Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft
File:                     D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft (raw, json)
Hash identifier:          +F7Xe/0RAut2rF95WhJcgssratQN5l8mu+snM/XSZlQ=
Subject key identifier:   FA:BD:C3:5F:CF:22:9A:AF:31:54:A0:E3:03:CC:81:5B:DD:AB:E2:B3
Authority key identifier: D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D
Certificate issuer:       /CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
Certificate serial:       7DE0ACCA6556E708482A4C4E99E6E03775FAD124
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft
Manifest number:          6A
Signing time:             Sat 17 Feb 2024 04:55:53 +0000
Manifest this update:     Sat 17 Feb 2024 04:50:53 +0000
Manifest next update:     Sun 18 Feb 2024 06:23:53 +0000
Files and hashes:         1: D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl (hash: OJp2c/MH+BOSebztLda/2sgXK0TH6GQkQoxKvtnlKgg=)
                          2: 3136342e3136332e3131362e302f32322d3233203d3e20323635393631.roa (hash: 1AYYUQDSapgSyTb0AnLfykWx/b4L6WDHmhYxAPV5JL0=)
                          3: 323830343a343037383a3a2f33322d3333203d3e20323635393631.roa (hash: 7TshpJz7gLn3wkLoR/kvIvijvKlhJIDzANissvYFbPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e0:ac:ca:65:56:e7:08:48:2a:4c:4e:99:e6:e0:37:75:fa:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
        Validity
            Not Before: Feb 17 04:50:53 2024 GMT
            Not After : Feb 18 06:23:53 2024 GMT
        Subject: CN=FABDC35FCF229AAF3154A0E303CC815BDDABE2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:72:25:ea:db:b3:09:ae:25:39:5f:e9:4a:
                    e5:48:28:9a:55:d0:54:7a:01:3a:74:25:a2:20:e9:
                    d8:5c:2e:5a:98:aa:7d:9f:a9:a8:93:32:a4:e8:d2:
                    2a:a3:8f:aa:28:54:93:a5:fc:ab:56:fe:58:8e:23:
                    2d:c4:1a:0b:df:3d:53:46:cf:b5:ad:36:82:0b:8c:
                    d5:4a:37:e8:fe:34:23:24:a8:cc:78:01:f3:12:6d:
                    b1:67:7c:0e:23:ad:07:42:fa:54:8a:1d:01:65:b5:
                    70:9e:ef:3e:43:95:02:d9:04:4e:bf:fc:3c:49:ef:
                    db:64:8d:d4:61:89:ac:f2:89:80:e9:70:f5:c7:08:
                    bf:14:6f:69:47:be:8e:2f:4f:1d:db:ca:a8:02:dd:
                    8d:a1:aa:e9:6a:14:f4:94:8e:aa:9f:97:bc:80:31:
                    1b:a7:5a:b7:1f:85:04:1b:da:f9:fa:53:60:f6:05:
                    a0:0f:2f:93:0d:e2:b2:f6:1a:d7:bb:59:11:42:5e:
                    59:ea:b8:6d:ba:24:6e:34:9c:3f:2a:05:97:13:9e:
                    99:dd:71:03:c4:0e:26:04:d0:3a:ee:ca:67:2e:1a:
                    33:71:7f:bf:ec:85:23:61:82:74:dd:3c:76:38:38:
                    3d:69:58:ce:e3:12:29:f4:31:a2:f3:d1:c2:25:dc:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:C3:5F:CF:22:9A:AF:31:54:A0:E3:03:CC:81:5B:DD:AB:E2:B3
            X509v3 Authority Key Identifier:
                keyid:D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:b9:5e:62:88:6f:b2:e9:8b:5e:81:60:75:f9:6e:3a:a2:
         c6:e2:b3:37:39:ec:5a:2f:4d:75:3e:d9:1a:e7:bb:c5:b3:23:
         97:9f:4a:f7:94:ed:55:5d:d3:7e:c9:3b:e8:d3:c4:94:f6:bc:
         9c:bf:10:ce:76:8f:ed:b8:f2:1c:df:3e:30:d5:48:a6:94:5d:
         80:eb:0f:fe:cd:15:17:c8:8c:b3:89:0a:64:78:ed:10:f7:9d:
         bf:3d:8a:d1:08:98:4f:e8:dc:3d:bc:41:64:99:6c:13:1e:7b:
         e4:a7:ec:e4:4d:a9:17:ae:bf:41:5b:57:45:ae:09:4c:70:5a:
         7b:dc:ef:a9:de:bd:d4:5c:8e:07:6b:8e:4a:ed:fc:a4:c5:3b:
         0e:f3:8a:66:a0:a4:a3:29:d0:83:69:a8:8d:52:62:36:29:4f:
         bc:c2:51:9b:2f:26:fb:f9:34:df:1b:1d:22:81:8d:88:0c:45:
         6e:91:0a:18:93:7c:ab:41:8f:bb:c4:e2:22:52:e0:35:ce:c9:
         04:72:3a:df:9f:ae:ea:bf:51:59:08:a0:13:d9:66:a6:c2:26:
         bd:16:de:64:84:89:89:5a:c7:7a:89:97:8f:e6:17:0e:38:62:
         f6:d8:74:dc:d7:db:9d:16:03:4f:a7:b7:07:02:48:b6:8d:df:
         e2:f1:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----