Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
File:                     CA6B34AFB25E47173E38783782E46D43F86C4899.mft (raw, json)
Hash identifier:          LekwawDyUGRvZFgsZ77ChxoWTmYZIPlOBeCfNqi87jQ=
Subject key identifier:   0E:FC:32:A1:EE:6E:2B:B4:CB:1C:89:C6:F8:09:B8:E9:BC:D4:6F:12
Authority key identifier: CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
Certificate issuer:       /CN=CA6B34AFB25E47173E38783782E46D43F86C4899
Certificate serial:       7CDA1DDD747BDC0DCE9980DFE5FC367FC7BDEC17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
Manifest number:          040B
Signing time:             Sun 14 Apr 2024 17:42:29 +0000
Manifest this update:     Sun 14 Apr 2024 17:37:29 +0000
Manifest next update:     Mon 15 Apr 2024 19:49:29 +0000
Files and hashes:         1: 34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (hash: 8SJgQm2x5t7dQNuLROhgKN0nT+3gKwkp5sFiIiyh6/M=)
                          2: 323830343a356264303a3a2f33322d3334203d3e20323638383730.roa (hash: Od+LlWVeDRttHMHFIhKeY0ESnudsiGdey5JjbiDJe4k=)
                          3: CA6B34AFB25E47173E38783782E46D43F86C4899.crl (hash: sct0sgXEQSbYI0zv2ueYQTJM71Rf72PKT0h28NCMS5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:1d:dd:74:7b:dc:0d:ce:99:80:df:e5:fc:36:7f:c7:bd:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6B34AFB25E47173E38783782E46D43F86C4899
        Validity
            Not Before: Apr 14 17:37:29 2024 GMT
            Not After : Apr 15 19:49:29 2024 GMT
        Subject: CN=0EFC32A1EE6E2BB4CB1C89C6F809B8E9BCD46F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:ad:35:b4:8d:0e:3a:37:b4:58:24:93:70:
                    a9:cd:3a:c3:b1:43:92:5d:52:6a:bd:30:8d:8b:46:
                    02:84:2a:52:a8:9a:e4:47:2a:94:03:e9:b2:04:5f:
                    3d:51:1e:c9:94:e3:fb:49:c9:3f:54:91:d6:1d:d7:
                    e1:e7:90:e0:85:17:00:09:02:85:89:77:bc:42:d4:
                    70:ab:c0:89:3e:df:6d:d7:8c:f0:29:55:72:2d:92:
                    39:aa:e8:6e:98:36:27:91:3a:0f:a4:9e:72:81:6c:
                    73:82:5f:f9:5a:b3:ad:98:ea:a7:d1:aa:27:5f:2b:
                    d8:5c:d5:b7:8b:9a:e5:ce:9a:a3:01:85:12:18:07:
                    2b:07:5e:fd:1b:6b:ca:f7:5a:f5:e3:0f:27:0b:92:
                    9a:cd:b9:4d:6c:d8:2e:cf:7e:6b:04:ed:23:f0:67:
                    c8:7e:ff:d4:8c:25:70:ad:d2:f0:75:27:40:e5:bb:
                    8f:d1:63:70:d4:51:8a:c4:4b:bb:26:2b:3f:e3:d8:
                    14:94:37:21:10:58:a5:9b:66:63:46:3a:db:25:c3:
                    a8:4d:d6:90:80:3d:43:94:f0:ed:8b:63:4c:ee:ca:
                    10:03:2a:42:66:39:24:6b:86:88:7e:07:2c:1a:51:
                    b5:97:9f:65:93:2a:8f:0e:aa:7f:0b:30:d3:c8:fa:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FC:32:A1:EE:6E:2B:B4:CB:1C:89:C6:F8:09:B8:E9:BC:D4:6F:12
