Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft
File:                     1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft (raw, json)
Hash identifier:          eUCBQWSHkZf3FRCX9cwDuAgir6jQBXEC4QxbYkGsgN4=
Subject key identifier:   E4:6F:A5:DD:BC:B9:67:D6:3D:D5:2A:3D:3C:0F:B7:11:EB:4D:F2:81
Authority key identifier: 1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88
Certificate issuer:       /CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
Certificate serial:       59D104642C682A9F1E1547A7B2C79A2DBDB552C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft
Manifest number:          2A
Signing time:             Sun 14 Apr 2024 23:30:43 +0000
Manifest this update:     Sun 14 Apr 2024 23:25:43 +0000
Manifest next update:     Tue 16 Apr 2024 02:38:43 +0000
Files and hashes:         1: 1D7BC705EEA281DFF0A94B408D23A1F04AE05888.crl (hash: HFnGe5n0qjnywOUPk+izYU/X/YjIhKSEQsoDcW0TsjE=)
                          2: 323830343a3636343a3a2f33322d3438203d3e20323632353832.roa (hash: uhyL4w7pYBwUQoCC2Bh1qe8s9qSub5CGrONIojZxi5A=)
                          3: 3137372e38342e39362e302f32312d3234203d3e20323632353832.roa (hash: Y6QnWSJirW6z3xg1rJE1xD/3u27RLEzk96zGdpInzHo=)
                          4: 3133382e39392e33322e302f32322d3234203d3e20323632353832.roa (hash: Gvg3ZjSwE2KHRw3n8h0a794ARxnhq2F6cup9TxxxPaM=)
                          5: 3137372e39332e38382e302f32312d3234203d3e20323632353832.roa (hash: F6/zc/d9kQHaIrASE1TPGuLHb8KcH1KVghhGOWvhMaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d1:04:64:2c:68:2a:9f:1e:15:47:a7:b2:c7:9a:2d:bd:b5:52:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
        Validity
            Not Before: Apr 14 23:25:43 2024 GMT
            Not After : Apr 16 02:38:43 2024 GMT
        Subject: CN=E46FA5DDBCB967D63DD52A3D3C0FB711EB4DF281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:09:c8:3d:30:90:a9:9e:76:0d:03:9c:4f:
                    f6:fa:ee:79:69:fa:4b:0b:a7:d7:c5:07:0b:c8:b2:
                    71:56:22:c9:67:30:8b:f8:0a:b1:6c:c1:5c:95:3a:
                    8d:f0:3e:06:77:d0:1d:f8:e9:ba:f3:80:6b:41:61:
                    04:ac:56:10:e4:69:79:81:c2:7a:58:0b:f9:8c:6c:
                    b2:14:89:3b:90:a7:f6:06:86:71:2d:be:c5:30:48:
                    d7:fa:78:ba:c4:fd:7b:1d:06:c4:87:0f:0d:db:3e:
                    53:a5:30:09:3e:c1:f7:59:6f:07:07:a5:01:6c:7e:
                    bd:2a:d5:3f:37:89:1c:3a:23:b5:19:b6:1b:da:c2:
                    70:20:27:af:eb:d4:ab:63:d8:56:5a:66:4c:0b:10:
                    25:12:4e:c3:39:ac:e5:79:a4:19:d2:58:5e:83:22:
                    da:26:9d:d7:78:88:2a:60:cd:11:a2:3e:32:17:68:
                    02:d2:3a:d4:99:e9:5c:3e:9a:48:5c:0a:ec:72:8c:
                    b6:f6:2c:ef:43:82:cb:26:f2:e5:15:b5:a8:c9:a7:
                    01:af:04:2a:45:25:da:9e:ef:01:95:f8:03:82:02:
                    e7:6b:40:69:5a:32:5a:fa:df:7a:a3:b1:72:b1:fa:
