Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
File:                     28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft (raw, json)
Hash identifier:          ET9lql9tUm8SO/tna8aJZh4JN3GQL7vjMzvb+GrnlkU=
Subject key identifier:   B6:6B:DA:19:1E:40:62:8D:6F:92:5E:19:C1:DD:1D:45:12:E7:A3:92
Authority key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Certificate issuer:       /CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Certificate serial:       27C8B132F87E1780E61BB474A8FC8770D5DF37ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
Manifest number:          02CF
Signing time:             Mon 15 Apr 2024 02:11:12 +0000
Manifest this update:     Mon 15 Apr 2024 02:06:12 +0000
Manifest next update:     Tue 16 Apr 2024 05:45:12 +0000
Files and hashes:         1: 3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (hash: UfAdPBT6gPDx9sdggBBHhOpl1Q9GRpANpwwhwAS1HXI=)
                          2: 323830343a3133303a323030303a3a2f34382d3438203d3e203238323634.roa (hash: CFkRuHwLYegSpRst3khQMrnQn0Qre9S9hERmRlmKmfo=)
                          3: 28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl (hash: w87AWQGwYnikDc57qKSyR7agOEv75x7mrEhUidTyqR4=)
                          4: 323830343a3133303a3a2f33322d3333203d3e203238323634.roa (hash: Nd+ETNInYVZJMbEvc0mEnEE4te578ZnUHxmJ8wBapSQ=)
                          5: 323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (hash: kGQpenrWcGewH38pZ7KEkRrB1RUvTasif1+OY/BdQBk=)
                          6: 3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (hash: cWnJyFl06VjV+ndDBkcoEVW51spGvXvNDbNgO2LFHAY=)
                          7: 3137392e3132342e302e302f32312d3234203d3e203238323634.roa (hash: jyQQkSLWcF+6MQygHud4sAOUZ/ATzgaQ00xgNhopUzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c8:b1:32:f8:7e:17:80:e6:1b:b4:74:a8:fc:87:70:d5:df:37:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Validity
            Not Before: Apr 15 02:06:12 2024 GMT
            Not After : Apr 16 05:45:12 2024 GMT
        Subject: CN=B66BDA191E40628D6F925E19C1DD1D4512E7A392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:10:cc:84:f7:ec:04:66:9a:24:61:f3:a4:
                    e1:a3:4b:06:7b:c5:60:da:43:fa:95:81:0f:b7:d9:
                    f5:17:8c:68:65:3d:42:65:dd:dc:17:20:67:6a:5e:
                    18:f0:b7:90:68:10:6c:49:01:3c:94:8f:16:0a:9f:
                    5a:f5:d9:f8:27:ca:ce:9c:63:bb:81:b7:a1:2a:82:
                    9d:46:ee:1e:61:d2:a1:ef:a3:d2:dd:69:1e:3b:11:
                    17:0e:8c:b4:3a:bd:f0:95:c4:04:70:60:59:55:52:
                    18:6e:a1:39:88:17:ed:21:1c:70:55:a7:56:53:b0:
                    97:33:59:82:78:e5:8e:a6:a8:12:14:c8:38:1d:f6:
                    5a:18:4f:b9:46:df:54:df:9b:aa:b2:fc:39:f5:08:
                    f1:72:1b:3a:63:79:d0:5d:00:c2:13:31:1e:60:88:
                    20:6b:3c:7a:c3:38:1a:bd:cd:ef:ce:3f:8a:a7:32:
                    51:96:6c:bf:4c:28:fb:8f:a3:61:ed:50:5a:7d:82:
                    6f:dd:22:93:38:04:ba:41:58:f1:13:38:22:73:b0:
                    ef:1c:01:26:93:78:87:76:3c:4e:87:57:f9:ba:92:
                    2b:96:a0:f8:d5:bd:4d:c7:30:06:67:fe:7d:f5:4c:
                    ba:16:b0:05:14:68:f0:da:4e:86:0f:a5:5d:bb:f0:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:DA:19:1E:40:62:8D:6F:92:5E:19:C1:DD:1D:45:12:E7:A3:92
            X509v3 Authority Key Identifier:
                keyid:28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:50:c4:ac:8c:3c:1a:53:d3:94:3e:10:3a:ba:f8:a9:be:b8:
         cf:fb:17:fd:18:54:2d:d2:a6:7d:b7:5f:23:59:da:c3:19:f1:
         4b:94:be:42:43:f1:64:df:4f:2d:f8:b0:d7:3e:3a:d7:11:7e:
         65:34:dc:c2:ca:8a:87:79:5d:8b:c8:5b:fb:1f:cf:0e:61:c5:
         5b:a7:3d:53:da:f9:bd:4c:3b:c5:6a:8f:df:4f:a3:18:f1:4c:
         07:16:53:ac:7d:08:00:d6:98:6c:de:aa:c6:df:67:fb:cf:e2:
         73:cf:de:b1:78:aa:9d:97:dd:f2:c9:87:66:c4:40:0b:b7:94:
         2f:61:a5:0b:b8:ef:01:da:07:0c:7d:3c:58:46:a9:3c:86:ad:
         50:54:4b:04:7a:05:1c:5c:b3:6b:53:da:2b:62:2f:b6:a4:4e:
         8a:5a:4e:5a:1d:ab:bf:77:b4:98:2c:bc:d3:68:03:a0:fd:22:
         a5:1d:22:85:37:9d:bb:91:ac:8c:c7:e6:43:4a:c2:29:86:59:
         55:c0:ce:18:96:e3:32:5a:14:f3:3c:b4:4f:3b:ec:fa:64:5f:
         47:91:4c:64:1e:5a:fa:21:51:52:72:f8:d2:0f:99:93:0a:08:
         5b:16:ae:e4:03:f0:eb:fd:0e:26:97:44:91:99:ef:23:57:7e:
         a6:2e:60:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ8ixMvh+F4DmG7R0qPyHcNXfN+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGMjFGMTc0QjI5MUNFMkY3RjkyMEUyNDIyRDFEQzZB
RkZGQ0Q2QzAeFw0yNDA0MTUwMjA2MTJaFw0yNDA0MTYwNTQ1MTJaMDMxMTAvBgNV
BAMTKEI2NkJEQTE5MUU0MDYyOEQ2RjkyNUUxOUMxREQxRDQ1MTJFN0EzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDttBDMhPfsBGaaJGHzpOGjSwZ7
xWDaQ/qVgQ+32fUXjGhlPUJl3dwXIGdqXhjwt5BoEGxJATyUjxYKn1r12fgnys6c
Y7uBt6Eqgp1G7h5h0qHvo9LdaR47ERcOjLQ6vfCVxARwYFlVUhhuoTmIF+0hHHBV
p1ZTsJczWYJ45Y6mqBIUyDgd9loYT7lG31Tfm6qy/Dn1CPFyGzpjedBdAMITMR5g
iCBrPHrDOBq9ze/OP4qnMlGWbL9MKPuPo2HtUFp9gm/dIpM4BLpBWPETOCJzsO8c
ASaTeId2PE6HV/m6kiuWoPjVvU3HMAZn/n31TLoWsAUUaPDaToYPpV278MpHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtmvaGR5AYo1vkl4Zwd0dRRLno5IwHwYDVR0j
BBgwFoAUKPIfF0spHOL3+SDiQi0dxq//zWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMC8yOEYyMUYxNzRCMjkxQ0UyRjdGOTIwRTI0MjJEMURDNkFGRkZDRDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RjIxRjE3NEIyOTFDRTJG
N0Y5MjBFMjQyMkQxREM2QUZGRkNENkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5WG0vMC8y
OEYyMUYxNzRCMjkxQ0UyRjdGOTIwRTI0MjJEMURDNkFGRkZDRDZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg1DErIw8GlPTlD4QOrr4qb64z/sX/RhULdKmfbdfI1nawxnxS5S+QkPxZN9P
Lfiw1z461xF+ZTTcwsqKh3ldi8hb+x/PDmHFW6c9U9r5vUw7xWqP30+jGPFMBxZT
rH0IANaYbN6qxt9n+8/ic8/esXiqnZfd8smHZsRAC7eUL2GlC7jvAdoHDH08WEap
PIatUFRLBHoFHFyza1PaK2IvtqROilpOWh2rv3e0mCy802gDoP0ipR0ihTedu5Gs
jMfmQ0rCKYZZVcDOGJbjMloU8zy0Tzvs+mRfR5FMZB5a+iFRUnL40g+ZkwoIWxau
5APw6/0OJpdEkZnvI1d+pi5gEw==
-----END CERTIFICATE-----