Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.mft
File:                     600A870A2E7681E4BADA881DED55BA5CEDD02570.mft (raw, json)
Hash identifier:          2a5tDbhuAdhr+zhqNTeAqINTR9C8UfVdtTj/8BRiEdM=
Subject key identifier:   4C:67:DB:8B:2A:F5:DD:C3:25:B3:D0:D5:94:B9:F2:F5:94:B8:B7:75
Authority key identifier: 60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70
Certificate issuer:       /CN=600A870A2E7681E4BADA881DED55BA5CEDD02570
Certificate serial:       480CF3380E04D66A94307B85DD180CB97A91CB3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.mft
Manifest number:          0401
Signing time:             Fri 22 Apr 2022 23:20:47 +0000
Manifest this update:     Fri 22 Apr 2022 23:15:47 +0000
Manifest next update:     Sat 23 Apr 2022 23:20:47 +0000
Files and hashes:         1: 600A870A2E7681E4BADA881DED55BA5CEDD02570.crl (hash: J6e2tAGISKPBGUR+K2lxR8slNzc0l6BCAF1zafCoNu4=)
                          2: 3230302e3137302e3234342e302f32332d3233203d3e203131343332.roa (hash: AUKPfGzEJ1DZ49zxiDAFnskPIr+Woc7yv7S39zWtvJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0c:f3:38:0e:04:d6:6a:94:30:7b:85:dd:18:0c:b9:7a:91:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600A870A2E7681E4BADA881DED55BA5CEDD02570
        Validity
            Not Before: Apr 22 23:15:47 2022 GMT
            Not After : Apr 29 23:20:47 2022 GMT
        Subject: CN=3082010A0282010100C5EC789794F42F714C023B687ACC28EF59B0E29299893A0AF844DAA44CB9CFDD98FC1A19557F2462448AC41A59859865CB302A079E176D92E2724FDF44D95B74ABA70FA53F02A8F8A245453FE161E5B4A5F31EBE2F4237C7DB1AD4078A9A6BAD97F9A5BF083717E66E5BAEB17CA7C1EE9A73958D26CD3ABBF18440ABDE8E75141810EB118403F99CA44C754DA0CBE1C7AE2287B8FDDE81F96D2F7219C93EA8E47589025BAF4139A9B03183CBDAF3F6DB2A2858ABAF1546E7D078E35329BC5B7988EA6C76C00C607C8BACBAF8C4B2822C9CFC25271B5C9E7B5BB458C44B1B0EE0659B0F92D09381A5AE9FD8633B43E8BD7E1A15D77F90F868A1C5FDB4945042DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:78:97:94:f4:2f:71:4c:02:3b:68:7a:cc:
                    28:ef:59:b0:e2:92:99:89:3a:0a:f8:44:da:a4:4c:
                    b9:cf:dd:98:fc:1a:19:55:7f:24:62:44:8a:c4:1a:
                    59:85:98:65:cb:30:2a:07:9e:17:6d:92:e2:72:4f:
                    df:44:d9:5b:74:ab:a7:0f:a5:3f:02:a8:f8:a2:45:
                    45:3f:e1:61:e5:b4:a5:f3:1e:be:2f:42:37:c7:db:
                    1a:d4:07:8a:9a:6b:ad:97:f9:a5:bf:08:37:17:e6:
                    6e:5b:ae:b1:7c:a7:c1:ee:9a:73:95:8d:26:cd:3a:
                    bb:f1:84:40:ab:de:8e:75:14:18:10:eb:11:84:03:
                    f9:9c:a4:4c:75:4d:a0:cb:e1:c7:ae:22:87:b8:fd:
                    de:81:f9:6d:2f:72:19:c9:3e:a8:e4:75:89:02:5b:
                    af:41:39:a9:b0:31:83:cb:da:f3:f6:db:2a:28:58:
                    ab:af:15:46:e7:d0:78:e3:53:29:bc:5b:79:88:ea:
                    6c:76:c0:0c:60:7c:8b:ac:ba:f8:c4:b2:82:2c:9c:
                    fc:25:27:1b:5c:9e:7b:5b:b4:58:c4:4b:1b:0e:e0:
                    65:9b:0f:92:d0:93:81:a5:ae:9f:d8:63:3b:43:e8:
                    bd:7e:1a:15:d7:7f:90:f8:68:a1:c5:fd:b4:94:50:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:67:DB:8B:2A:F5:DD:C3:25:B3:D0:D5:94:B9:F2:F5:94:B8:B7:75
            X509v3 Authority Key Identifier:
                keyid:60:0A:87:0A:2E:76:81:E4:BA:DA:88:1D:ED:55:BA:5C:ED:D0:25:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/600A870A2E7681E4BADA881DED55BA5CEDD02570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:f4:c0:21:4c:92:77:e1:9b:4e:ae:46:58:71:b8:62:b1:
         ee:83:5b:bb:17:66:d7:cd:d9:58:30:de:1c:a9:be:9e:3c:c6:
         07:19:ef:6d:e4:c6:33:35:4a:36:73:9c:d4:89:3c:d3:8f:05:
         de:79:04:42:75:e7:d2:8a:e4:47:b8:f2:d4:1e:db:cf:37:bf:
         a6:1a:ff:60:4c:1f:b4:39:77:27:49:2f:21:ae:f5:8e:16:4e:
         56:de:0c:87:69:74:fb:11:7d:57:d1:e0:0c:7a:41:68:d2:81:
         2f:3d:1a:3b:d2:5f:1c:a3:41:3b:54:84:4b:6e:f5:23:8c:50:
         e0:1b:a2:69:aa:da:99:11:2a:51:ed:d0:fe:99:d6:7c:67:58:
         66:a5:f5:2e:63:3a:6a:ba:5b:0b:b9:27:98:39:77:1c:c0:8e:
         83:d5:64:71:97:ec:4c:b4:67:5e:6d:22:17:11:bb:3a:56:b3:
         6d:13:c2:26:7a:d3:1a:c9:35:fe:98:a7:38:64:7d:7c:2b:d9:
         99:d1:51:3e:38:ef:c6:f9:d0:98:95:be:ce:1a:c1:cb:89:ff:
         fd:7b:cf:ae:07:53:66:ce:0e:2b:cd:a9:2d:ec:1e:8d:6b:11:
         f8:99:ba:17:67:e3:3d:1d:dd:9f:d9:0f:48:e8:74:b4:63:d8:
         b9:97:5c:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----