Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft
File:                     37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft (raw, json)
Hash identifier:          tLDUeuxrajIgzDAuvDs1KePDQBSPffJxCBi6LPpXRHo=
Subject key identifier:   31:DC:B9:30:08:FC:EC:15:FC:5D:65:13:D9:A4:DD:44:3D:E3:76:42
Authority key identifier: 37:F6:4A:2B:29:ED:A5:0E:6E:A5:43:D7:B6:EE:06:4C:FB:F0:B0:7C
Certificate issuer:       /CN=37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C
Certificate serial:       79DEC1EB5393866E3CB056BEEC0D623E1CE1719C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft
Manifest number:          0B
Signing time:             Wed 11 Jan 2023 21:18:12 +0000
Manifest this update:     Wed 11 Jan 2023 21:13:12 +0000
Manifest next update:     Thu 12 Jan 2023 21:43:12 +0000
Files and hashes:         1: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: dNn7SMMEDgK7Epq4BSKx23I/wOCvvoqa/+VIrZLsqFk=)
                          2: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: RAZN/zPn2RGREwJhcR0h3CXrjxwIjb5q9QyOM6GSqvA=)
                          3: 37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.crl (hash: qm7uLa3kiJbXDcJWggx7wH1ySdFNnTY1tWZgagatOZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:de:c1:eb:53:93:86:6e:3c:b0:56:be:ec:0d:62:3e:1c:e1:71:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C
        Validity
            Not Before: Jan 11 21:13:12 2023 GMT
            Not After : Jan 12 21:43:12 2023 GMT
        Subject: CN=31DCB93008FCEC15FC5D6513D9A4DD443DE37642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:6f:12:86:87:a7:a8:35:7d:6d:7c:39:1d:
                    4d:fe:b0:8b:fc:32:ee:fe:da:6e:a4:fd:7f:b1:28:
                    da:cd:47:5e:14:45:b7:c7:dc:bf:5b:50:29:65:b8:
                    30:b9:92:e8:d0:0a:20:09:99:25:be:c0:4b:d0:e6:
                    2b:b5:60:a9:02:54:04:63:39:84:cf:19:7d:92:26:
                    94:3a:4b:23:08:0e:f0:f8:20:02:b6:c6:9e:ba:b9:
                    a6:6d:09:56:99:12:30:d7:05:bf:23:e7:e8:4f:75:
                    16:66:e4:5d:f4:56:5c:e4:83:5b:45:36:98:16:4d:
                    2b:51:31:ad:50:9c:1b:6b:1a:4d:72:c2:fb:34:5d:
                    ac:68:e1:c1:e6:2a:4b:a5:fa:ca:a8:ff:04:a7:2c:
                    ac:f9:4c:d0:25:3b:0d:33:b0:21:70:2b:e1:c7:1b:
                    d4:33:80:90:a5:5b:b1:3d:d7:c9:6d:97:b8:a4:c0:
                    d6:f0:fc:73:f6:c7:e8:e1:14:cb:bb:82:bb:33:77:
                    c7:dd:04:f1:99:80:34:0a:ba:ad:24:9c:d9:76:79:
                    e4:16:f3:dc:a9:6a:2b:6f:c9:e6:15:bd:58:78:53:
                    e9:bd:8d:8a:be:51:90:78:c8:49:d2:4e:38:7b:22:
                    7f:8f:b2:b5:b7:89:bf:64:56:19:1c:38:fe:19:ec:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:B9:30:08:FC:EC:15:FC:5D:65:13:D9:A4:DD:44:3D:E3:76:42
