Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.mft
File:                     BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.mft (raw, json)
Hash identifier:          17K5v8AuYngdqRVGBqqPuHrmUKsfLveq6GQLI7oSmXg=
Subject key identifier:   5E:88:DB:B4:54:58:FE:50:AD:4E:0E:EC:DE:69:37:CD:E2:39:45:6E
Authority key identifier: BE:68:2D:6B:70:28:FA:2E:02:10:F4:2F:38:8F:0D:1B:5F:2B:88:CC
Certificate issuer:       /CN=BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC
Certificate serial:       77608D3518A7CEE4F45365375E250D47D66C8C08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.mft
Manifest number:          010D
Signing time:             Mon 14 Nov 2022 20:11:55 +0000
Manifest this update:     Mon 14 Nov 2022 20:06:55 +0000
Manifest next update:     Tue 15 Nov 2022 22:26:55 +0000
Files and hashes:         1: BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.crl (hash: 89LQhqPhRy0vyw6cOOl61d+3OUBBzyS4DLjdp5k1CSg=)
                          2: 323830343a346131633a3a2f33322d3337203d3e20323637323139.roa (hash: 7qy3Vd3U4HvzMUwxQYttMnQYva0kuG97fAll30AfaPs=)
                          3: 34352e3233312e3231322e302f32332d3234203d3e20323637323139.roa (hash: Rb4AomPRHDXolNWL/xzOLQ35aKcLjY6PSQbjuAY684A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:60:8d:35:18:a7:ce:e4:f4:53:65:37:5e:25:0d:47:d6:6c:8c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC
        Validity
            Not Before: Nov 14 20:06:55 2022 GMT
            Not After : Nov 15 22:26:55 2022 GMT
        Subject: CN=5E88DBB45458FE50AD4E0EECDE6937CDE239456E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:e2:b0:10:8b:1f:b4:d4:c4:27:fa:73:e6:
                    d8:40:59:77:9f:b2:6d:1d:4d:1b:1c:2f:54:b5:d2:
                    d6:77:df:f7:f4:5b:a5:e6:e6:05:51:8d:01:23:1c:
                    42:e0:2c:e5:3e:1b:25:8d:17:f6:e3:df:fd:cf:a2:
                    83:bc:88:e7:32:e6:69:97:ad:fc:e1:3f:02:b6:f0:
                    f8:36:81:3e:c1:cc:0d:a0:f7:9c:b1:e1:1a:3b:cc:
                    06:7b:d1:ba:be:b3:6a:eb:69:71:68:4e:fd:0d:3d:
                    ff:96:b3:99:68:1f:3b:77:3a:d1:06:89:d2:4d:c3:
                    57:8f:f1:98:5e:8e:86:77:62:08:8e:b7:b3:ed:3b:
                    20:94:9b:59:34:6b:d1:ae:6f:75:cf:a9:94:9c:5a:
                    07:25:57:52:2a:28:1d:91:c4:26:0a:2e:ad:a1:53:
                    ac:5c:63:ac:cb:d6:c4:3c:05:b5:92:75:3c:04:72:
                    fc:49:16:38:76:3e:76:bc:9a:4a:fa:6c:61:bc:81:
                    3a:89:32:9f:b6:eb:8d:e9:5e:e4:b5:ac:52:7d:9d:
                    1f:d5:09:86:3f:16:99:d4:3f:6e:2c:c2:6e:5d:bb:
                    61:85:17:46:4c:7b:f4:76:c8:68:4d:41:c8:98:72:
                    bf:5d:68:b2:75:aa:32:de:7a:e6:05:70:01:26:c5:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:DB:B4:54:58:FE:50:AD:4E:0E:EC:DE:69:37:CD:E2:39:45:6E
