:29:6a:2f:e6:c7:0c:9b:d7:33:97:d2:ab:
         98:ad:12:ee:6d:15:3b:f7:bb:07:c6:80:f2:d9:f9:8b:e8:52:
         32:c7:8c:7e:c7:d0:2a:32:eb:f4:2c:08:24:0f:61:0f:11:f6:
         2e:51:17:36:2e:c1:6f:1b:e1:6f:42:1f:32:f6:b0:70:c6:2e:
         56:e7:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----