Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft
File:                     060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft (raw, json)
Hash identifier:          xuGJg1qtjT5uiL59FB7Xilrwslj03n/RtXP+s707dOE=
Subject key identifier:   16:44:18:5A:76:10:39:4D:BF:3F:69:5A:7F:FF:01:CA:A3:A3:75:77
Authority key identifier: 06:0E:B1:A2:EE:92:1D:C2:DE:3C:47:87:10:F4:CC:A6:2B:AC:8A:E8
Certificate issuer:       /CN=060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8
Certificate serial:       15E1DAEDB8B302F648B6D6BA2F0800373B591966
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft
Manifest number:          72
Signing time:             Tue 14 Nov 2023 05:18:17 +0000
Manifest this update:     Tue 14 Nov 2023 05:13:17 +0000
Manifest next update:     Wed 15 Nov 2023 08:55:17 +0000
Files and hashes:         1: 323830343a336439633a3a2f33322d313238203d3e20323636353432.roa (hash: 0+HB5fDkhQPA0xyakgLe6jW52jZraotCeSvwbALRSuU=)
                          2: 3136302e3233382e3136342e302f32322d3332203d3e20323636353432.roa (hash: s48yEhmHtuzGgG+5VpYkgPCQm7BwgvIfChZi0/en8ws=)
                          3: 060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.crl (hash: COC9V3MlFLOWOE2C9AiDEMXyw2ati49PwsC7uuGobM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e1:da:ed:b8:b3:02:f6:48:b6:d6:ba:2f:08:00:37:3b:59:19:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8
        Validity
            Not Before: Nov 14 05:13:17 2023 GMT
            Not After : Nov 15 08:55:17 2023 GMT
        Subject: CN=1644185A7610394DBF3F695A7FFF01CAA3A37577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:b1:b4:08:5e:80:a4:f7:8f:50:b2:95:2e:
                    80:38:bb:10:d1:11:47:b5:84:49:25:9a:a9:d5:2f:
                    46:c0:a5:ac:51:6d:a0:a4:cf:c4:2d:74:f7:6e:6d:
                    28:35:6c:7c:0e:cb:22:39:77:66:93:f7:c3:27:69:
                    8c:49:92:94:c9:ce:84:c8:82:73:49:ef:a0:da:7c:
                    04:21:ab:5e:fa:d3:e5:31:b2:af:f1:9e:d1:2a:e3:
                    eb:9b:d9:45:7f:26:9e:d1:d8:d3:0c:c2:68:36:95:
                    5e:46:3b:cf:1e:a3:f8:71:e8:46:29:09:64:6f:38:
                    95:bc:52:97:b6:4d:55:66:e6:96:fe:e5:ba:f0:95:
                    80:83:32:c0:67:51:3f:ba:53:36:26:88:d5:3c:ea:
                    3d:1e:c5:22:8c:38:c2:d5:f1:78:c3:c8:25:df:34:
                    0f:4f:ce:88:35:14:84:42:a6:59:2d:e8:35:00:e7:
                    65:2b:4a:e6:9b:bd:7b:65:96:55:a8:18:93:37:8b:
                    21:96:14:4b:af:bd:44:40:71:18:aa:04:a4:c9:32:
                    c7:56:53:ef:fb:34:21:b6:58:39:06:e8:61:2e:5d:
                    32:dd:96:49:16:7f:a2:0d:63:53:37:bb:ea:23:9a:
                    3c:5b:28:eb:0f:cf:b4:3c:59:6c:5f:20:93:f5:e2:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:18:5A:76:10:39:4D:BF:3F:69:5A:7F:FF:01:CA:A3:A3:75:77
            X509v3 Authority Key Identifier:
                keyid:06:0E:B1:A2:EE:92:1D:C2:DE:3C:47:87:10:F4:CC:A6:2B:AC:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cyj48AAjwFKKKHvgc6vbnz5SeBwpAXVjGPVP1jAuZvmr/0/060EB1A2EE921DC2DE3C478710F4CCA62BAC8AE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:b5:35:a1:bb:2d:c4:de:dd:bd:57:fd:84:63:b1:1b:05:
         7e:c5:8e:45:03:4b:16:74:22:ce:ca:ed:e4:45:81:18:56:8a:
         87:f5:91:5d:f2:11:ed:e2:2d:5a:d4:ad:fd:9f:65:87:52:94:
         2a:b4:e2:4c:c7:b2:db:cb:8e:f2:b9:fd:58:40:5f:36:9c:35:
         60:ec:b6:4f:02:b1:9a:af:b3:e3:74:67:fc:c9:19:f4:03:3f:
         c1:6c:18:14:35:8b:83:e0:c7:07:b2:52:2e:20:85:5d:12:90:
         b0:70:b7:ed:2f:ca:09:b7:b7:0f:23:da:a1:81:fe:7f:6c:c3:
         b4:91:9f:46:ac:51:a7:eb:f9:d5:3b:f2:3c:8a:73:d5:91:61:
         bb:6d:68:e4:f0:f5:12:8b:2a:4d:5c:68:30:c3:e2:21:c4:ff:
         d3:24:1d:03:45:83:42:a0:24:84:91:66:a5:c8:70:ff:f3:03:
         30:0d:bd:7e:69:73:91:43:aa:d9:c5:fc:29:58:fb:e8:f4:87:
         ec:29:fb:63:66:36:bd:0a:0c:d0:f5:cf:bb:29:df:a9:10:6e:
         9b:70:1d:82:93:ad:2d:5c:9b:a7:6e:ee:bc:7f:99:83:9e:16:
         bd:cd:5c:36:34:91:03:5b:f3:1e:e8:10:73:2c:e0:a6:a2:a8:
         e6:46:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----