Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft
File:                     D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft (raw, json)
Hash identifier:          FTKHQX2rtCIJqsXaBi/Wj1C371P8h5CyT4wM9O264Oo=
Subject key identifier:   41:80:06:35:9A:82:F6:B9:8A:BD:61:59:E9:E5:4B:84:97:FC:E3:59
Authority key identifier: D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
Certificate issuer:       /CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
Certificate serial:       5BD03D370022152DF470E5D7ACF28858BC3DF14B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft
Manifest number:          060D
Signing time:             Mon 15 Apr 2024 00:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:10:00 +0000
Files and hashes:         1: 34352e3138382e31302e302f32342d3234203d3e20323639353636.roa (hash: KOrRg2AQc3aKCw3pn6W5UGGGk5sJDXfx/E40qZs4F9k=)
                          2: 34352e3138382e382e302f32322d3232203d3e20323639353636.roa (hash: GUMCLjQ7+TRfio0kE0GH9OvWLNGWucucTHmnFhdsAkg=)
                          3: D1AFA2F091C9D049DA7C881AF2A692163AAD4643.crl (hash: JpLVOXAwfF9tn2qIcXDeDei7Fg93pqYIuw4doxyY6C4=)
                          4: 34352e3138382e382e302f32342d3234203d3e20323639353636.roa (hash: QVL7/xM86sAqYJIfkWwDk8H3eH+kQt9WNp1Qj5OJsYQ=)
                          5: 34352e3138382e31312e302f32342d3234203d3e20323639353636.roa (hash: tjVMOOoccMmLLimeurtlxHoOCaQ17ee3sc6voz5G7ss=)
                          6: 34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (hash: SsAZPGWwV9Dhmzi/J4wQ0cUIIcoaaLTd9YNaF2VaHyY=)
                          7: 34352e3138382e382e302f32332d3233203d3e20323639353636.roa (hash: l6RXWPKd5mNmmmwUgk/D1lv35gtGI9/0++x4r+e0x/8=)
                          8: 323830343a363638383a3a2f33322d3438203d3e20323639353636.roa (hash: U1qpfNWhPpdIrfMpfi4G6lDrQECNp6l8LPwOFQwEnQ8=)
                          9: 34352e3138382e392e302f32342d3234203d3e20323639353636.roa (hash: XwyM0MnlCf8vPLxfe8pJHBVEZ232JXKR5VMtbhjqpds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d0:3d:37:00:22:15:2d:f4:70:e5:d7:ac:f2:88:58:bc:3d:f1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
        Validity
            Not Before: Apr 15 00:05:00 2024 GMT
            Not After : Apr 22 00:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:cf:db:96:aa:02:e5:1a:8b:18:74:6b:bc:
                    b6:42:1e:1a:74:8e:00:dc:f9:62:a8:e6:0d:35:37:
                    6c:c3:c9:bc:64:cd:3f:ef:6a:d6:d3:ca:74:2b:1d:
                    56:17:70:e3:7e:dd:f6:9b:0d:27:5b:f9:78:e1:9b:
                    5c:11:73:18:76:74:28:26:7d:bf:8f:af:76:53:8e:
                    b0:bf:e1:62:05:8f:59:a7:f8:e3:5a:c8:84:03:48:
                    a8:82:fd:c9:2d:10:bd:49:de:4a:38:04:46:45:02:
                    37:10:fe:47:cd:9f:e6:30:2e:8e:a3:c1:ed:7b:4f:
                    37:8a:06:f2:01:bf:df:7e:bd:61:c1:df:c2:52:65:
                    9a:94:4f:f3:bc:a1:78:91:8b:a6:09:ca:95:58:b6:
                    bb:2a:97:49:84:4f:42:bc:fa:5a:3e:9a:84:1a:76:
                    ec:06:53:06:d7:d8:79:dd:8e:b6:aa:ed:77:97:61:
                    f8:44:d8:0f:e2:18:98:81:31:be:a7:5b:ea:b8:6e:
                    f6:65:d1:96:0e:97:66:44:e1:eb:c7:69:5c:18:99:
                    7a:91:0b:4a:71:fa:16:31:7c:7f:e4:66:72:63:37:
                    3e:18:42:51:9d:61:aa:56:71:5b:ce:0b:60:e8:f9:
                    c0:4a:d0:81:a6:c8:f0:39:ee:47:af:ac:a5:89:b9:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:06:35:9A:82:F6:B9:8A:BD:61:59:E9:E5:4B:84:97:FC:E3:59
