Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft
File:                     A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft (raw, json)
Hash identifier:          SKCsXRn6hl4KVMqpceHPmrWOOdBukpjUzGzgLjHH6yQ=
Subject key identifier:   6A:4E:49:16:6D:54:24:A8:B3:7D:00:84:84:87:BA:4A:BB:CF:D8:D1
Authority key identifier: A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09
Certificate issuer:       /CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
Certificate serial:       5203289772D7C2063ACB86CA0FF08BBA8B3DD565
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft
Manifest number:          0181
Signing time:             Mon 15 Apr 2024 03:48:49 +0000
Manifest this update:     Mon 15 Apr 2024 03:43:49 +0000
Manifest next update:     Tue 16 Apr 2024 06:14:49 +0000
Files and hashes:         1: 3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa (hash: 9tTYD6D1sAlCnFe3tT5biK6NnBPMMSN4T4gbMQjKDCE=)
                          2: 3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa (hash: s6SrA2HUMR58pBhM3TKosOUCBW0sOxBwnXHXjNeOBdQ=)
                          3: A30A0ECD0FEC9199E60A341F06C27680368DCE09.crl (hash: RatQZAcq6VuHeFsvGOtlbeHfhHjgw+AYOUpHlgDsORI=)
                          4: 3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa (hash: IxfbR55O8Y+xV0OQf0jFSvUlROf251bNzhzfYOmZWl8=)
                          5: 3137302e3233382e3136302e302f32342d3234203d3e20323636333237.roa (hash: K5uJ1QP+y0hX8rFnTyAvvdg8hLgqfneGhIKksqiqtuk=)
                          6: 3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa (hash: XFZY3u6mGQpdLFG77egbL3FpuKUzBfCaD0u0OZwyO+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:03:28:97:72:d7:c2:06:3a:cb:86:ca:0f:f0:8b:ba:8b:3d:d5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
        Validity
            Not Before: Apr 15 03:43:49 2024 GMT
            Not After : Apr 16 06:14:49 2024 GMT
        Subject: CN=6A4E49166D5424A8B37D00848487BA4ABBCFD8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:2f:4b:a2:bb:18:d6:d6:8a:1a:aa:c8:22:
                    11:3d:f5:bd:47:78:0e:a6:f9:ba:e3:93:d9:1c:36:
                    ea:e1:8e:09:2c:a2:1d:5d:25:b5:f6:6f:a8:a9:c4:
                    29:66:8e:65:0e:4e:7c:1b:98:f8:e8:db:f2:0f:e9:
                    cb:a1:e9:98:a5:21:75:b2:00:86:16:ff:96:13:39:
                    09:97:86:d3:17:3b:d0:e5:b2:a7:96:42:2e:4c:e2:
                    f9:01:c1:d6:fc:8f:51:f4:77:b5:42:b1:e4:44:55:
                    5a:68:d8:eb:52:1c:7f:0b:df:7f:7a:e3:80:e8:78:
                    23:a6:ce:c8:96:52:84:39:64:39:f4:79:8f:bf:bc:
                    a9:ff:4c:16:b4:54:80:e1:23:6b:f4:de:ff:70:0b:
                    03:21:c1:66:dc:83:e6:24:bf:3f:46:c0:91:c7:20:
                    de:32:db:bd:f8:26:da:a5:44:67:26:32:b1:67:87:
                    db:54:8f:38:38:3b:cf:5c:68:92:4f:82:44:e6:a5:
                    f9:84:d6:9e:e8:9d:b5:b5:a8:8d:e2:b3:d7:d2:6f:
                    5f:b6:c3:ee:87:51:4e:c1:62:f4:a0:ad:7e:61:37:
                    f3:f1:60:8d:81:98:3d:cb:02:85:67:06:07:b9:14:
                    d1:8a:1d:e5:22:b6:f6:78:8b:86:8e:7d:bf:b5:df:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:49:16:6D:54:24:A8:B3:7D:00:84:84:87:BA:4A:BB:CF:D8:D1
            X509v3 Authority Key Identifier:
                keyid:A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:1d:2f:14:8e:b0:af:b6:99:44:1f:2a:73:ff:2b:c9:a6:
         ac:e8:5b:16:1c:6d:6a:10:72:07:95:01:c7:85:35:dd:2a:87:
         6c:87:2f:8f:84:47:8f:60:f4:a1:0e:68:a3:7d:ae:5a:c8:27:
         02:a9:a0:77:92:29:8f:58:2b:7c:7d:c3:e0:aa:89:5d:60:90:
         69:51:38:c1:8c:a5:33:c0:a9:c4:27:ad:90:c2:f1:ac:09:8c:
         5e:c2:0b:43:4b:4e:06:51:27:9b:03:17:81:c6:09:be:30:41:
         e6:78:ea:58:79:38:66:10:17:50:bc:f6:70:18:e8:f5:3d:59:
         30:f2:ef:b7:d5:88:26:0d:60:2f:7d:95:a3:be:a9:a4:05:5d:
         d2:78:37:91:b5:ee:db:46:ff:ac:3a:4e:8a:d1:88:16:49:72:
         a6:3e:97:86:70:8b:8e:eb:7d:6e:bc:ed:75:2d:ae:32:f6:a5:
         39:67:cf:30:6b:59:a2:ef:5e:5d:24:96:17:42:82:0e:2b:53:
         5b:f0:29:21:5b:ab:bb:cc:96:4f:55:ba:c6:be:70:a9:b9:b0:
         63:26:b8:fe:4a:28:46:a8:61:ad:ce:fc:3b:b9:00:ca:03:d6:
         e9:48:5a:a1:80:39:a6:31:61:28:84:b6:2a:74:bf:3a:81:a5:
         99:e1:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----