Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft
File:                     08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft (raw, json)
Hash identifier:          rdk/0hOcdUOHv/qPLSHaY19WgW9kK5/33H5Vk4PzgZk=
Subject key identifier:   C8:CF:24:E8:89:A0:B9:4B:56:A8:A9:C0:ED:4A:F2:7D:09:D5:53:16
Authority key identifier: 08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Certificate issuer:       /CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Certificate serial:       590DC316B9572251F9C1F22D162CC0F88D1FFDB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft
Manifest number:          04F5
Signing time:             Mon 15 Apr 2024 06:36:23 +0000
Manifest this update:     Mon 15 Apr 2024 06:31:23 +0000
Manifest next update:     Tue 16 Apr 2024 09:54:23 +0000
Files and hashes:         1: 08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl (hash: itXt/sMbzFvtqZhCD50trmvS5mskK6Hg2PfR9D0/jUI=)
                          2: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (hash: xr5JfIgqZO0wJazajvZubdo5ZcN4NPrCol67jS4xCwE=)
                          3: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (hash: hhBS6+u6djcxfMvZqi76WsAlziZPoaJz7hNCR2L0cDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0d:c3:16:b9:57:22:51:f9:c1:f2:2d:16:2c:c0:f8:8d:1f:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
        Validity
            Not Before: Apr 15 06:31:23 2024 GMT
            Not After : Apr 16 09:54:23 2024 GMT
        Subject: CN=C8CF24E889A0B94B56A8A9C0ED4AF27D09D55316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:4a:c9:fa:6d:6d:e5:c9:7b:4f:de:2f:02:
                    e5:b8:ee:4a:c0:1d:d2:79:36:bc:3d:27:6f:72:38:
                    72:3d:6e:47:b5:b9:db:70:dc:6f:ee:3a:19:1d:a9:
                    2e:a7:eb:91:e6:00:fb:c1:73:a5:83:e3:64:3c:18:
                    ee:cf:9b:bf:14:3e:65:0a:3b:0b:be:3b:d6:00:0b:
                    b4:92:94:64:b1:1b:e1:9c:12:5c:0b:0d:9f:ef:a8:
                    fe:b0:6c:c5:d3:21:ba:b3:2d:ec:c0:4d:3e:b3:9c:
                    b8:72:5d:b0:1f:4f:b4:58:71:24:4b:2d:ee:83:f4:
                    8c:89:77:01:63:34:85:06:84:ce:93:eb:6e:51:b7:
                    03:0b:5c:a5:1b:97:43:97:79:63:14:5c:bd:ee:35:
                    14:ac:a1:b5:26:5a:91:8a:0c:22:70:36:ab:da:ba:
                    a7:72:0f:1f:9d:7b:9e:bd:2c:bd:23:85:c7:43:2b:
                    0b:87:4c:46:2e:dd:45:90:c4:46:37:46:04:2e:4d:
                    af:fc:33:d8:6a:f7:14:25:9a:4d:d7:d0:b1:f5:16:
                    38:62:06:69:72:e7:3e:60:3d:9a:1e:a8:8b:87:f0:
                    50:07:28:98:e0:9b:2a:26:53:78:c5:9a:d0:04:1a:
