Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
File:                     F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft (raw, json)
Hash identifier:          Dl7V7TW7Hh+DZk0Lx09TmKNJmpccisFUYW/hOKIVdI8=
Subject key identifier:   0B:DA:B0:25:95:A5:5B:45:F0:42:CD:D2:63:74:9E:63:6F:C2:67:1A
Authority key identifier: F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41
Certificate issuer:       /CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
Certificate serial:       2693E6BFC81374A81B1172AF2EDFAC90437D11CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
Manifest number:          066E
Signing time:             Wed 10 Jan 2024 18:33:13 +0000
Manifest this update:     Wed 10 Jan 2024 18:28:13 +0000
Manifest next update:     Thu 11 Jan 2024 20:11:13 +0000
Files and hashes:         1: 323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (hash: 3IWqlRGV4xR4T9XOCGnxu1Tw0Vc9e5LnzwQS6Ku81Io=)
                          2: 323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa (hash: H9w2Uuxe8bNyazD1J70O44CFOL6ETgjG20PfJzE8Bms=)
                          3: 323830343a356365383a3a2f33322d3332203d3e20323638393338.roa (hash: tltf9BSLkZfMRHFWL5z9Bpk4B2TYtEARo/XQ6s5Gu7A=)
                          4: 34352e3137342e31302e302f32342d3234203d3e20323638393338.roa (hash: U5juIZEbnNcGlT2vo6jtdnYS3yUCV56bU+K4+lWnK8U=)
                          5: 34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (hash: 8KQf7A08bZpoOVwsq6cT1wpeNDwkv93FHPflCQbBExI=)
                          6: F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl (hash: ulhQn06g2ktbKP4VpG+xaato6naqDqF6geu9z2gOS6s=)
                          7: 34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (hash: J6nfaHX1R8qS+igm0brhwxGCTqqzENdNx743xySd7Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:93:e6:bf:c8:13:74:a8:1b:11:72:af:2e:df:ac:90:43:7d:11:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
        Validity
            Not Before: Jan 10 18:28:13 2024 GMT
            Not After : Jan 11 20:11:13 2024 GMT
        Subject: CN=0BDAB02595A55B45F042CDD263749E636FC2671A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:bd:25:6c:56:4d:ad:b1:fc:2e:a3:4d:6a:
                    ea:70:a1:78:1c:7c:72:44:40:9e:c6:68:ba:58:ed:
                    04:ab:05:ca:17:0a:b7:87:30:be:75:73:3b:90:fc:
                    54:5d:26:30:39:35:e8:aa:61:51:81:9f:a9:58:e4:
                    d7:3f:2e:6a:23:0c:81:65:0c:b4:5b:f9:f4:3d:f5:
                    f0:38:8e:37:85:e4:ed:8d:30:50:a6:f8:55:74:a4:
                    b8:7a:56:2f:2e:05:be:5d:ff:7d:a0:37:00:37:3b:
                    c7:51:60:77:df:08:33:5a:96:c6:29:91:9f:e3:f5:
                    4c:d9:6d:1f:71:10:96:58:1f:ac:20:b8:c0:02:7e:
                    f2:4a:0a:92:54:02:c2:5b:f8:5f:aa:e7:8a:4a:99:
                    37:7f:00:ee:4a:ca:e6:98:ee:99:87:b1:15:51:88:
                    0b:f5:c8:bc:b9:d9:c1:b4:37:ec:72:b8:e5:80:b8:
                    2f:7e:b9:37:3e:2d:91:9b:77:c5:cb:e1:14:73:9e:
                    54:34:82:c7:ea:ad:2d:46:c9:0d:71:b9:e3:fb:57:
                    4a:ff:df:fc:1f:e3:9b:19:28:1e:28:93:88:2f:83:
                    a0:2e:d3:9d:ce:56:f8:f8:fe:67:09:bc:44:cc:cf:
                    b9:65:10:96:3f:e8:d6:ef:ad:a4:bf:16:22:2b:f9:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:B0:25:95:A5:5B:45:F0:42:CD:D2:63:74:9E:63:6F:C2:67:1A
            X509v3 Authority Key Identifier:
                keyid:F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:25:68:f0:11:13:68:1d:30:81:dc:a7:bd:57:e7:af:f3:ff:
         11:97:92:e8:f2:10:29:cc:e5:64:26:19:95:6e:d7:2b:97:0f:
         c6:9d:5e:41:f7:c2:56:9b:89:50:24:87:aa:57:ed:e2:7b:ac:
         27:23:03:5a:93:41:f8:eb:9b:4f:89:20:8e:95:85:99:bd:72:
         a6:5b:e8:5d:e7:31:73:19:7b:14:cd:1c:a6:6e:1a:6f:af:46:
         11:97:54:1f:ac:d9:3f:9b:c2:30:80:d9:f2:b9:3e:46:4b:6c:
         db:3d:c9:8f:45:b1:c2:0f:d8:60:00:39:0c:28:a7:a5:40:94:
         f6:72:55:12:21:d3:07:6d:25:14:a7:b1:62:bd:dd:fd:8f:eb:
         5a:5f:01:d2:95:ef:ef:17:b5:9e:6f:2c:cf:f6:b9:a2:d8:3f:
         50:b4:08:5a:6f:6b:17:10:76:3a:d6:06:ba:f6:81:43:52:e5:
         dc:73:f4:27:89:d0:21:a3:b4:91:a6:11:72:9d:ea:ab:74:52:
         29:03:fc:37:ec:6c:79:27:db:fa:45:da:18:ea:45:7c:68:9d:
         c7:99:4f:a5:f5:c7:05:31:ca:66:2d:f0:2a:da:2b:91:f5:35:
         a1:7b:e9:ed:d3:91:9b:ee:68:cb:d1:41:d8:cf:76:86:94:c9:
         cd:5b:36:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJpPmv8gTdKgbEXKvLt+skEN9EcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI5NkIxNDM3NzhGMURCMTM4MDVBQkNEMzc5QkVGQUZB
RDZDM0U0MTAeFw0yNDAxMTAxODI4MTNaFw0yNDAxMTEyMDExMTNaMDMxMTAvBgNV
BAMTKDBCREFCMDI1OTVBNTVCNDVGMDQyQ0REMjYzNzQ5RTYzNkZDMjY3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEr0lbFZNrbH8LqNNaupwoXgc
fHJEQJ7GaLpY7QSrBcoXCreHML51czuQ/FRdJjA5NeiqYVGBn6lY5Nc/LmojDIFl
DLRb+fQ99fA4jjeF5O2NMFCm+FV0pLh6Vi8uBb5d/32gNwA3O8dRYHffCDNalsYp
kZ/j9UzZbR9xEJZYH6wguMACfvJKCpJUAsJb+F+q54pKmTd/AO5KyuaY7pmHsRVR
iAv1yLy52cG0N+xyuOWAuC9+uTc+LZGbd8XL4RRznlQ0gsfqrS1GyQ1xueP7V0r/
3/wf45sZKB4ok4gvg6Au053OVvj4/mcJvETMz7llEJY/6NbvraS/FiIr+aDfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUC9qwJZWlW0XwQs3SY3SeY2/CZxowHwYDVR0j
BBgwFoAU8paxQ3ePHbE4BavNN5vvr61sPkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVRNEVWTGREaEp3WGJmSzVXRWE4TGMxUm5zcVJEVmNqVU55ZlVTN0pS
THAvMC9GMjk2QjE0Mzc3OEYxREIxMzgwNUFCQ0QzNzlCRUZBRkFENkMzRTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyOTZCMTQzNzc4RjFEQjEz
ODA1QUJDRDM3OUJFRkFGQUQ2QzNFNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXVRNEVWTGREaEp3WGJmSzVXRWE4TGMxUm5zcVJEVmNqVU55ZlVTN0pSTHAvMC9G
Mjk2QjE0Mzc3OEYxREIxMzgwNUFCQ0QzNzlCRUZBRkFENkMzRTQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADiVo8BETaB0wgdynvVfnr/P/EZeS6PIQKczlZCYZlW7XK5cPxp1eQffCVpuJ
UCSHqlft4nusJyMDWpNB+OubT4kgjpWFmb1yplvoXecxcxl7FM0cpm4ab69GEZdU
H6zZP5vCMIDZ8rk+Rkts2z3Jj0Wxwg/YYAA5DCinpUCU9nJVEiHTB20lFKexYr3d
/Y/rWl8B0pXv7xe1nm8sz/a5otg/ULQIWm9rFxB2OtYGuvaBQ1Ll3HP0J4nQIaO0
kaYRcp3qq3RSKQP8N+xseSfb+kXaGOpFfGidx5lPpfXHBTHKZi3wKtorkfU1oXvp
7dORm+5oy9FB2M92hpTJzVs2Nw==
-----END CERTIFICATE-----