Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.mft
File:                     546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.mft (raw, json)
Hash identifier:          H28FSMhU2acSHHlIykvaMWv8P0WKcaRv6LsSGh1hDhU=
Subject key identifier:   A8:FD:1C:D8:0B:AC:6C:6C:11:7A:6B:C6:83:D8:3F:C8:40:2E:23:2A
Authority key identifier: 54:6B:E8:55:C4:CF:3B:34:F3:3C:9C:FE:A6:88:1D:EF:B2:B6:85:24
Certificate issuer:       /CN=546BE855C4CF3B34F33C9CFEA6881DEFB2B68524
Certificate serial:       28F999C6B4F74F8E4703FACE7B423DAE6307A628
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.mft
Manifest number:          13
Signing time:             Wed 17 Apr 2024 08:38:51 +0000
Manifest this update:     Wed 17 Apr 2024 08:33:51 +0000
Manifest next update:     Thu 18 Apr 2024 10:06:51 +0000
Files and hashes:         1: 34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa (hash: sgzwzb8NtcQnxF8v8bLkAE8ctMKODhSdjBIOkl5Wj6s=)
                          2: 546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.crl (hash: KGT3BeuqEf0kC4C4O0JNH6KxiUrdenZhUAuNg1hmjCs=)
                          3: 323830343a353238343a3a2f33322d3438203d3e20323638353233.roa (hash: MRWHNJFpYfmuUiJzaNeA47CldGqhx83GucLgFgngHyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:99:c6:b4:f7:4f:8e:47:03:fa:ce:7b:42:3d:ae:63:07:a6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546BE855C4CF3B34F33C9CFEA6881DEFB2B68524
        Validity
            Not Before: Apr 17 08:33:51 2024 GMT
            Not After : Apr 18 10:06:51 2024 GMT
        Subject: CN=A8FD1CD80BAC6C6C117A6BC683D83FC8402E232A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:1f:29:95:79:4e:81:4c:a4:f0:bf:24:ac:
                    ec:1e:86:df:16:72:69:62:db:8a:b4:7b:68:4b:81:
                    50:e2:8a:11:24:92:e8:f0:a8:a1:c2:3a:85:fb:6f:
                    1f:e2:9d:de:c3:ae:c7:19:5c:15:e5:5e:38:96:07:
                    0d:a8:b4:0c:89:fe:1e:04:14:6c:6e:58:49:dd:93:
                    8f:37:ff:4b:88:22:72:25:92:a3:e4:21:dd:53:50:
                    2c:c3:03:17:ae:3b:9b:43:b0:64:5d:ec:f1:7c:c8:
                    b2:d7:d8:e0:8c:7f:4d:a9:e0:54:83:dd:0e:5e:50:
                    ae:0b:4d:63:c1:cc:20:20:e4:f1:62:20:0c:bf:b5:
                    2c:6e:19:c1:33:31:61:2f:93:78:d1:ee:da:df:0f:
                    fd:de:8b:92:b3:a3:7d:3b:4e:3d:54:69:ec:ee:4c:
                    0a:66:4c:1f:ce:e6:eb:d6:24:bb:b0:7d:b8:3e:b7:
                    62:d2:92:fd:6b:b1:00:1f:54:7f:cf:93:c0:5f:87:
                    8d:fc:d5:76:86:aa:68:29:76:24:c6:e2:68:08:bd:
                    b2:4a:b9:64:5f:81:6b:5e:b2:bb:97:97:7d:2f:f5:
                    a7:ac:14:73:a7:19:58:59:53:97:00:5b:9c:50:63:
                    23:f3:32:a5:73:2f:53:1e:9d:21:0f:d6:f7:5c:52:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FD:1C:D8:0B:AC:6C:6C:11:7A:6B:C6:83:D8:3F:C8:40:2E:23:2A
            X509v3 Authority Key Identifier:
                keyid:54:6B:E8:55:C4:CF:3B:34:F3:3C:9C:FE:A6:88:1D:EF:B2:B6:85:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/1/546BE855C4CF3B34F33C9CFEA6881DEFB2B68524.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:85:9d:c3:fa:ca:db:05:ae:78:41:d5:55:33:da:2e:6b:68:
         d8:0d:ea:d9:0a:6e:91:04:4b:88:09:bb:95:7c:9a:03:15:3d:
         be:92:90:3a:f1:4b:cf:37:f8:88:fd:5c:65:f8:d6:92:b3:5b:
         ea:b6:9e:28:65:ad:01:0d:22:46:26:d9:13:23:c5:8a:22:b0:
         87:ad:cc:5a:59:f8:63:1c:5a:12:6f:a6:01:95:13:1b:31:1c:
         5e:82:53:37:d4:0f:13:cd:53:4d:91:21:c0:0c:4e:b2:28:9e:
         fa:93:26:9c:25:24:92:5a:aa:63:a9:12:af:70:7d:8b:f0:3a:
         1e:c8:66:b0:87:d5:67:e4:b7:08:bb:45:9b:4e:5b:b8:ee:62:
         95:98:b8:06:d3:b4:f4:86:7e:04:9d:a2:5c:ac:fe:44:e7:bd:
         27:0b:7e:1e:61:7e:a4:a1:33:77:00:fe:a5:ef:5f:d5:df:f7:
         b4:1d:93:3b:a2:4f:21:90:49:27:fe:40:cd:b9:78:cb:5d:33:
         df:93:a7:5a:e4:63:86:6f:3a:aa:7d:b2:f8:52:95:eb:95:96:
         70:d9:1a:b3:48:0d:4c:0a:32:a9:6a:c9:82:c5:42:2d:2a:b9:
         67:fe:3a:34:c7:a2:03:da:7b:ca:b2:e5:f2:df:03:77:11:6e:
         d9:73:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----