Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft
File:                     2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft (raw, json)
Hash identifier:          bNoWS3FqXV6fKw+bRRnE9LaT0xPHq10SMwZtup1BXNY=
Subject key identifier:   C7:65:47:16:3D:68:B6:05:54:59:76:92:FE:F4:F9:EE:3C:F3:F1:25
Authority key identifier: 2F:5F:75:24:7F:D0:5D:46:ED:D6:B6:6D:B6:E0:23:D9:7B:FC:AD:6D
Certificate issuer:       /CN=2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D
Certificate serial:       7264D464308D96A1EF3294BA271DB2872301ECBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft
Manifest number:          5E
Signing time:             Sun 14 Apr 2024 19:03:51 +0000
Manifest this update:     Sun 14 Apr 2024 18:58:51 +0000
Manifest next update:     Mon 15 Apr 2024 21:28:51 +0000
Files and hashes:         1: 2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.crl (hash: bBLMxATcFlLwzCSj+QRmXcvdAp4D1oYV3V0IVcREATI=)
                          2: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: MwBNoWw9O8K3mSy8BAwbO5vPd98H75jwDXvJ+NpN5+8=)
                          3: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: Fp1Jy96SPMt2bSeq8Ff/H4ImbylbzJKZoLWazRbxn8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:64:d4:64:30:8d:96:a1:ef:32:94:ba:27:1d:b2:87:23:01:ec:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D
        Validity
            Not Before: Apr 14 18:58:51 2024 GMT
            Not After : Apr 15 21:28:51 2024 GMT
        Subject: CN=C76547163D68B60554597692FEF4F9EE3CF3F125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:08:e1:5a:ee:69:99:4e:aa:ca:46:7b:c2:
                    ba:50:12:3d:ad:1d:10:59:b9:69:88:54:95:df:96:
                    cd:7c:d4:4d:13:62:1b:0f:21:f5:84:4e:c8:bd:a3:
                    a2:36:dd:04:6d:1b:58:a0:ee:65:e0:e1:46:a6:a6:
                    da:47:e5:e9:06:35:6b:ed:85:5d:94:3e:90:cb:9c:
                    f5:3c:94:e1:91:5c:66:85:e1:71:e7:eb:fb:16:cc:
                    47:85:95:24:fd:ae:7a:bd:d5:ff:39:67:84:bc:99:
                    28:fb:58:64:d6:54:4f:68:41:4b:aa:c9:70:52:60:
                    3d:8d:56:d2:0b:13:f2:cb:51:5a:e7:2c:c4:6d:dd:
                    66:7f:dc:e1:e4:f3:08:8e:d4:a2:b5:79:0c:1b:5d:
                    03:d3:cc:b2:e7:f2:2b:d0:ad:75:f2:24:97:79:50:
                    c4:ac:54:5c:fe:a9:94:e5:4d:1b:c7:81:3d:93:1d:
                    b0:1a:8e:fe:d8:47:f5:ee:3a:33:6b:1a:17:c0:e1:
                    18:d5:f7:7d:b3:6f:c3:bc:fa:dd:68:e8:bf:f2:37:
                    80:74:7f:0a:46:f4:ed:20:60:64:53:62:1d:02:9e:
                    68:45:eb:a9:17:10:49:aa:67:68:46:20:25:b2:4d:
                    75:e1:b7:23:74:0b:d8:a8:ab:87:4e:13:75:52:e2:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:65:47:16:3D:68:B6:05:54:59:76:92:FE:F4:F9:EE:3C:F3:F1:25
