Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.mft
File:                     49560F264813C444A114A1BFF4704926CAAD3807.mft (raw, json)
Hash identifier:          Tj8kBXM9ory7PKfsd80Np/ikYUi2dHszhDCW1Az1k68=
Subject key identifier:   44:29:48:E6:AB:E5:34:69:3B:CB:44:EC:C8:29:90:53:99:A4:BE:64
Authority key identifier: 49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07
Certificate issuer:       /CN=49560F264813C444A114A1BFF4704926CAAD3807
Certificate serial:       40F17786B38F5C1C6DB9FD1714C7931109EB8C81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.mft
Manifest number:          0171
Signing time:             Sun 14 Apr 2024 22:35:00 +0000
Manifest this update:     Sun 14 Apr 2024 22:30:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:22:00 +0000
Files and hashes:         1: 49560F264813C444A114A1BFF4704926CAAD3807.crl (hash: /H69azloJgh+yonZ22SfuW5x5EWI/Lxc60XlVr/19jw=)
                          2: 3137302e38342e342e302f32322d3234203d3e20323731303339.roa (hash: l5MSqtzGmKcnTXMbOYsycVKwrdgdw6TElee7DF9S4d4=)
                          3: 3137302e38342e352e302f32342d3234203d3e20323731303339.roa (hash: sBPZWOBHfB6+pyex3tiDTyasNr0YsfGJlu+6a2uoC28=)
                          4: 3137302e38342e362e302f32342d3234203d3e20323731303339.roa (hash: 2ofsV1b35L7fC4S3YTgXY4asKYQwl+ID/wMpGsWtbic=)
                          5: 323830343a373535343a3a2f33322d3334203d3e20323731303339.roa (hash: Z6Obl3WccX8xCoWwYjEXIm/VshDh25n9ecjRhtLClV8=)
                          6: 3137302e38342e372e302f32342d3234203d3e20323731303339.roa (hash: 1pvUjR9rubmFpV7yl0YWgDYi+MR3kbjI9TjevIATPO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f1:77:86:b3:8f:5c:1c:6d:b9:fd:17:14:c7:93:11:09:eb:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49560F264813C444A114A1BFF4704926CAAD3807
        Validity
            Not Before: Apr 14 22:30:00 2024 GMT
            Not After : Apr 16 00:22:00 2024 GMT
        Subject: CN=442948E6ABE534693BCB44ECC829905399A4BE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:7f:bb:9c:d5:05:c1:8a:13:b4:26:6f:24:
                    c5:ff:2d:40:a1:d5:d8:44:1e:a5:4d:c3:16:c1:4d:
                    d4:9c:e2:ee:ad:2f:82:90:17:07:f3:81:e1:6b:80:
                    0b:d7:d8:75:3c:88:5b:27:88:fa:82:3e:28:c8:6b:
                    f8:80:65:b7:0f:e2:76:9b:d2:59:2b:aa:fe:fa:67:
                    3d:29:b1:12:4c:fa:e1:68:fb:e3:06:bb:2b:62:40:
                    f1:de:0e:be:75:12:bd:f6:13:8b:19:49:b2:12:4c:
                    d4:88:a9:7f:7f:1e:f9:d5:87:e9:e2:e1:d4:cf:ae:
                    bc:a7:6a:bd:dc:c2:97:d8:9a:1d:6d:a9:4a:47:23:
                    86:0d:52:78:1d:89:72:3a:93:1f:4e:cc:24:dc:66:
                    7f:67:ab:a3:8b:65:3e:cf:1f:ce:43:d2:96:3b:84:
                    41:fd:88:88:41:9a:0d:18:09:58:cf:dc:2b:8a:eb:
                    78:91:b0:b6:fa:67:25:38:d4:c9:93:81:e5:db:68:
                    90:2c:e5:98:f1:d7:a3:55:a4:ef:cf:28:b5:b0:3c:
                    f1:17:0d:a5:7a:a2:32:03:22:83:ae:0e:49:06:97:
                    38:e1:cd:d3:e5:29:7a:98:ad:0f:8d:e1:aa:32:7c:
                    57:ad:55:f2:78:2f:49:1c:9f:fb:eb:24:80:37:ec:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:29:48:E6:AB:E5:34:69:3B:CB:44:EC:C8:29:90:53:99:A4:BE:64
            X509v3 Authority Key Identifier:
                keyid:49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:88:7e:99:ee:d7:06:d1:63:ec:92:b7:d2:04:0e:f2:fa:78:
         a1:0f:7b:de:f8:55:53:4b:4b:47:18:d9:b2:18:81:77:46:5a:
         fa:0e:fa:62:86:0d:41:a2:05:ea:d5:b2:22:9f:c3:6c:1d:a6:
         28:a1:ed:00:bf:b1:3f:1a:22:a0:b0:35:f2:74:71:21:97:da:
         d7:e9:04:38:9b:c1:9d:b3:2c:31:89:d2:5d:bd:a3:83:b5:1b:
         c2:27:e1:b1:8c:e5:ee:c9:6a:11:76:cb:94:5a:fb:34:21:99:
         bc:a7:41:f2:b7:dc:30:ba:13:3f:e8:9c:84:8a:19:f5:95:3c:
         7c:dd:c3:e3:01:7a:3a:28:c9:19:17:2f:59:7d:01:84:18:0d:
         95:93:79:ab:08:b1:c0:d3:16:d6:27:9b:9e:a2:84:9c:da:2b:
         65:6c:b9:30:71:77:23:c8:92:2c:16:35:1f:7b:f5:38:d9:45:
         6d:4c:4f:91:49:9c:fa:03:3c:e0:7e:7d:91:66:4b:66:e7:d5:
         b6:fb:3c:6a:b2:a4:e2:f3:7f:92:03:60:15:98:6f:57:d0:6a:
         ae:32:6c:69:b2:ac:b6:d9:41:f6:a8:be:fb:13:67:42:b3:b3:
         63:43:82:a3:03:74:c4:ed:64:63:0f:6d:22:95:ee:8e:17:2a:
         9d:1d:14:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQPF3hrOPXBxtuf0XFMeTEQnrjIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1NjBGMjY0ODEzQzQ0NEExMTRBMUJGRjQ3MDQ5MjZD
QUFEMzgwNzAeFw0yNDA0MTQyMjMwMDBaFw0yNDA0MTYwMDIyMDBaMDMxMTAvBgNV
BAMTKDQ0Mjk0OEU2QUJFNTM0NjkzQkNCNDRFQ0M4Mjk5MDUzOTlBNEJFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5An+7nNUFwYoTtCZvJMX/LUCh
1dhEHqVNwxbBTdSc4u6tL4KQFwfzgeFrgAvX2HU8iFsniPqCPijIa/iAZbcP4nab
0lkrqv76Zz0psRJM+uFo++MGuytiQPHeDr51Er32E4sZSbISTNSIqX9/HvnVh+ni
4dTPrrynar3cwpfYmh1tqUpHI4YNUngdiXI6kx9OzCTcZn9nq6OLZT7PH85D0pY7
hEH9iIhBmg0YCVjP3CuK63iRsLb6ZyU41MmTgeXbaJAs5Zjx16NVpO/PKLWwPPEX
DaV6ojIDIoOuDkkGlzjhzdPlKXqYrQ+N4aoyfFetVfJ4L0kcn/vrJIA37KVFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURClI5qvlNGk7y0TsyCmQU5mkvmQwHwYDVR0j
BBgwFoAUSVYPJkgTxEShFKG/9HBJJsqtOAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FDaVp5VEZqcm5oeXVZRWZjRXpVOFNTZGc1cGtNeENoSzRLTHRRUXNi
QjIvMC80OTU2MEYyNjQ4MTNDNDQ0QTExNEExQkZGNDcwNDkyNkNBQUQzODA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5NTYwRjI2NDgxM0M0NDRB
MTE0QTFCRkY0NzA0OTI2Q0FBRDM4MDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3FDaVp5VEZqcm5oeXVZRWZjRXpVOFNTZGc1cGtNeENoSzRLTHRRUXNiQjIvMC80
OTU2MEYyNjQ4MTNDNDQ0QTExNEExQkZGNDcwNDkyNkNBQUQzODA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJIh+me7XBtFj7JK30gQO8vp4oQ973vhVU0tLRxjZshiBd0Za+g76YoYNQaIF
6tWyIp/DbB2mKKHtAL+xPxoioLA18nRxIZfa1+kEOJvBnbMsMYnSXb2jg7Ubwifh
sYzl7slqEXbLlFr7NCGZvKdB8rfcMLoTP+ichIoZ9ZU8fN3D4wF6OijJGRcvWX0B
hBgNlZN5qwixwNMW1iebnqKEnNorZWy5MHF3I8iSLBY1H3v1ONlFbUxPkUmc+gM8
4H59kWZLZufVtvs8arKk4vN/kgNgFZhvV9BqrjJsabKsttlB9qi++xNnQrOzY0OC
owN0xO1kYw9tIpXujhcqnR0UKg==
-----END CERTIFICATE-----