Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft
File:                     D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft (raw, json)
Hash identifier:          esEcEOs4UvzyxMKDWO+CZVHzpOyNEN4w7JP2fGECbps=
Subject key identifier:   80:C4:3E:ED:AE:DF:90:5C:A9:BD:77:06:8C:F5:5F:6B:2C:A7:10:32
Authority key identifier: D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB
Certificate issuer:       /CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
Certificate serial:       02A280278B9D869203BBB03E28ABA1355906162C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft
Manifest number:          25
Signing time:             Sun 14 Apr 2024 18:15:35 +0000
Manifest this update:     Sun 14 Apr 2024 18:10:35 +0000
Manifest next update:     Mon 15 Apr 2024 20:58:35 +0000
Files and hashes:         1: D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.crl (hash: 7AMK4IQgV20y1MV+NSruxeHehVdNEwUSIJNCCzB4rEw=)
                          2: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: HKlBwlLqr56MaMlEfF6V8YrAmae7QNeUJtZyJYtlHO0=)
                          3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: 1TlB/8X8z+X1NfWYpLaxPBB1UYENfIhbEq2SbY+nBSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a2:80:27:8b:9d:86:92:03:bb:b0:3e:28:ab:a1:35:59:06:16:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6F553ECFCDBA2522E44AAACF387799E1CA98EDB
        Validity
            Not Before: Apr 14 18:10:35 2024 GMT
            Not After : Apr 15 20:58:35 2024 GMT
        Subject: CN=80C43EEDAEDF905CA9BD77068CF55F6B2CA71032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:e6:af:11:ff:20:88:24:9f:40:69:e6:80:
                    06:a0:88:ba:81:4f:5e:d5:05:d7:ac:0e:f2:bd:b3:
                    8b:81:b3:66:41:40:53:c0:f5:97:c3:1c:3d:bf:2d:
                    95:a0:5d:e8:35:a8:44:44:75:e9:eb:d3:ed:8f:75:
                    6e:ee:3c:cc:3a:2b:45:c4:d3:1b:9a:6a:cd:b4:71:
                    7c:c9:c1:d4:ac:31:53:ec:36:75:1a:bf:b3:4f:d7:
                    be:15:f0:be:d4:eb:41:82:62:ea:e3:7d:23:05:54:
                    12:a4:13:17:35:eb:f7:80:67:f1:04:ea:6c:0b:ff:
                    00:c8:5e:32:c7:ea:43:bc:6a:d1:aa:53:a2:a7:f4:
                    bc:94:cc:ed:23:72:cd:fe:a6:0a:b5:e3:5b:86:cc:
                    81:e7:48:28:e8:52:ba:fd:33:c8:a5:67:4b:0a:a1:
                    f3:2e:02:1c:f6:36:23:b2:3f:27:19:0b:89:d7:db:
                    8d:30:a1:88:43:c7:bf:47:4f:61:5b:91:57:97:10:
                    0c:36:06:83:fc:3b:c0:50:ab:c9:52:dc:41:4a:fd:
                    0d:71:15:52:e0:ab:6d:c6:04:df:7a:1b:b7:fe:4c:
                    68:54:8d:b6:25:7a:dc:98:80:1a:1b:d5:25:f2:4f:
                    49:7c:c3:97:5e:e4:bf:ad:e9:ce:09:6a:42:c7:99:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:3E:ED:AE:DF:90:5C:A9:BD:77:06:8C:F5:5F:6B:2C:A7:10:32
