Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft
File:                     4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft (raw, json)
Hash identifier:          OgtIWdwo+UPY+gtCr7QjkvnLl66wBDMIDl1p7AHFd0k=
Subject key identifier:   B3:D8:3C:5B:55:CC:E1:A1:40:07:F4:F8:85:22:38:AD:D3:BD:E5:42
Authority key identifier: 4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Certificate issuer:       /CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
Certificate serial:       4E676447FF559CC2D266C8BC139D68E30C420384
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft
Manifest number:          A6
Signing time:             Sun 14 Apr 2024 18:37:29 +0000
Manifest this update:     Sun 14 Apr 2024 18:32:29 +0000
Manifest next update:     Mon 15 Apr 2024 22:11:29 +0000
Files and hashes:         1: 34352e3136332e37322e302f32322d3234203d3e20323638353733.roa (hash: yKlwdpZx1ZlhFSmfTyLMV5hLM7JZGP71KTvvWN7hTtY=)
                          2: 3137372e37302e3234362e302f32342d3234203d3e20323638353733.roa (hash: wlaLMkZ/pgwZzmp91HGECYzmEbMNdpr1gXZLDLL0JWk=)
                          3: 323830343a353334343a383030303a3a2f33342d3334203d3e20323638353733.roa (hash: w0kDd9TQ7YNjHIXHjBDk/lqWklP6ii9nj/AgVVdAquw=)
                          4: 3137372e37302e3234372e302f32342d3234203d3e20323638353733.roa (hash: Oe1VYi7pXnfYh8CvcwaOhQ0svOJiWIGgSGz330MLaOc=)
                          5: 323830343a353334343a3a2f33342d3334203d3e20323638353733.roa (hash: L47LyIxDseRwVX3m292RzKSEJl72Y5oqAqQf3pPOx40=)
                          6: 323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa (hash: kvyzgS8iEcvMdjZ2qZvIF6wWUhQ9Usq9mYreE8FRcGM=)
                          7: 4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl (hash: yMDM4mc9he/7H6mkwGwGPYAg+xYl+sp2y/pq5jmGc90=)
                          8: 323830343a353334343a633030303a3a2f33342d3334203d3e20323638353733.roa (hash: nH+6XI4gM8T0rq7xgmwZfEGju+qA6slzAV56+0OINyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:64:47:ff:55:9c:c2:d2:66:c8:bc:13:9d:68:e3:0c:42:03:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Validity
            Not Before: Apr 14 18:32:29 2024 GMT
            Not After : Apr 15 22:11:29 2024 GMT
        Subject: CN=B3D83C5B55CCE1A14007F4F8852238ADD3BDE542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:a4:e3:df:89:72:85:66:9f:94:58:f9:2b:
                    39:69:cf:36:91:a5:fc:79:db:2c:25:fa:61:61:d6:
                    c3:f3:51:81:aa:a4:1f:81:11:17:f7:58:d3:47:6f:
                    f6:39:9d:c9:13:d4:70:9e:e6:95:3b:71:01:80:46:
                    b2:90:17:6b:6e:73:d0:7b:08:a9:0c:ca:63:45:6b:
                    38:9f:16:e6:2e:67:aa:ba:d8:23:7f:3a:57:a0:6d:
                    51:d6:87:61:e8:79:32:08:9f:84:11:9b:99:c0:ff:
                    01:0f:e3:15:30:b2:ba:1b:bf:fd:77:f6:3a:c4:d7:
                    a6:fe:08:a9:b8:a7:ff:cf:60:97:3c:87:5a:7b:b8:
                    d4:c9:05:81:41:97:b2:77:91:71:8d:b0:d5:17:8b:
                    b5:c3:d1:b8:22:e4:36:81:45:d2:12:2d:6d:24:63:
                    47:df:44:b0:95:e0:85:be:45:39:aa:6c:f3:c8:af:
