Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6258F13D14A830657058ACD81F911FCE774E5060.mft
File:                     6258F13D14A830657058ACD81F911FCE774E5060.mft (raw, json)
Hash identifier:          +y7E/piEn/MrB2xwYp0SNNE9hrY6v2XIP73+IZj2+j4=
Subject key identifier:   D1:06:F8:97:DA:74:95:5D:8F:50:D2:DC:B4:4F:86:FD:52:AB:05:DA
Authority key identifier: 62:58:F1:3D:14:A8:30:65:70:58:AC:D8:1F:91:1F:CE:77:4E:50:60
Certificate issuer:       /CN=6258F13D14A830657058ACD81F911FCE774E5060
Certificate serial:       15472817901F27C654C7592F889891CCFA8351DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6258F13D14A830657058ACD81F911FCE774E5060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6258F13D14A830657058ACD81F911FCE774E5060.mft
Manifest number:          1D
Signing time:             Fri 24 Nov 2023 14:56:53 +0000
Manifest this update:     Fri 24 Nov 2023 14:51:53 +0000
Manifest next update:     Sat 25 Nov 2023 16:56:53 +0000
Files and hashes:         1: 3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa (hash: xXSuUaKg1UmOwl4hHBbhiTMmGCpsQ5PQuh6NyCMhgXU=)
                          2: 6258F13D14A830657058ACD81F911FCE774E5060.crl (hash: c6q1JMShCo6rXCqIh1oIU26QCQEIyXJRwXXpB92cj5U=)
                          3: 323830343a323430303a3a2f33322d313238203d3e20323634313935.roa (hash: StGhtyHah49tI7/7JlFZNGOZDvCVnJW3trG+KinGqeo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:47:28:17:90:1f:27:c6:54:c7:59:2f:88:98:91:cc:fa:83:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6258F13D14A830657058ACD81F911FCE774E5060
        Validity
            Not Before: Nov 24 14:51:53 2023 GMT
            Not After : Nov 25 16:56:53 2023 GMT
        Subject: CN=D106F897DA74955D8F50D2DCB44F86FD52AB05DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:13:85:d8:6f:36:65:a4:50:f3:b6:93:dc:
                    96:f8:d5:ba:38:cb:79:05:92:9b:60:58:70:f8:ec:
                    42:d1:91:30:64:43:88:c5:c9:4f:14:b2:4f:0c:0d:
                    28:75:bb:07:62:5e:09:4b:ff:62:5b:c4:3a:0a:f3:
                    43:9e:0a:d0:ef:60:2a:c9:38:b1:f0:da:10:1b:95:
                    ed:9b:97:dc:d2:5b:cb:2f:41:d6:22:7b:56:3d:31:
                    fe:7f:4a:fa:ab:4c:9b:f8:f0:20:63:50:57:ea:71:
                    28:42:77:f0:00:a1:3d:d6:06:f4:87:00:89:09:ae:
                    de:f8:b1:02:ca:59:e5:b9:42:b6:f8:15:9e:f7:59:
                    ce:28:d0:ae:af:48:44:b1:3c:50:a7:f4:82:be:f2:
                    8a:71:34:c4:a7:e5:66:49:aa:2e:c3:7d:ca:ea:e0:
                    f9:5a:bb:6c:ff:85:8c:6a:0d:e3:a7:13:d2:b0:a0:
                    fb:d6:df:45:b0:4c:56:c9:73:34:94:8e:86:86:e0:
                    97:65:de:05:58:b8:56:35:e2:b5:b7:33:56:ed:39:
                    91:0b:a9:f0:4f:2d:09:2f:24:74:77:58:d5:9e:95:
                    89:4a:e8:2b:14:f3:30:e6:42:15:38:f7:a7:23:89:
                    69:71:f7:d6:26:2a:9b:92:8f:05:63:10:e7:57:59:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:F8:97:DA:74:95:5D:8F:50:D2:DC:B4:4F:86:FD:52:AB:05:DA
            X509v3 Authority Key Identifier:
                keyid:62:58:F1:3D:14:A8:30:65:70:58:AC:D8:1F:91:1F:CE:77:4E:50:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6258F13D14A830657058ACD81F911FCE774E5060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6258F13D14A830657058ACD81F911FCE774E5060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/6258F13D14A830657058ACD81F911FCE774E5060.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:f9:47:79:3b:5a:e6:40:cf:db:50:4a:00:da:1e:c1:2c:77:
         b9:c4:e5:c8:93:54:38:00:b5:ae:cc:42:f4:aa:73:38:bc:07:
         6b:5a:c6:5e:bb:2c:bd:67:78:70:71:25:e3:27:90:cf:9a:a8:
         76:f8:dd:59:8d:b8:49:b0:10:1f:0f:e8:34:e4:4c:e5:a5:38:
         cb:5e:aa:c4:69:f4:33:62:85:0e:a7:c5:a5:27:b6:9f:43:12:
         7b:58:a6:45:00:bc:cf:70:d5:f7:93:c6:b2:7f:53:c6:aa:1d:
         b1:f2:aa:7e:49:90:30:91:2a:ca:a9:74:b1:07:a2:dd:26:6a:
         14:60:98:f8:32:15:49:a8:bc:74:02:ce:21:a1:9a:6b:1e:b4:
         6e:f7:43:eb:b6:6b:bb:1b:db:38:0c:1f:76:42:98:44:bd:63:
         7e:fc:db:ff:18:28:fc:e9:33:99:9b:51:04:ca:93:93:07:2f:
         57:74:4a:e1:8d:c0:dd:4b:0c:b7:46:dd:d1:ae:c7:b2:2c:e8:
         29:ea:e1:89:62:f9:5a:ad:4c:9f:fc:81:79:69:ee:d0:ca:78:
         d4:0a:23:3d:df:f8:10:c1:9d:e9:8e:b5:77:64:80:06:e8:5f:
         4a:1b:79:34:92:0f:89:9c:cc:e9:cc:21:9d:da:48:01:7e:72:
         e7:3a:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----