Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.mft
File:                     0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.mft (raw, json)
Hash identifier:          bR4+pBzUGRMUz41K3M0XoGS8d+eg4Cu6iXe2vr20OD8=
Subject key identifier:   CA:02:DB:09:95:53:11:89:28:79:E2:34:57:AC:13:DB:FF:C0:6A:58
Authority key identifier: 02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F
Certificate issuer:       /CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
Certificate serial:       1EB12AD536BFF1FE41C46AA8B6103A8EE2CA91BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.mft
Manifest number:          60
Signing time:             Tue 25 Jul 2023 01:34:36 +0000
Manifest this update:     Tue 25 Jul 2023 01:29:36 +0000
Manifest next update:     Wed 26 Jul 2023 04:47:36 +0000
Files and hashes:         1: 323830343a336130383a3a2f33322d3334203d3e20323636303636.roa (hash: LveCw3UmrSQWvWshBgEOmS4Oponwfi6gqUDMAR8Giuo=)
                          2: 34352e342e3132342e302f32322d3234203d3e20323636303636.roa (hash: /c8n9Nf2Y/vDc3wIc+A062yOQI2t1NgwqU4WVkLlVj8=)
                          3: 0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.crl (hash: eyGRMSt/tnV6vnAJfTeLJUQbhGPy7mfSGukAsg2wmfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b1:2a:d5:36:bf:f1:fe:41:c4:6a:a8:b6:10:3a:8e:e2:ca:91:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F
        Validity
            Not Before: Jul 25 01:29:36 2023 GMT
            Not After : Jul 26 04:47:36 2023 GMT
        Subject: CN=CA02DB09955311892879E23457AC13DBFFC06A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:c7:79:f6:07:9b:ec:28:e2:f0:cd:d2:4a:
                    64:b1:7f:62:74:41:cb:3a:20:9e:f8:6e:dc:54:44:
                    f3:7e:ad:bd:54:0b:05:86:8e:bc:fd:fc:a0:dc:a8:
                    a1:ba:77:88:b9:2e:a4:82:c0:6e:8d:bb:34:0e:56:
                    f8:7a:31:6e:6c:f1:27:69:51:ae:b4:dd:be:b0:d7:
                    3d:b9:d1:52:0e:2e:58:04:6f:b4:a7:b8:ce:6d:29:
                    20:35:a5:50:90:63:16:58:f6:17:1f:9b:05:f4:9d:
                    3d:28:60:32:a4:f4:2b:1a:48:e0:c3:81:69:75:f4:
                    42:d7:f8:8f:1e:f3:0e:8c:8c:e7:48:87:f0:80:fa:
                    e4:0d:0e:f7:86:f7:f6:aa:eb:74:ee:4d:85:5d:34:
                    1a:d9:06:52:74:6e:58:a7:8b:3b:44:32:0c:9e:83:
                    ff:c4:b1:de:69:d7:79:d8:f2:f7:2e:a0:07:2c:08:
                    77:55:de:03:eb:7f:22:47:34:cb:f4:4b:57:f5:c5:
                    e6:05:d4:c7:9c:fc:00:a3:ca:1e:42:a7:cb:61:1b:
                    79:66:db:c9:31:1a:96:f4:c1:a5:be:bb:1d:7d:70:
                    fb:59:e6:68:04:72:49:28:55:5d:8e:ec:e7:c7:42:
                    8a:45:7a:dc:7c:2d:2a:c5:16:47:6e:ce:60:38:aa:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:DB:09:95:53:11:89:28:79:E2:34:57:AC:13:DB:FF:C0:6A:58