            X509v3 Authority Key Identifier:
                keyid:37:F6:4A:2B:29:ED:A5:0E:6E:A5:43:D7:B6:EE:06:4C:FB:F0:B0:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:f7:2c:d6:86:55:7b:71:a9:d9:00:f7:88:30:08:35:74:
         eb:d0:19:41:83:bf:ec:1b:2e:0e:1f:97:a9:88:09:c6:18:9d:
         4d:b2:52:86:d3:67:7f:2c:4c:6c:18:bb:c6:5a:7c:04:f1:2f:
         1d:dc:ac:76:ed:61:fe:22:0c:ed:c2:1d:09:d7:23:26:d5:11:
         12:f9:b0:b2:ba:82:d2:a0:1d:6c:0d:78:6e:e6:65:ec:aa:d8:
         1f:af:55:03:37:60:72:be:f3:0c:c4:0a:72:df:bd:4e:32:05:
         5b:94:e2:c5:1e:66:92:a7:e4:7e:23:36:36:1b:27:7c:df:84:
         4f:0f:4b:b5:33:ab:29:ef:0c:9e:c7:89:d7:1b:97:59:7d:38:
         73:05:72:a0:4e:11:71:2a:c7:3d:45:e4:1a:2e:d1:0f:54:05:
         dc:1a:ff:9b:ef:5a:06:28:6c:e1:2a:3f:4f:f2:bf:db:cb:a3:
         13:69:75:c2:c2:29:7b:36:51:0b:81:71:2e:c8:b3:b0:28:fc:
         22:ea:a9:3d:4e:55:6a:bd:7f:94:7c:21:a7:d2:e0:76:c1:85:
         74:64:c5:a2:cf:c7:80:20:b7:7a:ed:18:96:1b:7e:6b:64:22:
         06:91:52:d1:30:15:9a:75:e3:98:e9:87:0a:70:39:49:92:4a:
         ac:3f:da:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUed7B61OThm48sFa+7A1iPhzhcZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGNjRBMkIyOUVEQTUwRTZFQTU0M0Q3QjZFRTA2NENG
QkYwQjA3QzAeFw0yMzAxMTEyMTEzMTJaFw0yMzAxMTIyMTQzMTJaMDMxMTAvBgNV
BAMTKDMxRENCOTMwMDhGQ0VDMTVGQzVENjUxM0Q5QTRERDQ0M0RFMzc2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTG8ShoenqDV9bXw5HU3+sIv8
Mu7+2m6k/X+xKNrNR14URbfH3L9bUClluDC5kujQCiAJmSW+wEvQ5iu1YKkCVARj
OYTPGX2SJpQ6SyMIDvD4IAK2xp66uaZtCVaZEjDXBb8j5+hPdRZm5F30Vlzkg1tF
NpgWTStRMa1QnBtrGk1ywvs0Xaxo4cHmKkul+sqo/wSnLKz5TNAlOw0zsCFwK+HH
G9QzgJClW7E918ltl7ikwNbw/HP2x+jhFMu7grszd8fdBPGZgDQKuq0knNl2eeQW
89ypaitvyeYVvVh4U+m9jYq+UZB4yEnSTjh7In+PsrW3ib9kVhkcOP4Z7CdVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMdy5MAj87BX8XWUT2aTdRD3jdkIwHwYDVR0j
BBgwFoAUN/ZKKyntpQ5upUPXtu4GTPvwsHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdR
VlovMC8zN0Y2NEEyQjI5RURBNTBFNkVBNTQzRDdCNkVFMDY0Q0ZCRjBCMDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3RjY0QTJCMjlFREE1MEU2
RUE1NDNEN0I2RUUwNjRDRkJGMEIwN0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdRVlovMC8z
N0Y2NEEyQjI5RURBNTBFNkVBNTQzRDdCNkVFMDY0Q0ZCRjBCMDdDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAafn3LNaGVXtxqdkA94gwCDV069AZQYO/7BsuDh+XqYgJxhidTbJShtNnfyxM
bBi7xlp8BPEvHdysdu1h/iIM7cIdCdcjJtUREvmwsrqC0qAdbA14buZl7KrYH69V
Azdgcr7zDMQKct+9TjIFW5TixR5mkqfkfiM2NhsnfN+ETw9LtTOrKe8MnseJ1xuX
WX04cwVyoE4RcSrHPUXkGi7RD1QF3Br/m+9aBihs4So/T/K/28ujE2l1wsIpezZR
C4FxLsizsCj8IuqpPU5Var1/lHwhp9LgdsGFdGTFos/HgCC3eu0Ylht+a2QiBpFS
0TAVmnXjmOmHCnA5SZJKrD/adw==
-----END CERTIFICATE-----