Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft
File:                     23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft (raw, json)
Hash identifier:          RcvyK69sMcZ0dSS5JGzEuURbA1nYFCuuz0a8cnXBDoY=
Subject key identifier:   49:A3:EE:3D:BA:97:1D:9F:11:A7:A5:BA:67:3E:66:2B:23:B2:49:E0
Authority key identifier: 23:CD:2F:FE:6E:61:06:53:1A:65:DE:73:B3:F4:F3:30:2A:76:13:26
Certificate issuer:       /CN=23CD2FFE6E6106531A65DE73B3F4F3302A761326
Certificate serial:       06975539E3D88E6C3D82BECEB4356E3DC74336A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft
Manifest number:          02
Signing time:             Mon 14 Mar 2022 20:19:00 +0000
Manifest this update:     Mon 14 Mar 2022 20:14:00 +0000
Manifest next update:     Tue 15 Mar 2022 22:59:00 +0000
Files and hashes:         1: 3137302e3234352e3133342e302f32342d3234203d3e203532373536.roa (hash: nuYczHI5wpWbd3ukdQl9oAja2IY1D0hbTf4gZJ66EDs=)
                          2: 23CD2FFE6E6106531A65DE73B3F4F3302A761326.crl (hash: euBLebwpGd19wKdrQvGEYSRhNrNiC46jjZsFJ9YsKOc=)
                          3: 3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (hash: P3j/u4UX1j2s3F3pUAeeaRRm7YT43ZIXJBV2o+RgugA=)
                          4: 323830313a38303a316331303a3a2f34382d3438203d3e203532373536.roa (hash: qpDqN8ipGhXTtXTqa1Lv68n6fPe845iUKza8y5kODfU=)
                          5: 3137302e3234352e3133352e302f32342d3234203d3e203532373536.roa (hash: CogKlAtuBJdVuC5MnBMk/yY08FgIDH2LIh7pwBxTBwo=)
                          6: 3137302e3234352e3133342e302f32332d3234203d3e203532373536.roa (hash: byaCDhbdRP6m/wAq1HXH32RWz64h/AttS+13b/r66NQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:55:39:e3:d8:8e:6c:3d:82:be:ce:b4:35:6e:3d:c7:43:36:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23CD2FFE6E6106531A65DE73B3F4F3302A761326
        Validity
            Not Before: Mar 14 20:14:00 2022 GMT
            Not After : Mar 15 22:59:00 2022 GMT
        Subject: CN=49A3EE3DBA971D9F11A7A5BA673E662B23B249E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:82:2b:93:ed:b0:3d:81:24:07:b1:74:11:
                    6f:24:6c:e7:cd:88:cd:ce:10:2a:3c:32:74:69:66:
                    9e:08:c6:55:57:a9:7e:9a:50:95:a1:f5:9b:cc:65:
                    e7:5a:89:20:3e:81:93:6a:b6:fa:04:40:a3:d1:1d:
                    61:9d:27:c7:4b:37:d0:0b:f7:f2:51:e7:8b:9a:63:
                    97:21:c9:65:8f:ad:72:2a:b7:3e:4a:5a:fa:11:00:
                    70:6c:33:55:b1:5f:38:b1:61:8e:c5:fa:7a:cf:d2:
                    8b:6d:9f:e2:f5:26:9a:d7:55:45:32:a1:ae:ce:70:
                    3f:a1:db:76:b0:6b:a0:ec:ab:13:1b:00:5b:07:7e:
                    bc:f3:f5:ec:70:24:66:c2:95:ac:61:4c:e8:58:72:
                    57:eb:35:d2:bb:39:19:d5:f4:6e:ce:b5:56:20:a3:
                    23:69:63:51:3d:6c:79:a4:9f:cb:d7:71:e7:03:99:
                    0c:d4:24:7a:81:b2:79:47:d7:fe:9b:6b:98:85:c0:
                    7e:35:a0:55:a9:59:0f:6a:58:16:55:6c:b6:52:57:
                    37:fc:e7:cf:79:3d:bf:d0:4f:88:40:b0:e7:ee:44:
                    15:b3:05:27:d0:df:40:ed:df:d9:14:15:9d:cd:e9:
