Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.mft
File:                     8B4661E8FECADBE1E8D841700C671C469D30F3AB.mft (raw, json)
Hash identifier:          e8FjAHtoMpbAzKiAOqifQYoo6pEq6QoTDTiZgf/VRjw=
Subject key identifier:   A8:17:F8:59:B4:86:B6:C6:B8:63:02:EF:D8:BB:20:D8:19:20:03:42
Authority key identifier: 8B:46:61:E8:FE:CA:DB:E1:E8:D8:41:70:0C:67:1C:46:9D:30:F3:AB
Certificate issuer:       /CN=8B4661E8FECADBE1E8D841700C671C469D30F3AB
Certificate serial:       6E3471BD137BC3DF809EB9B65F02E4A326A621C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.mft
Manifest number:          3F
Signing time:             Wed 22 Feb 2023 02:43:11 +0000
Manifest this update:     Wed 22 Feb 2023 02:38:11 +0000
Manifest next update:     Thu 23 Feb 2023 04:43:11 +0000
Files and hashes:         1: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: Q5NcRNb1tiHoAcAemiqLI0cyRPfHJ6bq2gacND/VSNo=)
                          2: 8B4661E8FECADBE1E8D841700C671C469D30F3AB.crl (hash: bqXoFoWM/ubR44whhHP02Mzebi6s//I5zka7v8+NQ/k=)
                          3: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: EFRQRgGkKcfjfnULCOG1YX5b7so0YppHdAUzxTECqng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:34:71:bd:13:7b:c3:df:80:9e:b9:b6:5f:02:e4:a3:26:a6:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B4661E8FECADBE1E8D841700C671C469D30F3AB
        Validity
            Not Before: Feb 22 02:38:11 2023 GMT
            Not After : Feb 23 04:43:11 2023 GMT
        Subject: CN=A817F859B486B6C6B86302EFD8BB20D819200342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:fe:2c:ef:b7:c9:e2:97:b0:0b:af:cb:c0:
                    c4:ae:4e:a4:da:29:93:e9:73:63:18:fb:d3:59:c3:
                    7a:c0:ee:fd:d7:73:c7:13:e5:eb:0e:21:78:c9:2e:
                    15:98:63:02:00:4b:93:b6:49:3e:08:8c:e4:f2:05:
                    fa:5d:56:9f:38:ae:36:bc:cc:bc:8d:28:d4:2f:f5:
                    96:f1:bd:42:b3:9e:ee:52:56:f1:8d:ca:5e:72:28:
                    28:83:10:6c:4d:91:27:54:0e:45:de:fc:41:d1:72:
                    ae:e8:84:5a:e7:1d:a4:59:4c:23:6b:a0:3a:aa:cf:
                    9b:b6:ae:3b:3b:a5:03:ef:0a:32:f3:ae:5b:c1:f4:
                    f8:ec:0d:22:60:13:74:8a:26:19:7b:27:5a:4d:a9:
                    1c:7d:9c:59:27:73:fd:43:58:aa:dc:9d:f3:b6:bd:
                    7a:c8:9b:64:98:45:b3:2d:9e:c7:13:0d:8a:c9:9b:
                    5f:16:fb:3c:5a:aa:4c:5b:fb:a0:84:35:c4:bf:f8:
                    1e:fb:7e:36:7c:ca:20:0a:61:8d:65:06:46:ff:ae:
                    9c:45:d0:38:53:fa:dd:25:d9:20:9a:2b:9a:90:ff:
                    b0:9f:28:b9:99:c0:7c:9c:a8:60:b7:55:5c:43:bb:
                    29:e6:52:03:23:83:96:36:50:8b:0c:71:16:a4:a9:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:17:F8:59:B4:86:B6:C6:B8:63:02:EF:D8:BB:20:D8:19:20:03:42
