Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft
File:                     A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft (raw, json)
Hash identifier:          ctoqTRZF3fKI6FN7u/1Kj2faii71orvE/Ri57kdj8Gs=
Subject key identifier:   E8:1A:46:26:E7:A8:01:D3:8B:AD:73:85:F4:97:11:FF:2C:B7:C0:51
Authority key identifier: A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0
Certificate issuer:       /CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
Certificate serial:       7538F6515D84BE71290718CC2366B02BF65A1103
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft
Manifest number:          027A
Signing time:             Mon 15 Apr 2024 10:56:30 +0000
Manifest this update:     Mon 15 Apr 2024 10:51:30 +0000
Manifest next update:     Tue 16 Apr 2024 13:01:30 +0000
Files and hashes:         1: 323830343a363866343a383030303a3a2f33342d3334203d3e20323730323339.roa (hash: WBNkhJyMbRDQjCQqWK9BDEo6lqLPQsHyjxLzjcPiitA=)
                          2: 323830343a363866343a633030303a3a2f33342d3334203d3e20323730323339.roa (hash: Dk+EprC7TYe+kJl6z0gDFDktLrsr9Wy5bRTAHTr65iU=)
                          3: 3230312e34362e38322e302f32342d3234203d3e20323730323339.roa (hash: 9ZSWWWtKa1b+Z1pzQywi1wg+NYA3uxtI8CBfEWPSkr8=)
                          4: 3230312e34362e38302e302f32342d3234203d3e20323730323339.roa (hash: MaqIiLKQExJhBAH8glkFoH85C1aeBDHcXXaGPVUXmak=)
                          5: 323830343a363866343a3a2f33322d3332203d3e20323730323339.roa (hash: RFxAK2zqZniCjMCWhBHme9m6PfyeiI7BStCTycw8ye8=)
                          6: 323830343a363866343a3a2f33342d3334203d3e20323730323339.roa (hash: 7bPHamC4/mbleTaQdPbbne0fBUCJrK72HS+j2+U9rY0=)
                          7: A54C5623938E2D203BB659007A6EB9AD482A4AE0.crl (hash: hbHUI8Z0H/Wi/j238/cy2YIh6yT4rzyKYYrLK97vhpg=)
                          8: 323830343a363866343a343030303a3a2f33342d3334203d3e20323730323339.roa (hash: /2anzTfiIql7pWqwAGE5yBTGTbrFT5TAz9ld7xHMp3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:38:f6:51:5d:84:be:71:29:07:18:cc:23:66:b0:2b:f6:5a:11:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
        Validity
            Not Before: Apr 15 10:51:30 2024 GMT
            Not After : Apr 16 13:01:30 2024 GMT
        Subject: CN=E81A4626E7A801D38BAD7385F49711FF2CB7C051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:b8:91:24:86:6b:50:c5:05:89:29:de:d4:
                    c9:40:36:e9:16:c2:eb:15:76:0d:ff:ae:5f:9b:90:
                    b5:35:16:75:e5:90:d6:e2:24:4a:b7:8e:e2:99:00:
                    16:1d:c6:e6:c5:1e:5c:3d:a4:7d:68:ee:09:f9:71:
                    4b:0d:e9:db:0c:16:e3:26:de:e8:f6:1d:2e:ca:8e:
                    fa:7f:f4:ad:2c:a4:8a:77:db:70:c3:5b:7e:a7:b9:
                    e6:03:90:4e:7b:a1:37:b6:72:66:87:90:aa:70:95:
                    93:e4:93:11:ea:e4:f6:d5:cc:18:b0:ca:d3:a2:29:
                    f3:3d:05:60:34:91:cf:dc:41:70:14:38:6e:82:39:
                    79:2d:cc:94:89:7d:07:34:83:e9:eb:1c:97:b3:d2:
                    a8:73:c0:2f:06:dc:86:84:c2:71:50:9b:3e:cd:a2:
                    59:c1:a2:f3:18:82:78:2e:8d:6e:50:ac:d7:56:a9:
                    a9:77:68:f3:6c:78:95:0d:bf:a5:d5:25:16:46:98:
                    dc:aa:88:d5:20:d2:e3:8c:7d:ea:f2:78:64:79:72:
                    7a:4d:c4:37:ea:7e:f2:bf:17:73:b2:84:9e:b5:8b:
                    3d:9a:0b:ca:5d:ef:b3:3e:38:10:a9:6f:43:53:ad:
                    0b:ef:21:7b:67:ec:cd:86:80:fa:42:a2:79:e0:9c:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:46:26:E7:A8:01:D3:8B:AD:73:85:F4:97:11:FF:2C:B7:C0:51
            X509v3 Authority Key Identifier:
                keyid:A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5e:f9:f9:fc:cd:84:67:a3:3a:c4:bb:41:09:7e:88:98:0d:
         5d:41:96:32:26:02:30:0d:73:27:a4:f2:bd:c3:2a:cf:80:a8:
         72:54:73:4c:62:f0:79:b2:be:7f:bf:09:65:cf:2f:78:95:82:
         c5:19:27:c6:57:99:de:b7:8e:37:a5:4b:b4:11:20:03:9f:2f:
         ba:dc:e1:b9:a9:f5:4a:e9:bf:ad:24:58:d8:f4:d5:5a:f4:e7:
         85:03:7f:4e:fe:da:c3:31:b3:ba:5d:94:ca:91:1b:0a:a9:a8:
         03:21:e0:79:ae:ce:1a:44:b2:a3:9b:84:34:d7:2d:1e:9c:0d:
         28:92:cb:26:10:27:7a:64:be:fd:bb:9f:63:5a:e2:e6:ba:34:
         a4:6e:12:be:15:48:27:38:5c:77:78:51:d0:74:92:c7:56:4f:
         c9:73:6b:b3:0c:c8:79:76:cb:cc:f2:39:73:52:59:7a:18:2e:
         b1:4e:73:11:96:1f:9a:d1:e1:b3:d2:e4:e5:f1:63:37:6a:05:
         c5:84:e7:b9:5b:ec:07:61:a9:42:38:ed:e4:56:c2:d1:7a:5d:
         47:38:4b:56:ba:2b:7e:9e:a3:f0:8b:41:00:a7:2b:48:4b:7b:
         ca:46:cf:d2:f2:74:d2:a4:f5:68:2b:ca:51:fa:ff:88:99:7d:
         8a:b1:70:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdTj2UV2EvnEpBxjMI2awK/ZaEQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0QzU2MjM5MzhFMkQyMDNCQjY1OTAwN0E2RUI5QUQ0
ODJBNEFFMDAeFw0yNDA0MTUxMDUxMzBaFw0yNDA0MTYxMzAxMzBaMDMxMTAvBgNV
BAMTKEU4MUE0NjI2RTdBODAxRDM4QkFENzM4NUY0OTcxMUZGMkNCN0MwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCni7iRJIZrUMUFiSne1MlANukW
wusVdg3/rl+bkLU1FnXlkNbiJEq3juKZABYdxubFHlw9pH1o7gn5cUsN6dsMFuMm
3uj2HS7Kjvp/9K0spIp323DDW36nueYDkE57oTe2cmaHkKpwlZPkkxHq5PbVzBiw
ytOiKfM9BWA0kc/cQXAUOG6COXktzJSJfQc0g+nrHJez0qhzwC8G3IaEwnFQmz7N
olnBovMYgngujW5QrNdWqal3aPNseJUNv6XVJRZGmNyqiNUg0uOMferyeGR5cnpN
xDfqfvK/F3OyhJ61iz2aC8pd77M+OBCpb0NTrQvvIXtn7M2GgPpConngnC0ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6BpGJueoAdOLrXOF9JcR/yy3wFEwHwYDVR0j
BBgwFoAUpUxWI5OOLSA7tlkAem65rUgqSuAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlViQVZNQzdlUXlFTHFUU3B2YzlCUVlTaFh5d1ZReUV1VkZGZEI1QXdZ
d2IvMC9BNTRDNTYyMzkzOEUyRDIwM0JCNjU5MDA3QTZFQjlBRDQ4MkE0QUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1NEM1NjIzOTM4RTJEMjAz
QkI2NTkwMDdBNkVCOUFENDgyQTRBRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlViQVZNQzdlUXlFTHFUU3B2YzlCUVlTaFh5d1ZReUV1VkZGZEI1QXdZd2IvMC9B
NTRDNTYyMzkzOEUyRDIwM0JCNjU5MDA3QTZFQjlBRDQ4MkE0QUUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd175+fzNhGejOsS7QQl+iJgNXUGWMiYCMA1zJ6TyvcMqz4CoclRzTGLwebK+
f78JZc8veJWCxRknxleZ3reON6VLtBEgA58vutzhuan1Sum/rSRY2PTVWvTnhQN/
Tv7awzGzul2UypEbCqmoAyHgea7OGkSyo5uENNctHpwNKJLLJhAnemS+/bufY1ri
5ro0pG4SvhVIJzhcd3hR0HSSx1ZPyXNrswzIeXbLzPI5c1JZehgusU5zEZYfmtHh
s9Lk5fFjN2oFxYTnuVvsB2GpQjjt5FbC0XpdRzhLVrorfp6j8ItBAKcrSEt7ykbP
0vJ00qT1aCvKUfr/iJl9irFwew==
-----END CERTIFICATE-----