Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft
File:                     6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft (raw, json)
Hash identifier:          C/2pxM1UkmtzbJ9lRsdmetbkuLvlbB2/a9exWbgVHqs=
Subject key identifier:   16:CD:D9:43:22:6F:FD:94:18:DF:AA:1F:1B:58:F4:12:79:97:4A:9F
Authority key identifier: 6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Certificate issuer:       /CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
Certificate serial:       085A644699FDA22B63BD64319524BD9209EA3B32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft
Manifest number:          03F1
Signing time:             Sun 14 Apr 2024 19:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 18:55:00 +0000
Manifest next update:     Mon 15 Apr 2024 19:00:00 +0000
Files and hashes:         1: 34352e3232362e36322e302f32342d3234203d3e20323636393635.roa (hash: cS3MigfW6PeRgzpJAh6BqxCZbNrKrz7reJEQO2KTb0U=)
                          2: 323830343a343630633a3a2f33322d3332203d3e20323636393635.roa (hash: HLDG5JBPDnYN8pYLZS0T21t95pQD1XcwMrlWAAApJTA=)
                          3: 34352e3232362e36302e302f32332d3233203d3e20323636393635.roa (hash: psegOR/8vPWXGphH8wcYPWyEj5ddai4Txcaeqv7+Y0Q=)
                          4: 34352e3232362e36302e302f32322d3232203d3e20323636393635.roa (hash: nGZNGwoPhSelBVvUOASEXo2cpsiWX0Jcq5Gk2OVjiYM=)
                          5: 6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl (hash: bZrvMVf2Tujs4CJH2qmSsB1lAROnCqSc1QeTTJh46/I=)
                          6: 34352e3232362e36322e302f32332d3233203d3e20323636393635.roa (hash: 1VAgaFijMcHM/4KGry7ZEWa1sJc8aSBZyk8aLAUGp6E=)
                          7: 34352e3232362e36332e302f32342d3234203d3e20323636393635.roa (hash: hkiOff2OMgd1tMdT1iBypmUE+SOoPKR6oxTPUKjSQFo=)
                          8: 34352e3232362e36312e302f32342d3234203d3e20323636393635.roa (hash: Egm4pPMtdlQnVtvVM/Pm680aYcQw3zvbqHIUFQwq7Ug=)
                          9: 34352e3232362e36302e302f32342d3234203d3e20323636393635.roa (hash: gFhTX2aUXIv4x5xv7C5yDphkCwEBTeybMvqQi5gj4jY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5a:64:46:99:fd:a2:2b:63:bd:64:31:95:24:bd:92:09:ea:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Validity
            Not Before: Apr 14 18:55:00 2024 GMT
            Not After : Apr 21 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:db:89:e6:6f:4a:92:5f:52:7b:7a:3a:a6:
                    81:66:67:f1:5c:0b:e7:88:fa:d0:0e:bc:6c:a1:10:
                    cf:a6:45:37:be:e6:a6:02:6b:bb:87:0c:ef:66:15:
                    b7:0c:6c:12:45:50:bf:12:20:3d:0d:d9:49:59:4c:
                    c7:50:d1:15:0f:ba:19:7c:fc:b1:bb:b5:63:b4:d6:
                    c7:2b:4d:68:e3:d7:f3:3d:c0:c2:33:16:9d:68:3d:
                    05:96:72:84:71:df:f0:23:c4:48:e0:ac:1f:eb:53:
                    97:7b:ec:a5:53:57:a2:d5:2e:cf:a4:24:e4:66:55:
                    f2:b4:2e:04:65:e8:21:98:4a:b4:c9:89:df:42:61:
                    c8:79:ef:df:c5:ce:9f:f6:9b:87:6d:3a:46:8e:02:
                    42:9e:02:74:09:c7:35:dc:60:bc:d3:77:b4:78:7d:
                    2e:eb:78:7c:15:b4:b2:66:d6:39:70:84:16:78:0a:
                    41:35:2e:5b:8a:f0:86:be:b4:0d:e4:a8:ed:57:66:
                    e5:e3:a6:6f:c0:53:fa:4a:c3:98:14:ca:ef:f8:38:
                    69:43:07:fb:8a:3b:58:5e:11:5e:10:11:0b:d4:ed:
                    ed:71:1b:b9:f7:33:d8:2b:f1:3f:9f:c0:14:7a:f5:
                    88:0b:0a:bc:36:0b:e2:74:af:10:88:d0:8a:c2:40:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:D9:43:22:6F:FD:94:18:DF:AA:1F:1B:58:F4:12:79:97:4A:9F
