Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.mft
File:                     8529A7F829766A6E814929022549D58021B37145.mft (raw, json)
Hash identifier:          jTJOd7XZIv5UunJ/ADTD+nDCi5hbcOW22ZTzJuU3GT4=
Subject key identifier:   29:FA:C5:A5:2D:D0:F9:CC:E4:9D:44:94:D6:5E:53:3A:A0:23:97:4F
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       1B6ACA9130AC533AC8B73CC014EEF08F945F4CD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.mft
Manifest number:          0128
Signing time:             Wed 20 Sep 2023 11:27:24 +0000
Manifest this update:     Wed 20 Sep 2023 11:22:24 +0000
Manifest next update:     Thu 21 Sep 2023 14:22:24 +0000
Files and hashes:         1: 323830343a316238343a3a2f33322d3332203d3e203631373332.roa (hash: 7Ohwi+bWskMtwFzAnS325khVqGckdDah6uSIgJUbJoY=)
                          2: 3137302e3234372e31362e302f32322d3232203d3e203631373332.roa (hash: Sa+2fY5ZeElzY6oFS3ZfZsOOQy/Yoe3oMxj0vh0GWU8=)
                          3: 8529A7F829766A6E814929022549D58021B37145.crl (hash: Yyg9vaL45kmyuMmqM8bfcTIqLtATwdH2+NtR17C7bZc=)
                          4: 3133312e37322e3130342e302f32332d3233203d3e203631373332.roa (hash: Z8sgWCvQ86gPFH53hpia1CxzLmfR/cQPfSP1jwXJUTY=)
                          5: 3137302e3234372e31362e302f32332d3233203d3e203631373332.roa (hash: spUr1UsblJvD/E4NZ5QOkJ9YQTf7WDMV0kdxqfbVRc4=)
                          6: 3137302e3234372e31362e302f32342d3234203d3e203631373332.roa (hash: do2CKUoWCgfc9bh5ED3dzfoeo9pX0ySK9yYLSZ/GwEk=)
                          7: 3133312e37322e3130342e302f32322d3232203d3e203631373332.roa (hash: uheYRBbFKeP80sK6dMzXVnFxtA/Ojzl05nOEJVWcjUI=)
                          8: 3133312e37322e3130342e302f32342d3234203d3e203631373332.roa (hash: /4SXHSqmSg/rDUXqFrSXB01UfOoHbCvPzztocdr3RuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6a:ca:91:30:ac:53:3a:c8:b7:3c:c0:14:ee:f0:8f:94:5f:4c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: Sep 20 11:22:24 2023 GMT
            Not After : Sep 21 14:22:24 2023 GMT
        Subject: CN=29FAC5A52DD0F9CCE49D4494D65E533AA023974F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:46:c7:35:4b:71:77:6c:f3:cb:c3:43:93:
                    d2:e7:68:95:86:a4:0d:8a:d5:43:0a:ea:3d:da:ef:
                    6c:f4:a8:6e:4f:20:ef:b1:ad:74:5d:c8:9e:04:3b:
                    f0:bd:5d:45:10:38:25:a1:50:10:10:fb:49:44:b6:
                    fe:e5:cd:30:d3:08:d0:91:bd:a7:49:16:aa:96:a4:
                    71:44:1c:f2:c2:87:d7:5c:ce:c1:ba:76:27:fe:36:
                    85:e7:ee:de:b1:53:1b:b8:85:5c:6b:bd:e4:95:1a:
                    c1:d9:f9:a6:de:fd:ad:6e:c8:67:a7:cd:22:1d:66:
                    01:76:43:73:46:1a:04:55:c2:67:e1:2b:c0:f1:85:
                    39:7a:eb:a8:29:3d:23:3d:6c:cf:cf:73:79:26:58:
                    95:a9:7e:6c:0c:04:01:09:6d:96:43:4c:28:72:53:
                    12:80:2a:1d:47:2f:cf:d4:53:54:60:f5:ce:38:c4:
                    33:6c:eb:f3:b1:5d:b8:5a:0a:36:13:74:ba:1b:64:
                    48:54:24:50:c5:70:36:e1:5d:8e:d4:1f:f9:e7:ca:
                    66:2a:22:b5:4f:63:a3:e0:f4:d1:c1:59:85:bf:7c:
                    1d:0d:5c:fd:8d:51:10:a5:d1:68:6f:b6:01:37:52:
                    6c:eb:c1:d8:d5:fd:f7:10:f0:4e:bb:68:5e:75:4f:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FA:C5:A5:2D:D0:F9:CC:E4:9D:44:94:D6:5E:53:3A:A0:23:97:4F
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:fd:49:29:c4:b8:84:8b:86:4b:0f:80:fb:bf:72:21:7c:
         61:24:fc:b5:88:05:8f:84:54:f3:15:c8:ad:2a:e3:bf:b8:6c:
         d1:b3:62:e8:4a:be:a4:bc:e3:49:43:47:c0:e9:5e:88:8f:db:
         fb:55:42:bf:08:ae:60:12:a9:3b:cf:ab:2b:d9:9a:38:9d:57:
         af:d8:7e:fe:54:48:34:34:de:9d:1a:77:53:cf:b2:0f:a6:b9:
         37:39:a2:9e:27:a7:8c:73:87:b2:fd:0e:cc:a6:dd:f8:30:10:
         1e:95:b3:3a:f5:59:d8:62:2f:a8:c5:b1:df:4b:d8:21:97:cb:
         9b:a5:97:a1:fb:a9:6b:84:d0:e5:3f:43:22:ad:03:5b:9d:22:
         4c:1f:7f:dc:16:ef:b1:c7:4d:dd:e7:f5:17:b7:d0:e1:e4:3d:
         12:05:47:11:82:cd:35:34:c7:b0:f7:a9:64:a2:c2:ff:3d:cb:
         c0:32:36:d3:4f:f4:cc:a0:47:12:ab:66:5a:9b:0b:f9:9f:29:
         44:06:34:e2:8c:7c:94:cb:f0:34:a4:cb:21:ce:35:24:fc:66:
         3e:7c:94:60:33:27:d0:af:03:d4:6d:ce:2a:27:a3:19:e3:d1:
         39:4f:35:f6:5b:7c:57:08:a5:3d:83:d6:bc:6b:5f:0f:42:ef:
         1e:08:34:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG2rKkTCsUzrItzzAFO7wj5RfTNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyOUE3RjgyOTc2NkE2RTgxNDkyOTAyMjU0OUQ1ODAy
MUIzNzE0NTAeFw0yMzA5MjAxMTIyMjRaFw0yMzA5MjExNDIyMjRaMDMxMTAvBgNV
BAMTKDI5RkFDNUE1MkREMEY5Q0NFNDlENDQ5NEQ2NUU1MzNBQTAyMzk3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0UbHNUtxd2zzy8NDk9LnaJWG
pA2K1UMK6j3a72z0qG5PIO+xrXRdyJ4EO/C9XUUQOCWhUBAQ+0lEtv7lzTDTCNCR
vadJFqqWpHFEHPLCh9dczsG6dif+NoXn7t6xUxu4hVxrveSVGsHZ+abe/a1uyGen
zSIdZgF2Q3NGGgRVwmfhK8DxhTl666gpPSM9bM/Pc3kmWJWpfmwMBAEJbZZDTChy
UxKAKh1HL8/UU1Rg9c44xDNs6/OxXbhaCjYTdLobZEhUJFDFcDbhXY7UH/nnymYq
IrVPY6Pg9NHBWYW/fB0NXP2NURCl0WhvtgE3UmzrwdjV/fcQ8E67aF51T98RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKfrFpS3Q+czknUSU1l5TOqAjl08wHwYDVR0j
BBgwFoAUhSmn+Cl2am6BSSkCJUnVgCGzcUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldSSk1DWHB6bXZGYzl1RGJveTE0czZjUHdLcVFWREhnZ3Jvbk1rblJt
MVYvMC84NTI5QTdGODI5NzY2QTZFODE0OTI5MDIyNTQ5RDU4MDIxQjM3MTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MjlBN0Y4Mjk3NjZBNkU4
MTQ5MjkwMjI1NDlENTgwMjFCMzcxNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MldSSk1DWHB6bXZGYzl1RGJveTE0czZjUHdLcVFWREhnZ3Jvbk1rblJtMVYvMC84
NTI5QTdGODI5NzY2QTZFODE0OTI5MDIyNTQ5RDU4MDIxQjM3MTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ+j9SSnEuISLhksPgPu/ciF8YST8tYgFj4RU8xXIrSrjv7hs0bNi6Eq+pLzj
SUNHwOleiI/b+1VCvwiuYBKpO8+rK9maOJ1Xr9h+/lRINDTenRp3U8+yD6a5Nzmi
nienjHOHsv0OzKbd+DAQHpWzOvVZ2GIvqMWx30vYIZfLm6WXofupa4TQ5T9DIq0D
W50iTB9/3BbvscdN3ef1F7fQ4eQ9EgVHEYLNNTTHsPepZKLC/z3LwDI200/0zKBH
EqtmWpsL+Z8pRAY04ox8lMvwNKTLIc41JPxmPnyUYDMn0K8D1G3OKiejGePROU81
9lt8VwilPYPWvGtfD0LvHgg0iA==
-----END CERTIFICATE-----