Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft
File:                     E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft (raw, json)
Hash identifier:          VYaZyA9+DPHe4Fj88OwCwKGIsTOWsVwQgP2NK8Angc4=
Subject key identifier:   92:F8:DC:DA:8A:D1:5D:4E:5E:18:0A:77:6F:81:4F:79:D2:E6:19:9E
Authority key identifier: E8:D6:B7:E3:62:47:1F:F9:C1:27:1F:93:31:45:7B:FA:45:AB:08:5C
Certificate issuer:       /CN=E8D6B7E362471FF9C1271F9331457BFA45AB085C
Certificate serial:       41D3B03183DA596EFA46BC71E24FC4C8773BD07D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft
Manifest number:          29
Signing time:             Thu 22 Feb 2024 14:52:25 +0000
Manifest this update:     Thu 22 Feb 2024 14:47:25 +0000
Manifest next update:     Fri 23 Feb 2024 17:07:25 +0000
Files and hashes:         1: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: WjGsVRUfwtAf7AShcSnNXr0w7K9U/KbLI6hC6bMwdi0=)
                          2: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: WOsMW+c8fJDzo14lJW+7Tv9GCW4WR06KuJdI1aDdVzA=)
                          3: E8D6B7E362471FF9C1271F9331457BFA45AB085C.crl (hash: bOTGGqIxO3tOQHDfssi1lktxoey6whCCfeVVIVoVTns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d3:b0:31:83:da:59:6e:fa:46:bc:71:e2:4f:c4:c8:77:3b:d0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D6B7E362471FF9C1271F9331457BFA45AB085C
        Validity
            Not Before: Feb 22 14:47:25 2024 GMT
            Not After : Feb 23 17:07:25 2024 GMT
        Subject: CN=92F8DCDA8AD15D4E5E180A776F814F79D2E6199E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:d5:4d:65:18:aa:fc:60:9f:17:48:93:f7:
                    d6:8a:e8:9f:c3:d4:19:f0:09:d5:fe:1f:00:dd:b0:
                    2c:0e:f2:27:fe:c7:a5:c0:ef:00:17:2b:9e:6e:76:
                    21:ca:62:da:e8:24:8c:e9:58:8d:e0:58:24:79:d8:
                    2e:88:2d:9f:6f:83:13:54:7b:07:f3:e0:4d:55:ec:
                    c2:5d:79:67:dd:f8:2d:62:e3:86:c9:0e:5c:8b:80:
                    88:0f:a8:75:b7:55:d8:f4:14:d1:00:a6:0a:a3:36:
                    e9:01:41:f9:f7:4d:6e:a8:5f:bb:bf:81:d1:77:ca:
                    f4:5f:98:6e:c8:70:e6:31:12:f2:de:39:fe:ea:a4:
                    d1:8f:76:df:b7:2b:af:2e:4c:eb:f9:5c:2a:85:6d:
                    81:b7:39:56:4f:0b:d4:7d:92:b0:e2:4d:29:1e:f1:
                    f1:59:d9:6e:d0:aa:34:01:31:65:5b:28:3e:32:b3:
                    d1:13:c6:b8:0d:ca:86:cb:a7:4b:b7:12:9e:a0:c5:
                    62:d7:c7:44:80:bb:5b:1b:41:b0:c9:c2:b4:eb:1f:
                    8d:fd:00:13:88:c1:ff:c0:2a:02:19:dc:e1:8c:c8:
                    9f:4c:6b:7e:e7:39:5a:57:cb:55:da:31:da:9e:5c:
                    56:d2:a3:f2:77:42:86:38:fd:c2:50:f2:1e:91:3a:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:DC:DA:8A:D1:5D:4E:5E:18:0A:77:6F:81:4F:79:D2:E6:19:9E