                    62:e1:98:b1:13:18:18:6f:c3:12:dd:1c:32:70:d0:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:EE:3D:BA:97:1D:9F:11:A7:A5:BA:67:3E:66:2B:23:B2:49:E0
            X509v3 Authority Key Identifier:
                keyid:23:CD:2F:FE:6E:61:06:53:1A:65:DE:73:B3:F4:F3:30:2A:76:13:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/23CD2FFE6E6106531A65DE73B3F4F3302A761326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:22:d2:7e:ad:c8:54:5d:fe:bc:f0:69:46:a9:d0:5d:5b:
         10:53:00:70:44:ed:22:18:88:18:ee:26:f8:1f:f2:f5:1a:9b:
         31:06:bb:e8:85:ad:6e:49:41:80:08:b0:ea:0d:15:5a:f1:56:
         7f:10:f8:af:dd:3d:b4:fc:53:ea:1a:3d:2b:71:75:f0:4b:81:
         22:78:5f:c7:ea:51:33:b2:67:ca:00:bc:01:98:b5:c0:0c:10:
         3c:50:5a:b4:cd:50:13:91:71:75:6b:5c:f2:3c:5e:ba:61:a5:
         79:8f:d5:de:0b:f4:a4:6e:96:8b:ea:ca:2d:7f:67:45:de:63:
         77:c2:74:6f:8b:59:fe:74:be:99:fc:e8:50:f1:1a:78:4b:b4:
         24:14:e6:37:5e:19:f9:94:1b:64:93:9e:e6:ba:9d:e8:f8:c8:
         5d:a5:5b:57:be:8f:cb:8d:55:86:1b:d5:2b:1f:03:57:73:cb:
         4c:ba:51:ea:dc:e7:47:1d:7b:d0:84:30:78:f7:f9:50:2c:b3:
         34:22:4e:0e:99:b8:8d:aa:3d:97:08:45:c6:4a:15:4d:3c:a4:
         19:b1:12:84:a6:73:5a:aa:c0:09:9f:55:90:63:75:aa:4d:05:
         f0:fa:50:20:33:7e:00:e4:de:8b:eb:43:3e:e1:82:d2:ec:81:
         24:d0:d1:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBpdVOePYjmw9gr7OtDVuPcdDNqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNDRDJGRkU2RTYxMDY1MzFBNjVERTczQjNGNEYzMzAy
QTc2MTMyNjAeFw0yMjAzMTQyMDE0MDBaFw0yMjAzMTUyMjU5MDBaMDMxMTAvBgNV
BAMTKDQ5QTNFRTNEQkE5NzFEOUYxMUE3QTVCQTY3M0U2NjJCMjNCMjQ5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiD4Irk+2wPYEkB7F0EW8kbOfN
iM3OECo8MnRpZp4IxlVXqX6aUJWh9ZvMZedaiSA+gZNqtvoEQKPRHWGdJ8dLN9AL
9/JR54uaY5chyWWPrXIqtz5KWvoRAHBsM1WxXzixYY7F+nrP0ottn+L1JprXVUUy
oa7OcD+h23awa6DsqxMbAFsHfrzz9exwJGbClaxhTOhYclfrNdK7ORnV9G7OtVYg
oyNpY1E9bHmkn8vXcecDmQzUJHqBsnlH1/6ba5iFwH41oFWpWQ9qWBZVbLZSVzf8
5895Pb/QT4hAsOfuRBWzBSfQ30Dt39kUFZ3N6WLhmLETGBhvwxLdHDJw0IMNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSaPuPbqXHZ8Rp6W6Zz5mKyOySeAwHwYDVR0j
BBgwFoAUI80v/m5hBlMaZd5zs/TzMCp2EyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURhNXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1
cVAvMC8yM0NEMkZGRTZFNjEwNjUzMUE2NURFNzNCM0Y0RjMzMDJBNzYxMzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIzQ0QyRkZFNkU2MTA2NTMx
QTY1REU3M0IzRjRGMzMwMkE3NjEzMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NURhNXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1cVAvMC8y
M0NEMkZGRTZFNjEwNjUzMUE2NURFNzNCM0Y0RjMzMDJBNzYxMzI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGigi0n6tyFRd/rzwaUap0F1bEFMAcETtIhiIGO4m+B/y9RqbMQa76IWtbklB
gAiw6g0VWvFWfxD4r909tPxT6ho9K3F18EuBInhfx+pRM7JnygC8AZi1wAwQPFBa
tM1QE5FxdWtc8jxeumGleY/V3gv0pG6Wi+rKLX9nRd5jd8J0b4tZ/nS+mfzoUPEa
eEu0JBTmN14Z+ZQbZJOe5rqd6PjIXaVbV76Py41VhhvVKx8DV3PLTLpR6tznRx17
0IQwePf5UCyzNCJODpm4jao9lwhFxkoVTTykGbEShKZzWqrACZ9VkGN1qk0F8PpQ
IDN+AOTei+tDPuGC0uyBJNDREQ==
-----END CERTIFICATE-----