                    5f:a2:55:5f:a5:ec:c9:8f:a0:ba:5d:6e:72:51:38:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:24:E8:89:A0:B9:4B:56:A8:A9:C0:ED:4A:F2:7D:09:D5:53:16
            X509v3 Authority Key Identifier:
                keyid:08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:86:45:c1:e8:92:27:70:52:c6:84:3f:9e:c5:a4:41:3f:17:
         3e:e7:ac:26:58:9a:82:16:a8:7a:b4:d2:91:9b:81:f4:9e:32:
         f6:50:c6:fe:0e:2d:ae:c2:12:e7:0d:2b:9e:a2:5c:c9:2a:7c:
         44:a6:28:46:09:09:41:ed:30:68:83:af:45:52:be:ff:ac:e1:
         dd:e7:10:4d:28:ee:f2:9f:56:c5:6a:ac:57:aa:02:0b:db:3f:
         89:2c:4a:e1:86:62:dd:e0:5e:bb:40:c8:95:ee:32:22:96:cf:
         1c:92:88:a3:6f:70:da:60:8c:2e:34:70:fe:1c:d5:4f:9d:d5:
         fc:91:5b:ad:3b:72:62:5b:08:d2:b7:45:39:84:96:d2:e6:5f:
         be:ae:f6:74:b1:0d:ad:72:6d:10:79:a1:4e:5d:c6:37:d3:36:
         14:9a:db:5c:f2:8e:b7:e9:d2:6a:a0:a1:f4:a2:83:f7:31:7b:
         6c:81:e6:c9:ac:d5:e9:cc:5a:e2:8d:4d:8e:52:90:34:e1:47:
         ed:31:89:c6:1d:04:a5:19:27:ac:7a:3b:a1:60:1d:d2:cb:94:
         78:15:bd:94:ce:76:90:3a:3e:de:b5:20:0f:cd:2e:c2:64:36:
         6f:54:cf:86:b5:2a:7f:03:1a:94:42:cb:0c:2e:e4:5d:e5:7e:
         0b:26:f3:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWQ3DFrlXIlH5wfItFizA+I0f/bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhDMUFBMDU1QzQ3N0RGOUEyMTY0REZDNzE0QjY5QUU5
RkFENEFDRDAeFw0yNDA0MTUwNjMxMjNaFw0yNDA0MTYwOTU0MjNaMDMxMTAvBgNV
BAMTKEM4Q0YyNEU4ODlBMEI5NEI1NkE4QTlDMEVENEFGMjdEMDlENTUzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlkrJ+m1t5cl7T94vAuW47krA
HdJ5Nrw9J29yOHI9bke1udtw3G/uOhkdqS6n65HmAPvBc6WD42Q8GO7Pm78UPmUK
Owu+O9YAC7SSlGSxG+GcElwLDZ/vqP6wbMXTIbqzLezATT6znLhyXbAfT7RYcSRL
Le6D9IyJdwFjNIUGhM6T625RtwMLXKUbl0OXeWMUXL3uNRSsobUmWpGKDCJwNqva
uqdyDx+de569LL0jhcdDKwuHTEYu3UWQxEY3RgQuTa/8M9hq9xQlmk3X0LH1Fjhi
Bmly5z5gPZoeqIuH8FAHKJjgmyomU3jFmtAEGl+iVV+l7MmPoLpdbnJROG7JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyM8k6ImguUtWqKnA7UryfQnVUxYwHwYDVR0j
BBgwFoAUCMGqBVxHffmiFk38cUtprp+tSs0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdU
VXovMC8wOEMxQUEwNTVDNDc3REY5QTIxNjRERkM3MTRCNjlBRTlGQUQ0QUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4QzFBQTA1NUM0NzdERjlB
MjE2NERGQzcxNEI2OUFFOUZBRDRBQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdUVXovMC8w
OEMxQUEwNTVDNDc3REY5QTIxNjRERkM3MTRCNjlBRTlGQUQ0QUNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANoZFweiSJ3BSxoQ/nsWkQT8XPuesJliaghaoerTSkZuB9J4y9lDG/g4trsIS
5w0rnqJcySp8RKYoRgkJQe0waIOvRVK+/6zh3ecQTSju8p9WxWqsV6oCC9s/iSxK
4YZi3eBeu0DIle4yIpbPHJKIo29w2mCMLjRw/hzVT53V/JFbrTtyYlsI0rdFOYSW
0uZfvq72dLENrXJtEHmhTl3GN9M2FJrbXPKOt+nSaqCh9KKD9zF7bIHmyazV6cxa
4o1NjlKQNOFH7TGJxh0EpRknrHo7oWAd0suUeBW9lM52kDo+3rUgD80uwmQ2b1TP
hrUqfwMalELLDC7kXeV+CybzQg==
-----END CERTIFICATE-----