Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft
File:                     8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft (raw, json)
Hash identifier:          rTXCTaqAitMTecqv6cNdUNx+jV57jBfGFpwSh6Le6eU=
Subject key identifier:   E4:95:4B:C0:3A:73:F1:E9:F3:53:B3:8C:9F:05:14:0E:05:49:B4:E1
Authority key identifier: 8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
Certificate issuer:       /CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
Certificate serial:       2FA048087FD2BB1B4174D249123BCFF2862345F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft
Manifest number:          042F
Signing time:             Mon 15 Apr 2024 06:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:52:00 +0000
Files and hashes:         1: 34352e3232382e342e302f32332d3233203d3e20323637303339.roa (hash: cfWNF36E+ADdLOpjsA3ggTKV/rXXJvsl3+42rsZIxYU=)
                          2: 34352e3232382e362e302f32332d3233203d3e20323637303339.roa (hash: TZL2iuZaoh5aGYH4s75NKG0FQ+vyYR/1F5wqFk4tq2s=)
                          3: 323830343a343733383a3a2f33322d3334203d3e20323637303339.roa (hash: N1suCj+HhSSkdciX0pZvvEHQj/94hkigQdnskgO8MAw=)
                          4: 34352e3232382e342e302f32322d3232203d3e20323637303339.roa (hash: Znk5ADI+eIVYR0PK8qc+FiWgEWGviu9NdaDfbdwsWSw=)
                          5: 8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.crl (hash: GptCx8knsrOXfxvbc1Yl/MAnzXnomy5wy94NW7bgJGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:48:08:7f:d2:bb:1b:41:74:d2:49:12:3b:cf:f2:86:23:45:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
        Validity
            Not Before: Apr 15 06:25:00 2024 GMT
            Not After : Apr 16 06:52:00 2024 GMT
        Subject: CN=E4954BC03A73F1E9F353B38C9F05140E0549B4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:49:71:bc:0f:c6:99:08:a6:af:af:d0:a3:
                    85:c4:2e:b9:0a:eb:9e:01:b4:06:ce:73:ce:8c:f4:
                    2d:67:ac:04:b5:11:8f:c1:81:54:6d:4f:c8:51:fd:
                    d0:f3:2d:db:3e:9a:eb:2e:c4:72:51:8a:37:7b:ae:
                    ce:69:28:fe:03:70:c9:df:c8:6c:e2:8f:f7:42:56:
                    39:2b:17:8c:36:54:26:02:9b:d6:91:53:a8:b9:95:
                    89:0d:32:04:1f:b5:4b:e2:8c:4b:fa:85:0f:df:00:
                    45:6f:e6:77:5f:bb:23:c2:90:79:3e:f5:48:83:4b:
                    e9:aa:a2:a4:22:7a:b5:c6:c7:e1:8b:ac:da:9c:da:
                    fc:ab:3a:3c:56:18:2f:b0:6a:fa:13:a9:16:63:7b:
                    53:09:8c:92:a0:28:95:54:c5:e4:0c:55:e0:39:a1:
                    4a:b6:2e:e7:66:06:f5:90:ad:ca:38:9f:84:a4:86:
                    34:e4:59:3f:a5:22:5c:68:da:f0:67:b3:eb:f4:12:
                    d5:bd:f4:d8:27:de:40:6e:b1:99:ba:c5:36:6b:66:
                    5f:f2:c6:b9:76:2b:56:5d:70:b1:9d:4c:8b:2c:1d:
                    43:d5:dd:6d:93:5b:60:5c:82:12:6f:ba:1e:da:8e:
                    8a:16:5a:74:92:5d:56:f2:7f:9e:4c:87:88:c1:bf:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:4B:C0:3A:73:F1:E9:F3:53:B3:8C:9F:05:14:0E:05:49:B4:E1
            X509v3 Authority Key Identifier:
                keyid:8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:8f:f9:24:2f:61:04:f6:3b:af:7a:83:b9:82:57:a5:22:
         d0:ce:85:4c:24:e4:29:f0:ea:c9:1b:d4:8c:35:10:5d:f4:55:
         aa:5a:10:c1:21:34:47:16:53:9a:83:f5:c6:9e:e2:28:6c:a4:
         d0:0e:a6:6b:4f:56:a9:a6:5d:28:3e:6b:f8:4a:7a:97:8c:70:
         92:f2:ce:e9:67:71:aa:be:7e:53:30:89:88:9b:c6:12:f8:15:
         dc:ed:66:4c:bc:9d:81:9e:ef:e7:fc:5f:a5:5c:5c:42:61:06:
         52:94:db:1d:68:2d:53:29:d5:a4:a0:92:75:40:e8:64:a3:98:
         e6:10:e1:55:5b:17:02:76:bb:b7:7a:97:58:27:0a:4b:61:c5:
         f5:3f:b8:47:fa:5f:07:ea:25:d8:48:c1:5d:a8:7b:44:44:67:
         74:38:6d:f8:92:37:ef:b3:ed:82:bf:b1:04:24:9a:eb:44:1c:
         17:17:32:27:25:bb:27:67:aa:52:f7:e7:ec:42:27:56:0b:d3:
         f5:d6:74:84:cc:ec:93:93:b3:fa:f6:d0:5b:ed:69:81:6c:52:
         de:fb:bc:57:b3:c7:0a:88:72:a1:b5:6c:5e:a3:fb:e4:4c:7b:
         7b:f3:81:a5:96:cb:6f:47:6b:13:68:ba:1c:d7:33:f3:54:87:
         50:a4:61:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL6BICH/SuxtBdNJJEjvP8oYjRfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE1Q0FDMDIyMEYxQzBERjVCQzhFRjk3RTU1MzRGRjM1
ODcxNzYxODAeFw0yNDA0MTUwNjI1MDBaFw0yNDA0MTYwNjUyMDBaMDMxMTAvBgNV
BAMTKEU0OTU0QkMwM0E3M0YxRTlGMzUzQjM4QzlGMDUxNDBFMDU0OUI0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETElxvA/GmQimr6/Qo4XELrkK
654BtAbOc86M9C1nrAS1EY/BgVRtT8hR/dDzLds+musuxHJRijd7rs5pKP4DcMnf
yGzij/dCVjkrF4w2VCYCm9aRU6i5lYkNMgQftUvijEv6hQ/fAEVv5ndfuyPCkHk+
9UiDS+mqoqQierXGx+GLrNqc2vyrOjxWGC+wavoTqRZje1MJjJKgKJVUxeQMVeA5
oUq2LudmBvWQrco4n4SkhjTkWT+lIlxo2vBns+v0EtW99Ngn3kBusZm6xTZrZl/y
xrl2K1ZdcLGdTIssHUPV3W2TW2BcghJvuh7ajooWWnSSXVbyf55Mh4jBv+m3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5JVLwDpz8enzU7OMnwUUDgVJtOEwHwYDVR0j
BBgwFoAUilysAiDxwN9byO+X5VNP81hxdhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdWWlJqZ3dzaDVvWGVGeDhieXJzZzdRSkw3YzZRa284WFFmUVVlb0pv
OTQvMC84QTVDQUMwMjIwRjFDMERGNUJDOEVGOTdFNTUzNEZGMzU4NzE3NjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNUNBQzAyMjBGMUMwREY1
QkM4RUY5N0U1NTM0RkYzNTg3MTc2MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXdWWlJqZ3dzaDVvWGVGeDhieXJzZzdRSkw3YzZRa284WFFmUVVlb0pvOTQvMC84
QTVDQUMwMjIwRjFDMERGNUJDOEVGOTdFNTUzNEZGMzU4NzE3NjE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcX6P+SQvYQT2O696g7mCV6Ui0M6FTCTkKfDqyRvUjDUQXfRVqloQwSE0RxZT
moP1xp7iKGyk0A6ma09WqaZdKD5r+Ep6l4xwkvLO6Wdxqr5+UzCJiJvGEvgV3O1m
TLydgZ7v5/xfpVxcQmEGUpTbHWgtUynVpKCSdUDoZKOY5hDhVVsXAna7t3qXWCcK
S2HF9T+4R/pfB+ol2EjBXah7RERndDht+JI377Ptgr+xBCSa60QcFxcyJyW7J2eq
Uvfn7EInVgvT9dZ0hMzsk5Oz+vbQW+1pgWxS3vu8V7PHCohyobVsXqP75Ex7e/OB
pZbLb0drE2i6HNcz81SHUKRhCg==
-----END CERTIFICATE-----