            X509v3 Authority Key Identifier:
                keyid:02:32:A5:24:64:A2:5A:FD:8F:00:BF:BF:1F:AB:0A:A8:6A:82:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/0232A52464A25AFD8F00BFBF1FAB0AA86A821F1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:99:53:f1:57:7c:92:1b:4b:79:ca:6e:ca:17:d6:12:b4:d5:
         2c:f0:8b:82:3e:43:20:90:ac:d5:ce:8b:59:31:72:61:79:df:
         b1:b0:17:06:3e:18:ce:08:05:e9:4a:3c:e8:d7:dd:99:f3:41:
         88:2f:8b:ae:bc:86:a6:36:e8:f3:70:e5:d8:15:47:a8:39:f9:
         61:25:bf:38:15:6b:00:f8:7a:e1:03:95:ef:a5:05:ee:20:13:
         f4:ac:66:76:e5:63:4a:d4:93:4c:08:ee:ef:2e:41:8d:0f:4c:
         92:7f:da:60:ca:5e:43:df:9d:35:2d:b1:03:ec:9f:a3:b0:9d:
         57:cd:55:6a:bb:0d:ed:b0:86:c8:12:c0:5e:91:38:80:46:57:
         ca:f9:8d:81:20:b7:6a:8a:b4:92:e9:55:9f:3d:59:6d:10:c1:
         98:9e:2f:07:b2:98:36:e2:17:db:3b:3a:59:2b:35:a4:1f:ac:
         46:c1:ae:18:df:f0:d3:5e:d3:0b:67:e4:81:f4:cf:3c:9f:10:
         1f:74:9e:c1:8b:73:92:86:f2:e6:07:82:18:b1:77:a7:50:b2:
         fa:9a:b3:a7:bd:2c:25:f0:ce:a3:ba:3f:6a:df:a0:fd:0f:4d:
         bc:33:04:e3:09:6f:d0:6a:0b:38:b1:d4:f9:83:ca:f3:59:29:
         27:c1:34:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHrEq1Ta/8f5BxGqothA6juLKkbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIzMkE1MjQ2NEEyNUFGRDhGMDBCRkJGMUZBQjBBQTg2
QTgyMUYxRjAeFw0yMzA3MjUwMTI5MzZaFw0yMzA3MjYwNDQ3MzZaMDMxMTAvBgNV
BAMTKENBMDJEQjA5OTU1MzExODkyODc5RTIzNDU3QUMxM0RCRkZDMDZBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiMd59geb7Cji8M3SSmSxf2J0
Qcs6IJ74btxURPN+rb1UCwWGjrz9/KDcqKG6d4i5LqSCwG6NuzQOVvh6MW5s8Sdp
Ua603b6w1z250VIOLlgEb7SnuM5tKSA1pVCQYxZY9hcfmwX0nT0oYDKk9CsaSODD
gWl19ELX+I8e8w6MjOdIh/CA+uQNDveG9/aq63TuTYVdNBrZBlJ0bliniztEMgye
g//Esd5p13nY8vcuoAcsCHdV3gPrfyJHNMv0S1f1xeYF1Mec/ACjyh5Cp8thG3lm
28kxGpb0waW+ux19cPtZ5mgEckkoVV2O7OfHQopFetx8LSrFFkduzmA4qhA7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUygLbCZVTEYkoeeI0V6wT2//AalgwHwYDVR0j
BBgwFoAUAjKlJGSiWv2PAL+/H6sKqGqCHx8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC8wMjMyQTUyNDY0QTI1QUZEOEYwMEJGQkYxRkFCMEFBODZBODIxRjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMzJBNTI0NjRBMjVBRkQ4
RjAwQkZCRjFGQUIwQUE4NkE4MjFGMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5NncvMC8w
MjMyQTUyNDY0QTI1QUZEOEYwMEJGQkYxRkFCMEFBODZBODIxRjFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlplT8Vd8khtLecpuyhfWErTVLPCLgj5DIJCs1c6LWTFyYXnfsbAXBj4YzggF
6Uo86NfdmfNBiC+LrryGpjbo83Dl2BVHqDn5YSW/OBVrAPh64QOV76UF7iAT9Kxm
duVjStSTTAju7y5BjQ9Mkn/aYMpeQ9+dNS2xA+yfo7CdV81VarsN7bCGyBLAXpE4
gEZXyvmNgSC3aoq0kulVnz1ZbRDBmJ4vB7KYNuIX2zs6WSs1pB+sRsGuGN/w017T
C2fkgfTPPJ8QH3SewYtzkoby5geCGLF3p1Cy+pqzp70sJfDOo7o/at+g/Q9NvDME
4wlv0GoLOLHU+YPK81kpJ8E0CQ==
-----END CERTIFICATE-----