Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft
File:                     6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft (raw, json)
Hash identifier:          c35H/88K/w35V8kERQWD2RbgJD8wgSwrECWwQJr6LN0=
Subject key identifier:   B2:1E:65:25:3C:46:46:C1:BB:DC:A3:00:B8:33:CB:B1:B6:17:D8:80
Authority key identifier: 6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48
Certificate issuer:       /CN=6BE684BE05E26786329CFC6C8E5B8F0195AE1548
Certificate serial:       6E36B6B80D657A891736110163591E30A1DF65FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft
Manifest number:          4B
Signing time:             Mon 15 Apr 2024 09:18:55 +0000
Manifest this update:     Mon 15 Apr 2024 09:13:55 +0000
Manifest next update:     Tue 16 Apr 2024 12:49:55 +0000
Files and hashes:         1: 3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (hash: Evj/NAdOA9BbNWxXZU+BcBjT0bv4ZnEw4WVhAHvCl00=)
                          2: 323830343a336333633a3a2f33322d3336203d3e20323636313938.roa (hash: k8mVVo3iZHjC6q7AYqTpmjsI44PyRcRvXfcPOkLFJW8=)
                          3: 6BE684BE05E26786329CFC6C8E5B8F0195AE1548.crl (hash: V+nD4OwRhvqc1SVmD+XhH2WRlXUteyS+qgEcpvo/IJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:36:b6:b8:0d:65:7a:89:17:36:11:01:63:59:1e:30:a1:df:65:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE684BE05E26786329CFC6C8E5B8F0195AE1548
        Validity
            Not Before: Apr 15 09:13:55 2024 GMT
            Not After : Apr 16 12:49:55 2024 GMT
        Subject: CN=B21E65253C4646C1BBDCA300B833CBB1B617D880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:18:09:05:22:83:e7:d2:50:f2:55:61:ab:
                    2b:74:02:34:64:2e:92:35:b8:08:f9:46:29:db:51:
                    f4:7e:8e:e3:92:06:d1:06:5e:97:a0:cd:3c:70:b1:
                    0b:5a:7f:83:5c:e0:c8:65:4f:ad:cd:91:cb:a9:f9:
                    cd:44:58:10:8e:e8:5d:c1:f8:05:db:9e:9d:de:48:
                    fa:4d:c5:c3:ea:1e:7e:6d:bd:ad:d9:01:27:54:cd:
                    3a:96:72:09:97:8c:f5:1c:39:de:1c:3a:44:5e:1d:
                    46:7a:39:34:1d:11:ba:2f:59:f3:85:0e:71:7f:7b:
                    b9:ef:ed:b1:b4:66:a0:e3:6c:ed:eb:4c:1b:4d:72:
                    5b:dd:03:aa:e4:44:3e:9a:c2:e0:5e:b7:c3:6d:14:
                    2e:99:78:bc:54:06:3e:ad:c7:c4:18:af:48:b3:81:
                    29:4b:e0:83:cd:5e:51:f0:2e:53:ab:3a:25:bd:ca:
                    7c:36:f2:18:36:39:ef:80:fe:15:30:f4:0b:bd:da:
                    82:f5:c8:8a:e1:eb:d2:94:95:30:e6:9c:f9:87:8b:
                    a3:58:e7:19:cf:da:92:d6:76:23:e9:b7:dd:a2:07:
                    b9:df:a4:7c:c2:da:96:3a:85:4f:c8:90:02:37:7c:
                    27:df:f5:64:5d:a0:07:42:8f:bd:39:06:12:fb:61:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1E:65:25:3C:46:46:C1:BB:DC:A3:00:B8:33:CB:B1:B6:17:D8:80
            X509v3 Authority Key Identifier:
                keyid:6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:ff:75:85:50:e7:4d:15:c9:77:b4:30:1a:e2:01:2e:f1:
         e9:23:12:9b:3e:d3:e2:87:a4:32:bb:97:7e:f2:fe:e9:e4:e0:
         64:f8:fa:81:ff:bf:cc:ef:5d:a8:0f:54:95:01:2d:ea:8b:0c:
         80:ba:dd:d6:f1:10:a1:6e:62:37:1d:e6:d3:51:b0:19:de:9d:
         06:59:7f:6f:24:5f:fb:c0:0a:cc:b3:79:06:6b:d9:19:2c:cf:
         fb:55:94:3f:6a:13:ab:b5:7b:94:35:89:c0:fe:bc:64:49:90:
         37:9b:f4:98:eb:af:38:64:36:bc:7b:1e:f8:17:f3:05:9b:80:
         5b:1a:3c:89:15:5d:3c:a0:b9:a3:72:59:12:13:61:e3:11:14:
         db:75:94:f3:fe:5d:91:f1:c1:9a:67:88:81:71:7a:02:2a:e6:
         5c:5a:5f:a9:91:e5:00:09:31:e2:e1:09:2a:c3:b6:1a:56:3b:
         41:00:b4:cd:27:09:aa:50:1b:76:fb:f9:b0:63:9c:57:18:55:
         83:4d:a7:d5:5b:5e:7b:a3:6d:fc:29:c4:72:b5:bc:84:18:fd:
         c9:bd:45:11:c2:ab:35:d6:2b:d5:a7:51:4f:cc:b3:79:5e:3e:
         54:c0:78:62:d2:c9:11:92:f2:b6:82:7a:43:0b:e8:fd:01:e8:
         28:80:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----