            X509v3 Authority Key Identifier:
                keyid:E8:D6:B7:E3:62:47:1F:F9:C1:27:1F:93:31:45:7B:FA:45:AB:08:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:04:9b:75:74:c9:b2:cd:cf:f9:61:54:e1:72:4b:9c:09:44:
         fa:39:13:b9:b1:88:61:57:60:79:bb:0f:ab:17:a3:f9:6e:bd:
         54:51:4f:ca:e3:56:3c:03:39:c9:ff:02:ed:30:4c:b1:4b:09:
         42:a6:a0:05:66:c9:57:2c:0f:e8:47:e9:cb:f8:2d:c5:45:53:
         15:f7:fe:8d:28:ac:e4:29:16:18:c0:6d:17:55:be:3e:b8:36:
         d7:1a:af:58:84:39:87:73:f6:cb:52:5f:3e:81:07:2c:6e:88:
         b2:2a:88:e0:f6:1f:95:60:0e:a4:ca:96:b6:1d:65:42:e4:6d:
         d8:ce:3b:32:5d:34:18:a5:3a:7b:df:a7:cb:19:0c:5b:8d:3d:
         ac:da:f3:21:c2:d6:55:b6:0d:76:18:66:ab:a3:b7:77:9e:6c:
         5d:d1:d4:e5:04:5c:94:9b:aa:e5:d5:bf:6a:87:91:93:43:2d:
         d2:7a:17:27:e9:fd:76:ca:18:07:42:91:e8:7d:08:95:8a:32:
         69:ea:66:bf:d5:0d:fc:f5:54:f6:62:08:cb:b1:26:af:2d:2a:
         e0:9d:65:75:f5:30:4d:e0:07:77:f5:10:16:c8:60:f9:63:bc:
         a6:7d:cb:0e:84:b6:a9:43:a9:af:91:b8:f4:09:be:8f:22:ee:
         78:61:4a:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQdOwMYPaWW76Rrxx4k/EyHc70H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThENkI3RTM2MjQ3MUZGOUMxMjcxRjkzMzE0NTdCRkE0
NUFCMDg1QzAeFw0yNDAyMjIxNDQ3MjVaFw0yNDAyMjMxNzA3MjVaMDMxMTAvBgNV
BAMTKDkyRjhEQ0RBOEFEMTVENEU1RTE4MEE3NzZGODE0Rjc5RDJFNjE5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzw9VNZRiq/GCfF0iT99aK6J/D
1BnwCdX+HwDdsCwO8if+x6XA7wAXK55udiHKYtroJIzpWI3gWCR52C6ILZ9vgxNU
ewfz4E1V7MJdeWfd+C1i44bJDlyLgIgPqHW3Vdj0FNEApgqjNukBQfn3TW6oX7u/
gdF3yvRfmG7IcOYxEvLeOf7qpNGPdt+3K68uTOv5XCqFbYG3OVZPC9R9krDiTSke
8fFZ2W7QqjQBMWVbKD4ys9ETxrgNyobLp0u3Ep6gxWLXx0SAu1sbQbDJwrTrH439
ABOIwf/AKgIZ3OGMyJ9Ma37nOVpXy1XaMdqeXFbSo/J3QoY4/cJQ8h6ROhkPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkvjc2orRXU5eGAp3b4FPedLmGZ4wHwYDVR0j
BBgwFoAU6Na342JHH/nBJx+TMUV7+kWrCFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1
M3AvMC9FOEQ2QjdFMzYyNDcxRkY5QzEyNzFGOTMzMTQ1N0JGQTQ1QUIwODVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4RDZCN0UzNjI0NzFGRjlD
MTI3MUY5MzMxNDU3QkZBNDVBQjA4NUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1M3AvMC9F
OEQ2QjdFMzYyNDcxRkY5QzEyNzFGOTMzMTQ1N0JGQTQ1QUIwODVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWASbdXTJss3P+WFU4XJLnAlE+jkTubGIYVdgebsPqxej+W69VFFPyuNWPAM5
yf8C7TBMsUsJQqagBWbJVywP6Efpy/gtxUVTFff+jSis5CkWGMBtF1W+Prg21xqv
WIQ5h3P2y1JfPoEHLG6IsiqI4PYflWAOpMqWth1lQuRt2M47Ml00GKU6e9+nyxkM
W409rNrzIcLWVbYNdhhmq6O3d55sXdHU5QRclJuq5dW/aoeRk0Mt0noXJ+n9dsoY
B0KR6H0IlYoyaepmv9UN/PVU9mIIy7Emry0q4J1ldfUwTeAHd/UQFshg+WO8pn3L
DoS2qUOpr5G49Am+jyLueGFKyA==
-----END CERTIFICATE-----