Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft
File:                     6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft (raw, json)
Hash identifier:          j9pudfz6yRaLtB/NGGTmV7BLvLnpiwBJfw2wCbpIreg=
Subject key identifier:   FC:5D:D6:C8:20:FA:28:59:A4:1D:32:EE:AE:E5:1A:90:A7:FC:F2:EC
Authority key identifier: 6E:F1:AF:4B:18:D0:10:C5:17:F6:FB:22:F3:BD:A2:E6:ED:C3:C9:D5
Certificate issuer:       /CN=6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5
Certificate serial:       02A0588F5991179153DB0B48C6E107D0B6714397
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft
Manifest number:          1C
Signing time:             Wed 24 Apr 2024 06:26:47 +0000
Manifest this update:     Wed 24 Apr 2024 06:21:47 +0000
Manifest next update:     Thu 25 Apr 2024 08:43:47 +0000
Files and hashes:         1: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: kVv9+idxpTdahhe1vAEOnjCwCIhN/jAdqMs8uv+j8+o=)
                          2: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: tVxCKl1a7I3/Jb807hzENB+TPPqsOVtHss6VdZQ4Ncc=)
                          3: 6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.crl (hash: pdgJ/hkKbjJRzCc6huaiJxFTosXJfUK2+tSmKXeNdys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a0:58:8f:59:91:17:91:53:db:0b:48:c6:e1:07:d0:b6:71:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5
        Validity
            Not Before: Apr 24 06:21:47 2024 GMT
            Not After : Apr 25 08:43:47 2024 GMT
        Subject: CN=FC5DD6C820FA2859A41D32EEAEE51A90A7FCF2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:11:2a:66:74:4f:53:46:2f:7e:a4:bd:d8:
                    51:9e:f7:ca:e4:b2:98:35:70:ef:f9:a5:40:37:71:
                    aa:b5:40:b2:81:f9:79:e0:ce:27:5c:78:13:ca:4a:
                    fe:eb:5b:1a:f7:5e:fc:6b:dc:31:f1:a1:e2:cb:c2:
                    d8:39:bb:3c:af:c4:5a:0d:8b:80:ea:ea:2b:a7:de:
                    84:59:f7:0c:ce:a5:df:78:89:94:8b:b3:6b:3c:7e:
                    d4:b0:c8:80:6a:de:78:16:09:9e:5b:9d:ff:e7:92:
                    82:51:87:71:cc:fc:e8:91:67:c9:f4:54:52:d0:98:
                    01:ed:ab:58:f8:db:fe:fc:2a:2d:7a:f7:96:66:f0:
                    c3:22:48:69:aa:b4:30:c2:77:2f:42:5c:f8:ea:85:
                    85:4a:7f:13:7b:4d:c3:2e:ab:89:b1:78:e0:bd:10:
                    79:65:cd:c9:94:9f:02:04:c7:1c:08:ed:1a:7c:4e:
                    cd:f7:22:02:0e:52:d6:fd:51:fb:eb:30:c0:f5:2d:
                    2f:92:18:fd:f0:23:26:b1:20:3e:cd:35:aa:f4:4d:
                    e0:78:97:63:03:aa:19:e6:64:4c:95:08:e5:40:44:
                    2c:b8:9a:a5:5b:63:f5:87:4d:a7:23:5d:f6:6e:68:
                    31:1d:d6:85:b4:9f:2e:ba:14:a8:98:88:bb:af:0d:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:D6:C8:20:FA:28:59:A4:1D:32:EE:AE:E5:1A:90:A7:FC:F2:EC
            X509v3 Authority Key Identifier:
                keyid:6E:F1:AF:4B:18:D0:10:C5:17:F6:FB:22:F3:BD:A2:E6:ED:C3:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/1/6EF1AF4B18D010C517F6FB22F3BDA2E6EDC3C9D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:b7:4a:d3:17:7f:cc:72:e9:57:c4:66:67:1c:ff:a3:61:
         cb:7a:ee:a6:be:49:df:85:f4:9f:af:97:9b:3b:a9:dd:94:7f:
         c6:0a:d5:85:0e:d1:90:41:39:e0:b4:59:c0:f2:ab:f3:0b:26:
         38:4f:35:f6:a7:61:1d:12:c1:a6:21:00:40:53:02:57:99:ee:
         8f:0a:31:0b:4f:98:c7:80:25:f1:07:21:e3:e7:6f:8b:34:da:
         36:31:67:12:c6:fe:81:5a:7a:b6:f7:1d:f2:dc:90:62:7d:da:
         67:2a:63:9d:25:0a:d9:e3:5b:0f:fb:c0:0a:ff:4e:69:b3:0e:
         f3:c5:c9:7f:44:7c:81:b2:db:7b:68:76:5c:04:89:9f:a5:29:
         f6:49:a3:31:ed:92:60:e4:49:61:20:85:6b:5a:e9:3d:7b:e9:
         77:c3:85:b8:9e:80:81:5a:e6:29:d3:30:80:a8:6c:b2:dc:d7:
         e3:6b:4b:01:a8:bd:dd:dd:50:81:2b:9c:eb:49:75:27:56:98:
         9f:e6:a4:df:6e:fe:6c:34:c4:37:2a:1b:6f:70:20:70:1d:00:
         b0:90:25:d3:b7:34:e8:65:fa:5b:67:96:ea:bb:f5:83:fc:f8:
         5c:5e:c2:cf:01:d7:3a:39:81:b7:ab:1e:31:9a:14:73:51:af:
         3e:29:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----