Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.mft
File:                     FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.mft (raw, json)
Hash identifier:          sXrX7CeFZlEQOn2GvYmZt0MdQG5Licjutrdk28mSWqc=
Subject key identifier:   61:ED:95:AC:4E:81:93:61:67:AF:B3:C3:B8:23:81:A5:95:6B:4F:50
Authority key identifier: FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6
Certificate issuer:       /CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
Certificate serial:       4C845CEBB4CE72B37201E240253E9C208961B0D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.mft
Manifest number:          0120
Signing time:             Thu 19 Oct 2023 14:17:32 +0000
Manifest this update:     Thu 19 Oct 2023 14:12:32 +0000
Manifest next update:     Fri 20 Oct 2023 16:17:32 +0000
Files and hashes:         1: 323830343a336561633a3a2f33322d3332203d3e20323636363134.roa (hash: hY2RtR24DOKLBCF47DF5Gn9liDsyUpoJCXFoTqWL1Rc=)
                          2: FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.crl (hash: bpBh+3uFV0AzhFWQFX1LVEulYO3IFuddUapql0GnNAs=)
                          3: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: zc+jHN73mbkIcPe+u6MnvZx+BNyEziL7eT93GMj3IHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:84:5c:eb:b4:ce:72:b3:72:01:e2:40:25:3e:9c:20:89:61:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
        Validity
            Not Before: Oct 19 14:12:32 2023 GMT
            Not After : Oct 20 16:17:32 2023 GMT
        Subject: CN=61ED95AC4E81936167AFB3C3B82381A5956B4F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:99:10:f8:79:71:50:e5:68:a0:c9:27:1c:
                    6b:1d:02:42:2c:6d:aa:4b:c9:10:3c:5c:82:fe:9c:
                    e9:a3:4a:ea:64:ed:a2:89:db:1a:32:22:0b:87:a7:
                    cb:74:5c:4d:20:bd:1a:08:61:ed:6c:40:58:99:52:
                    99:63:e1:32:f6:bb:af:d3:4c:8f:2c:93:cf:7f:8a:
                    ff:a7:30:d9:7b:13:1d:c5:e7:a3:9a:af:8d:a6:33:
                    98:5d:19:61:2e:0b:1f:55:e1:8f:66:1c:97:30:49:
                    35:13:97:24:9b:1d:9d:fd:46:df:c8:fb:a0:32:aa:
                    98:b4:72:7a:c5:25:39:de:71:14:b2:47:6f:df:80:
                    50:4e:3f:06:dd:cb:fb:61:4a:c2:a2:0f:11:07:03:
                    f7:b0:f2:f7:a6:2e:8d:60:2e:1c:7c:fd:4b:a2:b6:
                    1f:a0:8f:a2:83:40:e2:73:b7:14:4f:08:85:6b:14:
                    78:72:91:52:76:a8:81:b3:12:41:bc:64:75:52:9a:
                    e3:51:f0:4b:d6:9d:fe:3b:82:52:16:eb:3c:02:2b:
                    27:b6:59:51:94:1a:e5:ec:96:dd:3d:bb:1e:bd:92:
                    93:a4:2e:17:b1:61:e6:69:3a:7b:30:92:4b:be:bf:
                    42:0b:cf:53:88:ca:fb:16:ec:a9:79:fd:a2:22:ba:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:95:AC:4E:81:93:61:67:AF:B3:C3:B8:23:81:A5:95:6B:4F:50
            X509v3 Authority Key Identifier:
                keyid:FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:0f:b3:6e:69:27:48:3f:28:1e:d1:03:61:7c:6d:4c:10:
         79:30:4d:39:8b:ec:f7:c4:6b:d0:eb:47:62:3e:aa:4f:6b:24:
         95:bd:01:c3:41:50:91:8c:96:7c:7b:5f:ca:8e:d5:e1:fa:14:
         c6:53:fe:3c:0b:ea:c9:dc:b6:fa:d3:d8:a3:18:9e:9b:fa:15:
         2f:7a:6d:de:47:43:b2:9a:6d:c1:b3:b4:6f:ac:30:f8:1a:52:
         49:6b:c1:af:53:0e:ed:0a:e5:c7:aa:06:39:79:2f:0d:06:5e:
         99:65:41:0b:db:52:1a:5f:fc:22:d1:54:28:74:d1:ef:be:e4:
         6e:f6:1c:c1:da:22:4b:87:5e:cd:2e:5a:21:c2:99:f6:16:0e:
         32:c6:43:05:10:ab:bc:65:dc:fa:db:24:d8:23:e5:52:17:a4:
         cc:51:ba:af:8d:e2:99:f6:12:b7:fe:63:00:42:2d:51:e1:73:
         61:0f:91:28:fe:53:20:a6:b8:e2:52:aa:cc:45:d1:71:45:88:
         20:65:8a:fb:4f:fd:ac:82:8a:6c:00:74:f3:30:14:fd:43:83:
         a9:bd:fc:cb:d8:be:08:c4:a0:d6:b1:31:bd:4a:c9:8f:66:1b:
         34:b4:5f:fe:40:16:47:e1:42:25:97:05:17:e4:b6:87:43:ce:
         6e:25:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----