Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.mft
File:                     D824C23121EFD846C683EDEED166C5C40784AE04.mft (raw, json)
Hash identifier:          WGIu5nehO0JJnWhESlHBYlMa1V3NNmW52NAOes9KqyU=
Subject key identifier:   E9:F0:D6:33:43:B5:9F:82:9D:65:3B:F0:7C:D6:24:39:41:B3:3E:23
Authority key identifier: D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04
Certificate issuer:       /CN=D824C23121EFD846C683EDEED166C5C40784AE04
Certificate serial:       6952E3FEBCA031E4E1F599D8B3F464EF7619BBFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D824C23121EFD846C683EDEED166C5C40784AE04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.mft
Manifest number:          06C1
Signing time:             Wed 29 Nov 2023 03:58:00 +0000
Manifest this update:     Wed 29 Nov 2023 03:53:00 +0000
Manifest next update:     Thu 30 Nov 2023 03:58:00 +0000
Files and hashes:         1: 34352e342e33322e302f32322d3234203d3e20323636303434.roa (hash: 71XFR5vUyN1I8u1N7Vs+VY2cqLkVOJ9xoId9FkvfEbY=)
                          2: D824C23121EFD846C683EDEED166C5C40784AE04.crl (hash: BR0ZLVEGiVdMvgYZT7W3wE8Vm/7kkn3XLhuGbi0LKrA=)
                          3: 323830343a333962303a3a2f33322d3438203d3e20323636303434.roa (hash: 9smnDly9wtnARFrYdR0W433T+NJo6ipHL6ojdxuo7Ic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:e3:fe:bc:a0:31:e4:e1:f5:99:d8:b3:f4:64:ef:76:19:bb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D824C23121EFD846C683EDEED166C5C40784AE04
        Validity
            Not Before: Nov 29 03:53:00 2023 GMT
            Not After : Dec  6 03:58:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:89:02:ea:72:03:6d:e5:91:f7:e8:0c:43:
                    33:be:b4:92:5f:f4:d7:45:f1:2f:23:ef:74:fd:fd:
                    d8:16:59:22:2f:47:f6:44:03:31:0c:d8:93:41:1d:
                    60:b7:49:35:d5:f6:1a:28:9c:da:24:ad:48:a8:13:
                    d3:47:cb:87:c5:9a:34:de:ab:4f:d3:bb:39:e9:c0:
                    44:ee:fd:57:71:9e:95:f3:12:e4:16:12:2a:b7:ed:
                    41:78:9c:8a:a2:2f:4f:74:05:7f:72:b1:39:f4:81:
                    1b:96:fb:e4:c6:f0:49:62:52:27:3b:26:26:83:ad:
                    ee:4b:dd:a5:df:4f:64:ac:d1:f1:7c:61:83:77:d1:
                    24:c1:0c:ca:43:f7:d5:d4:ba:69:29:e2:ea:63:2e:
                    5f:9b:1e:93:f1:7a:e3:1b:8c:d3:44:40:17:a2:be:
                    ee:3a:10:af:8d:5c:4f:49:94:03:40:f1:30:46:ea:
                    ed:9d:67:42:ac:54:44:80:3c:7c:58:d0:10:ca:10:
                    0a:7d:ec:c6:5d:a3:dd:67:40:06:cd:b1:13:e7:68:
                    40:91:66:b2:f0:07:23:89:96:a3:07:7e:d6:51:d0:
                    db:9b:42:b9:e6:44:16:31:d7:f7:53:8e:72:7a:b2:
                    79:18:e1:81:cc:a2:ea:c2:15:2b:66:bf:e4:bf:b1:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:D6:33:43:B5:9F:82:9D:65:3B:F0:7C:D6:24:39:41:B3:3E:23
            X509v3 Authority Key Identifier:
                keyid:D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D824C23121EFD846C683EDEED166C5C40784AE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:e2:de:d8:2b:1a:aa:d0:03:08:05:e3:b2:7d:44:1d:af:
         47:81:1b:f7:f6:50:dd:a3:66:b5:77:e8:27:5c:c5:a4:1d:88:
         89:a4:a0:b1:bc:77:77:9a:d3:16:17:3c:ef:f5:f6:4e:66:c4:
         51:eb:38:c1:30:2a:3d:39:d5:49:59:a5:67:7f:dc:28:8c:c9:
         bb:29:b9:40:91:bc:16:d0:11:20:83:f6:19:f6:5c:98:72:f0:
         33:b6:33:f8:e5:c9:94:12:80:2f:43:25:4a:f2:2c:ce:e1:10:
         df:4b:f9:9d:33:3f:8a:c9:e7:11:bd:56:99:bc:eb:a1:30:1c:
         a8:48:3d:e8:28:19:18:19:a3:5e:7e:ae:8d:d7:fa:c9:8a:37:
         5e:40:a2:80:85:16:f8:e2:21:8f:1f:59:00:ce:e9:fe:d0:85:
         9b:87:96:1a:98:17:fe:d1:46:01:ab:69:6b:bd:27:f9:46:d8:
         2f:5e:f0:c8:b9:41:05:66:0a:1a:ab:2c:d6:5b:be:c3:f6:d2:
         cb:77:8f:a9:e4:b5:28:8b:66:c4:f2:62:28:ec:ea:45:4a:f4:
         e1:f7:4a:29:95:b3:d7:c8:d2:b6:cf:73:e7:1a:03:fd:9c:6e:
         b9:1e:b2:70:35:68:fc:b8:c7:8f:d0:7b:bc:76:5b:15:5f:ee:
         ba:6b:90:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----