Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft
File:                     6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft (raw, json)
Hash identifier:          yLe4J+eE6QvmHR6zqvxszyd7Lk9kwk3AoAGyqUUbDh0=
Subject key identifier:   65:6B:97:80:32:DF:2F:1F:4C:5D:6B:C3:8D:59:EC:BD:61:7C:16:DF
Authority key identifier: 65:74:34:78:35:EC:BC:69:66:BF:CA:5A:81:C6:16:3C:9D:A6:91:0D
Certificate issuer:       /CN=6574347835ECBC6966BFCA5A81C6163C9DA6910D
Certificate serial:       53A83AC44545F7D0C47AA91E4EAC756F9ECC8813
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft
Manifest number:          5D
Signing time:             Mon 15 Apr 2024 07:31:38 +0000
Manifest this update:     Mon 15 Apr 2024 07:26:38 +0000
Manifest next update:     Tue 16 Apr 2024 09:11:38 +0000
Files and hashes:         1: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: d5p06gW+o5sYf+N1pV7Zyxih0wPt7ASc7UDR2YLFP24=)
                          2: 6574347835ECBC6966BFCA5A81C6163C9DA6910D.crl (hash: pJTdy98dWHFQCk5RAeNCnwbmD987t/Bmf9Fptqm8k10=)
                          3: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: kMu62GoeSvPyJBLri4JZbYuyvGOz5NmkR+CqQsZ0WY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a8:3a:c4:45:45:f7:d0:c4:7a:a9:1e:4e:ac:75:6f:9e:cc:88:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6574347835ECBC6966BFCA5A81C6163C9DA6910D
        Validity
            Not Before: Apr 15 07:26:38 2024 GMT
            Not After : Apr 16 09:11:38 2024 GMT
        Subject: CN=656B978032DF2F1F4C5D6BC38D59ECBD617C16DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:09:a9:01:7b:ed:b0:24:3e:be:0d:57:6f:
                    5c:42:79:df:58:71:b7:b3:a6:38:ea:bf:5a:b5:12:
                    b2:14:df:ab:6a:81:59:9f:35:df:47:71:41:61:67:
                    28:8e:ac:bb:0f:44:a4:b3:81:dd:5b:40:e0:00:5d:
                    75:7f:93:4a:79:28:59:e8:eb:22:9f:0c:9b:a4:af:
                    5e:86:ef:09:91:a7:d1:27:21:ae:f0:c5:a4:11:d4:
                    a9:5b:45:b5:7c:e9:9c:4d:f4:9a:d3:ed:f1:3e:41:
                    fc:3c:c7:02:b6:06:7f:1b:88:a8:99:53:7e:9f:75:
                    6c:bf:9f:22:1e:e2:a6:ab:08:fc:82:54:4e:b2:88:
                    a6:29:e8:95:fa:79:28:6d:e2:50:cc:39:cd:e5:94:
                    47:97:78:55:a6:8c:aa:b0:6d:c9:32:62:6f:fe:3a:
                    ee:50:ea:c9:00:f8:f7:9d:e3:41:ca:d7:e8:09:ba:
                    1a:0a:54:dc:f2:08:70:bb:71:76:79:03:1e:00:1f:
                    a1:59:83:c3:38:57:13:88:24:5d:39:a2:20:e3:1d:
                    07:78:8a:23:1f:ed:10:02:f7:60:79:e5:31:76:43:
                    12:f8:47:31:66:80:89:54:bd:6e:c2:91:54:ab:ea:
                    fd:50:41:02:a7:f0:d3:96:80:de:35:af:a3:e7:4e:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6B:97:80:32:DF:2F:1F:4C:5D:6B:C3:8D:59:EC:BD:61:7C:16:DF
            X509v3 Authority Key Identifier:
                keyid:65:74:34:78:35:EC:BC:69:66:BF:CA:5A:81:C6:16:3C:9D:A6:91:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/6574347835ECBC6966BFCA5A81C6163C9DA6910D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:80:21:fc:2b:8e:e9:2b:de:ad:6f:bb:9a:e6:e0:17:58:
         00:f9:b1:07:a8:d6:2a:7e:f1:b2:48:b8:a2:22:44:7f:cd:e3:
         95:2d:71:41:54:a6:62:04:f1:9a:ab:8d:ae:93:bc:2d:8f:30:
         81:64:b5:08:ef:b0:15:36:9d:98:24:f3:62:e8:ef:06:ed:0b:
         9c:56:80:0d:97:fc:ac:65:62:ac:ed:92:5f:fd:f2:80:5d:2b:
         84:f2:2d:6f:bc:bc:fb:a4:42:8c:a9:ef:5e:50:4a:e2:e7:6c:
         b3:35:fc:3d:17:a8:eb:3d:a9:db:19:f9:34:63:24:07:74:39:
         06:9b:00:bf:2f:a5:32:dc:46:89:10:bd:bb:fa:b0:44:ea:a4:
         88:fa:7a:42:cd:7f:5b:17:09:13:08:2d:4f:30:51:f4:c1:b6:
         94:87:0f:85:43:19:da:e1:92:5b:ec:2a:37:c1:a2:af:44:93:
         24:54:2d:e8:42:d7:79:4e:4e:ca:54:80:82:96:f3:e7:1a:65:
         fd:97:71:4f:fc:50:19:e6:19:52:2b:00:03:61:7f:39:2a:b3:
         47:56:40:b0:90:71:88:20:83:6c:a4:4d:d0:48:5b:d9:37:fa:
         7e:51:a6:a5:e7:50:ea:13:1e:5a:9f:87:d9:a8:56:cc:68:3f:
         f0:68:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----