            X509v3 Authority Key Identifier:
                keyid:8B:46:61:E8:FE:CA:DB:E1:E8:D8:41:70:0C:67:1C:46:9D:30:F3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/8B4661E8FECADBE1E8D841700C671C469D30F3AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:e9:90:c2:25:af:a1:41:06:ff:71:cd:a8:b9:71:e1:51:
         d9:14:28:92:92:66:a3:41:30:1f:97:20:2c:05:61:eb:a5:36:
         71:c1:0c:98:56:4e:c6:ae:91:24:18:64:ee:9a:ec:ce:aa:71:
         9a:a7:85:61:09:40:97:1f:c6:6c:87:0a:25:59:1d:f2:5e:df:
         7b:3c:b4:b5:78:e8:3a:1e:84:60:46:48:97:78:ea:bb:19:b6:
         6a:1a:ee:c4:c8:e7:52:49:a8:30:46:98:46:6f:21:27:ad:ae:
         98:41:60:b9:1d:25:51:d8:9c:69:8f:a5:47:c3:20:93:d3:10:
         0a:38:5a:18:ba:77:f5:7f:aa:66:3f:1f:6c:23:e8:cf:c9:ce:
         bb:59:b1:44:d7:7a:a8:54:91:c5:06:56:24:c4:ce:82:ff:5f:
         a1:cb:2f:da:f5:b6:73:8f:09:7a:d4:25:ad:8c:3d:52:4b:b8:
         ea:79:2b:49:c7:64:91:f4:ea:1f:6b:96:8f:0e:59:07:5d:93:
         03:74:46:fa:96:c8:af:36:b7:d1:5c:02:0d:07:ab:7b:d2:f8:
         44:ab:56:25:49:69:70:0f:64:7c:49:95:b7:ff:e9:b7:1b:5a:
         ab:4a:bc:9c:7b:d5:c2:3e:c0:06:f2:6c:42:e3:44:f4:27:07:
         e0:61:26:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbjRxvRN7w9+Anrm2XwLkoyamIcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0NjYxRThGRUNBREJFMUU4RDg0MTcwMEM2NzFDNDY5
RDMwRjNBQjAeFw0yMzAyMjIwMjM4MTFaFw0yMzAyMjMwNDQzMTFaMDMxMTAvBgNV
BAMTKEE4MTdGODU5QjQ4NkI2QzZCODYzMDJFRkQ4QkIyMEQ4MTkyMDAzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ef4s77fJ4pewC6/LwMSuTqTa
KZPpc2MY+9NZw3rA7v3Xc8cT5esOIXjJLhWYYwIAS5O2ST4IjOTyBfpdVp84rja8
zLyNKNQv9ZbxvUKznu5SVvGNyl5yKCiDEGxNkSdUDkXe/EHRcq7ohFrnHaRZTCNr
oDqqz5u2rjs7pQPvCjLzrlvB9PjsDSJgE3SKJhl7J1pNqRx9nFknc/1DWKrcnfO2
vXrIm2SYRbMtnscTDYrJm18W+zxaqkxb+6CENcS/+B77fjZ8yiAKYY1lBkb/rpxF
0DhT+t0l2SCaK5qQ/7CfKLmZwHycqGC3VVxDuynmUgMjg5Y2UIsMcRakqWFxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqBf4WbSGtsa4YwLv2Lsg2BkgA0IwHwYDVR0j
BBgwFoAUi0Zh6P7K2+Ho2EFwDGccRp0w86swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtn
NHEvMC84QjQ2NjFFOEZFQ0FEQkUxRThEODQxNzAwQzY3MUM0NjlEMzBGM0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCNDY2MUU4RkVDQURCRTFF
OEQ4NDE3MDBDNjcxQzQ2OUQzMEYzQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtnNHEvMC84
QjQ2NjFFOEZFQ0FEQkUxRThEODQxNzAwQzY3MUM0NjlEMzBGM0FCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGJ7pkMIlr6FBBv9xzai5ceFR2RQokpJmo0EwH5cgLAVh66U2ccEMmFZOxq6R
JBhk7prszqpxmqeFYQlAlx/GbIcKJVkd8l7fezy0tXjoOh6EYEZIl3jquxm2ahru
xMjnUkmoMEaYRm8hJ62umEFguR0lUdicaY+lR8Mgk9MQCjhaGLp39X+qZj8fbCPo
z8nOu1mxRNd6qFSRxQZWJMTOgv9focsv2vW2c48JetQlrYw9Uku46nkrScdkkfTq
H2uWjw5ZB12TA3RG+pbIrza30VwCDQere9L4RKtWJUlpcA9kfEmVt//ptxtaq0q8
nHvVwj7ABvJsQuNE9CcH4GEmkA==
-----END CERTIFICATE-----