Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft
File:                     6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft (raw, json)
Hash identifier:          8zrbYZCv0LGD0jVhj/YESNakY0gwpcvanE3U0IscgM8=
Subject key identifier:   AA:28:E8:37:FB:12:41:5C:3D:64:14:2F:9F:54:A2:1C:C9:68:F2:98
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       41601901FA315902FB0429B143501B78D2B1751E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft
Manifest number:          2A
Signing time:             Tue 19 Nov 2024 16:52:50 +0000
Manifest this update:     Tue 19 Nov 2024 16:47:50 +0000
Manifest next update:     Wed 20 Nov 2024 17:17:50 +0000
Files and hashes:         1: 323830343a383537383a3a2f33322d313238203d3e20323732353831.roa (hash: 1LrCRwUWjoZwUH8wR/LIVhTtRnwqpbDONN/TwmuCPI0=)
                          2: 6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl (hash: 5dIevc/vo+ChIcPlUNvZZiilmfZpe+aK7O+h7lwy/Ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:60:19:01:fa:31:59:02:fb:04:29:b1:43:50:1b:78:d2:b1:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov 19 16:47:50 2024 GMT
            Not After : Nov 20 17:17:50 2024 GMT
        Subject: CN=AA28E837FB12415C3D64142F9F54A21CC968F298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:17:02:57:57:b8:f2:70:26:9d:ef:3a:0b:
                    31:68:03:35:72:8e:62:2c:4e:66:09:ab:a9:d8:2e:
                    12:05:dc:a9:0a:ba:2c:6c:fe:93:d7:79:b4:63:63:
                    38:85:ea:36:07:0b:5f:8e:45:15:a5:f8:0d:72:79:
                    8a:d7:a1:55:53:c6:ef:34:c3:95:d3:a0:4d:5e:2e:
                    a4:c7:d8:4d:e6:6d:99:ce:f9:fd:51:a0:09:e5:1d:
                    93:ca:73:25:0d:cc:60:26:9d:d0:c1:e8:90:bf:4f:
                    3e:8a:2b:1d:43:c8:2b:18:c4:4d:f0:84:07:af:ff:
                    ac:d7:ad:94:62:3b:cc:93:5c:fe:2d:5b:6f:70:14:
                    2d:7c:f6:42:71:5b:a5:b2:0c:4f:93:b7:a5:23:91:
                    dc:46:e6:c2:56:40:55:97:58:e2:b9:bb:38:5b:67:
                    ed:d9:65:28:be:53:6c:6a:6f:48:8a:88:cc:bf:b6:
                    6b:e3:7e:05:9c:6f:64:e7:0b:e6:30:8d:50:c4:e9:
                    e5:43:cc:52:d7:bc:4c:1b:73:23:1d:11:96:2b:00:
                    59:fa:9a:e4:e8:59:f3:31:c1:ff:b8:93:75:41:d6:
                    83:81:66:ed:49:e4:c4:6d:14:64:db:08:e6:35:05:
                    1a:f0:02:94:aa:41:78:65:36:db:19:2e:97:da:d9:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:E8:37:FB:12:41:5C:3D:64:14:2F:9F:54:A2:1C:C9:68:F2:98
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:1b:bc:e6:d3:64:be:c9:8e:07:ee:e6:04:14:c4:30:80:
         21:9e:8d:1c:33:25:1a:b4:27:56:f5:6c:a9:2a:ca:66:cf:a9:
         32:09:1e:4f:36:4e:0f:1e:ab:bc:48:a4:05:1e:02:b5:fb:ae:
         5f:0d:f6:40:c4:36:b5:a9:a8:be:e6:f2:2e:14:06:f0:c6:78:
         cb:e8:d6:a5:77:9d:dd:fd:93:59:2b:a6:6c:af:35:f0:8e:21:
         77:77:3c:79:de:e4:e8:c4:7a:b4:4a:2b:15:27:56:24:a6:7d:
         67:07:64:bd:c0:88:91:36:46:4c:d2:99:a2:2a:e1:70:5a:29:
         ef:c6:1e:25:0e:20:b7:ca:9e:65:6a:37:7c:66:a8:64:af:f0:
         25:31:b1:6d:40:1a:47:03:3d:54:8d:e6:b3:93:bf:5e:b3:7e:
         ba:b1:05:92:c2:97:ef:cc:a3:93:6d:43:71:38:e9:d3:0e:d8:
         d8:46:fd:f5:af:f5:de:53:33:52:72:a4:42:28:1a:70:e7:96:
         f2:85:8a:25:ac:ac:66:5a:85:80:70:68:eb:66:ba:f9:5e:34:
         05:ab:98:fd:ed:16:f5:ad:c5:05:10:bd:67:a3:ec:4a:3c:46:
         e6:8e:e3:ca:7e:1a:fe:f4:83:a9:20:0d:be:56:df:54:9f:22:
         e2:72:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----