Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.mft
File:                     6BDA41906F6B2549B45CF4ED740D254D8C4929BC.mft (raw, json)
Hash identifier:          TM71459DM8X5X05hwRAfBBi0YGeIJq4F3X4xyh9B6co=
Subject key identifier:   BD:04:99:7D:CB:17:9E:D7:59:FC:9C:D1:DB:F9:26:E9:03:D7:11:1B
Authority key identifier: 6B:DA:41:90:6F:6B:25:49:B4:5C:F4:ED:74:0D:25:4D:8C:49:29:BC
Certificate issuer:       /CN=6BDA41906F6B2549B45CF4ED740D254D8C4929BC
Certificate serial:       20EC5DD02EAE61E9B24E42F3E3F42E176F880570
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.mft
Manifest number:          6A
Signing time:             Tue 18 Jul 2023 21:49:21 +0000
Manifest this update:     Tue 18 Jul 2023 21:44:21 +0000
Manifest next update:     Thu 20 Jul 2023 01:06:21 +0000
Files and hashes:         1: 6BDA41906F6B2549B45CF4ED740D254D8C4929BC.crl (hash: qN9VOt8/hyDIopFE2xXsoqX78cDPEFmqG7pFWjt8uoM=)
                          2: 34352e3137332e3137362e302f32322d3234203d3e20323638383138.roa (hash: vrBMhTlXSFIUBycu4Enzu0hc0KhO2XDjAS3Rr6QPseY=)
                          3: 323830343a356231383a3a2f33322d3334203d3e20323638383138.roa (hash: qCMTeMGW+BJra5RJjEf+cYRLvxl++CSdj5LAd7zQYP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:5d:d0:2e:ae:61:e9:b2:4e:42:f3:e3:f4:2e:17:6f:88:05:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDA41906F6B2549B45CF4ED740D254D8C4929BC
        Validity
            Not Before: Jul 18 21:44:21 2023 GMT
            Not After : Jul 20 01:06:21 2023 GMT
        Subject: CN=BD04997DCB179ED759FC9CD1DBF926E903D7111B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a8:82:fd:fa:fe:23:8c:85:d7:59:ce:fa:55:
                    89:23:16:d0:97:48:85:8e:b4:2e:65:6d:1f:21:86:
                    f8:ac:ae:87:b3:02:e2:41:f2:c0:9b:4d:5f:26:ee:
                    4a:28:22:8e:c0:99:1a:b1:90:78:0d:09:32:a9:0f:
                    78:57:8f:1e:bc:fe:99:f6:63:45:14:43:2c:b9:3c:
                    c6:c3:02:0e:11:7b:c9:11:b6:34:f8:22:de:d2:aa:
                    60:35:f6:ab:9d:a4:58:50:ee:60:dc:b0:22:b4:e8:
                    46:6d:35:d1:9e:42:1a:bc:3b:00:b8:3b:04:28:f6:
                    72:66:b0:5b:83:1e:83:72:c1:d0:1a:c0:74:5e:80:
                    66:e2:5d:30:84:ad:fb:2c:39:e9:0a:65:fb:44:0b:
                    3c:c3:7c:04:13:b5:aa:6d:f2:76:67:f3:4d:00:3e:
                    61:2b:d6:78:9c:68:e2:fc:c5:ae:f9:c0:f0:68:3f:
                    1c:05:43:c5:40:24:ab:31:f0:f1:69:00:f7:43:fd:
                    a5:6f:12:21:7b:7a:40:c7:87:81:71:91:4a:b0:6a:
                    0c:6c:6b:de:d7:f2:32:34:b8:6c:2e:9e:d5:15:27:
                    30:25:ee:fc:99:fb:27:48:bf:ec:2f:b9:3c:84:ad:
                    ac:9c:6c:1b:85:91:ff:02:b0:31:71:cf:ef:fa:bd:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:04:99:7D:CB:17:9E:D7:59:FC:9C:D1:DB:F9:26:E9:03:D7:11:1B
            X509v3 Authority Key Identifier:
                keyid:6B:DA:41:90:6F:6B:25:49:B4:5C:F4:ED:74:0D:25:4D:8C:49:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/6BDA41906F6B2549B45CF4ED740D254D8C4929BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:8f:05:1a:6d:0d:85:c9:ab:85:18:35:ac:d2:f5:fd:c0:
         db:32:49:b3:9b:57:79:36:2c:e0:d7:8d:c6:dc:b7:79:03:60:
         a3:95:94:7a:93:20:6b:ca:5d:cb:77:b7:23:6c:a2:9e:56:84:
         fd:2a:61:7c:71:47:21:fd:3d:5e:ce:ec:62:54:b6:d2:bf:51:
         cc:d2:2c:87:21:49:b6:fa:26:ce:a2:00:5f:0b:c7:1f:99:9c:
         f1:2e:e3:6a:11:95:4c:73:e9:5b:80:12:b2:ce:32:c4:2d:b7:
         38:72:d5:71:ed:2a:32:bc:8f:35:94:9e:92:35:74:e2:ea:19:
         3b:13:89:49:35:ad:48:98:a3:70:11:24:e9:9a:47:b1:aa:83:
         20:6e:65:54:12:d4:ae:8f:b0:ea:02:c2:f5:dc:4f:69:f8:c4:
         1e:09:84:ff:bf:c4:a3:93:27:de:66:03:54:fb:ed:f5:24:1e:
         5d:a1:00:a3:8f:28:ca:3f:10:dd:24:09:7e:0c:d6:aa:f1:96:
         ec:33:79:5e:5f:d5:28:c3:95:d7:4c:ba:32:37:3e:71:ef:23:
         ac:68:1b:68:fc:53:39:35:40:85:2e:07:7c:5a:f9:08:da:15:
         c4:ac:29:95:c0:03:4a:db:59:7e:e7:5d:ea:cc:49:27:68:25:
         76:9f:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----