Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft
File:                     6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft (raw, json)
Hash identifier:          zzznhCgyLNdffarn7d+qxrrVdahS1Y9KRBiXz/F65XE=
Subject key identifier:   8F:98:12:24:C0:05:30:CD:74:71:BB:94:76:43:D1:B1:81:26:72:09
Authority key identifier: 6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14
Certificate issuer:       /CN=6A9ACE35D57659504CE2A4010FE0DB8CED51F514
Certificate serial:       6BB4013F51087296F1A8712BE27CBD8B4B89F883
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft
Manifest number:          28
Signing time:             Sun 14 Apr 2024 21:56:31 +0000
Manifest this update:     Sun 14 Apr 2024 21:51:31 +0000
Manifest next update:     Mon 15 Apr 2024 22:41:31 +0000
Files and hashes:         1: 34352e3138372e35322e302f32322d3234203d3e20323639343536.roa (hash: rt6Yj2XdX7SD3InY3Erxespq91TQucj2d/kEHsdmB/c=)
                          2: 6A9ACE35D57659504CE2A4010FE0DB8CED51F514.crl (hash: XwEj3LnsvfoUBQ5DjkaAychS86rknXjzL/ouUR4azfE=)
                          3: 323830343a363465343a3a2f33322d3333203d3e20323639343536.roa (hash: byBhHynNr/oX30s0WTc/nNpdIo+EqZhNGQTe+kxM7IE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:01:3f:51:08:72:96:f1:a8:71:2b:e2:7c:bd:8b:4b:89:f8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9ACE35D57659504CE2A4010FE0DB8CED51F514
        Validity
            Not Before: Apr 14 21:51:31 2024 GMT
            Not After : Apr 15 22:41:31 2024 GMT
        Subject: CN=8F981224C00530CD7471BB947643D1B181267209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:3e:94:b1:62:f3:be:20:97:04:70:c8:cb:
                    69:d0:dc:d2:ea:73:d6:c5:20:35:d4:7a:22:a6:c2:
                    37:45:e3:9e:4c:83:6f:6b:59:d5:88:3f:b6:14:e9:
                    69:78:a0:e0:f1:01:31:71:be:4d:9a:48:49:9d:84:
                    a4:8b:42:d5:1b:f0:1d:f7:1d:92:dd:20:3e:58:b0:
                    fd:17:60:67:6a:f2:11:95:23:76:18:7f:6e:23:d9:
                    de:5f:c2:ce:30:0c:42:1a:82:9c:52:6e:35:26:d5:
                    f7:a2:55:6d:e6:13:b1:d6:a0:0f:70:61:4a:b2:d7:
                    8d:9b:c9:78:6b:ca:14:93:5a:ee:49:fe:e7:47:2e:
                    4d:d8:69:01:b8:cf:ae:b3:b4:42:1e:db:68:8e:ed:
                    03:9a:6a:9c:70:21:d4:00:6f:41:bd:93:2a:b3:68:
                    ad:a3:8d:0b:e9:29:52:d6:a4:bf:0f:ec:fa:3a:af:
                    aa:80:d7:4a:5f:d8:30:94:9e:3e:58:48:50:96:0e:
                    b5:d7:7f:16:df:0a:92:5b:93:4a:c4:84:c1:a8:f8:
                    7c:df:64:4a:2a:d5:7d:02:21:32:7d:1e:9c:c0:5e:
                    e4:c2:ba:85:e9:d0:9f:42:af:4e:ac:7c:b5:b6:51:
                    de:b4:4e:01:fa:92:c3:0f:52:3a:48:04:13:55:7e:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:12:24:C0:05:30:CD:74:71:BB:94:76:43:D1:B1:81:26:72:09
            X509v3 Authority Key Identifier:
                keyid:6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:34:c5:b2:53:87:18:b4:33:a9:4b:9f:64:59:85:1e:8a:b9:
         2b:99:c3:0d:fc:80:47:d6:58:d9:9d:0c:9b:48:51:2a:cf:e7:
         a4:6c:5b:2c:5f:5f:9d:d2:4c:06:e6:c5:9b:05:22:3e:a6:14:
         51:97:a1:c8:6c:09:e8:5e:e2:24:84:d4:06:5c:e8:ab:5c:94:
         e9:c5:6d:e5:bd:f9:b2:96:60:c3:fc:84:32:98:e2:59:3f:49:
         cf:f6:45:3f:b2:ab:77:89:7e:eb:0f:d5:4e:f4:21:10:49:d3:
         7c:92:93:06:f9:6b:34:21:db:85:2b:f7:0a:bb:4e:97:23:25:
         96:68:cb:9c:4a:31:10:28:96:5e:bc:ec:af:4c:0a:04:ad:44:
         48:3e:aa:65:83:cf:a8:fe:ee:2a:e0:46:90:86:4a:8e:2d:f1:
         c1:4d:3d:10:ae:60:fe:fd:50:3f:5c:24:5f:36:1c:2c:80:a1:
         5a:89:72:c1:2a:fe:58:17:15:ff:6b:da:69:25:f2:e5:86:fd:
         50:84:d4:c0:69:6d:98:25:a7:7d:0c:87:dc:a4:14:60:72:e2:
         97:28:02:b7:d7:3b:af:65:b1:f6:b3:05:a6:d6:25:42:83:ab:
         9d:80:6f:7d:96:17:3e:91:df:ae:ef:43:31:76:e9:87:7b:10:
         37:94:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----