Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.mft
File:                     6FE64355FA3EBF46CC8D77CE630683D8182F55E4.mft (raw, json)
Hash identifier:          E7bM4cyj0RDdYLTJqdQwoN01PYad7/ihY7AweCeHjsw=
Subject key identifier:   3B:0B:ED:AD:8A:71:76:A8:57:9F:3A:E0:46:3C:0A:6D:61:17:BE:29
Authority key identifier: 6F:E6:43:55:FA:3E:BF:46:CC:8D:77:CE:63:06:83:D8:18:2F:55:E4
Certificate issuer:       /CN=6FE64355FA3EBF46CC8D77CE630683D8182F55E4
Certificate serial:       4707F49EC368E58552519FBF69D9CBA43A6786CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.mft
Manifest number:          B9
Signing time:             Sun 10 Nov 2024 07:24:09 +0000
Manifest this update:     Sun 10 Nov 2024 07:19:09 +0000
Manifest next update:     Mon 11 Nov 2024 07:49:09 +0000
Files and hashes:         1: 6FE64355FA3EBF46CC8D77CE630683D8182F55E4.crl (hash: YDf3Vsc4ssUQgZ5AbrLWKm9cwP2JCRnL9cNt0O0cXQ8=)
                          2: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 27r1ZA47FWX0A+PsQtI+rvn8qyCp9PRMianUGd8Ksq8=)
                          3: 323830343a343036633a3a2f33322d3438203d3e20323635393538.roa (hash: SFlrf6ZnF5BnFfIf7RaT95tX3Vnn6fsQXDPzXO7kweE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:f4:9e:c3:68:e5:85:52:51:9f:bf:69:d9:cb:a4:3a:67:86:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE64355FA3EBF46CC8D77CE630683D8182F55E4
        Validity
            Not Before: Nov 10 07:19:09 2024 GMT
            Not After : Nov 11 07:49:09 2024 GMT
        Subject: CN=3B0BEDAD8A7176A8579F3AE0463C0A6D6117BE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:dc:3c:44:02:9f:ff:2b:c9:b5:cb:c4:36:
                    8c:70:43:b7:92:d4:ed:74:59:cd:b0:77:cf:e9:8f:
                    d9:71:64:98:59:df:f8:04:6c:85:9a:81:f0:39:b2:
                    ab:17:f6:b4:f4:18:48:d8:9f:72:02:97:a5:e4:38:
                    95:21:a4:17:e6:7a:66:eb:f5:46:fc:93:8d:65:b1:
                    10:8b:32:f2:61:4d:c2:02:fd:80:cd:ca:b8:bd:b6:
                    c0:a0:67:69:f5:b1:e7:5c:4d:e7:e2:10:5d:62:c2:
                    c8:b6:a7:bb:a5:50:db:e2:8d:39:67:73:14:cf:df:
                    b3:6e:1f:fa:96:3f:19:f1:0c:26:91:21:08:e3:03:
                    cb:cf:e5:3a:b6:63:b3:d0:eb:f9:92:b3:51:69:dc:
                    a5:52:6c:4f:7c:8f:d3:bf:63:c9:2e:3d:bf:f1:78:
                    be:26:88:da:1e:f2:90:3b:87:6a:1a:96:ab:b7:9b:
                    ce:6c:55:bc:07:0d:1d:70:11:39:87:03:2b:35:fe:
                    f4:cd:7c:b8:7f:fe:03:da:9a:84:33:7b:fd:da:47:
                    9e:89:59:c2:23:47:7b:e8:ab:14:58:e9:1c:36:bc:
                    aa:47:70:da:52:cc:e5:04:52:2e:32:22:31:7e:59:
                    50:5c:f3:64:25:83:36:7c:e4:85:ab:c5:24:07:f9:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0B:ED:AD:8A:71:76:A8:57:9F:3A:E0:46:3C:0A:6D:61:17:BE:29
