Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.mft
File:                     D42810233D486ABFF6FCD5876F529684C818D631.mft (raw, json)
Hash identifier:          UYFD3BJwX75V7GxDUfCkGb8fVucx8L4qYeveb9cIuTs=
Subject key identifier:   C0:63:EC:E5:A5:F4:F2:8B:9B:BC:8C:24:0C:49:B9:BF:1A:B0:79:77
Authority key identifier: D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
Certificate issuer:       /CN=D42810233D486ABFF6FCD5876F529684C818D631
Certificate serial:       53FB8E35C414729626F29134D9307EC614B045D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.mft
Manifest number:          21
Signing time:             Mon 14 Nov 2022 16:35:47 +0000
Manifest this update:     Mon 14 Nov 2022 16:30:47 +0000
Manifest next update:     Tue 15 Nov 2022 19:38:47 +0000
Files and hashes:         1: 3133312e3130382e31322e302f32322d3235203d3e203631363639.roa (hash: KsPulXwrwYo75NwscYFunhXTXbCNqoHwT1v2WwhgAVs=)
                          2: 3137302e3135302e302e302f32322d3235203d3e20323632363037.roa (hash: Zze2FNlYlt2faaeK+thy2GAeSUDL0N2KKWhesNxyflg=)
                          3: 323830343a3663633a3a2f33322d3438203d3e20323632363037.roa (hash: rP1dDQCEeGdUpEIqYv5VwSE6zFQ6jVfqKmAvhbgFmmY=)
                          4: 3137372e38352e3131322e302f32312d3235203d3e20323632363037.roa (hash: mx7QDQ0t3oClj1PsUML+/k2jv2JjPEiEPeaVkz5/tss=)
                          5: D42810233D486ABFF6FCD5876F529684C818D631.crl (hash: RR5SOiqtkxBuF/bXJt74i6OCIE0HhJz8gw7IS82mIIM=)
                          6: 323830343a316362303a3a2f33322d3438203d3e203631363639.roa (hash: KSSD7w+k2BOTq35cN87LrUwrjEA1iG8Jvo3i9YMj0X0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fb:8e:35:c4:14:72:96:26:f2:91:34:d9:30:7e:c6:14:b0:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D42810233D486ABFF6FCD5876F529684C818D631
        Validity
            Not Before: Nov 14 16:30:47 2022 GMT
            Not After : Nov 15 19:38:47 2022 GMT
        Subject: CN=C063ECE5A5F4F28B9BBC8C240C49B9BF1AB07977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:c2:d5:60:ee:ae:25:ff:6b:6f:e1:c6:61:
                    df:6d:8a:d8:c1:b6:3e:f7:84:a7:c9:6a:47:9f:f1:
                    20:6b:78:ee:9a:27:29:89:27:50:dd:8b:e1:b1:a1:
                    bb:cf:75:3a:69:8b:ea:db:2c:15:19:92:a4:ef:c1:
                    98:6d:97:65:15:21:06:9e:57:5d:73:e9:28:7f:05:
                    ee:8c:a2:1b:b1:4e:8e:91:2e:1f:2d:4f:0c:bc:5c:
                    d3:52:75:4c:60:08:b8:9d:7f:b3:f4:3e:f4:2d:4b:
                    9b:15:c8:84:11:f8:c2:86:74:6f:f4:79:e4:b4:e5:
                    e6:16:6b:58:9b:8f:44:05:5d:92:a5:51:d5:2d:f4:
                    35:80:cb:05:da:99:14:c8:d3:b2:b8:70:ae:57:06:
                    e2:38:70:bb:68:74:89:4c:f4:50:b7:d4:55:d6:2f:
                    f5:80:ee:2b:a9:bb:16:a5:03:e7:ea:39:ad:86:ab:
                    80:95:e1:c4:23:57:e4:56:63:68:4c:03:e7:cb:b9:
                    0b:18:bf:15:78:d3:6c:b8:3b:ea:aa:e2:19:ab:6f:
                    f7:71:b4:cb:7c:08:14:aa:1e:f7:97:be:2e:f9:d4:
                    96:b3:50:5d:31:48:48:ab:f0:3b:49:66:d9:f3:79:
                    e8:33:aa:7a:bd:54:ea:27:f5:16:ee:d6:76:1f:dd:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:63:EC:E5:A5:F4:F2:8B:9B:BC:8C:24:0C:49:B9:BF:1A:B0:79:77
            X509v3 Authority Key Identifier:
                keyid:D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:9e:f5:ae:7d:35:66:9e:60:4b:36:bb:57:06:bf:6e:bc:
         40:f9:fa:b4:70:43:3d:58:99:d8:bc:7f:4d:7a:a6:02:19:50:
         cb:39:b4:ea:13:42:ca:e5:1f:12:15:c8:1f:bc:e0:f7:49:ed:
         53:4e:43:55:ee:69:ad:f5:07:fe:66:cc:ac:40:b8:ff:26:f5:
         fc:e9:2d:c3:10:90:e3:2c:7f:3b:91:9e:35:ca:d3:5f:4f:26:
         db:c3:d7:67:aa:d5:18:0d:0e:81:aa:ff:70:01:c7:0f:b3:e8:
         e1:a4:42:ff:cc:88:63:3c:78:49:93:d5:bb:f6:b9:d2:f9:d0:
         e5:f3:44:16:58:96:b9:aa:6b:ec:30:4f:03:1d:a9:bc:dd:9b:
         a8:1e:0e:bf:a6:59:79:4f:58:98:4d:c3:59:29:23:f6:c5:cd:
         70:69:2e:b8:eb:9b:5e:f9:ef:87:2d:08:ec:54:94:92:59:dd:
         25:b9:e0:29:c9:83:25:cb:46:92:f8:c2:de:cf:8e:c3:91:35:
         2e:d6:25:70:33:55:93:dd:6d:68:f8:80:56:29:f3:8b:55:4a:
         b8:20:cd:b6:2f:c8:6c:61:31:5b:ab:19:a9:35:fb:6f:dd:ec:
         08:4f:50:84:a9:f9:29:55:3e:51:ef:fd:94:1d:e1:e0:84:af:
         24:a4:b4:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU/uONcQUcpYm8pE02TB+xhSwRdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQyODEwMjMzRDQ4NkFCRkY2RkNENTg3NkY1Mjk2ODRD
ODE4RDYzMTAeFw0yMjExMTQxNjMwNDdaFw0yMjExMTUxOTM4NDdaMDMxMTAvBgNV
BAMTKEMwNjNFQ0U1QTVGNEYyOEI5QkJDOEMyNDBDNDlCOUJGMUFCMDc5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf0MLVYO6uJf9rb+HGYd9titjB
tj73hKfJakef8SBreO6aJymJJ1Ddi+GxobvPdTppi+rbLBUZkqTvwZhtl2UVIQae
V11z6Sh/Be6MohuxTo6RLh8tTwy8XNNSdUxgCLidf7P0PvQtS5sVyIQR+MKGdG/0
eeS05eYWa1ibj0QFXZKlUdUt9DWAywXamRTI07K4cK5XBuI4cLtodIlM9FC31FXW
L/WA7iupuxalA+fqOa2Gq4CV4cQjV+RWY2hMA+fLuQsYvxV402y4O+qq4hmrb/dx
tMt8CBSqHveXvi751JazUF0xSEir8DtJZtnzeegzqnq9VOon9Rbu1nYf3atbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwGPs5aX08oubvIwkDEm5vxqweXcwHwYDVR0j
BBgwFoAU1CgQIz1Iar/2/NWHb1KWhMgY1jEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZa
MXYvMC9ENDI4MTAyMzNENDg2QUJGRjZGQ0Q1ODc2RjUyOTY4NEM4MThENjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MjgxMDIzM0Q0ODZBQkZG
NkZDRDU4NzZGNTI5Njg0QzgxOEQ2MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZaMXYvMC9E
NDI4MTAyMzNENDg2QUJGRjZGQ0Q1ODc2RjUyOTY4NEM4MThENjMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANrSe9a59NWaeYEs2u1cGv268QPn6tHBDPViZ2Lx/TXqmAhlQyzm06hNCyuUf
EhXIH7zg90ntU05DVe5prfUH/mbMrEC4/yb1/OktwxCQ4yx/O5GeNcrTX08m28PX
Z6rVGA0Ogar/cAHHD7Po4aRC/8yIYzx4SZPVu/a50vnQ5fNEFliWuapr7DBPAx2p
vN2bqB4Ov6ZZeU9YmE3DWSkj9sXNcGkuuOubXvnvhy0I7FSUklndJbngKcmDJctG
kvjC3s+Ow5E1LtYlcDNVk91taPiAVinzi1VKuCDNti/IbGExW6sZqTX7b93sCE9Q
hKn5KVU+Ue/9lB3h4ISvJKS0Vw==
-----END CERTIFICATE-----