Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.mft
File:                     0E0815184FB056808BEADEF778AC358B56780EE2.mft (raw, json)
Hash identifier:          rfL5Ny0eFzvlI8RSoI+eG6q4HI/4P7H+9VYLI5jvu8Q=
Subject key identifier:   A9:1F:38:9B:AA:8C:5E:9F:BB:C1:47:38:FB:1F:DC:28:69:86:4F:72
Authority key identifier: 0E:08:15:18:4F:B0:56:80:8B:EA:DE:F7:78:AC:35:8B:56:78:0E:E2
Certificate issuer:       /CN=0E0815184FB056808BEADEF778AC358B56780EE2
Certificate serial:       44B24EE48F5F82CD31E3493D63119D527422E30D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E0815184FB056808BEADEF778AC358B56780EE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.mft
Manifest number:          90
Signing time:             Tue 14 Mar 2023 14:34:32 +0000
Manifest this update:     Tue 14 Mar 2023 14:29:32 +0000
Manifest next update:     Wed 15 Mar 2023 17:43:32 +0000
Files and hashes:         1: 34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa (hash: opL72AEddTERyCMZ0N0UJbM5Xk1KDrjmg4BLK2x9/hE=)
                          2: 0E0815184FB056808BEADEF778AC358B56780EE2.crl (hash: qNNis9gToTsLkEv774J+iRfigzI3k4gGpI4oyZQCS/o=)
                          3: 323830343a383331303a3a2f33322d313238203d3e20323732313734.roa (hash: MIUonh1/UQVQKTAtSAyHrd+o2hSXm35X0cVTfWUx0Zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:4e:e4:8f:5f:82:cd:31:e3:49:3d:63:11:9d:52:74:22:e3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0815184FB056808BEADEF778AC358B56780EE2
        Validity
            Not Before: Mar 14 14:29:32 2023 GMT
            Not After : Mar 15 17:43:32 2023 GMT
        Subject: CN=A91F389BAA8C5E9FBBC14738FB1FDC2869864F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:9c:86:3f:ed:aa:ce:d5:57:5f:7d:72:b9:
                    7f:7a:7c:3d:54:fa:04:36:7f:ce:4b:6c:53:a2:76:
                    d4:d4:55:6d:ef:91:23:31:9f:84:92:ff:c7:81:8c:
                    a1:fb:9f:dd:e2:e6:5c:3b:03:fe:a0:e1:95:f5:c9:
                    aa:9e:08:38:c6:94:75:7a:d5:92:64:6f:7e:4b:b6:
                    ec:8b:ee:24:2f:c7:1c:e7:47:e6:b3:3f:56:8c:a1:
                    c0:1b:a5:eb:aa:6e:a4:08:df:a0:d7:76:04:3f:22:
                    88:77:df:80:11:16:00:ec:be:ae:ee:44:d7:a0:82:
                    71:f9:dc:5e:13:b4:2f:93:f7:04:ad:f5:09:88:80:
                    91:87:59:aa:fd:57:67:21:11:e7:02:d5:31:b4:82:
                    28:b3:35:39:09:66:73:08:04:0d:37:5c:d8:ff:4a:
                    21:f6:a2:61:99:b1:11:b9:2d:b0:cd:65:8e:6e:07:
                    52:d1:c8:a1:0a:d3:8b:f0:b8:31:c4:95:8c:1b:9d:
                    84:80:2c:31:2d:0a:cf:d4:5e:ba:bb:8d:76:9a:84:
                    5a:64:6e:1e:e6:27:3a:43:7e:c7:9c:bc:53:99:83:
                    8c:71:75:45:84:20:7d:25:f6:36:60:bd:24:bc:6d:
                    7d:00:0c:e7:a6:73:31:ad:fd:ba:e0:ec:e0:c2:4c:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:38:9B:AA:8C:5E:9F:BB:C1:47:38:FB:1F:DC:28:69:86:4F:72
            X509v3 Authority Key Identifier:
                keyid:0E:08:15:18:4F:B0:56:80:8B:EA:DE:F7:78:AC:35:8B:56:78:0E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E0815184FB056808BEADEF778AC358B56780EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/0E0815184FB056808BEADEF778AC358B56780EE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:00:d3:31:de:3d:7f:47:b9:05:47:0a:b0:00:12:62:88:76:
         f7:40:51:19:9b:2e:a8:c8:9b:73:bd:cb:4f:27:f3:8c:cd:32:
         0c:af:8c:64:2e:95:95:13:95:d6:87:68:cc:88:10:5f:c5:83:
         bd:54:c2:43:5a:dd:b4:fa:87:93:0e:71:14:3c:f1:47:50:0f:
         62:43:37:1d:9c:c3:61:e7:f8:ce:29:6c:c4:d2:ca:56:00:c8:
         df:81:9a:15:c0:71:be:da:39:02:c1:71:a4:1e:57:b7:58:e4:
         ca:28:06:af:b7:2e:bf:bd:bf:cd:cc:61:5a:c8:82:26:cb:c6:
         8f:ae:13:e4:b5:38:20:34:a8:fb:9c:22:f7:7e:02:24:bf:2b:
         d3:48:52:cc:9d:c4:2b:4e:47:b0:c2:67:d1:28:fd:e9:5a:63:
         c8:f8:9c:ab:15:d3:c1:4b:f1:1f:b8:ea:d0:c9:7c:9a:21:ad:
         6f:cc:09:62:e3:07:66:27:9c:dc:88:9c:ef:08:6c:33:ed:2e:
         47:3f:8a:97:b8:0a:60:7b:d3:52:e5:d2:8b:9f:f6:86:4f:47:
         49:74:f8:29:19:72:78:76:fc:5d:47:c5:29:24:46:26:df:7d:
         fe:c5:bf:29:3e:84:fc:db:2e:c3:cb:65:b0:12:83:31:44:c3:
         d1:36:83:06
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIURLJO5I9fgs0x40k9YxGdUnQi4w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUwODE1MTg0RkIwNTY4MDhCRUFERUY3NzhBQzM1OEI1
Njc4MEVFMjAeFw0yMzAzMTQxNDI5MzJaFw0yMzAzMTUxNzQzMzJaMDMxMTAvBgNV
BAMTKEE5MUYzODlCQUE4QzVFOUZCQkMxNDczOEZCMUZEQzI4Njk4NjRGNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BpyGP+2qztVXX31yuX96fD1U
+gQ2f85LbFOidtTUVW3vkSMxn4SS/8eBjKH7n93i5lw7A/6g4ZX1yaqeCDjGlHV6
1ZJkb35LtuyL7iQvxxznR+azP1aMocAbpeuqbqQI36DXdgQ/Ioh334ARFgDsvq7u
RNeggnH53F4TtC+T9wSt9QmIgJGHWar9V2chEecC1TG0giizNTkJZnMIBA03XNj/
SiH2omGZsRG5LbDNZY5uB1LRyKEK04vwuDHElYwbnYSALDEtCs/UXrq7jXaahFpk
bh7mJzpDfsecvFOZg4xxdUWEIH0l9jZgvSS8bX0ADOemczGt/brg7ODCTGPFAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUqR84m6qMXp+7wUc4+x/cKGmGT3IwHwYDVR0j
BBgwFoAUDggVGE+wVoCL6t73eKw1i1Z4DuIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81RDVpeUNuaE1qcU1Na1czVFpkM3l5VmhCd3k2R3ozMkQxRTZIcHBhSGEx
LzAvMEUwODE1MTg0RkIwNTY4MDhCRUFERUY3NzhBQzM1OEI1Njc4MEVFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRTA4MTUxODRGQjA1NjgwOEJF
QURFRjc3OEFDMzU4QjU2NzgwRUUyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE
NWl5Q25oTWpxTU1rVzNUWmQzeXlWaEJ3eTZHejMyRDFFNkhwcGFIYTEvMC8wRTA4
MTUxODRGQjA1NjgwOEJFQURFRjc3OEFDMzU4QjU2NzgwRUUyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
xwDTMd49f0e5BUcKsAASYoh290BRGZsuqMibc73LTyfzjM0yDK+MZC6VlROV1odo
zIgQX8WDvVTCQ1rdtPqHkw5xFDzxR1APYkM3HZzDYef4zilsxNLKVgDI34GaFcBx
vto5AsFxpB5Xt1jkyigGr7cuv72/zcxhWsiCJsvGj64T5LU4IDSo+5wi934CJL8r
00hSzJ3EK05HsMJn0Sj96VpjyPicqxXTwUvxH7jq0Ml8miGtb8wJYuMHZiec3Iic
7whsM+0uRz+Kl7gKYHvTUuXSi5/2hk9HSXT4KRlyeHb8XUfFKSRGJt99/sW/KT6E
/Nsuw8tlsBKDMUTD0TaDBg==
-----END CERTIFICATE-----