            X509v3 Authority Key Identifier:
                keyid:2F:5F:75:24:7F:D0:5D:46:ED:D6:B6:6D:B6:E0:23:D9:7B:FC:AD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:e8:af:55:a0:85:74:9f:f8:8d:ff:42:af:42:a5:b0:6c:
         3a:a6:8d:7c:7e:d8:3d:37:5d:dc:aa:64:72:8a:20:2b:83:ad:
         19:3b:ea:63:da:98:bd:0a:a6:57:84:98:2f:d9:bf:ba:e3:91:
         b3:9d:9c:82:ea:01:66:52:b2:9a:cb:c5:e5:a5:e3:e7:2c:75:
         9c:6f:a3:8d:2f:2d:97:83:78:e9:0b:95:69:4c:17:78:83:3c:
         5e:fd:77:a9:61:1d:81:84:3e:2b:76:00:58:e4:31:25:35:3c:
         1f:b6:90:37:a3:9f:bb:9e:0e:52:f8:4a:9b:4a:b8:95:04:2b:
         ee:c0:6c:9c:f4:ee:fd:15:7c:62:be:c1:3d:c0:8c:69:94:23:
         bd:9a:e2:44:88:11:47:9e:bd:f8:fb:c2:bd:9e:74:6c:b9:ec:
         2d:f9:2a:b7:91:00:50:a6:9a:7b:4e:0d:c6:03:53:41:e0:91:
         5c:3a:d0:39:d7:f0:b5:54:c6:36:72:63:2c:d2:cc:6e:2a:ba:
         1c:50:36:01:3f:c7:08:97:21:2b:85:5c:01:17:aa:dd:3c:1a:
         84:ce:84:f8:b0:21:ef:61:2f:54:52:c4:2f:9c:5d:00:2d:eb:
         ca:41:60:63:b7:ca:00:dd:93:49:6e:f1:29:a1:36:48:b1:ad:
         d7:60:a5:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcmTUZDCNlqHvMpS6Jx2yhyMB7L8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1Rjc1MjQ3RkQwNUQ0NkVERDZCNjZEQjZFMDIzRDk3
QkZDQUQ2RDAeFw0yNDA0MTQxODU4NTFaFw0yNDA0MTUyMTI4NTFaMDMxMTAvBgNV
BAMTKEM3NjU0NzE2M0Q2OEI2MDU1NDU5NzY5MkZFRjRGOUVFM0NGM0YxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobwjhWu5pmU6qykZ7wrpQEj2t
HRBZuWmIVJXfls181E0TYhsPIfWETsi9o6I23QRtG1ig7mXg4UamptpH5ekGNWvt
hV2UPpDLnPU8lOGRXGaF4XHn6/sWzEeFlST9rnq91f85Z4S8mSj7WGTWVE9oQUuq
yXBSYD2NVtILE/LLUVrnLMRt3WZ/3OHk8wiO1KK1eQwbXQPTzLLn8ivQrXXyJJd5
UMSsVFz+qZTlTRvHgT2THbAajv7YR/XuOjNrGhfA4RjV932zb8O8+t1o6L/yN4B0
fwpG9O0gYGRTYh0CnmhF66kXEEmqZ2hGICWyTXXhtyN0C9ioq4dOE3VS4mnzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUx2VHFj1otgVUWXaS/vT57jzz8SUwHwYDVR0j
BBgwFoAUL191JH/QXUbt1rZttuAj2Xv8rW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdF
eVovMC8yRjVGNzUyNDdGRDA1RDQ2RURENkI2NkRCNkUwMjNEOTdCRkNBRDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGNUY3NTI0N0ZEMDVENDZF
REQ2QjY2REI2RTAyM0Q5N0JGQ0FENkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdFeVovMC8y
RjVGNzUyNDdGRDA1RDQ2RURENkI2NkRCNkUwMjNEOTdCRkNBRDZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWHzor1WghXSf+I3/Qq9CpbBsOqaNfH7YPTdd3KpkcoogK4OtGTvqY9qYvQqm
V4SYL9m/uuORs52cguoBZlKymsvF5aXj5yx1nG+jjS8tl4N46QuVaUwXeIM8Xv13
qWEdgYQ+K3YAWOQxJTU8H7aQN6Ofu54OUvhKm0q4lQQr7sBsnPTu/RV8Yr7BPcCM
aZQjvZriRIgRR569+PvCvZ50bLnsLfkqt5EAUKaae04NxgNTQeCRXDrQOdfwtVTG
NnJjLNLMbiq6HFA2AT/HCJchK4VcAReq3TwahM6E+LAh72EvVFLEL5xdAC3rykFg
Y7fKAN2TSW7xKaE2SLGt12ClhQ==
-----END CERTIFICATE-----