            X509v3 Authority Key Identifier:
                keyid:6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:4a:ff:be:1e:2c:2e:cd:e5:7c:52:ab:76:f7:62:c0:a8:
         e8:97:99:6d:45:15:09:42:be:b7:fa:f5:94:bf:ef:c5:0d:51:
         bf:97:92:0b:82:88:7d:40:85:8b:06:7f:1b:b6:dc:5d:00:df:
         7f:63:17:93:7d:fe:19:a8:97:36:9c:40:17:1c:01:4b:25:c4:
         34:7b:5c:ff:7c:1e:f6:1f:a7:2c:b9:52:c6:07:d6:d0:08:8a:
         65:c4:58:8e:75:3b:78:01:b2:2b:86:db:d8:0c:13:6b:43:3f:
         33:b8:97:e2:c7:99:59:7e:c1:8b:ac:8e:af:61:ae:f7:38:ad:
         d1:7a:08:f1:98:a8:a9:e9:1a:7a:f9:f6:9d:a6:c3:52:8c:9d:
         6b:4a:01:7e:d4:0a:ca:6b:0b:df:90:49:d4:b9:4f:0b:61:72:
         10:82:25:a9:2f:fe:84:1b:31:62:5c:ea:d6:63:36:33:17:46:
         e4:d2:e1:71:f7:b1:c7:87:46:55:ef:c6:b6:4a:1a:3b:74:92:
         21:bf:7f:fc:1d:62:3e:2f:33:49:99:8f:96:c7:45:55:e4:da:
         48:ad:5b:38:0c:60:ca:4a:d4:19:78:f8:3d:bf:30:e6:44:eb:
         5a:6e:3c:62:80:2e:1e:87:4b:b0:0a:e8:73:92:33:c0:ac:30:
         fb:ac:a4:0a
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUCFpkRpn9oitjvWQxlSS9kgnqOzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNENUY0RUJDMzMwN0I5NkVGNUVFRDY2QUMyNTM3RUNF
OTc3QzlCNzAeFw0yNDA0MTQxODU1MDBaFw0yNDA0MjExOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0QxRURCODlFNjZGNEE5MjVG
NTI3QjdBM0FBNjgxNjY2N0YxNUMwQkU3ODhGQUQwMEVCQzZDQTExMENGQTY0NTM3
QkVFNkE2MDI2QkJCODcwQ0VGNjYxNUI3MEM2QzEyNDU1MEJGMTIyMDNEMEREOTQ5
NTk0Q0M3NTBEMTE1MEZCQTE5N0NGQ0IxQkJCNTYzQjRENkM3MkI0RDY4RTNEN0Yz
M0RDMEMyMzMxNjlENjgzRDA1OTY3Mjg0NzFERkYwMjNDNDQ4RTBBQzFGRUI1Mzk3
N0JFQ0E1NTM1N0EyRDUyRUNGQTQyNEU0NjY1NUYyQjQyRTA0NjVFODIxOTg0QUI0
Qzk4OURGNDI2MUM4NzlFRkRGQzVDRTlGRjY5Qjg3NkQzQTQ2OEUwMjQyOUUwMjc0
MDlDNzM1REM2MEJDRDM3N0I0Nzg3RDJFRUI3ODdDMTVCNEIyNjZENjM5NzA4NDE2
NzgwQTQxMzUyRTVCOEFGMDg2QkVCNDBERTRBOEVENTc2NkU1RTNBNjZGQzA1M0ZB
NEFDMzk4MTRDQUVGRjgzODY5NDMwN0ZCOEEzQjU4NUUxMTVFMTAxMTBCRDRFREVE
NzExQkI5RjczM0Q4MkJGMTNGOUZDMDE0N0FGNTg4MEIwQUJDMzYwQkUyNzRBRjEw
ODhEMDhBQzI0MDA0RkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzR7bieZvSpJfUnt6OqaBZmfxXAvniPrQDrxsoRDPpkU3vuamAmu7
hwzvZhW3DGwSRVC/EiA9DdlJWUzHUNEVD7oZfPyxu7VjtNbHK01o49fzPcDCMxad
aD0FlnKEcd/wI8RI4Kwf61OXe+ylU1ei1S7PpCTkZlXytC4EZeghmEq0yYnfQmHI
ee/fxc6f9puHbTpGjgJCngJ0Ccc13GC803e0eH0u63h8FbSyZtY5cIQWeApBNS5b
ivCGvrQN5KjtV2bl46ZvwFP6SsOYFMrv+DhpQwf7ijtYXhFeEBEL1O3tcRu59zPY
K/E/n8AUevWICwq8NgvidK8QiNCKwkAE+wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FBbN2UMib/2UGN+qHxtY9BJ5l0qfMB8GA1UdIwQYMBaAFGzV9OvDMHuW717tZqwl
N+zpd8m3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1
eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAvNkNENUY0RUJDMzMwN0I5
NkVGNUVFRDY2QUMyNTM3RUNFOTc3QzlCNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82Q0Q1RjRFQkMzMzA3Qjk2RUY1RUVENjZBQzI1MzdFQ0U5NzdD
OUI3LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1eWtRTVZh
YzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAvNkNENUY0RUJDMzMwN0I5NkVGNUVF
RDY2QUMyNTM3RUNFOTc3QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABZcSv++HiwuzeV8Uqt292LA
qOiXmW1FFQlCvrf69ZS/78UNUb+XkguCiH1AhYsGfxu23F0A339jF5N9/hmolzac
QBccAUslxDR7XP98HvYfpyy5UsYH1tAIimXEWI51O3gBsiuG29gME2tDPzO4l+LH
mVl+wYusjq9hrvc4rdF6CPGYqKnpGnr59p2mw1KMnWtKAX7UCsprC9+QSdS5Twth
chCCJakv/oQbMWJc6tZjNjMXRuTS4XH3sceHRlXvxrZKGjt0kiG/f/wdYj4vM0mZ
j5bHRVXk2kitWzgMYMpK1Bl4+D2/MOZE61puPGKALh6HS7AK6HOSM8CsMPuspAo=
-----END CERTIFICATE-----