            X509v3 Authority Key Identifier:
                keyid:6F:E6:43:55:FA:3E:BF:46:CC:8D:77:CE:63:06:83:D8:18:2F:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:46:b3:20:11:4e:03:a8:ba:67:a1:97:8d:ac:ae:f1:f7:82:
         f4:cb:0f:c1:21:3c:9e:0a:d8:d0:b0:fe:5e:45:6e:62:ec:b2:
         3a:87:c1:f8:fe:0e:2b:55:97:96:6c:67:35:3b:7e:c5:f0:13:
         39:3c:12:08:73:3e:6e:d8:56:fa:8e:4d:f1:3d:6c:a9:04:47:
         8a:0e:fc:23:49:f4:c9:81:88:95:21:23:4e:3a:85:4b:c5:15:
         72:ac:08:d8:75:56:6e:7d:9e:64:a3:b1:94:a1:59:29:31:06:
         ba:14:10:81:0e:53:5a:13:23:3d:ad:d0:92:95:e3:bf:7c:4a:
         5d:71:32:ef:cd:8d:31:49:67:1c:6c:3b:ab:8e:66:53:82:f1:
         a1:12:4b:99:76:9a:a2:64:ef:38:7e:6d:c1:24:f6:d1:0e:4b:
         ce:fc:c8:ae:c6:42:78:6b:02:11:92:bc:51:c1:47:80:63:d6:
         33:53:ed:39:7a:03:c0:c6:76:69:92:c6:d8:75:fa:ad:74:16:
         5c:a5:ab:22:4c:ff:ae:8b:98:54:66:bc:7c:5e:46:dd:a6:02:
         2e:6d:dd:44:1f:d9:7c:ad:c9:f4:05:f2:13:06:9d:f8:64:a1:
         6f:ed:10:58:6b:ba:2f:72:41:e3:99:3e:43:cc:3f:a1:b1:0a:
         da:9a:7a:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURwf0nsNo5YVSUZ+/adnLpDpnhs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZFNjQzNTVGQTNFQkY0NkNDOEQ3N0NFNjMwNjgzRDgx
ODJGNTVFNDAeFw0yNDExMTAwNzE5MDlaFw0yNDExMTEwNzQ5MDlaMDMxMTAvBgNV
BAMTKDNCMEJFREFEOEE3MTc2QTg1NzlGM0FFMDQ2M0MwQTZENjExN0JFMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9btw8RAKf/yvJtcvENoxwQ7eS
1O10Wc2wd8/pj9lxZJhZ3/gEbIWagfA5sqsX9rT0GEjYn3ICl6XkOJUhpBfmembr
9Ub8k41lsRCLMvJhTcIC/YDNyri9tsCgZ2n1sedcTefiEF1iwsi2p7ulUNvijTln
cxTP37NuH/qWPxnxDCaRIQjjA8vP5Tq2Y7PQ6/mSs1Fp3KVSbE98j9O/Y8kuPb/x
eL4miNoe8pA7h2oalqu3m85sVbwHDR1wETmHAys1/vTNfLh//gPamoQze/3aR56J
WcIjR3voqxRY6Rw2vKpHcNpSzOUEUi4yIjF+WVBc82QlgzZ85IWrxSQH+YfdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOwvtrYpxdqhXnzrgRjwKbWEXvikwHwYDVR0j
BBgwFoAUb+ZDVfo+v0bMjXfOYwaD2BgvVeQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0Nj
dDcvMC82RkU2NDM1NUZBM0VCRjQ2Q0M4RDc3Q0U2MzA2ODNEODE4MkY1NUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRTY0MzU1RkEzRUJGNDZD
QzhENzdDRTYzMDY4M0Q4MTgyRjU1RTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC82
RkU2NDM1NUZBM0VCRjQ2Q0M4RDc3Q0U2MzA2ODNEODE4MkY1NUU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIkazIBFOA6i6Z6GXjayu8feC9MsPwSE8ngrY0LD+XkVuYuyyOofB+P4OK1WX
lmxnNTt+xfATOTwSCHM+bthW+o5N8T1sqQRHig78I0n0yYGIlSEjTjqFS8UVcqwI
2HVWbn2eZKOxlKFZKTEGuhQQgQ5TWhMjPa3QkpXjv3xKXXEy782NMUlnHGw7q45m
U4LxoRJLmXaaomTvOH5twST20Q5LzvzIrsZCeGsCEZK8UcFHgGPWM1PtOXoDwMZ2
aZLG2HX6rXQWXKWrIkz/rouYVGa8fF5G3aYCLm3dRB/ZfK3J9AXyEwad+GShb+0Q
WGu6L3JB45k+Q8w/obEK2pp6aw==
-----END CERTIFICATE-----