                    59:1e:0f:d2:bf:00:bc:f7:c9:0e:3d:05:e8:3d:8d:
                    3a:bf:64:65:b4:8b:d2:49:e5:8c:ca:66:f5:9f:a1:
                    40:17:c7:0c:69:85:12:ed:8b:16:f5:a8:5f:f5:93:
                    d5:b0:25:48:42:aa:ab:67:1b:35:57:dc:3d:ac:c1:
                    9b:a8:42:cb:5c:63:09:e6:ae:8e:35:1c:82:e1:49:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:3C:5B:55:CC:E1:A1:40:07:F4:F8:85:22:38:AD:D3:BD:E5:42
            X509v3 Authority Key Identifier:
                keyid:4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:86:02:62:f5:31:38:0a:9f:47:c3:8f:92:c8:d7:b2:50:
         ba:7b:1d:43:68:41:bd:af:ed:78:e4:d6:12:98:d8:c3:67:73:
         18:1c:f6:a4:4c:c2:c0:f0:48:74:09:54:06:e6:5d:b7:06:b4:
         b5:4c:73:04:ee:58:0d:e2:84:78:94:d7:4d:d3:19:9c:e4:36:
         d3:57:d4:a4:79:92:2d:cd:21:32:9c:ce:3d:6c:d2:eb:6b:e3:
         da:f9:92:04:90:66:36:48:f9:6e:a7:f3:ac:5d:0a:db:eb:9d:
         8b:44:71:85:a2:de:ea:e9:5b:ec:f1:41:52:48:fa:c6:9f:23:
         6c:5f:58:11:73:7e:cc:b8:5c:37:f8:9c:63:24:21:cf:c4:d6:
         ae:20:d3:e6:e7:f7:12:fd:de:fb:90:3e:ac:bc:40:f7:a5:64:
         ac:8f:f2:89:0e:53:b0:fc:66:89:8c:79:89:93:10:9a:5c:94:
         4b:f7:2c:1e:f1:24:31:c5:5d:9e:63:be:a6:20:19:49:d1:4c:
         4c:42:b8:9f:10:3d:08:03:62:98:c3:52:d9:38:b9:7b:bd:12:
         c8:38:3b:24:d6:a1:e6:3d:d0:f3:07:1d:81:9f:ee:b7:d8:35:
         af:2c:62:3b:63:6e:9d:21:28:6d:fe:26:d0:6c:fe:cd:a9:8e:
         28:9f:59:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTmdkR/9VnMLSZsi8E51o4wxCA4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5ODc2NUQ0RDkyODJEQTEwOEVGMEVFNENCMzg0Njcw
OEVCM0IyRDAeFw0yNDA0MTQxODMyMjlaFw0yNDA0MTUyMjExMjlaMDMxMTAvBgNV
BAMTKEIzRDgzQzVCNTVDQ0UxQTE0MDA3RjRGODg1MjIzOEFERDNCREU1NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5aTj34lyhWaflFj5KzlpzzaR
pfx52ywl+mFh1sPzUYGqpB+BERf3WNNHb/Y5nckT1HCe5pU7cQGARrKQF2tuc9B7
CKkMymNFazifFuYuZ6q62CN/OlegbVHWh2HoeTIIn4QRm5nA/wEP4xUwsrobv/13
9jrE16b+CKm4p//PYJc8h1p7uNTJBYFBl7J3kXGNsNUXi7XD0bgi5DaBRdISLW0k
Y0ffRLCV4IW+RTmqbPPIr1keD9K/ALz3yQ49Beg9jTq/ZGW0i9JJ5YzKZvWfoUAX
xwxphRLtixb1qF/1k9WwJUhCqqtnGzVX3D2swZuoQstcYwnmro41HILhSV+xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUs9g8W1XM4aFAB/T4hSI4rdO95UIwHwYDVR0j
BBgwFoAUTph2XU2SgtoQjvDuTLOEZwjrOy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMC80RTk4NzY1RDREOTI4MkRBMTA4RUYwRUU0Q0IzODQ2NzA4RUIzQjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFOTg3NjVENEQ5MjgyREEx
MDhFRjBFRTRDQjM4NDY3MDhFQjNCMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2RWMvMC80
RTk4NzY1RDREOTI4MkRBMTA4RUYwRUU0Q0IzODQ2NzA4RUIzQjJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABU6GAmL1MTgKn0fDj5LI17JQunsdQ2hBva/teOTWEpjYw2dzGBz2pEzCwPBI
dAlUBuZdtwa0tUxzBO5YDeKEeJTXTdMZnOQ201fUpHmSLc0hMpzOPWzS62vj2vmS
BJBmNkj5bqfzrF0K2+udi0RxhaLe6ulb7PFBUkj6xp8jbF9YEXN+zLhcN/icYyQh
z8TWriDT5uf3Ev3e+5A+rLxA96VkrI/yiQ5TsPxmiYx5iZMQmlyUS/csHvEkMcVd
nmO+piAZSdFMTEK4nxA9CANimMNS2Ti5e70SyDg7JNah5j3Q8wcdgZ/ut9g1ryxi
O2NunSEobf4m0Gz+zamOKJ9Z4w==
-----END CERTIFICATE-----