Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
File:                     CA6B34AFB25E47173E38783782E46D43F86C4899.mft (raw, json)
Hash identifier:          QsheNEFA0dpRyz1VH8LjsKLnvkVSe87hu5+T2SAd83c=
Subject key identifier:   1C:D3:D8:3F:8B:B5:92:E1:CD:D9:F8:FC:DF:63:0C:63:EA:31:7D:59
Authority key identifier: CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
Certificate issuer:       /CN=CA6B34AFB25E47173E38783782E46D43F86C4899
Certificate serial:       7C5E68439F141A45C252DD4EE1573FB53C1A28FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft
Manifest number:          040C
Signing time:             Mon 15 Apr 2024 11:52:34 +0000
Manifest this update:     Mon 15 Apr 2024 11:47:34 +0000
Manifest next update:     Tue 16 Apr 2024 13:44:34 +0000
Files and hashes:         1: 34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (hash: 8SJgQm2x5t7dQNuLROhgKN0nT+3gKwkp5sFiIiyh6/M=)
                          2: 323830343a356264303a3a2f33322d3334203d3e20323638383730.roa (hash: Od+LlWVeDRttHMHFIhKeY0ESnudsiGdey5JjbiDJe4k=)
                          3: CA6B34AFB25E47173E38783782E46D43F86C4899.crl (hash: lJISnZ4xTHH7uHxkJi2+ZU1CxxSXOPeWw4lQTIbab88=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5e:68:43:9f:14:1a:45:c2:52:dd:4e:e1:57:3f:b5:3c:1a:28:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6B34AFB25E47173E38783782E46D43F86C4899
        Validity
            Not Before: Apr 15 11:47:34 2024 GMT
            Not After : Apr 16 13:44:34 2024 GMT
        Subject: CN=1CD3D83F8BB592E1CDD9F8FCDF630C63EA317D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:77:ea:09:2f:29:77:6f:cb:01:14:bd:54:
                    c0:ef:f4:71:96:0b:28:69:fd:70:45:69:f8:41:b8:
                    2c:28:1a:55:34:4d:36:8e:e3:ad:98:67:14:6a:75:
                    19:58:6b:8f:99:68:90:54:09:0f:18:75:33:8e:d4:
                    49:eb:e8:2b:15:f3:d3:fe:ee:1a:4b:45:11:e5:77:
                    5d:76:db:86:77:d8:3b:f7:c9:94:3b:c5:f5:05:a9:
                    dc:64:52:42:10:31:c2:59:d8:95:3c:76:3a:8d:e8:
                    19:4d:ef:30:02:a8:af:a8:43:55:7d:5a:c1:59:4d:
                    65:d1:ec:81:ce:25:df:a4:f5:4b:93:a9:ed:f1:ab:
                    83:21:76:36:0d:ab:45:81:0d:85:2d:31:01:a1:2f:
                    10:4f:9c:b9:2e:83:32:6c:c5:fa:87:93:c6:db:3f:
                    af:ac:23:b1:3e:84:ba:5e:7f:13:75:5d:c6:95:f3:
                    cd:f5:9c:3a:ed:9c:bc:57:75:27:d1:fc:bd:61:54:
                    11:b8:1c:fc:c8:55:7b:83:30:bf:b1:31:a8:ea:7f:
                    25:6d:7c:3c:62:d0:a1:4f:22:12:15:38:10:3e:ae:
                    cc:18:6c:fe:46:b2:95:fe:0e:fa:34:17:19:9c:37:
                    d2:f7:c2:f2:7b:dd:73:39:17:29:a1:94:f4:86:35:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:D8:3F:8B:B5:92:E1:CD:D9:F8:FC:DF:63:0C:63:EA:31:7D:59
            X509v3 Authority Key Identifier:
                keyid:CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:e1:25:b2:b6:f5:4d:80:28:99:d7:69:fb:5d:41:87:d0:
         c3:d1:28:27:4e:68:e2:9c:ac:48:74:c6:49:37:ae:eb:3c:88:
         de:63:54:23:bf:3f:47:91:6d:73:ae:01:17:d6:35:54:4b:35:
         09:80:3f:2a:12:01:a4:1b:9e:f5:0f:f3:e5:5c:88:fa:f8:1b:
         99:3c:06:b0:c7:76:d6:aa:fe:08:bb:42:1f:0e:25:12:c4:3e:
         f4:7d:76:1a:3d:0c:a3:26:dc:69:b4:a7:e9:ec:22:4c:1a:39:
         40:b2:87:de:dc:ac:ba:86:d2:df:44:4b:b1:a4:8b:1b:d3:30:
         cc:5b:36:7e:a7:6e:1c:55:42:e0:dc:be:c7:71:f3:5c:ab:00:
         40:77:d5:31:c3:9e:32:4a:e8:e9:c7:fe:4f:c2:93:95:30:a5:
         6d:6c:16:77:40:8f:85:9e:be:e9:87:c6:34:3e:29:ec:9b:b5:
         46:0c:56:32:ae:cc:c6:0b:8e:8a:a2:09:55:95:62:38:f3:3a:
         8e:ad:9b:6e:b2:de:39:97:b4:bc:f9:28:10:51:ee:11:5f:bd:
         78:93:7e:b3:d0:bf:95:a3:8d:b0:61:4b:63:78:10:3e:70:8c:
         dd:03:8c:80:4e:d0:3b:b2:7d:26:e7:47:4e:55:4e:e2:63:19:
         a0:c1:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----