Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.mft
File:                     E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.mft (raw, json)
Hash identifier:          pLMmIA5QR2vY2RhQ7jwroSbQaBLM4KIRqJLPKn2i2Vg=
Subject key identifier:   0D:23:67:CA:AA:3B:76:B6:77:5F:53:CA:F5:F2:43:4F:C9:33:79:31
Authority key identifier: E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF
Certificate issuer:       /CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
Certificate serial:       0E26F1B39C86B701564979CB557A7C213DF68B0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.mft
Manifest number:          045D
Signing time:             Sun 14 Apr 2024 23:50:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 01:57:00 +0000
Files and hashes:         1: 34352e3233322e32302e302f32322d3234203d3e20323637323438.roa (hash: 4Mq3g0Z1RdPaPKvR6BCZYXxK4HdYmumjWVa5aQVLExI=)
                          2: 323830343a346138633a3130303a3a2f34302d3430203d3e20323637323438.roa (hash: lqw0FYI7s+jDn9IEx6qABfaxCoQEu8ZAQN2RcIkHGRo=)
                          3: 323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (hash: RifcFuyCFO1msVweF426iH1vHG1elAfv5lwkrNl0fHg=)
                          4: E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.crl (hash: mreGMRm3G2gPraLayAPInQ2cAoesvMItLNkRg4uP1o0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:26:f1:b3:9c:86:b7:01:56:49:79:cb:55:7a:7c:21:3d:f6:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF
        Validity
            Not Before: Apr 14 23:45:00 2024 GMT
            Not After : Apr 16 01:57:00 2024 GMT
        Subject: CN=0D2367CAAA3B76B6775F53CAF5F2434FC9337931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:d2:14:31:6c:84:d5:4d:e5:4a:15:8b:c3:
                    c8:1a:60:81:ee:7b:29:d2:d4:04:c1:ad:41:0b:62:
                    f6:17:c2:7d:de:08:95:44:57:99:72:28:21:65:3e:
                    03:2d:26:23:aa:24:43:da:54:7d:9d:a9:67:ee:65:
                    8c:52:21:3a:b5:01:b3:60:c8:4b:1b:94:31:98:fa:
                    a2:c6:25:1f:c4:31:ab:b6:44:ba:44:35:9a:5a:f6:
                    9e:26:89:28:f8:34:cd:a7:de:6f:c1:f2:95:1e:83:
                    ca:e7:5d:50:d5:63:4b:04:21:4e:11:72:a4:2d:52:
                    22:3e:d1:ed:49:12:92:4e:f7:2f:b8:8a:e4:76:c0:
                    73:b7:6a:30:33:49:b8:11:f8:7b:a3:b1:68:74:4d:
                    c5:0e:6c:39:bf:84:f3:b2:9d:bb:c5:b5:e3:75:22:
                    93:e0:f6:ca:d6:2e:ab:b5:a9:ba:70:99:a6:d3:ac:
                    f3:10:f0:74:87:e5:59:32:71:c9:7a:93:0e:28:24:
                    79:79:96:b8:95:f6:e2:56:64:85:bf:ca:e9:7c:89:
                    60:9f:0f:4c:3a:4c:61:58:6b:09:d7:d8:67:51:b3:
                    22:c1:e5:5a:e3:fe:1e:f6:64:37:7e:37:d5:c7:a8:
                    3f:26:3e:d6:b8:41:c9:79:8d:2a:77:f3:9c:f2:12:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:67:CA:AA:3B:76:B6:77:5F:53:CA:F5:F2:43:4F:C9:33:79:31
