Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.mft
File:                     9D52D5FBF5120C30654881F61F146C9915781B93.mft (raw, json)
Hash identifier:          jdpq26l0yp6+X8TP9LBtmkgRtipUrFnQgy6sQt6nr/Y=
Subject key identifier:   49:1E:58:2F:6F:DC:3A:EF:83:1B:94:C8:73:E3:69:CB:51:AE:1F:F9
Authority key identifier: 9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93
Certificate issuer:       /CN=9D52D5FBF5120C30654881F61F146C9915781B93
Certificate serial:       7374D3A6A6F39BE1F2FEB3DF1D657C061FA3741A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D52D5FBF5120C30654881F61F146C9915781B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.mft
Manifest number:          D6
Signing time:             Mon 09 Sep 2024 12:20:38 +0000
Manifest this update:     Mon 09 Sep 2024 12:15:38 +0000
Manifest next update:     Tue 10 Sep 2024 13:42:38 +0000
Files and hashes:         1: 9D52D5FBF5120C30654881F61F146C9915781B93.crl (hash: jatGTpsogJoE0X9GkqWGzKE0wrZkp36SXivQmwPqctQ=)
                          2: 34352e3138392e3232382e302f32322d3332203d3e20323639363132.roa (hash: ORAsiu/ou0Ru9BppkPTA7C5SYjpLz9bMBaMOEaOyoGw=)
                          3: 323830343a363733343a3a2f33322d313238203d3e20323639363132.roa (hash: JfG6+j39m2eQ2otwjYf153DqMRzfUhPf4V9lL6GozzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:74:d3:a6:a6:f3:9b:e1:f2:fe:b3:df:1d:65:7c:06:1f:a3:74:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D52D5FBF5120C30654881F61F146C9915781B93
        Validity
            Not Before: Sep  9 12:15:38 2024 GMT
            Not After : Sep 10 13:42:38 2024 GMT
        Subject: CN=491E582F6FDC3AEF831B94C873E369CB51AE1FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:63:12:4c:29:5a:ec:9a:83:41:58:25:f3:
                    29:b7:5e:26:49:18:41:e2:8a:87:a7:e8:de:43:6d:
                    12:ab:e9:a1:23:9a:c4:10:94:81:f4:3d:3e:4b:4c:
                    9d:fb:0b:39:bf:7f:12:ee:b7:4e:fd:8a:20:18:f6:
                    de:60:fe:22:d0:64:d7:01:1a:bb:71:e4:24:0d:29:
                    23:56:06:49:ad:33:d6:20:a0:fc:d0:12:1d:6d:51:
                    f1:e4:e8:3d:35:15:82:09:2f:b3:75:6b:67:04:66:
                    a6:76:4f:9b:b1:00:b3:9d:1d:e7:10:46:d8:62:0b:
                    a8:19:28:4e:d4:6e:93:d8:33:cd:62:db:e5:b1:95:
                    53:4f:de:12:b2:82:12:d2:c8:9c:73:21:0c:78:07:
                    de:f5:fa:8e:f7:c1:2b:4e:2c:94:b1:de:bb:bb:8d:
                    a7:ec:fb:d5:66:c3:8d:86:ed:b7:33:6c:93:25:bf:
                    6a:1c:18:73:89:16:8a:cf:21:79:46:71:ef:36:ab:
                    d1:50:51:8d:79:9c:50:72:6a:1e:8d:b5:d4:2c:bd:
                    2f:34:4c:f1:ba:66:82:4b:ed:e8:19:85:29:16:29:
                    d1:02:21:2a:5a:92:aa:cd:f9:f9:d8:7e:f4:a7:09:
                    a0:6b:3e:6b:1f:b0:7e:f7:55:f0:a4:4e:0a:dc:da:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:58:2F:6F:DC:3A:EF:83:1B:94:C8:73:E3:69:CB:51:AE:1F:F9
            X509v3 Authority Key Identifier:
                keyid:9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D52D5FBF5120C30654881F61F146C9915781B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:55:e0:d1:ff:c9:56:d7:d3:95:07:0b:21:c8:85:aa:6e:
         4a:53:fb:b6:69:0c:b1:42:c0:d0:bd:18:3a:06:be:07:0d:77:
         9f:e1:73:2d:51:57:d0:11:43:62:c9:75:3f:d1:ae:b4:60:e4:
         81:dc:b9:69:64:20:2d:00:75:b3:bf:d2:d4:bd:37:f5:c8:a8:
         b9:1e:a1:82:67:ea:87:2f:8f:fd:c1:fa:f0:e9:6b:d8:09:3c:
         9a:69:01:2a:a7:9e:3b:56:bf:77:74:f4:9f:43:86:3f:2b:0a:
         ab:c0:79:7f:c6:3a:29:f5:84:8b:8e:d2:15:b0:2b:28:a0:c9:
         b2:e0:5c:27:6c:ef:9f:17:85:9c:88:66:45:b9:27:a1:f7:45:
         0a:e0:40:44:df:0f:b5:71:86:61:f6:77:f6:1d:ae:43:f4:5e:
         d6:11:23:20:a7:1e:c7:81:7b:c3:dd:da:a9:43:d4:af:a5:35:
         17:bd:a4:c2:b6:19:c9:64:b1:b9:5a:83:db:c8:52:5e:76:ff:
         71:be:11:e6:94:a1:b4:02:dc:fc:b1:dd:db:f5:f6:ba:76:b7:
         b6:94:5d:09:47:0c:5a:cc:ec:75:69:af:a1:73:65:26:8c:0f:
         8b:cd:d7:51:3d:fe:e6:0e:f6:01:3b:28:e0:7f:37:00:ab:c2:
         c8:55:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----