Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.mft
File:                     6D953757C3802AF950C8835FFAF09F57F8632103.mft (raw, json)
Hash identifier:          6z/U87236coBhvyXaH81XpbXIHPZT9vR6V8rz3dEo40=
Subject key identifier:   BD:3B:2B:45:99:14:8A:DE:B9:C9:18:1D:AD:E6:8D:2F:92:10:CF:59
Authority key identifier: 6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03
Certificate issuer:       /CN=6D953757C3802AF950C8835FFAF09F57F8632103
Certificate serial:       36765016567AC0A1FBFF015E1DF45669D27507B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D953757C3802AF950C8835FFAF09F57F8632103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.mft
Manifest number:          02C9
Signing time:             Sun 14 Apr 2024 21:26:58 +0000
Manifest this update:     Sun 14 Apr 2024 21:21:58 +0000
Manifest next update:     Mon 15 Apr 2024 22:18:58 +0000
Files and hashes:         1: 3230302e3231352e3234342e302f32322d3234203d3e20323730353639.roa (hash: lWv+fdq84TTdpF8mQ8v+nWA3O6fdDQg3Ih7nPSaOTa0=)
                          2: 6D953757C3802AF950C8835FFAF09F57F8632103.crl (hash: kwRD/0bj1HJzj28J1dQo0WjBaGEHrgWAVcLmO5Vpxcw=)
                          3: 323830343a366530303a3a2f33322d3438203d3e20323730353639.roa (hash: YjLwo3H9bHeUbbazHbGpeIB1f7GMipL2Aslea8Drs1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:50:16:56:7a:c0:a1:fb:ff:01:5e:1d:f4:56:69:d2:75:07:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D953757C3802AF950C8835FFAF09F57F8632103
        Validity
            Not Before: Apr 14 21:21:58 2024 GMT
            Not After : Apr 15 22:18:58 2024 GMT
        Subject: CN=BD3B2B4599148ADEB9C9181DADE68D2F9210CF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:60:52:aa:c0:55:4e:56:1d:74:18:e2:e9:
                    63:9c:97:f4:6f:f0:5e:d1:e0:89:b1:ef:8f:96:39:
                    ff:e6:bf:7a:f3:3b:3e:49:b6:6d:55:5a:cd:0d:79:
                    41:d4:72:39:7a:c5:e2:83:9a:fe:16:f6:66:98:50:
                    a2:dd:bd:bf:bb:76:43:8d:2b:d4:18:fc:19:11:c4:
                    3c:5b:19:ce:67:d5:6b:61:0a:09:cf:4b:f6:ab:3a:
                    98:7c:40:74:1c:9f:9a:42:cc:94:04:2b:71:fc:09:
                    f4:04:e0:54:10:31:9a:81:53:d3:55:76:57:e7:a6:
                    ac:db:ba:be:9f:63:f4:5c:b4:14:55:dd:09:f8:f8:
                    1b:a7:e0:94:49:d4:5f:2b:b3:61:62:b1:7a:c3:68:
                    4e:33:98:3a:27:55:b4:95:0c:6e:f5:88:f9:a8:b5:
                    09:af:02:04:04:9f:2d:05:ec:ee:67:8c:d8:21:2a:
                    ca:e7:ca:6f:7a:3e:50:a2:0a:70:99:3a:f5:a3:d5:
                    15:f4:42:56:b4:a3:9a:02:45:96:2f:93:31:eb:22:
                    c1:5b:6b:60:63:f1:8a:8a:35:29:ed:84:8b:e3:88:
                    7e:b7:d5:9e:ec:e7:79:55:2e:52:ae:fd:5e:6c:ed:
                    2e:f5:29:bb:40:aa:77:4c:f3:92:28:5b:31:3e:8e:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:2B:45:99:14:8A:DE:B9:C9:18:1D:AD:E6:8D:2F:92:10:CF:59
            X509v3 Authority Key Identifier:
                keyid:6D:95:37:57:C3:80:2A:F9:50:C8:83:5F:FA:F0:9F:57:F8:63:21:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D953757C3802AF950C8835FFAF09F57F8632103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/0/6D953757C3802AF950C8835FFAF09F57F8632103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:64:d2:24:55:bf:35:00:43:60:19:f4:fd:cf:7e:fd:6a:73:
         32:e4:56:f6:ea:91:86:3c:c0:23:6a:08:e8:ea:93:53:26:c4:
         57:80:5d:d3:1f:22:45:f7:b1:bd:e6:7c:60:6c:65:6f:f5:b2:
         21:cd:79:b1:ef:ae:55:4d:93:2c:27:c6:dd:dc:14:a4:de:08:
         21:d5:2e:65:55:f6:d8:01:3e:e9:16:ad:ed:80:c4:24:c8:e7:
         1e:f8:6a:94:e1:fc:4f:99:76:50:2f:8b:ca:eb:5d:68:25:25:
         3c:a2:2e:f7:8d:07:7a:7b:6c:f0:77:30:1c:4f:a3:80:22:02:
         d9:ae:61:ba:8d:7d:19:e0:18:8d:fd:c4:a2:ff:89:a3:65:5e:
         8e:b7:e1:b1:1e:37:18:9b:0c:e8:de:dc:11:fd:56:04:20:d2:
         9b:41:36:99:7b:03:e7:a2:72:ee:c8:d1:83:5a:93:d5:52:1f:
         0b:8e:8a:ed:7b:63:56:c1:f3:89:29:2c:a3:bb:72:f5:ad:69:
         b9:58:a2:70:5b:b4:13:8f:69:0c:b5:d3:c4:3d:ff:50:bb:8e:
         37:62:14:a2:de:f2:31:9c:41:52:8c:e0:5d:7c:1e:21:7a:86:
         f2:80:8e:7d:02:1a:22:76:f8:00:8d:d9:47:9b:a5:6b:c2:4d:
         7d:83:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----