Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft
File:                     3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft (raw, json)
Hash identifier:          iflHujcO6djp80jGUjqwcJo0i/Zd7HmR+u51iLI0stw=
Subject key identifier:   7C:E2:49:8B:58:29:C8:32:9A:92:85:6F:7C:F1:29:B3:8D:ED:37:63
Authority key identifier: 3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9
Certificate issuer:       /CN=3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9
Certificate serial:       014659B4AB27AB30E6210A984F443A210A66023B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft
Manifest number:          01D6
Signing time:             Wed 17 Jan 2024 19:20:15 +0000
Manifest this update:     Wed 17 Jan 2024 19:15:15 +0000
Manifest next update:     Thu 18 Jan 2024 19:30:15 +0000
Files and hashes:         1: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: NaAcjvzOLekJmrrKhkqvfdr1RwQnpkNywAUxwIXIEQI=)
                          2: 323830343a343030343a3a2f33322d3336203d3e20323635393238.roa (hash: XLS8kF5S52VGLuERwT+eVDY2bx4XzuEIDguORwq7zrg=)
                          3: 3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.crl (hash: jTUiyLjHS5pC53i8PNy9D9vVdRzqyWjRgv/Wgr2pYFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:46:59:b4:ab:27:ab:30:e6:21:0a:98:4f:44:3a:21:0a:66:02:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9
        Validity
            Not Before: Jan 17 19:15:15 2024 GMT
            Not After : Jan 18 19:30:15 2024 GMT
        Subject: CN=7CE2498B5829C8329A92856F7CF129B38DED3763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:b2:48:43:6f:91:00:05:2a:c7:e0:c3:ff:
                    70:ec:00:df:ba:1b:e9:ae:23:ac:56:f7:c0:bf:97:
                    bb:d2:2b:ae:b5:26:83:54:48:70:2f:b7:1b:59:d4:
                    86:91:89:55:58:1e:6e:ce:46:d9:20:f9:0b:84:c9:
                    8d:8a:a3:1f:4f:17:63:97:69:16:90:15:02:c5:bc:
                    bd:37:44:46:54:6b:72:eb:a9:b5:b7:99:9a:ed:31:
                    a5:aa:92:a0:c7:02:7b:24:0a:19:d7:ff:35:91:9a:
                    df:65:63:f4:40:af:ca:4a:5d:20:0c:da:d3:54:0d:
                    04:bf:07:6e:ef:a7:41:fa:c0:f9:8f:92:af:48:ef:
                    3b:b8:ef:b4:38:d0:5c:bd:6d:e9:64:20:cd:0e:8c:
                    41:50:e9:77:7c:ed:88:ab:f8:34:cc:07:5f:39:3e:
                    74:27:d0:6b:67:fe:f4:db:a9:44:b2:35:06:13:8a:
                    37:f2:ca:47:c2:0e:fd:f3:d5:f8:a8:2a:29:e1:b8:
                    41:6e:24:6c:3c:0f:c4:2a:61:1d:36:66:6d:f5:59:
                    1d:8c:9c:d3:d5:d0:4f:ff:e6:82:b7:2b:5f:23:ab:
                    b4:f4:6d:7b:07:23:51:fd:3e:9b:a4:da:51:a6:2c:
                    04:24:6c:f7:72:83:96:bb:64:d3:8c:9a:19:d2:dd:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:49:8B:58:29:C8:32:9A:92:85:6F:7C:F1:29:B3:8D:ED:37:63
            X509v3 Authority Key Identifier:
                keyid:3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:69:be:39:68:b5:f4:d0:cb:af:ca:dd:97:4f:fb:56:a2:c9:
         ed:19:eb:56:73:26:04:2a:e8:e9:c7:a9:49:d6:95:cb:51:e3:
         1f:00:56:5f:36:9f:2c:20:c6:8b:ac:53:69:c6:ac:22:ab:d9:
         0e:a3:c2:5b:6b:fc:62:32:ed:48:1a:c0:1d:29:ba:4f:41:d7:
         0c:a5:ce:44:8d:e3:f0:57:0b:7f:11:bf:56:08:c6:9f:5c:d8:
         f8:20:b0:13:b1:74:80:67:cc:fa:a8:bd:3a:2d:ab:6f:ad:4c:
         33:24:ca:6a:32:32:7a:23:cb:2e:06:b3:6f:04:df:bb:09:8f:
         d7:1e:1f:5a:41:67:6f:23:fb:9b:49:af:79:ba:c4:cd:6d:66:
         25:e5:79:70:90:28:90:7d:7d:0b:e2:df:20:32:b3:f0:0b:88:
         7d:c2:a8:b4:e2:54:a6:48:e0:8d:e4:cd:a4:56:82:82:60:d7:
         1d:b4:8b:b0:73:96:11:a3:14:7f:13:ff:b2:26:48:c4:7b:49:
         92:87:3f:da:ee:09:28:02:ef:d7:2a:92:b1:af:15:aa:58:86:
         04:05:57:38:9c:e1:7d:3f:29:87:c2:47:23:5c:87:44:17:ff:
         94:c9:07:bb:c4:82:a2:ab:7e:50:75:50:17:83:b1:a4:3a:86:
         f5:b6:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----