Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/6948579E316A9E55A099D417D20BFC4B67593E45.mft
File:                     6948579E316A9E55A099D417D20BFC4B67593E45.mft (raw, json)
Hash identifier:          HYkGZGpWmOeuyoWhcCsQZzqdXUFF60UsBiYFosj70+Y=
Subject key identifier:   FE:47:9D:E5:19:90:4C:2D:77:B7:7F:70:80:4D:99:C0:B3:C6:C8:C5
Authority key identifier: 69:48:57:9E:31:6A:9E:55:A0:99:D4:17:D2:0B:FC:4B:67:59:3E:45
Certificate issuer:       /CN=6948579E316A9E55A099D417D20BFC4B67593E45
Certificate serial:       44FC4558BE0C5ACD8FDD948FABD25CA8AC25DC0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6948579E316A9E55A099D417D20BFC4B67593E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/6948579E316A9E55A099D417D20BFC4B67593E45.mft
Manifest number:          0207
Signing time:             Fri 12 Jan 2024 10:54:58 +0000
Manifest this update:     Fri 12 Jan 2024 10:49:58 +0000
Manifest next update:     Sat 13 Jan 2024 11:57:58 +0000
Files and hashes:         1: 3137372e38362e3131322e302f32322d3234203d3e20323632363238.roa (hash: T9P+Ejg0cE438BvCRTDgrtsVsvBTcIWbAn28GVMRjZs=)
                          2: 6948579E316A9E55A099D417D20BFC4B67593E45.crl (hash: zm7xCBDsmcJNPtjjhwfUyxw9g27iZc8BR1KCojS1Mhc=)
                          3: 323830343a313766383a3a2f33322d3435203d3e20323632363238.roa (hash: oD7B8S9ls42wMScULfekf+6XE5Gha+uqbReIIWyJcZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fc:45:58:be:0c:5a:cd:8f:dd:94:8f:ab:d2:5c:a8:ac:25:dc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6948579E316A9E55A099D417D20BFC4B67593E45
        Validity
            Not Before: Jan 12 10:49:58 2024 GMT
            Not After : Jan 13 11:57:58 2024 GMT
        Subject: CN=FE479DE519904C2D77B77F70804D99C0B3C6C8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:46:7f:f3:b1:70:1d:6f:31:e2:68:2f:1a:
                    95:b9:a5:b7:c2:03:df:5f:95:80:0b:87:44:62:a3:
                    63:22:e8:44:2b:7a:4c:9e:7d:37:bc:cd:c3:86:07:
                    4b:42:2d:c3:b8:31:7a:39:63:f3:60:61:78:90:6b:
                    f6:b5:85:18:d5:d1:ab:07:41:6b:91:45:2a:29:10:
                    d7:07:46:88:10:52:cf:d6:c3:44:1a:ae:dd:02:fe:
                    58:53:d0:87:5a:23:cb:c6:65:99:03:d5:5f:7b:3c:
                    38:83:ac:67:5f:77:8a:77:f6:86:27:8b:ca:57:ab:
                    86:55:8b:e5:f2:fe:e9:9b:a1:b9:48:93:a4:f0:e3:
                    fd:10:36:b5:b9:e2:44:61:12:7c:56:93:10:5c:31:
                    c6:16:2b:9f:79:6b:63:2b:4b:02:08:2f:4a:d0:1a:
                    64:d4:96:fc:8c:6b:a7:d9:b4:29:95:88:32:42:d4:
                    7f:20:07:34:ef:f1:7b:82:e0:c6:9f:d6:38:76:37:
                    f9:46:58:46:19:20:b7:ad:59:ea:37:87:f7:bc:c5:
                    72:36:1b:b8:e9:bb:dd:9c:da:8a:5c:1c:dc:22:55:
                    51:d7:c1:f6:71:7d:87:78:83:0e:98:4c:a3:31:9d:
                    b6:a6:27:e9:3b:d6:0a:87:48:b2:5f:4d:37:ae:b9:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:9D:E5:19:90:4C:2D:77:B7:7F:70:80:4D:99:C0:B3:C6:C8:C5
            X509v3 Authority Key Identifier:
                keyid:69:48:57:9E:31:6A:9E:55:A0:99:D4:17:D2:0B:FC:4B:67:59:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/6948579E316A9E55A099D417D20BFC4B67593E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6948579E316A9E55A099D417D20BFC4B67593E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/6948579E316A9E55A099D417D20BFC4B67593E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:6e:23:49:2b:b9:e1:1d:14:ea:28:d3:8d:a8:7f:ae:b8:
         1c:91:8f:c5:3f:e7:b2:65:87:07:8b:c1:11:ad:3d:a2:4c:c0:
         6a:b9:0d:af:a8:1b:82:42:98:53:ab:4a:4e:d1:92:c7:84:57:
         f5:ab:da:69:87:39:98:02:58:7d:1e:1e:5c:92:ba:68:e2:ac:
         ad:a3:29:d7:4f:f4:95:ba:5d:89:fc:62:79:9f:52:2b:3f:b0:
         3d:ee:69:07:93:36:a8:61:99:e0:3a:79:db:73:48:51:19:47:
         88:cc:74:3d:51:e2:a4:ee:35:33:be:38:62:4b:2c:73:3b:f9:
         c5:46:55:6d:ea:bc:af:e5:cd:64:1b:29:5b:df:2c:e1:ac:d1:
         05:58:be:20:b7:6f:64:cf:be:4d:db:da:b5:c1:ba:81:b2:9a:
         8e:71:ad:73:18:91:ec:64:d9:26:df:02:64:ee:c7:61:ea:a8:
         25:cb:1c:ba:7c:2f:2f:61:25:3f:14:ac:6e:32:4b:1f:2c:4a:
         f9:16:4d:12:9d:ea:26:c3:db:65:a9:f9:2e:86:28:09:7a:58:
         8c:8c:25:06:1a:d5:4f:91:1a:64:5e:f5:56:05:d0:20:87:5a:
         93:4e:fd:5b:48:9b:84:58:b2:f7:f0:8f:3a:89:7c:cd:10:f6:
         51:24:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----