Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft
File:                     6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft (raw, json)
Hash identifier:          Kl7HWWtYeSW0lxtFz20julIijcZeiAu036eeJjj+fzw=
Subject key identifier:   BB:F1:EB:9C:95:6F:2B:D0:30:53:11:F7:BC:6A:E4:F5:DB:B7:FA:49
Authority key identifier: 6A:48:9D:98:A9:94:98:E1:68:8C:B0:1E:E6:AD:E9:68:F2:FC:84:1D
Certificate issuer:       /CN=6A489D98A99498E1688CB01EE6ADE968F2FC841D
Certificate serial:       6147DAEB1DC8CF2957F9C4FA31A71886E9093C03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft
Manifest number:          0168
Signing time:             Sun 14 Apr 2024 23:41:23 +0000
Manifest this update:     Sun 14 Apr 2024 23:36:23 +0000
Manifest next update:     Tue 16 Apr 2024 02:21:23 +0000
Files and hashes:         1: 34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa (hash: kvgW5TKJ9zcZbcDp0GyVNQoqH+0BPuSSLnteG1xE9Io=)
                          2: 323830343a346165383a3a2f33322d3438203d3e20323637323731.roa (hash: sThgwNE9JsRWg1HpXaxp8+hOmBxySuzmBII4Vi+uxiE=)
                          3: 6A489D98A99498E1688CB01EE6ADE968F2FC841D.crl (hash: fFofEvsFrh4UKUJQVyb7cdL1QZW/a7T1lw/46Cqz+cI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:47:da:eb:1d:c8:cf:29:57:f9:c4:fa:31:a7:18:86:e9:09:3c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A489D98A99498E1688CB01EE6ADE968F2FC841D
        Validity
            Not Before: Apr 14 23:36:23 2024 GMT
            Not After : Apr 16 02:21:23 2024 GMT
        Subject: CN=BBF1EB9C956F2BD0305311F7BC6AE4F5DBB7FA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:6d:3c:3c:d1:cc:ec:28:77:88:37:af:32:
                    14:ca:63:5a:92:f0:e9:1b:92:d7:bf:08:cb:4d:cc:
                    61:6f:50:e1:07:cc:17:6a:1c:d5:e5:4b:ee:c1:ad:
                    1d:c6:18:06:28:b7:69:8a:60:73:af:0c:98:34:04:
                    d7:53:c4:1e:a4:fa:3a:ed:b8:bd:d2:a5:27:74:fb:
                    2e:de:3d:f4:a6:cf:a6:00:54:0f:7b:1d:25:f6:d8:
                    4b:8c:a0:44:3b:df:5e:39:5c:d7:d8:0d:08:c2:46:
                    69:06:9d:3d:89:ba:f6:2d:14:80:2a:09:2d:4f:af:
                    6f:e7:53:3a:fc:a6:72:c0:5b:a0:85:b2:7a:f1:09:
                    86:ea:c5:9d:f8:11:45:3b:b4:5f:29:05:a2:38:78:
                    8f:44:9f:42:e6:37:53:6d:b1:f1:fb:1c:a4:6d:5e:
                    ed:11:f8:00:a5:4c:8b:bc:8e:20:ad:65:a6:83:d4:
                    69:94:b5:02:54:eb:2a:51:fe:e0:8d:18:c9:db:7e:
                    98:ad:30:14:e0:52:fd:56:4c:b1:00:32:64:47:2d:
                    c1:3a:f3:b9:d1:ae:c9:2a:76:d4:fe:af:33:8f:88:
                    c2:3d:3a:b2:e7:8a:46:2d:c6:ce:80:b8:08:f6:6f:
                    e6:46:8e:1f:7f:ef:e0:dc:b4:5a:1c:3a:21:9d:9b:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F1:EB:9C:95:6F:2B:D0:30:53:11:F7:BC:6A:E4:F5:DB:B7:FA:49
            X509v3 Authority Key Identifier:
                keyid:6A:48:9D:98:A9:94:98:E1:68:8C:B0:1E:E6:AD:E9:68:F2:FC:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/6A489D98A99498E1688CB01EE6ADE968F2FC841D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:60:2f:4c:a1:bb:e0:57:7e:3a:97:f4:91:54:a9:74:58:
         d2:fb:80:70:94:6e:1e:d4:cd:26:95:4f:3e:82:98:5b:06:e4:
         52:bc:e0:82:ef:87:8f:a0:ae:36:30:50:ed:06:b1:e8:3d:ef:
         d3:27:d5:9a:d7:cd:d7:18:f2:21:cf:c2:a6:76:af:05:88:e5:
         61:bc:f3:47:45:e4:ce:8e:ad:23:7b:01:92:4d:0d:91:64:1d:
         62:34:55:12:4c:0c:ec:0c:1e:ce:b6:08:45:b7:e1:fc:de:1f:
         00:40:24:cd:50:ee:61:b8:9e:0d:2e:b4:7c:f9:b1:25:c1:8b:
         03:9d:b0:bc:84:6b:06:0e:4a:3a:c0:0e:99:89:88:39:99:52:
         e6:8a:3a:25:44:ab:57:7e:4a:5f:d5:95:58:23:84:42:7e:00:
         4c:20:89:1a:45:b8:32:a5:03:92:7d:7a:14:13:45:cf:a1:8b:
         78:40:ee:05:38:52:f7:8d:93:f2:0e:bf:33:46:d4:98:1d:fd:
         2c:ea:c1:05:3e:e8:7b:be:0a:07:e1:37:36:e8:b3:a9:db:99:
         fc:cd:df:3a:10:e9:71:2f:49:08:11:65:77:b4:34:7b:b9:c5:
         3b:38:75:23:9e:20:37:8e:84:b6:d0:5c:ef:41:27:d0:84:f7:
         9d:75:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----