Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.mft
File:                     284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.mft (raw, json)
Hash identifier:          mrbxuZ+qPqknedo0mYnFb44ERgNsHpW4pu3VanrQ9vc=
Subject key identifier:   8E:B6:7A:D9:80:C2:58:DC:EF:75:DB:E2:37:D7:91:74:6D:1F:20:0D
Authority key identifier: 28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E
Certificate issuer:       /CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
Certificate serial:       0FAFD6B3634F7DD91960F2695DCC0DD2EBE9E3B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.mft
Manifest number:          CC
Signing time:             Mon 02 Sep 2024 09:28:44 +0000
Manifest this update:     Mon 02 Sep 2024 09:23:44 +0000
Manifest next update:     Tue 03 Sep 2024 10:19:44 +0000
Files and hashes:         1: 284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.crl (hash: RFKur41uMX0DzT1IvRPvLLM8R4xmXI4TyHKW+FnRdIY=)
                          2: 323830343a6463633a3a2f33322d3438203d3e203238363338.roa (hash: SLouFbJC0PAtM/BYQ+RbNIxUPRUtI2ve4ELwp9Tk7EY=)
                          3: 3138362e3230392e3231362e302f32322d3234203d3e203238363338.roa (hash: q/ZO00wL9YjLb8JJwFeNxCC2JrpqmhJa6WV9zMC63rM=)
                          4: 3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa (hash: B54V/jVLAZpJ75CsL/EViP8kzXmWWg0Wo3/q1dFCuR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:af:d6:b3:63:4f:7d:d9:19:60:f2:69:5d:cc:0d:d2:eb:e9:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
        Validity
            Not Before: Sep  2 09:23:44 2024 GMT
            Not After : Sep  3 10:19:44 2024 GMT
        Subject: CN=8EB67AD980C258DCEF75DBE237D791746D1F200D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:00:68:12:a4:0b:5e:2d:e2:54:9a:3f:b9:
                    4b:a4:e6:bf:27:1f:6f:03:a5:f3:b8:ed:c7:65:c7:
                    27:71:f7:dd:bf:f7:a5:b0:ba:5d:c9:40:63:16:34:
                    be:a8:60:87:ee:13:33:72:ac:14:14:01:a7:95:a7:
                    2a:b8:b0:5a:04:7d:9c:23:ee:b8:d1:48:82:f4:6c:
                    c0:ef:33:fd:04:61:a6:54:95:d4:95:2d:24:73:6f:
                    33:d4:dc:1a:9e:b1:63:9f:0f:58:31:ad:c5:1f:05:
                    10:a2:1a:01:67:fd:2d:ce:fb:4b:96:3b:bb:08:73:
                    c0:d9:a6:29:a9:27:71:08:d4:ee:7f:f8:0e:b5:ec:
                    3e:b6:aa:01:c2:9b:20:07:27:6c:63:f2:43:d3:b9:
                    99:b7:b7:bf:05:77:a3:36:62:2b:f3:20:2a:49:07:
                    18:80:f8:e7:01:c0:6c:bb:8e:03:07:3c:39:0a:09:
                    d1:87:43:91:a8:55:bf:43:6e:85:4e:f0:b0:d4:48:
                    1c:a6:1d:d3:b1:68:78:80:54:89:7f:a6:ca:6b:b3:
                    57:42:43:b6:e2:3c:d9:c7:05:10:00:b4:8f:9c:00:
                    4f:4b:a7:24:b4:0a:59:c2:30:07:ed:f5:92:34:b9:
                    d9:70:80:1b:15:11:28:5c:cc:69:fa:ba:70:5d:46:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:7A:D9:80:C2:58:DC:EF:75:DB:E2:37:D7:91:74:6D:1F:20:0D
            X509v3 Authority Key Identifier:
                keyid:28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:97:b5:18:bd:10:8b:9d:65:42:17:15:ae:d1:a3:d5:3f:
         ed:31:05:2c:59:69:f2:f1:51:80:3a:4c:59:57:5d:cf:33:8c:
         31:9e:eb:f3:1e:1e:43:15:53:bc:32:d5:7a:eb:0b:26:c5:3b:
         48:6e:6a:34:d4:d0:1f:b3:17:95:e1:3e:10:49:1e:3f:18:b9:
         ce:57:19:bd:28:4d:7a:57:a1:a1:19:80:08:2b:f9:4c:8f:13:
         a0:15:52:f0:6f:84:73:59:f4:b6:da:53:b7:e0:fe:99:65:fd:
         fc:69:35:33:a9:a0:2b:95:18:20:a1:44:b6:e6:8e:3a:42:29:
         1d:a7:f4:0a:a6:94:d9:37:c9:a0:0a:f6:d3:f0:c3:1e:f8:c3:
         ce:17:67:84:6d:e2:74:f0:9c:43:69:49:ee:77:1a:48:e0:f9:
         45:d6:93:07:e0:cf:75:7c:b5:fb:3d:8e:0b:84:97:7a:7a:23:
         1a:cd:6f:eb:45:b8:8e:f7:1a:14:4b:01:3c:79:cc:c5:cf:5d:
         45:7b:73:55:9a:bd:83:a6:be:35:e4:c8:5b:64:8c:22:c0:11:
         ef:32:ca:43:14:33:f0:87:c7:2a:f1:89:56:f0:30:e2:58:0c:
         fc:24:71:0d:07:25:e2:bd:61:b7:21:4d:68:78:80:01:47:78:
         7d:ee:f1:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD6/Ws2NPfdkZYPJpXcwN0uvp47kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0MjM0RUNGM0JFNzRCNEU0NjQxOUNDNUY0NTlGMjZC
RjlBNUI1RTAeFw0yNDA5MDIwOTIzNDRaFw0yNDA5MDMxMDE5NDRaMDMxMTAvBgNV
BAMTKDhFQjY3QUQ5ODBDMjU4RENFRjc1REJFMjM3RDc5MTc0NkQxRjIwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppwBoEqQLXi3iVJo/uUuk5r8n
H28DpfO47cdlxydx992/96Wwul3JQGMWNL6oYIfuEzNyrBQUAaeVpyq4sFoEfZwj
7rjRSIL0bMDvM/0EYaZUldSVLSRzbzPU3BqesWOfD1gxrcUfBRCiGgFn/S3O+0uW
O7sIc8DZpimpJ3EI1O5/+A617D62qgHCmyAHJ2xj8kPTuZm3t78Fd6M2YivzICpJ
BxiA+OcBwGy7jgMHPDkKCdGHQ5GoVb9DboVO8LDUSBymHdOxaHiAVIl/psprs1dC
Q7biPNnHBRAAtI+cAE9LpyS0ClnCMAft9ZI0udlwgBsVEShczGn6unBdRg1/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjrZ62YDCWNzvddviN9eRdG0fIA0wHwYDVR0j
BBgwFoAUKEI07PO+dLTkZBnMX0WfJr+aW14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZVNlJtaVhmYzVZRjFkSkpzMkpyMm1iMWliWHZ4ekJHdGl5SkpBbzZh
OGcvMS8yODQyMzRFQ0YzQkU3NEI0RTQ2NDE5Q0M1RjQ1OUYyNkJGOUE1QjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NDIzNEVDRjNCRTc0QjRF
NDY0MTlDQzVGNDU5RjI2QkY5QTVCNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjZVNlJtaVhmYzVZRjFkSkpzMkpyMm1iMWliWHZ4ekJHdGl5SkpBbzZhOGcvMS8y
ODQyMzRFQ0YzQkU3NEI0RTQ2NDE5Q0M1RjQ1OUYyNkJGOUE1QjVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK1OXtRi9EIudZUIXFa7Ro9U/7TEFLFlp8vFRgDpMWVddzzOMMZ7r8x4eQxVT
vDLVeusLJsU7SG5qNNTQH7MXleE+EEkePxi5zlcZvShNelehoRmACCv5TI8ToBVS
8G+Ec1n0ttpTt+D+mWX9/Gk1M6mgK5UYIKFEtuaOOkIpHaf0CqaU2TfJoAr20/DD
HvjDzhdnhG3idPCcQ2lJ7ncaSOD5RdaTB+DPdXy1+z2OC4SXenojGs1v60W4jvca
FEsBPHnMxc9dRXtzVZq9g6a+NeTIW2SMIsAR7zLKQxQz8IfHKvGJVvAw4lgM/CRx
DQcl4r1htyFNaHiAAUd4fe7xkQ==
-----END CERTIFICATE-----