Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft
File:                     FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft (raw, json)
Hash identifier:          B6R7DhSorD3PPWeRuG4CS4mDV72I7j6eRerveh1vPc0=
Subject key identifier:   E2:56:66:A0:8A:38:04:5F:5F:04:C8:8B:A7:29:EB:EE:BB:91:4E:38
Authority key identifier: FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4
Certificate issuer:       /CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
Certificate serial:       747695649D95C6B530D8F670498589EC7809AC81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft
Manifest number:          64
Signing time:             Mon 17 Jun 2024 09:28:47 +0000
Manifest this update:     Mon 17 Jun 2024 09:23:47 +0000
Manifest next update:     Tue 18 Jun 2024 13:23:47 +0000
Files and hashes:         1: FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.crl (hash: M21243Vd+pgJLJ6nZ26M8WfaJ7mNJizVuAkGJg1gwU0=)
                          2: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: IMIbLV0UTKFQsRmMK/aTOt0QSMhTO/PhgiGsAR9kR64=)
                          3: 323830343a343130343a3a2f33322d3336203d3e20323635393938.roa (hash: KBjHRfL71XIN35AMWcE5fcNcnHUuL1YL94fJEnXX1uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:76:95:64:9d:95:c6:b5:30:d8:f6:70:49:85:89:ec:78:09:ac:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
        Validity
            Not Before: Jun 17 09:23:47 2024 GMT
            Not After : Jun 18 13:23:47 2024 GMT
        Subject: CN=E25666A08A38045F5F04C88BA729EBEEBB914E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:c0:f3:9f:53:11:29:22:13:45:e6:0f:b4:
                    a8:bd:2d:31:db:eb:b4:20:61:1f:cb:fd:60:1a:ba:
                    16:a1:b5:29:ad:9f:11:3e:de:8c:1f:2f:e3:12:cb:
                    06:43:66:9a:a9:29:28:6d:a2:b3:a2:38:e5:85:41:
                    fc:fe:41:80:33:5d:6b:7a:ff:91:e0:59:c9:71:1f:
                    14:b1:36:55:4f:22:75:36:df:23:c5:8a:ec:3e:50:
                    61:bf:b7:f4:be:b9:69:6a:68:38:4d:d8:dd:c1:71:
                    00:54:c6:97:1f:a8:2f:1d:7a:ea:f7:a0:b2:d4:b5:
                    26:c0:be:bf:2c:0d:08:da:5e:41:58:9d:7a:35:a7:
                    70:fb:ae:69:96:08:bd:0b:79:d9:d3:69:e7:0c:0c:
                    d3:e7:f9:61:42:2e:1c:55:f6:a0:0e:db:65:83:88:
                    5a:7d:f7:77:bc:8f:59:71:04:d4:5c:b9:df:c9:0d:
                    60:e3:35:60:f1:e8:d0:3e:5e:aa:56:c2:a3:0b:c4:
                    68:4f:24:e4:ac:a6:ae:3f:ea:5f:f5:c8:37:2e:d3:
                    6c:8e:66:14:db:96:07:d6:39:f5:77:96:50:4a:0c:
                    05:7d:7c:4a:98:57:21:e1:e3:79:1b:78:cd:3d:ae:
                    b2:0f:69:42:56:15:db:93:ec:60:10:be:0d:45:76:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:66:A0:8A:38:04:5F:5F:04:C8:8B:A7:29:EB:EE:BB:91:4E:38
            X509v3 Authority Key Identifier:
                keyid:FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fa:3c:6f:cc:08:73:a0:d0:a9:36:16:f2:39:db:26:29:12:
         51:7b:e3:34:96:49:ab:74:d0:76:00:45:7a:30:d6:3f:df:a6:
         51:21:83:8e:cb:26:47:7e:30:ea:47:24:da:d3:81:af:46:a8:
         16:67:11:56:d4:dc:4b:f9:e6:e3:ab:b8:30:4d:5a:75:1c:a8:
         ba:8b:66:f1:41:0d:60:4e:52:7f:9b:5f:b6:be:65:0a:03:f5:
         11:a8:57:9b:dd:75:fa:64:fc:22:8d:c0:e9:33:64:75:d5:3d:
         bc:c6:9c:0b:b5:f1:56:19:4b:51:a9:ca:03:b0:b5:e7:99:d9:
         2c:9f:04:69:98:00:c0:80:ba:e6:4a:1c:d0:6b:8c:4d:77:da:
         78:6f:61:1d:33:da:c1:67:c3:f6:43:d8:ac:2d:6c:a9:d3:2e:
         66:11:f4:94:87:84:92:4b:9f:e4:88:a1:d6:97:c4:08:b1:07:
         23:9f:99:35:f0:64:d0:42:00:8c:c8:63:77:4c:ee:ea:4c:9a:
         34:84:36:a8:4f:c5:48:47:a0:92:6d:b5:95:a1:b3:f1:ea:f5:
         54:0a:5d:bc:f0:24:e4:15:ef:39:f7:a1:81:72:bd:39:5b:90:
         e7:e2:f7:7d:10:39:b1:49:99:1e:38:77:32:ac:4f:ef:5d:94:
         70:9f:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----