Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft
File:                     6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft (raw, json)
Hash identifier:          1Ym+qpC7nULCkav1MogYxcItf56faqy3Ep4ITEclet4=
Subject key identifier:   F0:AA:AD:9F:C1:6B:5D:C6:CB:14:01:93:75:8D:2E:C1:A0:E8:70:99
Authority key identifier: 6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95
Certificate issuer:       /CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
Certificate serial:       5EDAB9E9969C100480347604445107D28570A755
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft
Manifest number:          69
Signing time:             Wed 19 Jun 2024 19:12:36 +0000
Manifest this update:     Wed 19 Jun 2024 19:07:36 +0000
Manifest next update:     Thu 20 Jun 2024 21:39:36 +0000
Files and hashes:         1: 3137392e36332e39362e302f32322d3332203d3e20323731353534.roa (hash: 2z5UbSfEFgeUc+HAG8veIJiWEEHVFR+DZEu3e5Wi3Z0=)
                          2: 6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.crl (hash: VvlPz+AK/dZl3+QpF/lmY6uFR4asNR9cAVrk+RM371I=)
                          3: 323830343a376435343a3a2f33322d313238203d3e20323731353534.roa (hash: ejUUuo7UJJewokeyU/XFM1VlPnqwpqtKqfNDhkKq4sE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:b9:e9:96:9c:10:04:80:34:76:04:44:51:07:d2:85:70:a7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95
        Validity
            Not Before: Jun 19 19:07:36 2024 GMT
            Not After : Jun 20 21:39:36 2024 GMT
        Subject: CN=F0AAAD9FC16B5DC6CB140193758D2EC1A0E87099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:8d:df:5e:db:44:cc:a4:84:cf:d1:98:a0:
                    93:6f:b3:bb:9e:ca:fb:78:cd:59:2f:b6:0e:30:f8:
                    2c:56:f6:9e:f8:bf:25:98:75:86:97:b2:cc:c6:a5:
                    ea:86:67:d1:46:5a:09:fc:b8:b5:2d:c4:94:c2:c7:
                    94:18:98:c9:65:ae:44:25:2c:3b:bf:98:f3:d3:e4:
                    f6:1d:12:2f:da:ac:44:88:20:ca:d2:ed:f2:7f:d1:
                    f4:21:0d:43:7c:3c:69:5b:ad:78:0c:56:d9:ca:c3:
                    cb:e0:b6:05:35:48:2e:2a:99:72:23:24:6b:19:ae:
                    9a:20:44:14:4a:5c:1f:10:ce:32:b7:58:a1:9b:dc:
                    c1:eb:4a:24:d5:f5:0a:60:b5:df:4d:2e:0b:b5:30:
                    e1:c2:63:89:53:76:2f:74:96:0c:bc:d5:7a:d4:48:
                    f2:80:f3:96:3c:ff:93:d2:4b:ed:2b:08:02:a4:74:
                    3e:42:93:a7:7f:ab:2e:4a:d8:4c:e3:23:69:48:75:
                    f9:2a:ce:65:c2:67:77:cc:e3:57:bc:f0:44:10:4a:
                    c8:c4:2c:7d:a8:54:74:ff:8e:62:f7:34:bc:b0:27:
                    45:e0:ce:d3:83:cf:40:f9:db:3b:41:d3:bb:c7:6b:
                    16:2d:2c:f6:21:71:c0:11:bc:0f:37:8c:0a:0a:67:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AA:AD:9F:C1:6B:5D:C6:CB:14:01:93:75:8D:2E:C1:A0:E8:70:99
            X509v3 Authority Key Identifier:
                keyid:6D:04:BC:5E:D8:BA:34:8F:4B:F9:50:89:7B:B2:11:E8:E5:BE:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/1/6D04BC5ED8BA348F4BF950897BB211E8E5BE8D95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:5f:6c:d8:85:c6:71:78:6d:41:ce:f8:aa:d9:94:48:38:
         d9:1e:33:b7:3e:33:05:71:08:d6:ec:b4:53:6c:46:57:68:c1:
         b8:68:c6:39:23:d4:d2:54:82:55:57:4f:2f:a2:92:2f:19:03:
         93:0f:a8:85:03:e2:69:2a:e8:8c:6b:ad:b1:aa:39:58:79:36:
         01:e7:63:8a:34:d6:70:2d:c6:1b:72:a0:fb:6d:86:15:1a:2c:
         25:cd:89:c0:aa:4d:6a:db:4e:71:8c:36:f3:8c:a1:cc:e0:84:
         e1:25:e3:45:04:10:16:77:b8:9d:b2:67:1c:38:13:bd:59:06:
         89:17:6e:f4:74:a9:53:48:c7:ac:78:78:58:bc:a1:0a:d7:16:
         b9:b8:b5:49:a3:cd:f4:e3:d4:6b:42:ee:f0:8c:6e:12:84:6c:
         9a:02:a1:23:d9:88:71:84:bd:cb:4e:7f:57:ec:63:e7:99:35:
         44:ce:c9:44:11:e5:7e:d9:cd:b6:d4:12:c3:f3:d8:5b:1e:74:
         9b:37:e2:b7:32:59:dd:45:5e:54:0b:9e:1b:36:01:da:54:32:
         47:ef:bc:2b:01:8d:3e:c7:97:ca:5a:76:dc:97:fd:af:b3:67:
         1f:dd:6a:27:13:6f:c0:bd:7c:d5:a8:a6:46:5d:df:9b:1a:06:
         17:75:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----