Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.mft
File:                     6580BDD93E3899BECA2788EB019377F40796F1AB.mft (raw, json)
Hash identifier:          cPm13h9lVqEWBYHxQge2oe9CEExeA9B4YkekZNZ1J98=
Subject key identifier:   05:81:84:B4:F0:55:4F:35:6A:05:93:B5:D4:A1:A7:A5:E6:DA:18:A9
Authority key identifier: 65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB
Certificate issuer:       /CN=6580BDD93E3899BECA2788EB019377F40796F1AB
Certificate serial:       2E9287E7308675056FECEA288093158425BC99FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.mft
Manifest number:          0119
Signing time:             Mon 15 Apr 2024 04:58:45 +0000
Manifest this update:     Mon 15 Apr 2024 04:53:45 +0000
Manifest next update:     Tue 16 Apr 2024 08:40:45 +0000
Files and hashes:         1: 34352e3136372e382e302f32322d3232203d3e20323638303230.roa (hash: yj1y3j0autIZ9to/fLBj/jsu/AO/qXiRGi3cYkov6Zs=)
                          2: 6580BDD93E3899BECA2788EB019377F40796F1AB.crl (hash: BxvgCmJrnfIiYjIKlAgKsBuEYodEmsQysKh9tpDD8i4=)
                          3: 323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (hash: 9IuthnSRorWI26urkXg11y4PMg8xHh+4btdzbJa7qZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:87:e7:30:86:75:05:6f:ec:ea:28:80:93:15:84:25:bc:99:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6580BDD93E3899BECA2788EB019377F40796F1AB
        Validity
            Not Before: Apr 15 04:53:45 2024 GMT
            Not After : Apr 16 08:40:45 2024 GMT
        Subject: CN=058184B4F0554F356A0593B5D4A1A7A5E6DA18A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:e4:f9:19:2a:40:ad:76:96:28:35:b6:5c:
                    9c:f0:00:ac:a9:05:f5:ef:f3:a1:cb:3f:04:4f:3b:
                    dd:a9:4c:1b:45:9c:c9:11:97:4b:c4:26:af:f7:1d:
                    76:4a:b8:ea:30:33:8b:02:d7:05:4c:b1:15:60:5c:
                    b0:ac:f2:b5:7a:f4:30:53:5e:18:b1:de:44:36:38:
                    ea:79:06:45:b9:e2:b3:e8:51:00:01:34:6c:4f:02:
                    b3:3b:5e:fe:9a:f1:9b:84:1a:22:bb:fb:c4:40:62:
                    d3:6c:74:6c:03:f1:84:21:a3:22:4b:b3:9b:cf:fc:
                    4a:ad:98:00:0d:23:50:ef:61:a9:40:08:89:55:b0:
                    bb:4c:e0:4c:58:86:e5:c4:99:94:d5:2f:3d:3f:99:
                    d0:83:18:2d:25:84:49:54:19:8b:ff:ea:af:c2:ed:
                    61:b8:fc:14:08:22:7c:dc:73:16:7e:9e:04:c1:55:
                    b9:84:19:46:bd:df:2d:90:90:57:a1:68:6c:24:86:
                    73:8e:14:3e:28:47:95:03:b3:34:1e:6e:21:9a:10:
                    3e:c1:7b:18:c1:ae:4c:30:ad:02:6b:6c:6a:67:71:
                    a8:2e:fb:56:80:e9:69:ad:ad:0e:eb:f4:1d:5b:55:
                    b6:da:b9:61:c1:b6:fb:68:0d:94:80:53:52:ff:1a:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:84:B4:F0:55:4F:35:6A:05:93:B5:D4:A1:A7:A5:E6:DA:18:A9
            X509v3 Authority Key Identifier:
                keyid:65:80:BD:D9:3E:38:99:BE:CA:27:88:EB:01:93:77:F4:07:96:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6580BDD93E3899BECA2788EB019377F40796F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/6580BDD93E3899BECA2788EB019377F40796F1AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:8e:44:fb:ae:15:f3:ea:4f:45:f4:a4:e7:51:f2:cf:ea:
         93:5a:f8:7b:9a:e3:c9:ba:39:78:56:75:cc:42:ed:58:d2:59:
         57:2d:91:c6:ac:4e:af:59:1f:58:33:45:39:5a:be:e7:66:1b:
         da:90:a7:ac:a1:46:00:10:04:09:8f:9b:19:f6:a4:0e:9f:70:
         c7:32:09:f8:07:37:5b:13:d7:94:c2:8e:2f:35:3a:f0:fd:89:
         40:b5:5b:9a:54:99:4e:98:1a:45:27:99:57:49:95:5a:fa:44:
         fc:70:29:a6:e6:03:e5:68:49:eb:9e:95:e8:1b:24:f9:aa:31:
         20:59:22:6d:bb:c7:76:7f:23:ad:96:27:63:f8:23:a1:ff:46:
         6a:c0:bb:dd:44:38:c9:5c:6f:98:73:f8:99:b8:19:6b:36:d6:
         79:35:af:79:e4:dc:1d:c7:9d:45:b5:b8:15:54:41:0b:f6:d0:
         23:f0:6f:e0:3d:63:7a:aa:84:84:ed:24:dc:31:84:75:bc:09:
         88:ca:a3:6a:4b:84:a8:83:66:63:54:af:da:f2:09:1b:87:7d:
         a3:3d:35:f3:49:07:8b:0e:5f:c3:16:3c:a4:20:aa:81:64:78:
         8f:1d:a8:49:1f:8d:ee:04:05:62:61:6c:76:3d:7c:45:36:1e:
         87:1e:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----