Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.mft
File:                     F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.mft (raw, json)
Hash identifier:          AKl09W7KNdCbLw6v01hrGSg/ivWeEwbUWhArjc96ciM=
Subject key identifier:   C3:FD:E3:6A:D1:AB:D8:5E:59:8E:74:02:D4:67:31:4C:60:B0:F5:BE
Authority key identifier: F6:0E:FF:1A:68:A3:BB:6D:52:BB:18:F6:92:09:EF:5E:90:D2:46:0D
Certificate issuer:       /CN=F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D
Certificate serial:       18EA0385BB047A6AEB658F5CAC2F620DB81A3105
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.mft
Manifest number:          67
Signing time:             Wed 19 Jun 2024 06:39:32 +0000
Manifest this update:     Wed 19 Jun 2024 06:34:32 +0000
Manifest next update:     Thu 20 Jun 2024 08:00:32 +0000
Files and hashes:         1: F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.crl (hash: dX1Ykf+WArQa0h7ukh33ev3l5yendjtKof8z2Hh6Yr4=)
                          2: 323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (hash: uBFj+gf6UPCRACO5r00qH8vElnzPG9ncJpuEmyg2uXE=)
                          3: 3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (hash: NfXCzViOhNSm7FuelDz/4MLQTcydgrwc9EbsL072qPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:03:85:bb:04:7a:6a:eb:65:8f:5c:ac:2f:62:0d:b8:1a:31:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D
        Validity
            Not Before: Jun 19 06:34:32 2024 GMT
            Not After : Jun 20 08:00:32 2024 GMT
        Subject: CN=C3FDE36AD1ABD85E598E7402D467314C60B0F5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:d6:15:6c:ab:91:e7:e7:5f:b3:f1:8f:05:
                    29:5d:d5:a9:97:fe:29:50:45:0c:2d:4c:20:67:84:
                    37:49:b8:97:cf:a2:f7:a5:ea:24:2b:dc:f6:e5:f0:
                    a4:5b:54:e7:a7:0e:e3:11:22:d4:20:80:ed:68:99:
                    1f:80:45:61:54:0b:23:77:61:a6:7e:32:9f:a1:14:
                    49:fb:d5:44:60:22:f3:7b:58:81:34:34:cf:29:9f:
                    90:3a:e1:24:bb:91:8d:b7:03:e7:c5:2d:8b:89:86:
                    af:fa:a1:92:99:66:6e:0f:77:fe:6a:64:bb:1f:67:
                    e8:b1:9d:66:59:89:96:2d:86:90:ed:2c:52:6c:72:
                    f4:18:d8:ad:fe:3a:94:59:ef:34:12:99:50:09:e7:
                    59:f6:7b:3e:01:03:6f:85:0e:96:4e:90:eb:52:72:
                    02:d5:54:66:12:7f:67:f4:63:82:4b:5f:6e:6c:1e:
                    ae:6c:bb:ac:80:09:fa:61:78:c0:41:d4:c2:5a:24:
                    cf:40:4d:96:98:89:ac:3a:78:92:5d:25:62:c6:5a:
                    3c:10:09:46:e3:10:63:28:be:26:45:86:2c:69:ac:
                    f3:e1:b0:89:dd:f4:da:7f:53:3c:10:6b:b8:e1:91:
                    23:a9:8f:09:f4:7d:7d:91:67:59:f8:4c:4d:7e:0b:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:E3:6A:D1:AB:D8:5E:59:8E:74:02:D4:67:31:4C:60:B0:F5:BE
            X509v3 Authority Key Identifier:
                keyid:F6:0E:FF:1A:68:A3:BB:6D:52:BB:18:F6:92:09:EF:5E:90:D2:46:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/F60EFF1A68A3BB6D52BB18F69209EF5E90D2460D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:a1:59:c9:59:56:dd:8b:6f:e3:ff:71:3d:24:ae:07:ad:
         89:5b:75:ae:99:16:bd:e0:38:70:45:7c:c3:fc:2a:d4:31:e0:
         20:80:fd:aa:b9:66:fc:58:cd:84:37:d9:e7:08:d1:25:56:6e:
         3b:d9:32:74:be:30:9a:1e:d3:42:fa:df:d4:07:d1:41:22:ba:
         1a:75:e4:cc:80:ea:7d:63:68:32:17:dc:73:f2:ca:2f:59:6d:
         ea:6b:b2:d2:ad:69:87:db:e0:24:da:ad:01:cd:37:75:81:98:
         29:c0:57:92:65:52:51:46:26:ef:c7:60:2b:3a:b2:9b:5d:f6:
         c6:da:cb:d5:55:d3:b7:86:b8:ff:c5:74:83:f9:10:c7:df:c9:
         71:cd:41:2e:e5:a5:89:4c:f1:ba:a1:e8:b7:e7:5f:2e:b7:5a:
         e1:90:71:88:16:df:9c:4e:0a:9e:ee:97:84:fd:11:10:a4:9d:
         ee:a7:fe:16:d0:b5:eb:30:a6:00:f8:ec:2d:26:1b:48:6e:b1:
         98:81:6b:4e:8c:2b:e3:af:fd:6f:bc:cd:35:47:1f:f9:96:ab:
         78:59:83:f8:10:85:bd:17:bb:bd:0d:6c:4b:01:71:00:7d:30:
         1e:05:b4:eb:42:45:e1:f6:2c:46:c8:2e:94:a1:bc:70:8f:8b:
         43:27:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----