                    f9:35:5e:cb:1a:fc:86:e6:70:7d:8a:60:10:f6:30:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:A5:DD:BC:B9:67:D6:3D:D5:2A:3D:3C:0F:B7:11:EB:4D:F2:81
            X509v3 Authority Key Identifier:
                keyid:1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:03:ec:34:51:24:ef:b4:d8:f8:3e:18:bc:22:72:87:52:
         cc:7b:36:97:2b:d9:2b:f4:fd:e1:c4:75:22:d4:bf:cf:3e:3c:
         be:ac:12:a1:f9:b5:09:ff:3c:cd:da:ef:84:be:3d:17:48:02:
         87:8b:ec:62:10:7e:db:ca:73:a5:4c:86:83:95:90:5c:f9:20:
         62:49:fe:24:99:ea:eb:7b:ac:94:3e:6d:6e:0a:0a:0c:68:39:
         39:08:dc:14:16:a7:c5:43:59:a8:88:ae:ef:64:26:67:0c:3a:
         4f:12:f4:ce:70:75:a0:d8:87:d2:0c:8b:72:43:d0:76:71:43:
         a0:05:43:56:bf:61:dd:e8:32:55:ed:f8:52:7b:94:a0:d7:a3:
         6b:dd:be:3b:46:6b:24:35:9d:18:ac:6c:3f:a0:13:5c:b5:d1:
         07:a8:ea:ca:a8:fd:6f:1f:15:8f:3c:18:86:37:73:d9:ce:57:
         76:05:4a:8e:3b:25:18:12:10:07:86:16:20:a2:5a:e7:53:2b:
         4a:af:e3:25:ba:56:4d:76:37:bd:5d:12:41:9c:a5:d0:40:58:
         ed:50:ca:4d:51:0a:38:35:e0:a9:00:70:47:a0:85:7c:b4:5a:
         d9:f1:10:5a:a6:10:6f:44:7b:bf:93:53:24:b3:e7:30:ee:5e:
         1e:ed:ea:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWdEEZCxoKp8eFUensseaLb21UsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ3QkM3MDVFRUEyODFERkYwQTk0QjQwOEQyM0ExRjA0
QUUwNTg4ODAeFw0yNDA0MTQyMzI1NDNaFw0yNDA0MTYwMjM4NDNaMDMxMTAvBgNV
BAMTKEU0NkZBNUREQkNCOTY3RDYzREQ1MkEzRDNDMEZCNzExRUI0REYyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLQnIPTCQqZ52DQOcT/b67nlp
+ksLp9fFBwvIsnFWIslnMIv4CrFswVyVOo3wPgZ30B346brzgGtBYQSsVhDkaXmB
wnpYC/mMbLIUiTuQp/YGhnEtvsUwSNf6eLrE/XsdBsSHDw3bPlOlMAk+wfdZbwcH
pQFsfr0q1T83iRw6I7UZthvawnAgJ6/r1Ktj2FZaZkwLECUSTsM5rOV5pBnSWF6D
Itomndd4iCpgzRGiPjIXaALSOtSZ6Vw+mkhcCuxyjLb2LO9Dgssm8uUVtajJpwGv
BCpFJdqe7wGV+AOCAudrQGlaMlr633qjsXKx+vk1Xssa/IbmcH2KYBD2MKRjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5G+l3by5Z9Y91So9PA+3EetN8oEwHwYDVR0j
BBgwFoAUHXvHBe6igd/wqUtAjSOh8ErgWIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpQTEt2Y3BIelA4Q3kyakRSSk1RVUhpTFVQTnR6dlhmUW1LTkNHY0VM
dkUvMC8xRDdCQzcwNUVFQTI4MURGRjBBOTRCNDA4RDIzQTFGMDRBRTA1ODg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFEN0JDNzA1RUVBMjgxREZG
MEE5NEI0MDhEMjNBMUYwNEFFMDU4ODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVpQTEt2Y3BIelA4Q3kyakRSSk1RVUhpTFVQTnR6dlhmUW1LTkNHY0VMdkUvMC8x
RDdCQzcwNUVFQTI4MURGRjBBOTRCNDA4RDIzQTFGMDRBRTA1ODg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEBwD7DRRJO+02Pg+GLwicodSzHs2lyvZK/T94cR1ItS/zz48vqwSofm1Cf88
zdrvhL49F0gCh4vsYhB+28pzpUyGg5WQXPkgYkn+JJnq63uslD5tbgoKDGg5OQjc
FBanxUNZqIiu72QmZww6TxL0znB1oNiH0gyLckPQdnFDoAVDVr9h3egyVe34UnuU
oNeja92+O0ZrJDWdGKxsP6ATXLXRB6jqyqj9bx8VjzwYhjdz2c5XdgVKjjslGBIQ
B4YWIKJa51MrSq/jJbpWTXY3vV0SQZyl0EBY7VDKTVEKODXgqQBwR6CFfLRa2fEQ
WqYQb0R7v5NTJLPnMO5eHu3qwQ==
-----END CERTIFICATE-----