            X509v3 Authority Key Identifier:
                keyid:CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:f4:7b:74:73:af:dc:e8:1b:b3:58:00:8d:ad:cc:31:9c:
         57:bf:b0:55:af:0a:5d:59:71:15:b6:72:17:5f:67:5e:52:ff:
         8b:d5:43:cd:d7:44:77:e6:aa:a0:a5:b2:c6:5a:46:ad:a7:00:
         95:24:b1:29:c7:a4:eb:2b:c7:69:69:88:6f:52:16:b6:36:23:
         d8:db:bc:5b:db:31:1f:47:ba:3b:d4:78:7b:51:8d:11:d8:18:
         65:a1:4c:3a:59:a2:99:0c:85:b3:1d:32:d0:96:18:19:a2:8d:
         90:58:15:66:31:9d:41:a1:05:38:6c:5f:92:20:b4:16:5b:9d:
         5b:9f:97:bc:6f:2d:21:9a:f5:02:fe:3b:d5:31:68:f4:ac:5f:
         94:7b:61:72:65:0b:67:15:db:27:b2:51:56:8d:54:2d:55:6e:
         82:5c:d9:50:6f:7c:c8:ac:e2:af:c3:1c:04:58:45:cf:38:04:
         eb:66:a9:97:eb:5a:a3:fd:bc:57:b7:f4:19:4b:55:8a:e0:07:
         14:91:ec:f6:a0:07:c4:81:8c:48:c7:88:01:a1:ec:c2:d6:7a:
         e9:90:0a:f6:05:fa:db:f6:ab:f5:71:34:ba:88:e3:2c:ae:0c:
         18:07:19:95:48:bf:b2:01:ba:04:f2:73:31:d3:e0:80:2a:ec:
         64:54:fb:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfNod3XR73A3OmYDf5fw2f8e97BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2QjM0QUZCMjVFNDcxNzNFMzg3ODM3ODJFNDZENDNG
ODZDNDg5OTAeFw0yNDA0MTQxNzM3MjlaFw0yNDA0MTUxOTQ5MjlaMDMxMTAvBgNV
BAMTKDBFRkMzMkExRUU2RTJCQjRDQjFDODlDNkY4MDlCOEU5QkNENDZGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHq601tI0OOje0WCSTcKnNOsOx
Q5JdUmq9MI2LRgKEKlKomuRHKpQD6bIEXz1RHsmU4/tJyT9UkdYd1+HnkOCFFwAJ
AoWJd7xC1HCrwIk+323XjPApVXItkjmq6G6YNieROg+knnKBbHOCX/las62Y6qfR
qidfK9hc1beLmuXOmqMBhRIYBysHXv0ba8r3WvXjDycLkprNuU1s2C7PfmsE7SPw
Z8h+/9SMJXCt0vB1J0Dlu4/RY3DUUYrES7smKz/j2BSUNyEQWKWbZmNGOtslw6hN
1pCAPUOU8O2LY0zuyhADKkJmOSRrhoh+BywaUbWXn2WTKo8Oqn8LMNPI+nV9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDvwyoe5uK7TLHInG+Am46bzUbxIwHwYDVR0j
BBgwFoAUyms0r7JeRxc+OHg3guRtQ/hsSJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFFrNlRnVWN0dFNKcEQ2Q0ttTmVCcVhpWHZLQkNyZXNjNnNZZDJhS2VI
REcvMC9DQTZCMzRBRkIyNUU0NzE3M0UzODc4Mzc4MkU0NkQ0M0Y4NkM0ODk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBNkIzNEFGQjI1RTQ3MTcz
RTM4NzgzNzgyRTQ2RDQzRjg2QzQ4OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFFrNlRnVWN0dFNKcEQ2Q0ttTmVCcVhpWHZLQkNyZXNjNnNZZDJhS2VIREcvMC9D
QTZCMzRBRkIyNUU0NzE3M0UzODc4Mzc4MkU0NkQ0M0Y4NkM0ODk5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXkb0e3Rzr9zoG7NYAI2tzDGcV7+wVa8KXVlxFbZyF19nXlL/i9VDzddEd+aq
oKWyxlpGracAlSSxKcek6yvHaWmIb1IWtjYj2Nu8W9sxH0e6O9R4e1GNEdgYZaFM
OlmimQyFsx0y0JYYGaKNkFgVZjGdQaEFOGxfkiC0FludW5+XvG8tIZr1Av471TFo
9KxflHthcmULZxXbJ7JRVo1ULVVuglzZUG98yKzir8McBFhFzzgE62apl+tao/28
V7f0GUtViuAHFJHs9qAHxIGMSMeIAaHswtZ66ZAK9gX62/ar9XE0uojjLK4MGAcZ
lUi/sgG6BPJzMdPggCrsZFT7UA==
-----END CERTIFICATE-----