            X509v3 Authority Key Identifier:
                keyid:BE:68:2D:6B:70:28:FA:2E:02:10:F4:2F:38:8F:0D:1B:5F:2B:88:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BE682D6B7028FA2E0210F42F388F0D1B5F2B88CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:55:35:61:67:31:55:fc:53:78:34:43:4f:3d:66:ba:9a:
         44:21:98:73:61:80:e5:46:43:56:38:6d:9e:ec:ac:9b:5e:a7:
         b5:83:1a:fa:78:98:23:ee:02:19:8d:bc:7d:75:96:83:dd:9d:
         52:7b:a7:03:bd:8f:90:cf:bd:c9:28:d9:f0:00:fd:87:13:21:
         8f:56:53:d5:8b:d6:3f:99:50:74:20:ad:25:e4:f0:4b:13:f4:
         d4:5d:9b:0c:44:3f:f7:d5:eb:41:ba:11:08:78:6e:d3:4b:39:
         62:3d:52:2c:89:83:f9:a4:fa:5a:a5:f0:48:84:16:38:84:63:
         2d:79:6f:0c:50:48:e9:1c:73:c7:d7:fb:00:a9:87:47:d9:16:
         ad:12:12:d2:36:28:dd:79:88:a6:ad:40:36:7e:15:ff:6a:a7:
         4e:89:ee:2a:af:26:5f:46:64:25:12:07:b3:42:14:bf:2b:9d:
         3b:b6:6c:9a:ba:12:ee:97:50:e6:62:79:92:42:e0:8c:20:ee:
         82:59:cb:02:c5:95:04:0d:52:7e:c9:71:90:59:30:8e:6c:05:
         25:6f:5e:fa:73:9f:05:55:96:62:3a:48:6e:41:78:63:1f:fe:
         b0:d5:ec:ed:26:71:58:8c:e5:04:31:e6:5e:a1:24:8a:77:81:
         05:c6:98:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd2CNNRinzuT0U2U3XiUNR9ZsjAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU2ODJENkI3MDI4RkEyRTAyMTBGNDJGMzg4RjBEMUI1
RjJCODhDQzAeFw0yMjExMTQyMDA2NTVaFw0yMjExMTUyMjI2NTVaMDMxMTAvBgNV
BAMTKDVFODhEQkI0NTQ1OEZFNTBBRDRFMEVFQ0RFNjkzN0NERTIzOTQ1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+OKwEIsftNTEJ/pz5thAWXef
sm0dTRscL1S10tZ33/f0W6Xm5gVRjQEjHELgLOU+GyWNF/bj3/3PooO8iOcy5mmX
rfzhPwK28Pg2gT7BzA2g95yx4Ro7zAZ70bq+s2rraXFoTv0NPf+Ws5loHzt3OtEG
idJNw1eP8ZhejoZ3YgiOt7PtOyCUm1k0a9Gub3XPqZScWgclV1IqKB2RxCYKLq2h
U6xcY6zL1sQ8BbWSdTwEcvxJFjh2Pna8mkr6bGG8gTqJMp+2643pXuS1rFJ9nR/V
CYY/FpnUP24swm5du2GFF0ZMe/R2yGhNQciYcr9daLJ1qjLeeuYFcAEmxeOxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXojbtFRY/lCtTg7s3mk3zeI5RW4wHwYDVR0j
BBgwFoAUvmgta3Ao+i4CEPQvOI8NG18riMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHkyaGhYWUVlSzN1Sll0MlRLcDNQUEY1OU1xV3hnRTNuVzNYYUc4OGs2
TDQvMC9CRTY4MkQ2QjcwMjhGQTJFMDIxMEY0MkYzODhGMEQxQjVGMkI4OENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFNjgyRDZCNzAyOEZBMkUw
MjEwRjQyRjM4OEYwRDFCNUYyQjg4Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHkyaGhYWUVlSzN1Sll0MlRLcDNQUEY1OU1xV3hnRTNuVzNYYUc4OGs2TDQvMC9C
RTY4MkQ2QjcwMjhGQTJFMDIxMEY0MkYzODhGMEQxQjVGMkI4OENDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfapVNWFnMVX8U3g0Q089ZrqaRCGYc2GA5UZDVjhtnuysm16ntYMa+niYI+4C
GY28fXWWg92dUnunA72PkM+9ySjZ8AD9hxMhj1ZT1YvWP5lQdCCtJeTwSxP01F2b
DEQ/99XrQboRCHhu00s5Yj1SLImD+aT6WqXwSIQWOIRjLXlvDFBI6Rxzx9f7AKmH
R9kWrRIS0jYo3XmIpq1ANn4V/2qnTonuKq8mX0ZkJRIHs0IUvyudO7ZsmroS7pdQ
5mJ5kkLgjCDuglnLAsWVBA1SfslxkFkwjmwFJW9e+nOfBVWWYjpIbkF4Yx/+sNXs
7SZxWIzlBDHmXqEkineBBcaYOA==
-----END CERTIFICATE-----