Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.mft
File:                     6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.mft (raw, json)
Hash identifier:          ee6JqDZgsmAGBtTYoljtByoT2oLuhjRaHpuKuPcrli0=
Subject key identifier:   1D:B7:14:28:A4:EB:D3:86:D3:8C:4B:9B:38:F8:C6:53:F6:D4:C9:07
Authority key identifier: 6B:4A:A6:32:E2:5A:1D:D9:B0:0A:BD:C4:5D:10:74:C0:26:A2:97:C3
Certificate issuer:       /CN=6B4AA632E25A1DD9B00ABDC45D1074C026A297C3
Certificate serial:       3079BE27DD700B0E6DE0DA8BC3CB304DB628C3F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.mft
Manifest number:          28
Signing time:             Mon 11 Sep 2023 23:14:33 +0000
Manifest this update:     Mon 11 Sep 2023 23:09:33 +0000
Manifest next update:     Wed 13 Sep 2023 00:42:33 +0000
Files and hashes:         1: 6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.crl (hash: YasUxj1t7M0sIvPtGjLs+gqC9MkIY+0ufIDGP2/g3Rw=)
                          2: 323830343a363661383a3a2f33322d3336203d3e20323639353734.roa (hash: /cnZKa/18Th5Ij0UEryu/TMHlRa+RGv2vY49XVzCznY=)
                          3: 34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (hash: IjKE9/dvo6QgeAYI8xYYW9fiHevLOMsl6I0bu5h28SM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:79:be:27:dd:70:0b:0e:6d:e0:da:8b:c3:cb:30:4d:b6:28:c3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4AA632E25A1DD9B00ABDC45D1074C026A297C3
        Validity
            Not Before: Sep 11 23:09:33 2023 GMT
            Not After : Sep 13 00:42:33 2023 GMT
        Subject: CN=1DB71428A4EBD386D38C4B9B38F8C653F6D4C907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:96:7b:c2:41:7d:f8:ab:99:77:a1:0f:94:
                    d5:45:90:a3:40:8e:84:10:d2:3f:94:b8:57:37:dd:
                    69:25:7e:d9:84:5d:64:01:c2:ba:89:92:0b:5e:3e:
                    f6:e3:a3:5c:30:e4:d7:29:9e:14:fc:94:b2:66:f5:
                    7c:04:fc:2e:7f:a8:b6:38:58:c7:e2:9e:f2:00:59:
                    f9:f3:73:28:d2:1b:ad:9a:c1:53:13:fb:de:f6:b1:
                    c7:06:70:2b:63:28:b0:9a:37:0c:b8:8c:e3:f5:49:
                    f4:c0:74:e2:4c:f5:c0:56:60:f4:25:70:be:4a:25:
                    12:ac:e8:f1:41:0b:c3:01:af:b3:cd:de:fd:f4:94:
                    88:7e:d3:42:9c:cd:15:95:5a:6e:3a:26:23:c4:a7:
                    66:82:75:18:ed:6e:98:4a:a6:ca:9a:5b:51:7a:07:
                    b9:8b:e0:72:2a:96:4c:ca:ce:04:8e:b3:3d:84:d6:
                    f4:8e:bb:4e:47:76:e7:1c:a7:42:ba:c3:46:57:6b:
                    15:11:bc:06:6e:20:33:76:c8:8a:e0:c7:fc:6a:fd:
                    dd:7f:b4:01:5a:93:72:93:cc:e4:d2:1d:68:c7:fe:
                    52:5e:e6:af:3e:54:12:0a:83:af:c5:25:86:3e:ed:
                    3e:8d:42:f5:13:fa:d9:c3:22:d5:4d:c1:5a:db:60:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B7:14:28:A4:EB:D3:86:D3:8C:4B:9B:38:F8:C6:53:F6:D4:C9:07
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A6:32:E2:5A:1D:D9:B0:0A:BD:C4:5D:10:74:C0:26:A2:97:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/6B4AA632E25A1DD9B00ABDC45D1074C026A297C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:d8:cb:5f:e6:34:fc:12:74:1a:9e:f5:d5:d9:b4:0b:ef:
         7f:06:59:0a:04:13:04:c5:0f:98:77:b4:22:2c:41:22:6d:aa:
         61:4d:1b:82:c8:93:01:69:e9:49:65:84:14:3f:34:85:09:d8:
         f5:fe:07:40:d3:c9:f1:41:b9:aa:56:40:c5:52:29:8b:fc:d6:
         f4:da:24:24:1b:53:40:77:3b:08:33:2e:b4:82:c0:29:7f:0f:
         6a:2c:b1:a3:dd:e2:33:ba:5d:0f:aa:1f:ee:a2:4c:f4:5d:6b:
         e3:f3:3b:29:4a:85:1f:33:1c:8f:79:b6:68:51:a1:f9:9c:53:
         4d:b8:74:53:c9:44:34:fb:9a:6b:41:ea:52:19:06:65:04:8a:
         da:c0:6f:cc:43:27:f8:f9:72:07:3b:a4:b6:d5:dd:e8:77:78:
         b8:72:70:66:6b:94:87:88:ff:51:c2:03:97:20:85:d9:24:81:
         3a:71:10:c1:98:88:bd:4e:46:a1:55:09:c6:11:25:17:d0:24:
         7c:45:d8:25:5b:41:b2:db:4f:ce:5f:c4:98:60:69:ce:4c:85:
         de:b9:a4:67:28:c1:d3:ec:36:38:b4:6a:74:ca:74:8d:b9:89:
         03:de:b8:11:ae:f9:88:67:9e:bb:08:82:c1:00:db:b3:4c:a6:
         99:4f:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----