Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.mft
File:                     F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.mft (raw, json)
Hash identifier:          icCwNOWmZSZO9qODBBthllAF9BePvh8BpULJmQ72Esg=
Subject key identifier:   C7:51:5D:FE:A5:49:8E:D2:A2:81:E2:35:C2:21:81:E4:F1:9E:0D:4D
Authority key identifier: F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE
Certificate issuer:       /CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
Certificate serial:       0FBF9619370E546BBF34173A933822B1A3ABC828
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.mft
Manifest number:          08
Signing time:             Sun 14 Apr 2024 18:32:29 +0000
Manifest this update:     Sun 14 Apr 2024 18:27:29 +0000
Manifest next update:     Mon 15 Apr 2024 21:29:29 +0000
Files and hashes:         1: 34352e3137392e35362e302f32322d3332203d3e20323639303636.roa (hash: hkG/LRx7/Jx7v2NLDKQ/5jY0Fsu62PZMd9uM5DtpBDE=)
                          2: 323830343a356566303a3a2f33322d3438203d3e20323639303636.roa (hash: wvksw2RFy4x59+KU+OwMn1U7Q9Otrfua01uPOV8asVo=)
                          3: F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.crl (hash: 3kZcjBvXazgQyv+/E79MYojo6uoZUX04la1ppA9yFqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:96:19:37:0e:54:6b:bf:34:17:3a:93:38:22:b1:a3:ab:c8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE
        Validity
            Not Before: Apr 14 18:27:29 2024 GMT
            Not After : Apr 15 21:29:29 2024 GMT
        Subject: CN=C7515DFEA5498ED2A281E235C22181E4F19E0D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:f4:65:c2:14:27:cb:5c:d3:c9:69:e6:1a:
                    f6:19:93:07:56:2b:55:9a:86:f9:51:ac:aa:00:36:
                    33:33:1c:b0:dc:0f:37:30:95:99:31:05:0e:94:43:
                    0b:3d:43:f4:ee:e4:9a:f4:50:90:2f:d5:2b:40:06:
                    6b:f6:d9:42:ee:06:4e:29:85:11:50:9e:d4:1d:36:
                    8a:43:7c:1b:84:92:da:8b:a5:66:18:5d:4d:d8:5b:
                    ef:62:91:b9:fd:aa:46:47:39:1e:e2:c0:8f:df:80:
                    94:3e:45:fa:72:38:bf:7f:e2:34:a9:84:da:ac:8d:
                    31:92:97:0a:19:96:69:3d:48:88:bf:e0:f9:16:54:
                    68:f3:7d:c4:c2:81:03:9e:90:20:ac:e3:04:4d:97:
                    f0:5e:59:e0:4e:49:bd:b8:f8:a3:30:3a:50:a9:93:
                    34:4f:ce:81:e6:86:3e:12:20:4f:79:6c:21:30:31:
                    57:76:ae:3a:0f:58:8a:5a:fd:3d:d4:96:d4:5d:bd:
                    c1:db:62:2b:d1:5f:6d:07:84:63:43:a5:a9:f8:36:
                    72:7b:6c:8f:1d:b7:ef:ba:15:5c:01:4e:40:10:59:
                    ea:25:bd:67:1f:17:a6:9c:7c:5e:e8:8c:4e:40:6f:
                    67:ae:28:79:59:a6:23:7c:17:f1:3c:d3:9f:03:9a:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:5D:FE:A5:49:8E:D2:A2:81:E2:35:C2:21:81:E4:F1:9E:0D:4D
            X509v3 Authority Key Identifier:
                keyid:F1:E9:BE:3B:A0:21:C3:AC:DB:02:9B:A7:39:2C:C7:CF:6F:D4:E5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Az219Yhr1Lzsz8sSNVyCQ5oR1Z7zwRNSjSaMZgB3CsXo/1/F1E9BE3BA021C3ACDB029BA7392CC7CF6FD4E5CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:f5:a8:15:83:09:b6:27:d1:a2:f3:34:12:da:92:4f:05:
         3a:54:03:dd:22:05:a2:80:cf:d2:9b:99:4a:b1:18:3b:dc:4e:
         4d:9e:a1:94:a6:df:aa:a6:69:e8:4b:ab:fa:3a:c1:fb:3f:e2:
         89:f4:a5:52:3e:43:06:24:f4:87:1b:98:03:f6:62:5b:63:83:
         da:3e:b6:c6:21:b4:53:39:18:89:0a:8c:53:2e:32:d5:a5:77:
         5a:09:fb:06:64:d2:6b:7d:35:95:4c:d9:6a:08:57:26:49:3c:
         bc:65:9e:bb:78:f1:fc:33:ee:f1:ce:ef:84:df:c2:48:b0:6c:
         74:46:ae:5c:62:ff:0a:80:93:45:12:76:3b:4b:c2:72:35:d8:
         a7:e8:f4:b6:e9:ed:b2:50:f3:65:88:a1:f3:e7:d4:42:11:29:
         34:40:49:92:92:1c:a5:cd:d8:b9:aa:60:86:b1:3c:e6:0e:1c:
         ea:bd:fa:77:e7:7e:09:fd:7b:2b:0b:d4:a0:6c:22:cc:1e:06:
         05:86:3b:04:a0:62:1f:6b:d9:33:6d:a9:05:58:f7:3c:22:75:
         e8:b9:e0:6b:7b:d6:31:35:2e:e0:c9:a7:5b:dc:0b:e5:46:f9:
         84:7a:aa:48:87:1b:49:97:36:12:90:8b:09:85:1c:95:1f:e4:
         0f:eb:e4:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD7+WGTcOVGu/NBc6kzgisaOryCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFFOUJFM0JBMDIxQzNBQ0RCMDI5QkE3MzkyQ0M3Q0Y2
RkQ0RTVDRTAeFw0yNDA0MTQxODI3MjlaFw0yNDA0MTUyMTI5MjlaMDMxMTAvBgNV
BAMTKEM3NTE1REZFQTU0OThFRDJBMjgxRTIzNUMyMjE4MUU0RjE5RTBENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbfRlwhQny1zTyWnmGvYZkwdW
K1WahvlRrKoANjMzHLDcDzcwlZkxBQ6UQws9Q/Tu5Jr0UJAv1StABmv22ULuBk4p
hRFQntQdNopDfBuEktqLpWYYXU3YW+9ikbn9qkZHOR7iwI/fgJQ+RfpyOL9/4jSp
hNqsjTGSlwoZlmk9SIi/4PkWVGjzfcTCgQOekCCs4wRNl/BeWeBOSb24+KMwOlCp
kzRPzoHmhj4SIE95bCEwMVd2rjoPWIpa/T3UltRdvcHbYivRX20HhGNDpan4NnJ7
bI8dt++6FVwBTkAQWeolvWcfF6acfF7ojE5Ab2euKHlZpiN8F/E8058DmoxXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUx1Fd/qVJjtKigeI1wiGB5PGeDU0wHwYDVR0j
BBgwFoAU8em+O6Ahw6zbApunOSzHz2/U5c4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXoyMTlZaHIxTHpzejhzU05WeUNRNW9SMVo3endSTlNqU2FNWmdCM0Nz
WG8vMS9GMUU5QkUzQkEwMjFDM0FDREIwMjlCQTczOTJDQzdDRjZGRDRFNUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxRTlCRTNCQTAyMUMzQUNE
QjAyOUJBNzM5MkNDN0NGNkZENEU1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXoyMTlZaHIxTHpzejhzU05WeUNRNW9SMVo3endSTlNqU2FNWmdCM0NzWG8vMS9G
MUU5QkUzQkEwMjFDM0FDREIwMjlCQTczOTJDQzdDRjZGRDRFNUNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbf71qBWDCbYn0aLzNBLakk8FOlQD3SIFooDP0puZSrEYO9xOTZ6hlKbfqqZp
6Eur+jrB+z/iifSlUj5DBiT0hxuYA/ZiW2OD2j62xiG0UzkYiQqMUy4y1aV3Wgn7
BmTSa301lUzZaghXJkk8vGWeu3jx/DPu8c7vhN/CSLBsdEauXGL/CoCTRRJ2O0vC
cjXYp+j0tuntslDzZYih8+fUQhEpNEBJkpIcpc3YuapghrE85g4c6r36d+d+Cf17
KwvUoGwizB4GBYY7BKBiH2vZM22pBVj3PCJ16Lnga3vWMTUu4MmnW9wL5Ub5hHqq
SIcbSZc2EpCLCYUclR/kD+vkmQ==
-----END CERTIFICATE-----