Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft
File:                     0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft (raw, json)
Hash identifier:          682oIt5dNBlalNZp2B260lBuQxOLHPjUGhHXDRsDfgM=
Subject key identifier:   60:41:2F:3E:CD:3D:29:B3:A0:FF:5D:0E:02:C3:29:43:75:27:E2:36
Authority key identifier: 0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60
Certificate issuer:       /CN=0E0B703F842C38CBB5AE671AE348E1B136E9AA60
Certificate serial:       52281A83C0E8FC9D332C15DD790C36D8BF326706
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft
Manifest number:          012F
Signing time:             Tue 19 Nov 2024 08:13:50 +0000
Manifest this update:     Tue 19 Nov 2024 08:08:50 +0000
Manifest next update:     Wed 20 Nov 2024 11:44:50 +0000
Files and hashes:         1: 0E0B703F842C38CBB5AE671AE348E1B136E9AA60.crl (hash: gRChSgdp3EMbCYSgir7pS43reip7HbkZB0SKoq+bj/g=)
                          2: 323830313a38303a3164303a3a2f34382d3438203d3e2038303735.roa (hash: GyJVcolPgoz5x48Ga66dUML66Gdc3F49IOEaN94/PZQ=)
                          3: 3139312e3233322e302e302f31332d3133203d3e2038303735.roa (hash: xm80CFIddL1+Fz96rI7heC6koaaiA/dKDn0qGrArIiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:28:1a:83:c0:e8:fc:9d:33:2c:15:dd:79:0c:36:d8:bf:32:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0B703F842C38CBB5AE671AE348E1B136E9AA60
        Validity
            Not Before: Nov 19 08:08:50 2024 GMT
            Not After : Nov 20 11:44:50 2024 GMT
        Subject: CN=60412F3ECD3D29B3A0FF5D0E02C329437527E236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:5a:ff:2e:f7:90:a3:27:8a:7f:89:ec:e5:
                    95:12:55:5d:93:98:4a:a3:4a:af:a6:a7:78:5e:89:
                    c5:19:86:f3:c8:e9:c6:65:b5:1b:dd:19:a8:4c:d0:
                    7f:24:cb:13:a9:fc:6b:7b:b3:6f:08:47:64:2b:bd:
                    18:7d:75:b6:04:a6:c1:48:db:76:01:d6:a2:81:54:
                    f5:f7:d2:80:d9:ee:d7:0a:57:c2:fe:8f:2c:52:1b:
                    20:a1:15:14:f1:eb:fb:97:24:3e:aa:e6:f0:cf:11:
                    bc:8c:76:26:39:ae:40:0f:1d:00:42:49:ff:e8:d1:
                    04:82:21:b5:fb:3d:9b:ec:b1:a1:97:e5:49:aa:72:
                    61:65:e0:c3:1b:0a:b0:64:b5:06:0a:03:c2:60:13:
                    07:d9:ef:59:3c:9f:cd:f4:7d:3e:4a:b6:5c:4e:14:
                    cf:b7:1c:9d:74:4e:d4:25:ed:ef:a7:39:e1:e6:17:
                    d4:af:49:4e:67:45:67:d8:23:27:a9:d7:86:5a:1b:
                    8c:fe:93:ea:d9:e4:9d:c5:61:31:6a:dc:30:8c:24:
                    91:09:ec:8e:85:30:9b:c7:61:4c:59:38:1d:25:d1:
                    93:72:ce:07:62:f3:b1:d8:b2:e8:da:a1:85:5f:7b:
                    f0:c0:5b:dd:d0:70:e0:a5:88:05:bf:9d:a8:3b:1e:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:2F:3E:CD:3D:29:B3:A0:FF:5D:0E:02:C3:29:43:75:27:E2:36
            X509v3 Authority Key Identifier:
                keyid:0E:0B:70:3F:84:2C:38:CB:B5:AE:67:1A:E3:48:E1:B1:36:E9:AA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/1/0E0B703F842C38CBB5AE671AE348E1B136E9AA60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:ce:cc:ff:df:b2:f5:00:e2:25:1f:a9:05:dc:e9:47:4e:
         1d:11:39:2a:8d:6f:59:6a:6c:e0:5f:98:fc:a1:f3:a1:0f:85:
         d0:ec:a0:39:61:81:6e:86:d6:87:9d:e7:d3:2c:20:3d:e7:83:
         9c:d1:75:e4:db:b0:e3:f2:8c:1a:ae:73:9d:bc:81:f8:db:35:
         83:de:ab:60:9f:7b:45:bf:8c:f5:fd:4c:bd:e6:f2:43:20:b3:
         e0:14:60:d8:8a:2e:5d:ed:cd:7b:d9:c8:8c:b9:fc:b3:a0:8e:
         96:42:4e:15:75:6d:e9:d8:57:48:79:d9:20:df:ce:11:a5:69:
         8a:c2:d6:af:f4:8e:1c:0f:3c:e0:33:1d:96:3c:dd:f6:df:65:
         fe:a8:2d:db:7b:d4:e0:df:e1:97:93:ce:c8:5d:32:70:ee:98:
         2b:7f:a2:a8:7e:8e:8f:4e:e9:a8:b5:1c:5e:4b:88:24:b2:66:
         1c:d8:d3:cb:40:c8:a5:63:b9:b1:2f:0e:a5:71:47:8d:d6:8b:
         61:21:52:6c:65:a6:8a:d9:6c:03:bc:8a:01:e0:0e:00:cc:d8:
         d7:14:89:73:ee:5d:51:5e:25:3d:6e:c1:30:2a:06:fa:2e:fe:
         19:62:9b:14:0f:27:d0:39:76:89:c8:12:6e:d2:37:44:cf:03:
         82:f7:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----