Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft
File:                     6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft (raw, json)
Hash identifier:          bkUlLFC39eLvgLq9nAT2Q8NFErGPRLjkkGyRfHXpgXI=
Subject key identifier:   05:C1:DE:85:92:22:8D:50:D6:0E:73:E1:EA:6E:03:99:D9:F2:AC:26
Authority key identifier: 6D:10:BF:8C:72:B5:1E:87:48:26:9C:FB:0F:70:C7:2D:34:5A:B1:C9
Certificate issuer:       /CN=6D10BF8C72B51E8748269CFB0F70C72D345AB1C9
Certificate serial:       1FDD8524FC47384F66765E2AB094738F769F047D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft
Manifest number:          2B
Signing time:             Tue 26 Sep 2023 11:23:15 +0000
Manifest this update:     Tue 26 Sep 2023 11:18:15 +0000
Manifest next update:     Wed 27 Sep 2023 14:30:15 +0000
Files and hashes:         1: 6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.crl (hash: KQSp+fGFZtUHekAHXHtcea3xf8bfOjrBdRMKyL2Ol5o=)
                          2: 323830343a336262343a3a2f33322d3438203d3e20323636313636.roa (hash: FaKE5aW9+rc9iEqwf1+cvKbY3yjQMLAFAMOv1C9S8hc=)
                          3: 37322e34342e32302e302f32322d3234203d3e20323636313636.roa (hash: hDUraHJ7lybXRoWd6I0sZLIF91ln2m1o15ZlnxSEhVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:dd:85:24:fc:47:38:4f:66:76:5e:2a:b0:94:73:8f:76:9f:04:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D10BF8C72B51E8748269CFB0F70C72D345AB1C9
        Validity
            Not Before: Sep 26 11:18:15 2023 GMT
            Not After : Sep 27 14:30:15 2023 GMT
        Subject: CN=05C1DE8592228D50D60E73E1EA6E0399D9F2AC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:68:ea:58:e5:a4:e2:3e:3a:3e:33:7e:53:
                    e6:27:87:79:80:9f:dd:f8:3b:34:a7:19:c4:7a:31:
                    db:d8:54:77:28:3a:31:70:6b:1e:18:ee:05:db:ac:
                    6c:40:10:fb:f5:46:02:e3:15:96:d0:32:1a:a8:06:
                    e6:2c:50:44:80:d3:cd:ef:28:59:cd:80:35:2b:40:
                    56:94:34:bb:37:5e:c0:0b:14:40:4b:46:4b:75:4c:
                    54:bd:ff:39:36:5f:dc:8d:11:9e:05:45:27:0c:20:
                    f4:23:fe:6a:b6:f8:97:07:37:3d:c6:ac:af:36:69:
                    65:cd:28:2e:20:b5:5b:32:33:82:ab:91:05:da:e4:
                    db:63:4c:4a:bd:2a:99:e6:11:ef:02:22:6d:fb:12:
                    00:4d:b0:da:df:16:03:ad:2d:c5:6e:d4:40:3b:4a:
                    8d:0e:89:db:d0:b7:60:9f:cc:0e:b1:ba:8e:12:f9:
                    8c:c1:70:e2:a6:83:bc:f8:36:b9:f2:c4:15:02:49:
                    15:55:2b:23:0e:90:ea:ba:4e:ca:30:7e:92:30:16:
                    c8:a0:43:0b:64:5b:ca:29:b0:00:3a:42:02:76:27:
                    4e:75:b7:27:40:af:70:22:e2:6c:4d:79:df:6f:99:
                    09:3f:3d:5e:15:5b:f7:24:75:18:e7:7c:ed:06:91:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:DE:85:92:22:8D:50:D6:0E:73:E1:EA:6E:03:99:D9:F2:AC:26
            X509v3 Authority Key Identifier:
                keyid:6D:10:BF:8C:72:B5:1E:87:48:26:9C:FB:0F:70:C7:2D:34:5A:B1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/6D10BF8C72B51E8748269CFB0F70C72D345AB1C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:78:6e:c4:9e:dd:aa:3a:3e:2f:a1:64:6e:e1:ba:0c:84:
         c4:b9:83:bd:25:8d:ae:2d:74:9d:1f:8b:6d:28:9c:b3:de:4e:
         61:7d:81:28:b3:19:d5:f1:38:43:be:ae:82:5c:56:7b:42:13:
         c6:e4:2b:e7:19:8e:5e:f6:01:8f:67:a4:f8:35:cc:14:62:49:
         3c:af:35:b7:fa:60:da:bf:3b:90:31:2f:dd:c9:d0:84:81:2e:
         08:88:22:62:5d:63:88:e8:1e:e9:99:2c:b9:da:da:c3:79:53:
         4b:7a:5a:15:3b:e6:14:3e:37:cb:ae:48:29:80:63:c1:6f:19:
         38:12:18:d6:f8:33:61:50:65:07:25:61:7c:df:96:b6:ba:7d:
         8d:46:35:52:73:09:bb:88:e7:41:75:9e:b3:0e:75:5f:68:e2:
         56:4e:46:41:04:4f:d5:6f:92:d3:23:96:54:7c:f1:bd:4d:e5:
         d2:e2:ec:c7:2e:6e:36:03:af:f6:b2:20:89:58:61:cf:e7:b3:
         6e:58:d6:16:d0:52:8c:3d:c7:8d:14:a1:00:42:61:87:35:b6:
         b6:e9:4f:01:48:ec:88:16:92:14:61:c0:98:80:5f:ed:05:d4:
         ad:2b:d8:05:1f:eb:9b:77:85:c8:f5:22:d5:04:1d:45:a3:40:
         08:93:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----