Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.mft
File:                     80E3A3B152CAAE5EF9A4BF135D95342709013716.mft (raw, json)
Hash identifier:          5Ga0yMW77dkpRkiDRYZ6mJd60gZ0gKgtBrouoLTd5tw=
Subject key identifier:   DE:82:D6:CD:57:6C:39:D7:CC:E8:FE:40:A1:C3:B7:D4:1F:2A:57:C6
Authority key identifier: 80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16
Certificate issuer:       /CN=80E3A3B152CAAE5EF9A4BF135D95342709013716
Certificate serial:       2C873CFFDCA2C0480683533C114D02D3EB1EBA8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.mft
Manifest number:          6C
Signing time:             Sun 14 Apr 2024 22:39:57 +0000
Manifest this update:     Sun 14 Apr 2024 22:34:57 +0000
Manifest next update:     Tue 16 Apr 2024 00:23:57 +0000
Files and hashes:         1: 80E3A3B152CAAE5EF9A4BF135D95342709013716.crl (hash: BuL6Fdybjk87ilZFLYNh7hTXhzfy015Z4wzbFvIzu5E=)
                          2: 323830343a376638383a3a2f33322d3332203d3e20323731363934.roa (hash: htMg9AVUKttSc0Nu01IYwWYhpmsxqc65i40vZJhlhyY=)
                          3: 3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (hash: 8WC1ILuJX6PJ4gD5Q0C7DBGTcyMBUWufju/WsAYlSNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:87:3c:ff:dc:a2:c0:48:06:83:53:3c:11:4d:02:d3:eb:1e:ba:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E3A3B152CAAE5EF9A4BF135D95342709013716
        Validity
            Not Before: Apr 14 22:34:57 2024 GMT
            Not After : Apr 16 00:23:57 2024 GMT
        Subject: CN=DE82D6CD576C39D7CCE8FE40A1C3B7D41F2A57C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:e8:f9:89:c5:c4:c3:e3:64:92:db:cb:20:
                    5f:20:bb:67:d1:70:dc:f7:0b:94:1c:56:b9:30:28:
                    01:b4:4a:83:f3:cf:6c:05:22:15:6b:9f:f7:63:69:
                    8d:c7:19:71:e0:02:20:b7:3a:10:b4:70:7d:a4:48:
                    78:26:0b:a6:59:86:2b:b8:2d:d1:20:aa:ac:07:aa:
                    97:7e:b6:0a:4f:2f:ff:ce:cf:1a:07:86:e0:5c:39:
                    b4:1d:81:2e:0a:9b:d5:b1:04:1c:5e:33:f4:52:7a:
                    76:86:35:7e:8d:0d:6a:c9:25:1b:f6:62:ab:b0:a2:
                    04:8a:31:83:c8:92:8a:56:ff:85:a0:87:be:d7:49:
                    1a:19:15:e5:1c:17:cf:93:aa:54:4e:f2:a0:04:00:
                    7a:0d:60:67:b6:20:b0:46:8f:90:16:98:d3:0a:15:
                    03:4d:52:f8:58:fe:26:a1:6d:5b:15:65:47:4d:b2:
                    0e:18:92:28:87:a1:6d:25:99:24:7b:19:48:b7:09:
                    ee:86:e7:c8:61:8b:b0:45:39:f4:c8:88:17:c0:53:
                    db:19:d5:8b:e6:f9:42:e6:c2:bf:1a:00:f7:c3:f2:
                    22:0d:24:9f:50:e1:5d:64:76:7f:59:97:85:fe:e0:
                    27:73:1a:1d:d9:88:46:04:f7:b5:ff:c7:2c:da:8f:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:D6:CD:57:6C:39:D7:CC:E8:FE:40:A1:C3:B7:D4:1F:2A:57:C6
            X509v3 Authority Key Identifier:
                keyid:80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:23:66:38:9d:1c:d1:2e:4f:34:39:30:3b:cf:1b:aa:30:71:
         16:d1:db:aa:99:2a:b7:c5:c4:86:6b:11:68:8e:fb:d5:50:e0:
         79:22:23:5a:61:7a:bc:9d:b0:d0:16:20:ab:34:19:7e:88:ff:
         4d:76:c9:89:72:56:d6:0b:a4:ed:d3:d9:13:68:b9:63:5f:52:
         92:e3:43:2f:13:e5:de:f3:3a:74:cc:88:ea:38:54:d1:cb:8b:
         e1:f3:c8:98:39:d3:77:60:f2:a4:08:1e:75:0e:c4:df:87:f5:
         7b:20:0d:52:3a:28:45:08:eb:f0:f7:f8:b1:0d:7d:76:14:40:
         df:62:b7:ac:89:c5:a4:76:ce:56:c5:1e:6e:5c:3d:a4:07:90:
         87:12:2e:1a:a5:a5:17:fe:67:b2:5a:59:dd:1d:a2:7b:c3:8f:
         62:0a:85:95:41:3c:bc:19:af:31:16:10:1e:ef:c6:dd:64:4c:
         b7:ae:52:36:0b:a1:06:8d:8c:af:0f:87:3f:c6:56:2e:47:92:
         d7:70:57:d4:20:16:f8:4d:62:1d:23:cd:55:0b:77:79:f7:5b:
         38:56:c2:d7:ef:4e:3e:43:ed:19:0a:18:99:82:32:ba:ec:ae:
         39:3c:10:1d:73:d9:b8:e7:84:a4:30:85:da:76:3c:dd:0f:c4:
         85:98:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----