Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft
File:                     6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft (raw, json)
Hash identifier:          NOnhlhpBsCt6m7qJ7bNXJznn8CyUMZ5/ZNuSAAhFi+0=
Subject key identifier:   D2:70:C7:F2:53:9B:03:3E:F9:18:52:B1:75:CB:7E:5A:45:57:CC:CB
Authority key identifier: 6D:D9:87:D3:AF:42:05:F3:66:FB:D3:68:8D:8C:0E:A9:5D:DA:6F:94
Certificate issuer:       /CN=6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94
Certificate serial:       3907891306A8C75ADE55846380FD0D3BCE09C365
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft
Manifest number:          0129
Signing time:             Thu 25 May 2023 04:54:07 +0000
Manifest this update:     Thu 25 May 2023 04:49:07 +0000
Manifest next update:     Fri 26 May 2023 08:25:07 +0000
Files and hashes:         1: 6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.crl (hash: ZkMTQJ8w8EAyl1v1KYm0/KibRLaf8WFsmLltpgSZQMU=)
                          2: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: O7AQs3X8XNJD0djn7fysURO+G8JSl+//BExvODOhfRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:07:89:13:06:a8:c7:5a:de:55:84:63:80:fd:0d:3b:ce:09:c3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94
        Validity
            Not Before: May 25 04:49:07 2023 GMT
            Not After : May 26 08:25:07 2023 GMT
        Subject: CN=D270C7F2539B033EF91852B175CB7E5A4557CCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:e7:43:d3:5a:88:2c:c3:03:81:38:60:11:
                    11:f9:94:4d:29:6c:33:98:fb:a0:5a:ad:16:40:bd:
                    37:00:78:4d:3a:c8:bc:13:21:d8:b6:5a:01:80:85:
                    40:3e:cd:39:cd:bf:23:70:67:90:46:09:d6:46:45:
                    86:9f:61:12:ab:38:c1:4f:54:b2:92:06:db:75:16:
                    28:db:57:5a:79:9e:94:34:e5:ce:7f:10:c8:eb:00:
                    54:ca:4a:49:ba:66:bf:45:90:a3:dc:46:3a:40:f0:
                    4e:9a:2c:2f:54:d7:1b:e5:b8:31:f9:73:bc:a6:b1:
                    4f:45:e3:54:5f:eb:f4:d8:08:aa:a3:1c:a7:7c:3d:
                    54:16:3d:e8:0d:35:9d:91:ce:94:a1:40:ae:62:5c:
                    12:0c:6b:a0:7b:7e:37:f5:7a:38:6f:76:87:b5:82:
                    a1:b4:89:db:6f:62:e3:d6:22:36:29:70:89:2e:e8:
                    d6:57:92:71:28:da:a8:5e:58:20:bb:b6:14:42:de:
                    f6:e0:9f:aa:b1:cf:88:10:fd:db:82:4d:66:be:b4:
                    55:fe:8b:f0:47:47:aa:9b:ef:f4:11:ef:24:7e:11:
                    d9:58:8c:3c:03:a7:ae:b2:1f:e2:12:ab:8a:83:99:
                    68:f8:b5:b3:fd:b5:d6:cc:7e:58:0e:ea:7f:0b:05:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:70:C7:F2:53:9B:03:3E:F9:18:52:B1:75:CB:7E:5A:45:57:CC:CB
            X509v3 Authority Key Identifier:
                keyid:6D:D9:87:D3:AF:42:05:F3:66:FB:D3:68:8D:8C:0E:A9:5D:DA:6F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/6DD987D3AF4205F366FBD3688D8C0EA95DDA6F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:14:96:a6:26:8e:56:5f:5c:68:ba:87:c1:16:f3:44:7f:
         f9:03:fe:c4:bb:36:f1:3a:fe:59:dc:09:ce:0d:3b:04:fb:e6:
         b0:89:4d:61:09:2a:b5:42:12:30:fd:91:dd:b5:cd:4f:e9:ba:
         f7:31:70:a9:8f:f8:f3:af:b8:bc:5a:5f:09:50:be:31:20:3d:
         79:e1:60:f6:a8:4c:b7:8b:a3:6e:a4:e8:21:63:48:c0:1d:1f:
         19:67:97:7c:a3:47:f2:25:24:b1:16:43:59:60:45:aa:0e:02:
         5b:a3:81:be:3e:f8:5a:aa:76:09:62:c9:74:0f:c8:a8:46:d0:
         d3:0d:aa:99:e1:31:b5:2f:17:ed:b0:34:e4:83:01:21:49:ea:
         ab:e7:c5:a1:a0:15:21:25:9b:77:ca:d3:66:9d:47:6a:dc:85:
         06:bd:34:86:25:17:a6:43:25:3e:27:96:83:8b:b1:1f:d0:da:
         a8:2d:7f:65:1d:7e:9f:82:41:d1:0d:6e:59:62:68:03:fe:14:
         7a:12:51:aa:a4:e7:32:2a:e5:d2:f6:22:65:cd:45:b8:da:ba:
         eb:7b:90:da:a3:4f:d0:36:10:bd:53:66:19:1f:1d:ef:8f:69:
         1c:5e:eb:a0:11:24:76:af:58:fe:c7:11:e3:29:6e:d3:7c:b2:
         f1:9d:a7:19
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOQeJEwaox1reVYRjgP0NO84Jw2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkREOTg3RDNBRjQyMDVGMzY2RkJEMzY4OEQ4QzBFQTk1
RERBNkY5NDAeFw0yMzA1MjUwNDQ5MDdaFw0yMzA1MjYwODI1MDdaMDMxMTAvBgNV
BAMTKEQyNzBDN0YyNTM5QjAzM0VGOTE4NTJCMTc1Q0I3RTVBNDU1N0NDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvpOdD01qILMMDgThgERH5lE0p
bDOY+6BarRZAvTcAeE06yLwTIdi2WgGAhUA+zTnNvyNwZ5BGCdZGRYafYRKrOMFP
VLKSBtt1FijbV1p5npQ05c5/EMjrAFTKSkm6Zr9FkKPcRjpA8E6aLC9U1xvluDH5
c7ymsU9F41Rf6/TYCKqjHKd8PVQWPegNNZ2RzpShQK5iXBIMa6B7fjf1ejhvdoe1
gqG0idtvYuPWIjYpcIku6NZXknEo2qheWCC7thRC3vbgn6qxz4gQ/duCTWa+tFX+
i/BHR6qb7/QR7yR+EdlYjDwDp66yH+ISq4qDmWj4tbP9tdbMflgO6n8LBTVbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU0nDH8lObAz75GFKxdct+WkVXzMswHwYDVR0j
BBgwFoAUbdmH069CBfNm+9NojYwOqV3ab5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EM1RNcjh3SndYUEF2Unhxem1OZUVkZGdOZ0p2QWhtZXZyN040dzkzc0Y4
LzAvNkREOTg3RDNBRjQyMDVGMzY2RkJEMzY4OEQ4QzBFQTk1RERBNkY5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82REQ5ODdEM0FGNDIwNUYzNjZG
QkQzNjg4RDhDMEVBOTVEREE2Rjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qz
VE1yOHdKd1hQQXZSeHF6bU5lRWRkZ05nSnZBaG1ldnI3TjR3OTNzRjgvMC82REQ5
ODdEM0FGNDIwNUYzNjZGQkQzNjg4RDhDMEVBOTVEREE2Rjk0Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
KkAUlqYmjlZfXGi6h8EW80R/+QP+xLs28Tr+WdwJzg07BPvmsIlNYQkqtUISMP2R
3bXNT+m69zFwqY/486+4vFpfCVC+MSA9eeFg9qhMt4ujbqToIWNIwB0fGWeXfKNH
8iUksRZDWWBFqg4CW6OBvj74Wqp2CWLJdA/IqEbQ0w2qmeExtS8X7bA05IMBIUnq
q+fFoaAVISWbd8rTZp1HatyFBr00hiUXpkMlPieWg4uxH9DaqC1/ZR1+n4JB0Q1u
WWJoA/4UehJRqqTnMirl0vYiZc1FuNq663uQ2qNP0DYQvVNmGR8d749pHF7roBEk
dq9Y/scR4ylu03yy8Z2nGQ==
-----END CERTIFICATE-----