Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.mft
File:                     6FA2A7738A99E3D779A719ADD80B269D49707E78.mft (raw, json)
Hash identifier:          kuiE7GxffJV7+iAGu99a/094SZnH1//gr+L5JySn5dY=
Subject key identifier:   D8:58:A4:10:4B:B5:9F:44:65:CE:7C:D9:3C:0F:1A:89:C1:4C:86:22
Authority key identifier: 6F:A2:A7:73:8A:99:E3:D7:79:A7:19:AD:D8:0B:26:9D:49:70:7E:78
Certificate issuer:       /CN=6FA2A7738A99E3D779A719ADD80B269D49707E78
Certificate serial:       1D5240214703A774E938B4331CE8774D9F0748B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.mft
Manifest number:          0132
Signing time:             Fri 15 Nov 2024 21:40:33 +0000
Manifest this update:     Fri 15 Nov 2024 21:35:33 +0000
Manifest next update:     Sun 17 Nov 2024 01:39:33 +0000
Files and hashes:         1: 34352e372e3231392e302f32342d3234203d3e20323636363139.roa (hash: vTEYRQVKq2aBFVn2SguSYLNfeSOthv6jBC043pVGVk0=)
                          2: 34352e372e3231382e302f32342d3234203d3e20323636363139.roa (hash: Q1UbO4E1sdUDEVrqBcGEzHyVeVTpuwamm2R2KS1lBCw=)
                          3: 6FA2A7738A99E3D779A719ADD80B269D49707E78.crl (hash: 66nh3tRa+BFC6VDC4Caer04Do+UyY2z5zT3RJGtqzpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:52:40:21:47:03:a7:74:e9:38:b4:33:1c:e8:77:4d:9f:07:48:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FA2A7738A99E3D779A719ADD80B269D49707E78
        Validity
            Not Before: Nov 15 21:35:33 2024 GMT
            Not After : Nov 17 01:39:33 2024 GMT
        Subject: CN=D858A4104BB59F4465CE7CD93C0F1A89C14C8622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:46:cd:21:a9:80:a2:de:ca:e5:1f:b1:68:
                    1d:49:ec:f5:43:05:96:cf:3a:67:7c:e4:34:a3:d6:
                    9e:3b:44:4b:6a:91:9b:af:0f:df:73:42:36:ab:8f:
                    4c:73:23:57:8b:4c:92:d9:52:66:96:56:c0:b8:fa:
                    6d:f1:83:33:91:1b:da:c9:d5:93:eb:97:9d:82:c0:
                    c4:90:37:01:25:58:c9:48:e9:b0:63:b1:81:5f:ed:
                    df:44:3d:37:f0:fb:81:cf:88:4e:aa:f8:2e:cf:26:
                    a7:19:c3:78:f7:f0:4e:f4:bf:b9:6b:cd:eb:f5:e5:
                    f8:1d:27:fe:82:da:bf:3b:f2:c1:0a:f9:89:88:7b:
                    c9:88:44:a8:fb:55:09:1f:a1:d0:f6:58:43:07:00:
                    a9:20:2f:6c:cd:ef:df:87:c4:f1:83:11:71:93:ef:
                    c0:b2:cc:36:9f:8f:bc:59:6b:08:57:5b:dd:01:0b:
                    4b:c7:d6:ba:ec:51:49:f5:91:46:4f:44:66:a5:3e:
                    f4:3f:77:a1:60:2d:ec:46:fd:8f:01:a8:91:0d:ce:
                    0a:07:8e:6c:15:72:ea:24:ef:15:2d:6d:f0:29:65:
                    70:31:78:f6:f7:d8:f6:52:c7:ea:5e:81:fd:9e:e8:
                    e5:14:24:1f:65:82:74:03:1b:bf:ec:73:c3:c1:bc:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:A4:10:4B:B5:9F:44:65:CE:7C:D9:3C:0F:1A:89:C1:4C:86:22
            X509v3 Authority Key Identifier:
                keyid:6F:A2:A7:73:8A:99:E3:D7:79:A7:19:AD:D8:0B:26:9D:49:70:7E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:69:e2:b9:77:8e:0b:af:2c:50:58:dd:41:84:e8:b7:d6:
         80:e2:2b:2b:4c:95:73:8f:dd:b9:10:2c:08:7f:06:33:33:a3:
         d2:19:78:7a:c9:32:00:69:2f:c9:46:6f:b1:c3:37:ab:bd:5c:
         99:e3:50:92:61:d8:70:9a:11:0a:82:5a:45:0b:9c:1c:2c:4e:
         fb:7c:62:76:b6:25:8c:a7:7e:36:4e:90:4d:a0:aa:6f:aa:4a:
         40:3a:95:7d:0e:fe:f8:8d:05:71:2e:96:9c:1a:61:db:f4:25:
         98:3d:df:9d:ca:49:57:1e:ae:bc:31:b0:c3:58:d1:6c:36:04:
         8b:4a:51:e5:41:a0:64:3e:bf:b5:0b:75:ea:99:59:95:1b:78:
         1b:2e:19:5f:85:e0:3e:12:1b:b0:33:d4:24:02:f2:80:01:ee:
         0d:ef:87:38:f1:c6:e3:ba:fb:a5:70:bf:79:b3:37:0c:fb:d2:
         ff:74:4b:b7:a8:da:b3:e5:b0:ec:57:b0:f9:71:65:f1:c8:ce:
         7d:2b:31:e0:50:a9:94:79:34:03:54:34:2e:97:ad:2f:90:fa:
         ad:78:79:e4:da:e2:42:96:c7:9e:48:14:95:d4:0d:01:ee:07:
         f5:21:62:c9:ee:c0:f0:88:c3:cf:5b:21:d8:f5:ba:e8:aa:8b:
         ab:b8:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----