Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.mft
File:                     10F9F6613952FE3BE61CE03425A3088AECA2929F.mft (raw, json)
Hash identifier:          d7abbaomIKM9tcalhXWbWJnAccXhWmvYPLYbx10ZHZs=
Subject key identifier:   A3:7C:6E:F4:A6:F8:2B:D2:44:00:B5:16:D8:27:F0:68:D9:C0:86:BD
Authority key identifier: 10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F
Certificate issuer:       /CN=10F9F6613952FE3BE61CE03425A3088AECA2929F
Certificate serial:       428E0E34FE265F0077EB150EF804FB2DE1349D97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.mft
Manifest number:          D6
Signing time:             Sat 13 Jan 2024 13:53:12 +0000
Manifest this update:     Sat 13 Jan 2024 13:48:12 +0000
Manifest next update:     Sun 14 Jan 2024 17:26:12 +0000
Files and hashes:         1: 323830343a373966343a3a2f33322d3334203d3e20323731333338.roa (hash: sUAw1WTmHyy923Vlx3feXMTRmkVKgeJuiWkG7HR1LOs=)
                          2: 10F9F6613952FE3BE61CE03425A3088AECA2929F.crl (hash: uenV152OOngHCsfvt1qC9OM7m7wFN9Hq/Ls6HtOYpUo=)
                          3: 3230302e35302e3232342e302f32322d3234203d3e20323731333338.roa (hash: tXrVWxq+crxU41HErn2PpTglAC6mtUF8JIvhseGHuk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8e:0e:34:fe:26:5f:00:77:eb:15:0e:f8:04:fb:2d:e1:34:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F9F6613952FE3BE61CE03425A3088AECA2929F
        Validity
            Not Before: Jan 13 13:48:12 2024 GMT
            Not After : Jan 14 17:26:12 2024 GMT
        Subject: CN=A37C6EF4A6F82BD24400B516D827F068D9C086BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:1e:42:cd:a6:a2:35:ba:9f:9d:bd:11:cf:
                    de:77:c4:ad:f6:74:42:d6:0a:38:d2:03:53:37:fb:
                    cf:a8:bd:66:78:26:b4:b7:53:b1:55:fe:c5:2b:60:
                    cc:84:25:8e:1f:94:ae:c5:e4:ad:be:47:60:a0:bb:
                    b9:2e:dd:0f:e3:0e:1d:df:3f:31:2e:20:a1:17:52:
                    1d:bc:11:a1:b7:7c:14:6f:db:ec:4e:8b:c9:a7:77:
                    ac:ea:94:6e:aa:5f:9a:b5:30:cc:d8:a4:dc:c0:3c:
                    56:0d:75:18:03:76:91:6a:83:e1:a9:e7:2b:72:d3:
                    6f:e6:8b:a0:eb:00:65:84:ce:48:56:55:04:cd:87:
                    f8:2a:3f:01:e3:58:40:27:29:a4:23:74:6f:41:46:
                    e8:78:4d:4b:60:36:01:36:53:ac:1f:2a:c7:f9:42:
                    83:0d:fd:12:68:45:97:43:39:a4:9d:a2:12:97:af:
                    5c:02:0a:6f:5a:f7:d7:00:33:72:4d:7a:31:98:05:
                    c1:86:c8:cf:5e:8c:cf:09:41:3c:4f:d5:a0:20:94:
                    24:e1:55:5b:30:0a:6d:79:82:42:0f:37:e2:a2:30:
                    4f:0f:9c:68:cb:2f:93:93:f8:ed:dc:3b:7d:5b:26:
                    12:97:5b:c2:e1:5e:6e:1d:69:35:7f:44:6b:68:79:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:6E:F4:A6:F8:2B:D2:44:00:B5:16:D8:27:F0:68:D9:C0:86:BD
            X509v3 Authority Key Identifier:
                keyid:10:F9:F6:61:39:52:FE:3B:E6:1C:E0:34:25:A3:08:8A:EC:A2:92:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkQ2gty9aYRaGBosLWw5Dxcq7WP9GRbNAjdD9HYWkqLu/0/10F9F6613952FE3BE61CE03425A3088AECA2929F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:74:f0:e7:37:77:77:d6:31:ff:35:9c:41:3c:91:ff:a8:0d:
         7a:00:15:30:3e:4f:32:56:e6:4e:2c:d9:0b:2d:2b:03:b8:18:
         2d:7b:61:a5:37:fe:65:23:cc:59:68:82:04:b4:7d:42:8c:b0:
         cf:69:0e:75:93:d1:00:f6:7b:64:e7:59:d9:ee:33:49:ae:ba:
         51:38:f1:f8:dd:60:a9:56:ac:b3:ce:6b:a6:1a:85:e7:b5:a7:
         e2:df:fb:a4:36:4b:74:53:8a:bc:ff:ec:50:ff:14:2d:5c:61:
         33:b7:06:d1:ab:9e:db:da:75:44:16:d7:52:d6:e5:df:1a:ea:
         cf:b6:2b:07:53:58:5c:1b:cb:1a:62:1b:b1:06:89:71:f8:ed:
         23:eb:27:0f:3d:c0:46:fb:b3:65:8e:5f:2c:87:c3:c5:1e:be:
         ab:b8:f6:27:cf:03:52:2a:d3:eb:d2:ac:06:3d:f9:3d:90:e6:
         8f:b7:50:c2:fd:26:52:99:ff:e5:b6:0c:f3:50:3b:c0:df:73:
         0f:7b:85:26:23:db:3f:f5:61:f8:7d:f1:89:84:1d:d2:2c:40:
         27:cd:9e:1a:73:cf:47:1d:d9:ae:b6:73:e7:c7:c1:35:43:bc:
         bf:fc:0f:72:1a:bf:32:86:3d:2a:b7:fa:96:27:cf:2d:a8:39:
         06:ff:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----