            X509v3 Authority Key Identifier:
                keyid:D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:da:2f:42:6c:92:45:88:64:12:47:9b:ca:ef:67:ae:10:
         b5:81:aa:b1:d6:10:ac:c7:d9:66:a6:d8:67:8e:ca:f7:7a:74:
         81:ac:e2:65:af:c6:28:6e:6d:54:32:08:db:da:24:0e:ea:7a:
         fd:e7:0f:59:a2:76:22:56:ea:01:24:21:eb:06:45:fc:ed:1f:
         e5:e1:01:86:4f:39:af:ee:7a:2e:ff:79:21:a2:35:0c:63:65:
         f9:c7:fb:47:37:eb:e1:86:93:d4:7b:c0:45:32:5b:f3:bd:78:
         43:a0:04:2b:bb:0a:37:7c:0f:a9:e6:1f:08:12:2a:f0:47:7f:
         75:fc:13:85:f7:c0:9c:e2:75:73:84:25:59:bc:c5:0a:3a:b3:
         f8:6f:ca:99:e9:f2:03:30:f6:18:8d:b8:93:16:64:ae:e8:72:
         ae:b2:dd:86:5e:f4:c2:c2:3a:ef:9a:44:02:ec:93:d3:af:8e:
         77:67:e0:ef:c3:41:8d:72:19:41:ca:2b:96:8e:41:bd:b5:66:
         a6:7e:b4:1d:04:43:39:f8:37:8c:c2:04:6d:50:97:b8:75:82:
         cf:11:0f:db:a8:24:f2:8d:ca:a2:28:13:ee:25:ed:6c:e1:6a:
         2d:18:13:a7:bd:b2:8c:7a:f2:be:4a:0e:b1:ce:8a:29:6f:b8:
         14:4e:61:5f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUW9A9NwAiFS30cOXXrPKIWLw98UswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBRkEyRjA5MUM5RDA0OURBN0M4ODFBRjJBNjkyMTYz
QUFENDY0MzAeFw0yNDA0MTUwMDA1MDBaFw0yNDA0MjIwMDEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUxQUNGREI5NkFBMDJFNTFB
OEIxODc0NkJCQ0I2NDIxRTFBNzQ4RTAwRENGOTYyQThFNjBEMzUzNzZDQzNDOUJD
NjRDRDNGRUY2QUQ2RDNDQTc0MkIxRDU2MTc3MEUzN0VEREY2OUIwRDI3NUJGOTc4
RTE5QjVDMTE3MzE4NzY3NDI4MjY3REJGOEZBRjc2NTM4RUIwQkZFMTYyMDU4RjU5
QTdGOEUzNUFDODg0MDM0OEE4ODJGREM5MkQxMEJENDlERTRBMzgwNDQ2NDUwMjM3
MTBGRTQ3Q0Q5RkU2MzAyRThFQTNDMUVEN0I0RjM3OEEwNkYyMDFCRkRGN0VCRDYx
QzFERkMyNTI2NTlBOTQ0RkYzQkNBMTc4OTE4QkE2MDlDQTk1NThCNkJCMkE5NzQ5
ODQ0RjQyQkNGQTVBM0U5QTg0MUE3NkVDMDY1MzA2RDdEODc5REQ4RUI2QUFFRDc3
OTc2MUY4NDREODBGRTIxODk4ODEzMUJFQTc1QkVBQjg2RUY2NjVEMTk2MEU5NzY2
NDRFMUVCQzc2OTVDMTg5OTdBOTEwQjRBNzFGQTE2MzE3QzdGRTQ2NjcyNjMzNzNF
MTg0MjUxOUQ2MUFBNTY3MTVCQ0UwQjYwRThGOUMwNEFEMDgxQTZDOEYwMzlFRTQ3
QUZBQ0E1ODlCOTNCNDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvhrP25aqAuUaixh0a7y2Qh4adI4A3PliqOYNNTdsw8m8ZM0/72rW
08p0Kx1WF3Djft32mw0nW/l44ZtcEXMYdnQoJn2/j692U46wv+FiBY9Zp/jjWsiE
A0iogv3JLRC9Sd5KOARGRQI3EP5HzZ/mMC6Oo8Hte083igbyAb/ffr1hwd/CUmWa
lE/zvKF4kYumCcqVWLa7KpdJhE9CvPpaPpqEGnbsBlMG19h53Y62qu13l2H4RNgP
4hiYgTG+p1vquG72ZdGWDpdmROHrx2lcGJl6kQtKcfoWMXx/5GZyYzc+GEJRnWGq
VnFbzgtg6PnAStCBpsjwOe5Hr6ylibk7QQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEGABjWagva5ir1hWenlS4SX/ONZMB8GA1UdIwQYMBaAFNGvovCRydBJ2nyIGvKm
khY6rUZDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VmVjdHMW9rVDF2UXRG
Yk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAvRDFBRkEyRjA5MUM5RDA0
OURBN0M4ODFBRjJBNjkyMTYzQUFENDY0My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMUFGQTJGMDkxQzlEMDQ5REE3Qzg4MUFGMkE2OTIxNjNBQUQ0
NjQzLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VmVjdHMW9rVDF2UXRGYk1RcGdh
dERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAvRDFBRkEyRjA5MUM5RDA0OURBN0M4
ODFBRjJBNjkyMTYzQUFENDY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFRs2i9CbJJFiGQSR5vK72eu
ELWBqrHWEKzH2Wam2GeOyvd6dIGs4mWvxihubVQyCNvaJA7qev3nD1midiJW6gEk
IesGRfztH+XhAYZPOa/uei7/eSGiNQxjZfnH+0c36+GGk9R7wEUyW/O9eEOgBCu7
Cjd8D6nmHwgSKvBHf3X8E4X3wJzidXOEJVm8xQo6s/hvypnp8gMw9hiNuJMWZK7o
cq6y3YZe9MLCOu+aRALsk9Ovjndn4O/DQY1yGUHKK5aOQb21ZqZ+tB0EQzn4N4zC
BG1Ql7h1gs8RD9uoJPKNyqIoE+4l7Wzhai0YE6e9sox68r5KDrHOiilvuBROYV8=
-----END CERTIFICATE-----