            X509v3 Authority Key Identifier:
                keyid:E5:02:ED:5C:B5:5A:E0:AC:34:A3:90:CE:8A:82:0F:3F:3A:99:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/0/E502ED5CB55AE0AC34A390CE8A820F3F3A9947AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:0a:cb:57:4b:1b:1c:bc:73:3b:42:21:fa:2b:45:b3:af:
         a1:e1:e9:04:70:45:5e:30:58:94:9c:a6:99:f2:04:42:f1:f0:
         08:00:f3:73:bb:53:8c:ae:1b:15:ed:b5:6d:9a:ca:00:2a:bf:
         87:d5:19:60:be:e2:a1:3f:6e:e3:48:e5:3a:22:3e:67:20:e6:
         39:f7:69:2f:15:e5:36:e2:45:2e:b7:da:3d:93:92:1c:ff:eb:
         11:8f:3a:5e:61:59:d7:7b:fa:ec:0f:b3:ee:f7:b2:18:72:ae:
         dc:e2:32:a0:18:8e:a5:3d:1e:b1:94:48:d0:db:c6:54:ea:98:
         56:3b:6a:9b:78:75:87:47:62:d2:b9:d7:62:f3:7c:1b:43:2e:
         81:01:4f:08:1d:c2:a0:19:d3:7b:e1:09:d2:f0:de:3f:65:44:
         d0:5c:43:b8:87:ba:92:8c:36:f7:3b:e2:af:48:7a:04:5d:a8:
         f2:e2:f3:13:06:e4:d9:b3:0a:85:33:23:6c:f4:34:4b:e7:b8:
         98:7b:84:55:b6:14:ba:74:d6:5c:78:1a:54:24:14:fe:00:05:
         e0:f2:30:4a:d2:a0:ca:13:32:3c:9f:54:7e:71:4a:5e:42:55:
         35:b7:ca:05:4d:50:cb:83:b1:2f:52:10:91:64:c4:3f:3b:66:
         74:7c:ac:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDibxs5yGtwFWSXnLVXp8IT32iw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwMkVENUNCNTVBRTBBQzM0QTM5MENFOEE4MjBGM0Yz
QTk5NDdBRjAeFw0yNDA0MTQyMzQ1MDBaFw0yNDA0MTYwMTU3MDBaMDMxMTAvBgNV
BAMTKDBEMjM2N0NBQUEzQjc2QjY3NzVGNTNDQUY1RjI0MzRGQzkzMzc5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaNIUMWyE1U3lShWLw8gaYIHu
eynS1ATBrUELYvYXwn3eCJVEV5lyKCFlPgMtJiOqJEPaVH2dqWfuZYxSITq1AbNg
yEsblDGY+qLGJR/EMau2RLpENZpa9p4miSj4NM2n3m/B8pUeg8rnXVDVY0sEIU4R
cqQtUiI+0e1JEpJO9y+4iuR2wHO3ajAzSbgR+HujsWh0TcUObDm/hPOynbvFteN1
IpPg9srWLqu1qbpwmabTrPMQ8HSH5Vkyccl6kw4oJHl5lriV9uJWZIW/yul8iWCf
D0w6TGFYawnX2GdRsyLB5Vrj/h72ZDd+N9XHqD8mPta4Qcl5jSp385zyEowJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDSNnyqo7drZ3X1PK9fJDT8kzeTEwHwYDVR0j
BBgwFoAU5QLtXLVa4Kw0o5DOioIPPzqZR68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFt
OFQvMC9FNTAyRUQ1Q0I1NUFFMEFDMzRBMzkwQ0U4QTgyMEYzRjNBOTk0N0FGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1MDJFRDVDQjU1QUUwQUMz
NEEzOTBDRThBODIwRjNGM0E5OTQ3QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFtOFQvMC9F
NTAyRUQ1Q0I1NUFFMEFDMzRBMzkwQ0U4QTgyMEYzRjNBOTk0N0FGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd+IKy1dLGxy8cztCIforRbOvoeHpBHBFXjBYlJymmfIEQvHwCADzc7tTjK4b
Fe21bZrKACq/h9UZYL7ioT9u40jlOiI+ZyDmOfdpLxXlNuJFLrfaPZOSHP/rEY86
XmFZ13v67A+z7veyGHKu3OIyoBiOpT0esZRI0NvGVOqYVjtqm3h1h0di0rnXYvN8
G0MugQFPCB3CoBnTe+EJ0vDeP2VE0FxDuIe6kow29zvir0h6BF2o8uLzEwbk2bMK
hTMjbPQ0S+e4mHuEVbYUunTWXHgaVCQU/gAF4PIwStKgyhMyPJ9UfnFKXkJVNbfK
BU1Qy4OxL1IQkWTEPztmdHysNg==
-----END CERTIFICATE-----