Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.mft
File:                     6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.mft (raw, json)
Hash identifier:          6qnGrTT2VzKOEer44cTeGwMeZ8RfVmY3fGDQ7WXwZtw=
Subject key identifier:   4B:A7:7E:A6:AB:5C:D0:D3:66:10:D2:A3:2A:2B:53:BD:55:8B:F8:46
Authority key identifier: 6C:47:D8:E1:CE:C5:87:D7:15:FF:20:60:7B:E9:C6:AF:43:36:DF:73
Certificate issuer:       /CN=6C47D8E1CEC587D715FF20607BE9C6AF4336DF73
Certificate serial:       6B4BAD125E7B0CB6C84642739BCF521C2AE77E83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.mft
Manifest number:          0108
Signing time:             Sun 14 Apr 2024 19:12:11 +0000
Manifest this update:     Sun 14 Apr 2024 19:07:11 +0000
Manifest next update:     Mon 15 Apr 2024 21:30:11 +0000
Files and hashes:         1: 6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.crl (hash: pd6qQferOKotUTjnZHh8LsYwAbjQZ3CB9zSWvSXgSYc=)
                          2: 3139302e3131332e3234302e302f32322d3332203d3e20323731323732.roa (hash: lW7EH2SphtYHWxKLsCOo6Esn//rF6U7Crty9hewOZAc=)
                          3: 323830343a373865343a3a2f33322d313238203d3e20323731323732.roa (hash: 0NzNIFopseQ4AqhKc6QvdnTVrYohFO1wIqw51CEDaUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:ad:12:5e:7b:0c:b6:c8:46:42:73:9b:cf:52:1c:2a:e7:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C47D8E1CEC587D715FF20607BE9C6AF4336DF73
        Validity
            Not Before: Apr 14 19:07:11 2024 GMT
            Not After : Apr 15 21:30:11 2024 GMT
        Subject: CN=4BA77EA6AB5CD0D36610D2A32A2B53BD558BF846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:97:62:99:b3:61:e0:39:a0:ed:bc:de:3f:
                    41:e6:ab:49:e2:f2:d5:29:ab:99:36:a5:40:73:5e:
                    9c:1d:92:b6:70:1f:5f:d0:ff:3b:4d:0a:bd:fe:96:
                    8f:9c:9f:e6:e8:2e:6c:64:ea:b8:91:b2:69:b5:f3:
                    d8:eb:8b:61:e2:28:97:7a:b3:52:7e:0b:c9:c6:e6:
                    b6:0b:89:6e:6e:a8:6b:58:83:17:f6:7b:43:8d:7d:
                    9e:12:d0:5c:18:fe:68:bb:4f:e0:d7:1d:23:53:5d:
                    93:54:e6:19:4b:44:33:85:a4:fc:de:a1:ae:2d:1c:
                    4d:4f:a7:80:f2:31:e5:b8:fc:e2:fe:22:55:7d:2b:
                    9a:0b:07:54:74:26:86:bf:7d:61:7a:df:d3:e1:7b:
                    43:98:70:70:f4:68:96:1b:1e:4f:ed:a3:3d:c3:52:
                    0b:6f:c3:cc:05:18:39:94:11:2a:ed:08:ef:ef:45:
                    b8:3d:4d:c9:36:f7:75:cf:87:a1:4a:cc:4e:62:1b:
                    b4:71:eb:2a:b6:fe:13:c9:34:5d:16:40:bc:e0:6d:
                    c1:6b:25:6e:dc:6e:e1:f9:b4:1c:06:e1:60:fc:01:
                    18:82:fa:08:2d:52:0a:47:1c:f1:09:07:ac:dc:31:
                    ff:9d:55:bb:17:89:08:4f:68:39:e5:68:f2:c4:56:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A7:7E:A6:AB:5C:D0:D3:66:10:D2:A3:2A:2B:53:BD:55:8B:F8:46
            X509v3 Authority Key Identifier:
                keyid:6C:47:D8:E1:CE:C5:87:D7:15:FF:20:60:7B:E9:C6:AF:43:36:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/0/6C47D8E1CEC587D715FF20607BE9C6AF4336DF73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:7b:06:c8:3f:d2:89:0e:00:43:b7:1d:2d:98:72:53:5d:c2:
         5a:17:70:0e:ee:f6:cb:9b:55:2a:ac:d0:22:9e:de:4b:29:a8:
         40:45:02:af:dd:b5:6e:eb:85:b2:ad:32:c7:b0:5c:81:63:72:
         cd:57:22:7a:2e:f5:57:8f:e6:e6:b2:58:3b:72:71:96:f7:7f:
         d2:26:1d:1f:e6:88:5f:7f:ee:cf:da:55:86:4c:b1:4c:41:78:
         76:07:46:87:64:87:8d:32:57:8e:7c:fc:6c:dc:1d:15:0e:d7:
         d1:a8:20:ad:bc:a1:48:92:a3:cf:f1:15:c9:80:70:25:68:54:
         54:c4:9f:70:89:50:3b:83:4b:83:df:0c:f3:41:51:27:d9:98:
         a2:5a:63:4f:20:9b:0f:40:17:a4:89:c4:9a:95:d4:02:5f:40:
         6a:8e:33:94:e5:02:ce:d4:cc:67:af:4b:c8:73:93:24:46:d3:
         7b:be:2b:57:f4:0e:a9:87:79:90:0f:c3:0a:57:fe:1c:aa:27:
         ab:9b:66:f3:10:7f:d9:3f:58:32:9a:30:b0:4a:c6:c5:cd:ca:
         5a:65:d1:b5:b4:04:7f:40:4f:af:37:0e:b2:6c:e0:ee:d9:04:
         06:47:06:aa:c8:70:56:5a:4b:2a:d0:1d:39:2a:a7:c7:c2:2d:
         66:57:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----