            X509v3 Authority Key Identifier:
                keyid:D6:F5:53:EC:FC:DB:A2:52:2E:44:AA:AC:F3:87:79:9E:1C:A9:8E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/D6F553ECFCDBA2522E44AAACF387799E1CA98EDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:ae:0b:14:3f:88:31:b6:0b:25:b7:27:e7:72:44:2a:cd:
         7d:53:d5:b2:67:4a:30:ec:87:d4:f3:1c:42:18:ed:d8:21:53:
         53:df:93:2c:b6:7c:47:e6:23:79:36:ce:76:43:43:aa:45:92:
         fb:60:b4:0f:e7:cd:c0:3b:4b:59:cb:03:73:af:63:81:d2:c7:
         ae:ac:49:29:08:3e:72:78:d2:9c:a3:04:37:3e:4b:11:6a:12:
         38:ba:cc:d9:df:0c:ef:d2:69:07:9a:99:13:24:fb:06:40:99:
         0c:a8:89:fb:be:8f:ac:c5:4f:fe:fd:7c:58:34:3e:89:ce:65:
         61:61:1e:a6:c4:39:26:af:0e:25:20:6c:1e:08:a9:fd:fa:7c:
         83:4f:75:89:86:f3:25:a7:a8:bc:62:a4:2f:25:a8:ab:78:94:
         71:09:88:8f:54:6e:6b:ab:f8:2e:c1:5b:a4:d8:6b:21:0e:7e:
         99:90:96:4c:e0:f9:bf:9e:3e:52:df:18:56:fc:b4:5e:33:5d:
         f8:b4:87:68:a6:ef:fa:35:bc:e2:4b:b5:78:39:0b:b9:60:7f:
         be:4f:75:dd:11:d9:80:fa:83:c7:59:e7:c5:4f:6c:c1:1b:2a:
         ff:43:48:bc:e7:0d:04:3d:04:fe:48:56:66:d0:a7:22:f9:fc:
         73:83:39:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAqKAJ4udhpIDu7A+KKuhNVkGFiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGNTUzRUNGQ0RCQTI1MjJFNDRBQUFDRjM4Nzc5OUUx
Q0E5OEVEQjAeFw0yNDA0MTQxODEwMzVaFw0yNDA0MTUyMDU4MzVaMDMxMTAvBgNV
BAMTKDgwQzQzRUVEQUVERjkwNUNBOUJENzcwNjhDRjU1RjZCMkNBNzEwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7OavEf8giCSfQGnmgAagiLqB
T17VBdesDvK9s4uBs2ZBQFPA9ZfDHD2/LZWgXeg1qEREdenr0+2PdW7uPMw6K0XE
0xuaas20cXzJwdSsMVPsNnUav7NP174V8L7U60GCYurjfSMFVBKkExc16/eAZ/EE
6mwL/wDIXjLH6kO8atGqU6Kn9LyUzO0jcs3+pgq141uGzIHnSCjoUrr9M8ilZ0sK
ofMuAhz2NiOyPycZC4nX240woYhDx79HT2FbkVeXEAw2BoP8O8BQq8lS3EFK/Q1x
FVLgq23GBN96G7f+TGhUjbYletyYgBob1SXyT0l8w5de5L+t6c4JakLHmVw/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgMQ+7a7fkFypvXcGjPVfayynEDIwHwYDVR0j
BBgwFoAU1vVT7PzbolIuRKqs84d5nhypjtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMC9ENkY1NTNFQ0ZDREJBMjUyMkU0NEFBQUNGMzg3Nzk5RTFDQTk4RURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2RjU1M0VDRkNEQkEyNTIy
RTQ0QUFBQ0YzODc3OTlFMUNBOThFREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMC9E
NkY1NTNFQ0ZDREJBMjUyMkU0NEFBQUNGMzg3Nzk5RTFDQTk4RURCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATsKuCxQ/iDG2CyW3J+dyRCrNfVPVsmdKMOyH1PMcQhjt2CFTU9+TLLZ8R+Yj
eTbOdkNDqkWS+2C0D+fNwDtLWcsDc69jgdLHrqxJKQg+cnjSnKMENz5LEWoSOLrM
2d8M79JpB5qZEyT7BkCZDKiJ+76PrMVP/v18WDQ+ic5lYWEepsQ5Jq8OJSBsHgip
/fp8g091iYbzJaeovGKkLyWoq3iUcQmIj1Rua6v4LsFbpNhrIQ5+mZCWTOD5v54+
Ut8YVvy0XjNd+LSHaKbv+jW84ku1eDkLuWB/vk913RHZgPqDx1nnxU9swRsq/0NI
vOcNBD0E/khWZtCnIvn8c4M5fw==
-----END CERTIFICATE-----