Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft
File:                     CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft (raw, json)
Hash identifier:          RaLtEJWBjaVOiAcY50xihIE0M0Cpc2zIhcDWfoPlYOI=
Subject key identifier:   F7:0D:3A:75:BD:0D:5B:AB:99:69:81:44:29:21:FA:0F:14:A9:41:3D
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       465BC6491D0DDAFCD048F8B35DEDA21AA39D6F31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft
Manifest number:          C1
Signing time:             Sun 14 Apr 2024 18:17:48 +0000
Manifest this update:     Sun 14 Apr 2024 18:12:48 +0000
Manifest next update:     Mon 15 Apr 2024 21:53:48 +0000
Files and hashes:         1: 3134332e3130362e302e302f31362d3137203d3e203533313837.roa (hash: Xm6v0MOsollyxiE/3dBgkEn0UtrfitZUZ1Fj0n3k+Pw=)
                          2: CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl (hash: yVn5CfT6Dn9S/Fg4HQPzDHMm8NCxvSkmo6yVXGF3MuU=)
                          3: 323830313a38613a3a2f33322d3333203d3e203533313837.roa (hash: 7luoM6DRxr3F1jKEOndoeJbrS73ScBHExyL/aBnNlF8=)
                          4: 3137372e3232302e302e302f31372d3138203d3e203533313837.roa (hash: evF2nIEmScWbu7qHbjp07ivgGkQrfVYzLPwc/8HRZV8=)
                          5: 3137372e382e39362e302f32302d3231203d3e203533313837.roa (hash: /jM+7SfktRP52RTwM5tZ/KgxRn6OWUh6o5PyizKnWAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5b:c6:49:1d:0d:da:fc:d0:48:f8:b3:5d:ed:a2:1a:a3:9d:6f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Apr 14 18:12:48 2024 GMT
            Not After : Apr 15 21:53:48 2024 GMT
        Subject: CN=F70D3A75BD0D5BAB996981442921FA0F14A9413D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:db:0d:61:19:50:03:11:9b:af:4c:20:0a:
                    af:19:40:97:52:c1:26:a8:b1:cd:57:ce:6a:95:05:
                    4e:7a:e3:2f:46:51:f0:0c:a1:32:e7:b6:f9:c2:56:
                    e1:7e:6b:ce:4c:70:02:2d:27:d1:fa:6b:cf:b7:34:
                    21:48:d8:3b:a4:2a:5d:34:d1:3e:9a:f0:05:df:4b:
                    5c:64:48:0f:d1:12:d5:72:ec:02:6c:48:76:e9:02:
                    3d:19:af:b3:7a:07:5f:66:91:2d:8d:30:da:c8:07:
                    df:1d:c0:fe:f5:55:9a:fc:66:32:23:5c:cf:a5:58:
                    b0:d0:8d:47:2d:4f:49:b3:2f:e8:bb:a4:9e:90:e9:
                    f8:47:cf:b1:3b:a3:97:36:c3:8f:c2:1a:68:82:32:
                    9e:a0:c6:2e:fb:b9:fa:92:da:85:0c:b4:1c:57:3f:
                    46:0f:c0:6e:7c:98:da:6e:40:6a:f6:c8:cd:25:8d:
                    fb:d4:44:70:a3:42:57:1b:94:b7:79:c8:e3:78:18:
                    ba:aa:3d:cb:ad:8b:35:42:18:88:2e:e5:65:c3:89:
                    8c:c9:02:c6:01:cb:0c:92:af:26:d4:5d:c2:c1:cf:
                    e0:af:c4:25:a7:c4:a5:95:b1:60:85:29:52:85:37:
                    dc:e9:6b:01:0d:c5:71:94:5d:a3:9a:07:3a:98:4e:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:3A:75:BD:0D:5B:AB:99:69:81:44:29:21:FA:0F:14:A9:41:3D
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:70:e1:c6:a7:e1:05:5b:f0:12:b5:59:b8:f6:88:1d:17:
         3f:22:ca:f1:d8:91:66:44:b4:9b:94:11:88:0d:19:68:78:4c:
         ac:5d:87:2f:a4:b3:6a:9d:cd:1d:eb:6a:0e:a2:f8:17:ec:3c:
         57:c1:e0:ab:59:c0:ad:7f:f6:0b:bf:77:80:18:f7:ef:84:7b:
         cd:1c:37:58:b6:3d:ab:2e:8c:b4:44:6f:3c:49:ca:76:71:e7:
         b9:8c:a5:bb:62:54:3a:ed:8f:45:4e:43:e5:1c:2d:29:39:dc:
         6b:2d:12:1b:f0:92:65:9f:51:8f:cb:13:7f:c7:21:9f:be:e4:
         4c:7e:05:56:75:d7:cc:67:47:90:74:b6:36:56:fc:1d:d1:dc:
         2f:20:3a:13:32:f6:5e:4a:2e:41:d6:b1:88:dc:b5:e5:96:ea:
         60:6b:dd:20:16:0b:96:67:07:de:35:98:49:f1:6e:83:3f:7f:
         fc:6e:37:05:cc:47:d7:c2:24:03:95:2a:76:a0:08:04:35:1f:
         2d:27:c3:da:1d:dd:e0:4f:a0:18:5f:a8:9b:78:94:40:b7:a8:
         27:3d:38:62:77:cc:5b:a4:ec:dc:61:89:a3:1b:2f:f2:2e:0a:
         e8:84:b5:f1:05:16:fa:4a:55:fb:3c:98:7b:e1:b7:66:50:9a:
         63:a1:92:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURlvGSR0N2vzQSPizXe2iGqOdbzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxREI2RjRFMjY1MDZDMEJCQUE1NzZFRUI0MjBEQUVC
RkFCQzM0OTAeFw0yNDA0MTQxODEyNDhaFw0yNDA0MTUyMTUzNDhaMDMxMTAvBgNV
BAMTKEY3MEQzQTc1QkQwRDVCQUI5OTY5ODE0NDI5MjFGQTBGMTRBOTQxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEdsNYRlQAxGbr0wgCq8ZQJdS
wSaosc1XzmqVBU564y9GUfAMoTLntvnCVuF+a85McAItJ9H6a8+3NCFI2DukKl00
0T6a8AXfS1xkSA/REtVy7AJsSHbpAj0Zr7N6B19mkS2NMNrIB98dwP71VZr8ZjIj
XM+lWLDQjUctT0mzL+i7pJ6Q6fhHz7E7o5c2w4/CGmiCMp6gxi77ufqS2oUMtBxX
P0YPwG58mNpuQGr2yM0ljfvURHCjQlcblLd5yON4GLqqPcutizVCGIgu5WXDiYzJ
AsYBywySrybUXcLBz+CvxCWnxKWVsWCFKVKFN9zpawENxXGUXaOaBzqYTgyfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9w06db0NW6uZaYFEKSH6DxSpQT0wHwYDVR0j
BBgwFoAUzh229OJlBsC7qldu60INrr+rw0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2Ulox
N0svMC9DRTFEQjZGNEUyNjUwNkMwQkJBQTU3NkVFQjQyMERBRUJGQUJDMzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFMURCNkY0RTI2NTA2QzBC
QkFBNTc2RUVCNDIwREFFQkZBQkMzNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2UloxN0svMC9D
RTFEQjZGNEUyNjUwNkMwQkJBQTU3NkVFQjQyMERBRUJGQUJDMzQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEu5w4can4QVb8BK1Wbj2iB0XPyLK8diRZkS0m5QRiA0ZaHhMrF2HL6Szap3N
HetqDqL4F+w8V8Hgq1nArX/2C793gBj374R7zRw3WLY9qy6MtERvPEnKdnHnuYyl
u2JUOu2PRU5D5RwtKTncay0SG/CSZZ9Rj8sTf8chn77kTH4FVnXXzGdHkHS2Nlb8
HdHcLyA6EzL2XkouQdaxiNy15ZbqYGvdIBYLlmcH3jWYSfFugz9//G43BcxH18Ik
A5UqdqAIBDUfLSfD2h3d4E+gGF+om3iUQLeoJz04YnfMW6Ts3GGJoxsv8i4K6IS1
8QUW+kpV+zyYe+G3ZlCaY6GSmQ==
-----END CERTIFICATE-----