Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft
File:                     CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft (raw, json)
Hash identifier:          59CGjx6kUyTl8eKrUkP0ACU9OCqbl8ZErOXGBQ3W/i0=
Subject key identifier:   E7:43:36:55:BF:24:24:13:90:24:02:FA:5C:E2:F2:10:7D:BA:68:F2
Authority key identifier: CA:87:DE:2F:18:93:3F:F9:F1:B0:1E:A4:EE:8B:82:0E:44:74:4E:0E
Certificate issuer:       /CN=CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E
Certificate serial:       4482E11055E35FE6C4CF265179C6190594DB4B46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft
Manifest number:          01C3
Signing time:             Mon 18 Dec 2023 11:02:58 +0000
Manifest this update:     Mon 18 Dec 2023 10:57:58 +0000
Manifest next update:     Tue 19 Dec 2023 13:38:58 +0000
Files and hashes:         1: CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.crl (hash: 0W+ZQTXprfoJgOWS3tEdi9LKkfQq+fFXABgGNz1SluU=)
                          2: 323830343a376536383a3a2f33322d313238203d3e20323731363232.roa (hash: r6iBIBoRRdFOjr/wYxTdHq0upP+F19cI83HY37Z3MGg=)
                          3: 34352e3136332e34382e302f32322d3332203d3e20323731363232.roa (hash: aWfN6/mYr2l4eTv7T6MJjXZVPuelzvTCTuNWBSGzItc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:e1:10:55:e3:5f:e6:c4:cf:26:51:79:c6:19:05:94:db:4b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E
        Validity
            Not Before: Dec 18 10:57:58 2023 GMT
            Not After : Dec 19 13:38:58 2023 GMT
        Subject: CN=E7433655BF242413902402FA5CE2F2107DBA68F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:e7:12:26:29:6c:df:bc:1a:0b:7a:0f:3e:
                    c7:4b:80:ff:5f:96:c0:ef:77:73:0f:cf:5a:a5:3a:
                    2f:04:15:51:a0:04:9a:48:05:c1:ef:10:af:cd:4d:
                    0e:c1:a3:65:fd:63:ff:b5:77:cf:9a:43:4a:0b:d7:
                    1e:2f:ed:b9:0d:2f:b3:0c:01:d1:91:ed:68:e1:1e:
                    fd:ef:06:81:72:f0:77:75:45:34:c1:5e:4d:81:39:
                    68:05:81:b7:72:ba:62:ad:09:d7:05:03:83:49:11:
                    ef:a6:92:c3:18:74:48:ac:0e:77:b0:19:b7:cc:8e:
                    ab:00:5c:e9:a3:ae:59:fe:37:87:c2:dd:1d:22:e1:
                    63:b1:af:ab:44:6c:bf:41:1f:0a:c7:b6:36:1b:e2:
                    cc:c5:c0:c9:d0:ec:3f:fa:65:27:51:43:88:47:35:
                    b0:e0:c8:c8:17:fd:cd:5c:e3:0c:94:23:78:21:cd:
                    2d:95:7a:5a:65:e4:19:96:92:bb:4b:cb:15:9f:19:
                    ba:bd:eb:a8:e0:39:9e:6f:7d:f2:ea:21:97:0d:a3:
                    87:90:2e:d4:0c:54:91:6c:33:53:60:13:e6:5b:80:
                    68:16:73:5f:5a:aa:7b:82:d5:5f:01:6c:06:8c:df:
                    e7:c6:e1:19:53:6f:ed:b6:02:bb:89:c6:8b:e4:c6:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:36:55:BF:24:24:13:90:24:02:FA:5C:E2:F2:10:7D:BA:68:F2
