Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.mft
File:                     858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.mft (raw, json)
Hash identifier:          vEdqsyCzqSfCs+bWkPYzpdBy6YXp/rQgfWKwvB5/ihk=
Subject key identifier:   4D:EB:9A:99:9D:5C:82:02:25:61:41:94:94:70:69:1E:35:1A:41:91
Authority key identifier: 85:8F:93:E9:1E:EF:6E:EF:7D:CA:AD:6A:99:D5:24:07:20:02:1F:7C
Certificate issuer:       /CN=858F93E91EEF6EEF7DCAAD6A99D5240720021F7C
Certificate serial:       0A710737A7BEEFF11ECD2D0425ADC3170FDBF3C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.mft
Manifest number:          0216
Signing time:             Sun 14 Apr 2024 21:07:44 +0000
Manifest this update:     Sun 14 Apr 2024 21:02:44 +0000
Manifest next update:     Tue 16 Apr 2024 00:12:44 +0000
Files and hashes:         1: 3137302e37382e3133322e302f32342d3234203d3e20323636323730.roa (hash: ABF/gGESZEXIu/Ez2qXZTHdXt/V3ClyMjHDv86Z/694=)
                          2: 858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.crl (hash: mJn3H4TcR4MRvLxC1Wxwz+yPKF+KdhsCAWMsGxobQX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:07:37:a7:be:ef:f1:1e:cd:2d:04:25:ad:c3:17:0f:db:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858F93E91EEF6EEF7DCAAD6A99D5240720021F7C
        Validity
            Not Before: Apr 14 21:02:44 2024 GMT
            Not After : Apr 16 00:12:44 2024 GMT
        Subject: CN=4DEB9A999D5C8202256141949470691E351A4191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:94:b8:ea:7f:12:10:a2:fc:c6:73:6e:a1:
                    d2:29:2f:1c:a2:a7:5d:77:86:24:e5:57:95:f2:e9:
                    9c:ef:44:fc:1d:4c:ce:9e:5a:a8:5a:69:e3:48:9b:
                    06:c0:85:67:26:95:b1:8f:9f:8f:f9:f1:d1:50:f2:
                    98:41:70:03:6a:f0:83:fd:53:27:0a:24:f6:96:51:
                    bf:f3:51:4b:6d:72:6e:a1:90:e3:07:5b:ae:cd:4e:
                    81:7a:44:50:b2:5c:1f:53:05:93:b6:45:45:ae:5f:
                    e8:b2:4e:9e:ff:f3:0f:a6:58:b0:83:98:73:08:68:
                    58:9b:bf:12:0f:79:20:ba:52:d3:ab:4c:42:30:87:
                    44:69:44:02:b7:0d:eb:7f:eb:20:7d:5b:31:ab:33:
                    68:fc:6a:72:1d:7b:39:01:fe:1a:39:11:16:2f:3a:
                    29:61:04:e2:ed:e9:91:18:df:56:05:0b:2a:1a:79:
                    69:4e:35:3e:b8:94:f1:c6:52:1d:e9:d9:a6:1e:43:
                    ba:d5:de:f3:fa:f3:1e:63:c8:5b:c1:25:40:0a:7c:
                    50:bc:d9:53:e9:97:1e:6b:db:c9:bc:59:a7:f9:39:
                    3d:c1:d9:dc:34:ac:1b:d2:1d:79:20:c6:6a:b0:bd:
                    67:bb:82:3c:b9:f3:31:e5:c1:72:00:43:96:a9:62:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:9A:99:9D:5C:82:02:25:61:41:94:94:70:69:1E:35:1A:41:91
            X509v3 Authority Key Identifier:
                keyid:85:8F:93:E9:1E:EF:6E:EF:7D:CA:AD:6A:99:D5:24:07:20:02:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5deHboLH1k3GiZRbD9bfss7Xyqtzjyhk1Td7wzxXjPa8/0/858F93E91EEF6EEF7DCAAD6A99D5240720021F7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:ee:0e:85:c9:41:02:dc:33:3e:22:03:8d:fc:3a:05:d5:
         d6:98:b1:46:ec:14:9c:7b:fe:1c:dc:91:13:c5:21:70:3b:dc:
         2c:e0:eb:23:0f:97:74:e3:9d:c9:d7:f4:a7:0c:da:2f:16:5c:
         47:0e:f5:44:e4:de:3b:3f:53:d1:16:c0:60:a1:52:bd:4c:76:
         78:3e:68:be:5b:9c:ce:36:7d:d4:2b:30:5a:a4:ef:dd:07:c6:
         47:10:5e:57:54:65:81:a5:06:c8:aa:f8:7e:9a:71:ba:71:b5:
         5f:4c:30:27:63:9b:53:ea:e8:92:0e:37:f4:47:3a:05:6a:c8:
         88:13:de:a1:69:34:f6:66:80:83:70:5f:87:b6:47:8a:6e:3a:
         30:ed:64:6e:c9:47:af:ff:75:1d:cc:ce:4d:46:1f:33:bf:87:
         83:cb:e1:e2:18:80:7e:60:77:70:e6:ab:99:bc:d1:8e:d0:1f:
         30:52:b2:dc:85:4a:9b:3c:fd:5b:e6:b6:03:0c:6b:15:fe:65:
         b1:18:2e:a6:3f:5f:37:ab:98:9c:27:d8:ff:0f:54:ed:ca:26:
         d4:5a:d3:a0:95:dc:de:17:26:1c:31:60:d2:79:72:b0:f2:d9:
         02:20:1b:68:25:8b:ff:d1:0e:f9:b0:6a:df:4b:85:ec:50:68:
         67:ea:9c:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCnEHN6e+7/EezS0EJa3DFw/b88kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4RjkzRTkxRUVGNkVFRjdEQ0FBRDZBOTlENTI0MDcy
MDAyMUY3QzAeFw0yNDA0MTQyMTAyNDRaFw0yNDA0MTYwMDEyNDRaMDMxMTAvBgNV
BAMTKDRERUI5QTk5OUQ1QzgyMDIyNTYxNDE5NDk0NzA2OTFFMzUxQTQxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgJS46n8SEKL8xnNuodIpLxyi
p113hiTlV5Xy6ZzvRPwdTM6eWqhaaeNImwbAhWcmlbGPn4/58dFQ8phBcANq8IP9
UycKJPaWUb/zUUttcm6hkOMHW67NToF6RFCyXB9TBZO2RUWuX+iyTp7/8w+mWLCD
mHMIaFibvxIPeSC6UtOrTEIwh0RpRAK3Det/6yB9WzGrM2j8anIdezkB/ho5ERYv
OilhBOLt6ZEY31YFCyoaeWlONT64lPHGUh3p2aYeQ7rV3vP68x5jyFvBJUAKfFC8
2VPplx5r28m8Waf5OT3B2dw0rBvSHXkgxmqwvWe7gjy58zHlwXIAQ5apYo1pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTeuamZ1cggIlYUGUlHBpHjUaQZEwHwYDVR0j
BBgwFoAUhY+T6R7vbu99yq1qmdUkByACH3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWRlSGJvTEgxazNHaVpSYkQ5YmZzczdYeXF0emp5aGsxVGQ3d3p4WGpQ
YTgvMC84NThGOTNFOTFFRUY2RUVGN0RDQUFENkE5OUQ1MjQwNzIwMDIxRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1OEY5M0U5MUVFRjZFRUY3
RENBQUQ2QTk5RDUyNDA3MjAwMjFGN0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWRlSGJvTEgxazNHaVpSYkQ5YmZzczdYeXF0emp5aGsxVGQ3d3p4WGpQYTgvMC84
NThGOTNFOTFFRUY2RUVGN0RDQUFENkE5OUQ1MjQwNzIwMDIxRjdDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHpjuDoXJQQLcMz4iA438OgXV1pixRuwUnHv+HNyRE8UhcDvcLODrIw+XdOOd
ydf0pwzaLxZcRw71ROTeOz9T0RbAYKFSvUx2eD5ovluczjZ91CswWqTv3QfGRxBe
V1RlgaUGyKr4fppxunG1X0wwJ2ObU+rokg439Ec6BWrIiBPeoWk09maAg3Bfh7ZH
im46MO1kbslHr/91HczOTUYfM7+Hg8vh4hiAfmB3cOarmbzRjtAfMFKy3IVKmzz9
W+a2AwxrFf5lsRgupj9fN6uYnCfY/w9U7com1FrToJXc3hcmHDFg0nlysPLZAiAb
aCWL/9EO+bBq30uF7FBoZ+qcfA==
-----END CERTIFICATE-----