Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.mft
File:                     6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.mft (raw, json)
Hash identifier:          rCFjKtdXf/DVlwznGbgDr/rM7oxJn+j/PsbgemO36WY=
Subject key identifier:   2E:48:B0:AE:55:4F:31:13:C7:89:C0:4B:1D:10:E8:F8:33:2F:49:98
Authority key identifier: 6A:D0:5C:D1:C8:EC:72:81:BA:D7:75:49:37:6A:25:B3:1E:1A:44:E3
Certificate issuer:       /CN=6AD05CD1C8EC7281BAD77549376A25B31E1A44E3
Certificate serial:       1FAE6CEC3E1AC806E9B91E1978FECA27ABB7C2B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.mft
Manifest number:          D1
Signing time:             Tue 24 Oct 2023 00:13:36 +0000
Manifest this update:     Tue 24 Oct 2023 00:08:36 +0000
Manifest next update:     Wed 25 Oct 2023 03:02:36 +0000
Files and hashes:         1: 6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.crl (hash: QvOg9f+xjr02yu3ITi7B+aUeYyldgGDy9Cgp27Xwodo=)
                          2: 34352e372e3231392e302f32342d3234203d3e20323636363139.roa (hash: WjqdhKfgXruND9aiOnAQ6OlygmdoTZybC8Wdop/MjAc=)
                          3: 34352e372e3231382e302f32342d3234203d3e20323636363139.roa (hash: wpfzZXAwluFOJ4yl0B56kjHCKRqYsekWTGd7M6Rma5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ae:6c:ec:3e:1a:c8:06:e9:b9:1e:19:78:fe:ca:27:ab:b7:c2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD05CD1C8EC7281BAD77549376A25B31E1A44E3
        Validity
            Not Before: Oct 24 00:08:36 2023 GMT
            Not After : Oct 25 03:02:36 2023 GMT
        Subject: CN=2E48B0AE554F3113C789C04B1D10E8F8332F4998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:0c:20:1c:79:3a:99:cf:37:ad:d4:54:59:
                    b4:de:d0:a1:52:b7:30:5b:b5:b5:02:f3:34:3b:04:
                    9e:26:d9:57:cd:48:31:b8:b1:d0:fb:f0:7e:0f:11:
                    83:e9:1f:c6:21:9e:ee:f6:a3:f9:0b:83:5a:a4:d2:
                    09:13:e3:1b:c8:9e:02:60:00:b6:f6:43:00:69:37:
                    cc:05:11:e9:08:f5:a1:73:41:6e:7e:30:a2:16:7e:
                    79:a0:35:c3:d5:c7:81:f6:6f:ee:22:db:db:78:23:
                    c0:86:52:07:9f:6c:48:07:b2:03:90:d5:17:6f:fc:
                    1a:0e:20:96:e8:c9:36:f8:8c:9f:03:6a:eb:d4:69:
                    96:a2:ab:a1:0d:5e:17:a3:22:0d:95:4d:3c:04:7b:
                    77:2e:35:77:61:b3:fd:3c:47:b6:f9:3e:c7:99:ca:
                    6e:b4:a7:b8:f1:87:33:75:14:c0:d5:ba:7f:29:e0:
                    c2:33:a2:07:d4:bb:98:6b:60:a9:f4:7b:aa:49:fc:
                    91:5e:a3:be:9a:c7:63:00:78:a9:d6:c8:9d:11:bd:
                    06:9d:e1:5c:16:6e:2a:45:e3:e7:13:8e:9c:3a:72:
                    1e:af:1b:37:af:8d:0f:be:a5:89:9f:8e:d2:9e:5d:
                    61:5d:11:22:7c:4d:11:ee:92:ae:3f:a0:6b:37:6f:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:48:B0:AE:55:4F:31:13:C7:89:C0:4B:1D:10:E8:F8:33:2F:49:98
            X509v3 Authority Key Identifier:
                keyid:6A:D0:5C:D1:C8:EC:72:81:BA:D7:75:49:37:6A:25:B3:1E:1A:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/6AD05CD1C8EC7281BAD77549376A25B31E1A44E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:40:36:1f:1d:12:96:6b:46:1d:9b:2f:5c:65:62:3f:2a:d6:
         8a:bd:ad:d3:ab:39:68:86:48:be:30:47:58:a2:eb:27:cf:59:
         88:34:fb:00:eb:41:38:83:99:61:03:77:c6:6e:f3:f5:33:fd:
         28:59:1f:bf:70:1e:cb:12:ec:d8:89:2a:d2:ef:96:ff:9c:24:
         1c:8b:76:a1:e2:6d:76:af:41:05:82:82:31:6d:8c:fa:12:db:
         cd:05:6c:c2:17:35:c6:84:0a:d5:42:21:ed:a0:7f:fe:7d:ce:
         23:c8:7d:fc:03:25:51:f2:d8:af:73:99:a1:7b:92:92:2e:11:
         96:30:fd:23:3d:00:6b:41:6c:2f:18:8c:12:55:b0:f2:6a:e1:
         dc:b7:ee:da:7b:ae:e6:81:30:4e:2b:ad:6a:5a:07:05:2e:2c:
         44:e2:c0:b4:1f:19:cb:0a:ac:f6:b1:82:f0:82:e7:a1:1a:78:
         33:1e:d1:7a:bf:18:67:ed:bb:67:cb:a0:f7:39:21:42:7f:ea:
         2e:fc:de:3a:f6:67:00:9f:64:fe:ff:a6:aa:cb:8c:2b:40:d6:
         15:18:ac:1f:fa:79:bf:98:e4:cc:a4:f5:ff:4f:5e:30:02:a9:
         f6:3b:73:8a:18:16:b8:9c:8d:76:5c:9d:c4:98:b2:ed:99:30:
         03:1f:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----