            X509v3 Authority Key Identifier:
                keyid:CA:87:DE:2F:18:93:3F:F9:F1:B0:1E:A4:EE:8B:82:0E:44:74:4E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/CA87DE2F18933FF9F1B01EA4EE8B820E44744E0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:c8:18:d0:1f:47:fb:43:71:76:88:72:31:13:d2:9a:14:
         73:2f:b2:e6:b0:54:1b:66:40:28:9f:ed:d6:54:9d:06:5e:65:
         d9:06:68:26:ed:d9:17:7e:0f:a8:05:f6:ed:a2:44:9e:ff:96:
         e6:fe:3b:10:63:2a:cc:3f:47:b5:31:6d:7f:88:26:cc:75:06:
         2d:a8:22:eb:d4:52:81:bf:39:f5:d9:8d:e0:74:ce:a2:80:eb:
         22:b4:7c:e6:97:11:cb:9d:e9:ac:12:8a:ba:85:20:f9:25:5b:
         1a:b5:05:27:55:52:0b:4c:39:92:1d:29:a1:00:fe:3e:0f:4c:
         58:55:7c:9c:0b:f1:29:b6:08:eb:c1:4c:62:fd:04:8c:a9:4a:
         8d:13:51:ca:c3:76:4d:07:6a:d8:9d:2a:5e:dd:f6:95:26:1e:
         61:c0:d9:b6:ce:e3:b9:a2:3e:d8:4b:f5:ed:c1:4d:b4:86:01:
         16:b3:a5:f5:90:65:a9:b9:61:da:94:33:da:ce:2f:dd:bb:7b:
         7f:fc:a1:c1:28:6e:6b:85:8d:18:05:4d:0a:ef:60:e1:5f:07:
         b4:73:a9:22:44:2d:0f:cd:cc:09:67:eb:33:24:ef:db:aa:f3:
         4d:27:92:0d:a6:7a:db:e6:db:2d:e4:45:ec:a3:47:fd:1d:1d:
         ca:38:87:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURILhEFXjX+bEzyZRecYZBZTbS0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4N0RFMkYxODkzM0ZGOUYxQjAxRUE0RUU4QjgyMEU0
NDc0NEUwRTAeFw0yMzEyMTgxMDU3NThaFw0yMzEyMTkxMzM4NThaMDMxMTAvBgNV
BAMTKEU3NDMzNjU1QkYyNDI0MTM5MDI0MDJGQTVDRTJGMjEwN0RCQTY4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqucSJils37waC3oPPsdLgP9f
lsDvd3MPz1qlOi8EFVGgBJpIBcHvEK/NTQ7Bo2X9Y/+1d8+aQ0oL1x4v7bkNL7MM
AdGR7WjhHv3vBoFy8Hd1RTTBXk2BOWgFgbdyumKtCdcFA4NJEe+mksMYdEisDnew
GbfMjqsAXOmjrln+N4fC3R0i4WOxr6tEbL9BHwrHtjYb4szFwMnQ7D/6ZSdRQ4hH
NbDgyMgX/c1c4wyUI3ghzS2Velpl5BmWkrtLyxWfGbq966jgOZ5vffLqIZcNo4eQ
LtQMVJFsM1NgE+ZbgGgWc19aqnuC1V8BbAaM3+fG4RlTb+22AruJxovkxoCRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU50M2Vb8kJBOQJAL6XOLyEH26aPIwHwYDVR0j
BBgwFoAUyofeLxiTP/nxsB6k7ouCDkR0Tg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVvdTZqempxOEsySmdHWjUxMWJIb1Y4amh4cmMzTVVySFBUQ1IxVmhB
UGIvMC9DQTg3REUyRjE4OTMzRkY5RjFCMDFFQTRFRThCODIwRTQ0NzQ0RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBODdERTJGMTg5MzNGRjlG
MUIwMUVBNEVFOEI4MjBFNDQ3NDRFMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmVvdTZqempxOEsySmdHWjUxMWJIb1Y4amh4cmMzTVVySFBUQ1IxVmhBUGIvMC9D
QTg3REUyRjE4OTMzRkY5RjFCMDFFQTRFRThCODIwRTQ0NzQ0RTBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELLIGNAfR/tDcXaIcjET0poUcy+y5rBUG2ZAKJ/t1lSdBl5l2QZoJu3ZF34P
qAX27aJEnv+W5v47EGMqzD9HtTFtf4gmzHUGLagi69RSgb859dmN4HTOooDrIrR8
5pcRy53prBKKuoUg+SVbGrUFJ1VSC0w5kh0poQD+Pg9MWFV8nAvxKbYI68FMYv0E
jKlKjRNRysN2TQdq2J0qXt32lSYeYcDZts7juaI+2Ev17cFNtIYBFrOl9ZBlqblh
2pQz2s4v3bt7f/yhwShua4WNGAVNCu9g4V8HtHOpIkQtD83MCWfrMyTv26rzTSeS
DaZ62+bbLeRF7KNH/R0dyjiHAQ==
-----END CERTIFICATE-----