Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft
File:                     5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft (raw, json)
Hash identifier:          REf+yMUeAAHapq46neg0xxq3h8V2y118qcrs0ve/GKM=
Subject key identifier:   7A:FD:D1:A1:E2:AA:56:B8:D6:56:E6:C7:A7:88:19:BE:EA:FA:66:21
Authority key identifier: 5D:26:B9:FA:34:BA:01:EF:69:DE:3B:B0:18:BC:80:60:CF:3E:8E:86
Certificate issuer:       /CN=5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86
Certificate serial:       798E3AFDE75303657FA445239A26097EAED5E655
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft
Manifest number:          82
Signing time:             Mon 15 Apr 2024 02:12:16 +0000
Manifest this update:     Mon 15 Apr 2024 02:07:16 +0000
Manifest next update:     Tue 16 Apr 2024 05:53:16 +0000
Files and hashes:         1: 3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa (hash: LXxEkbEUBlwyfCk6eIklayVUw4LxeWFDmnOnEI5jcWY=)
                          2: 5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.crl (hash: U8oJKe3Qrn0jcYmpZSrRg4CKN5fX0jI+ldmA/zZlL3k=)
                          3: 323830343a366664633a3a2f33322d3438203d3e20323730363839.roa (hash: +AldHMabd94Tm67G5C3kLOXyd1zD1Lwy5KG/CIEZJ3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8e:3a:fd:e7:53:03:65:7f:a4:45:23:9a:26:09:7e:ae:d5:e6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86
        Validity
            Not Before: Apr 15 02:07:16 2024 GMT
            Not After : Apr 16 05:53:16 2024 GMT
        Subject: CN=7AFDD1A1E2AA56B8D656E6C7A78819BEEAFA6621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:a6:0b:b0:22:c2:51:64:9e:a6:04:fc:95:
                    25:21:21:8b:0f:09:63:3d:29:25:49:24:59:84:2a:
                    fc:b3:7b:2e:fa:6e:95:f1:c6:28:c3:9b:28:1b:8b:
                    19:91:a7:59:95:14:27:86:97:a5:4a:3b:b9:dd:3c:
                    b8:b5:6c:08:16:09:fe:f9:3f:ab:4b:92:34:eb:32:
                    38:63:86:53:ab:98:48:c2:ce:78:88:12:6a:9e:9c:
                    cd:e1:32:d4:32:33:a0:31:48:0c:1b:8d:8d:31:89:
                    6d:5e:ac:cb:7b:b7:af:b6:41:f0:33:d7:fe:4b:ca:
                    c1:d0:98:00:1a:08:1b:e8:8a:23:3d:69:ff:60:b2:
                    d4:1b:b6:55:8f:1e:ff:f7:ee:2a:ab:e3:6f:33:5d:
                    a7:b4:bb:df:29:96:44:46:45:ba:c3:3d:30:d6:5b:
                    97:4b:e3:e1:22:4b:17:98:98:1a:59:03:36:23:d0:
                    e6:4c:37:c6:80:bc:a3:98:6d:73:4e:6e:ce:72:99:
                    50:82:ae:a5:c2:71:0b:31:df:08:d0:28:94:d3:72:
                    58:11:31:b2:6d:e2:68:f3:46:3d:45:3f:73:30:34:
                    9c:15:8c:96:c1:35:ec:09:36:8f:43:66:a1:fd:93:
                    d9:bd:e2:53:d5:b6:b5:e0:06:37:ea:c0:46:57:cf:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:D1:A1:E2:AA:56:B8:D6:56:E6:C7:A7:88:19:BE:EA:FA:66:21
            X509v3 Authority Key Identifier:
                keyid:5D:26:B9:FA:34:BA:01:EF:69:DE:3B:B0:18:BC:80:60:CF:3E:8E:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:92:a1:6e:0e:c2:74:b0:64:c0:7e:f6:85:f2:b5:dc:39:5d:
         72:07:cf:02:79:63:b3:75:be:9c:17:36:ae:2d:d0:86:6d:e6:
         90:0f:b7:a0:c2:ec:62:5e:cf:0d:ca:4f:09:6a:cc:88:d1:df:
         76:20:7a:29:f4:fb:5f:91:37:ce:46:f3:d7:44:09:cf:4a:c7:
         9f:c1:19:e8:b7:7b:2b:73:88:82:ec:b6:ab:0f:36:a1:cf:5c:
         76:b7:9f:68:33:9a:bc:b8:4a:ed:35:1f:bd:48:7b:48:44:77:
         d7:28:e8:19:17:07:10:56:06:99:6e:7c:3f:ec:93:9b:d1:ba:
         d2:26:56:25:b6:2d:75:e7:3e:e9:18:a9:0e:13:8d:f8:97:5f:
         ea:be:bc:72:24:51:71:e6:f0:82:98:fe:97:33:36:89:05:31:
         2c:38:62:f1:5c:fe:26:b0:f6:f3:5e:44:e9:17:2a:eb:a9:7e:
         46:d0:fe:65:b3:1a:ef:e0:03:00:66:0a:ee:cc:b6:31:ea:6c:
         bf:66:69:01:55:dc:d5:67:db:fa:fd:38:66:45:10:73:fe:34:
         a8:05:50:ee:c9:cf:cd:71:d8:d2:44:02:03:2c:dc:14:1d:32:
         6f:bd:fe:e8:a9:48:d9:f8:a7:2c:03:ad:96:1f:9c:94:0e:b1:
         57:dc:54:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeY46/edTA2V/pEUjmiYJfq7V5lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyNkI5RkEzNEJBMDFFRjY5REUzQkIwMThCQzgwNjBD
RjNFOEU4NjAeFw0yNDA0MTUwMjA3MTZaFw0yNDA0MTYwNTUzMTZaMDMxMTAvBgNV
BAMTKDdBRkREMUExRTJBQTU2QjhENjU2RTZDN0E3ODgxOUJFRUFGQTY2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzKYLsCLCUWSepgT8lSUhIYsP
CWM9KSVJJFmEKvyzey76bpXxxijDmygbixmRp1mVFCeGl6VKO7ndPLi1bAgWCf75
P6tLkjTrMjhjhlOrmEjCzniIEmqenM3hMtQyM6AxSAwbjY0xiW1erMt7t6+2QfAz
1/5LysHQmAAaCBvoiiM9af9gstQbtlWPHv/37iqr428zXae0u98plkRGRbrDPTDW
W5dL4+EiSxeYmBpZAzYj0OZMN8aAvKOYbXNObs5ymVCCrqXCcQsx3wjQKJTTclgR
MbJt4mjzRj1FP3MwNJwVjJbBNewJNo9DZqH9k9m94lPVtrXgBjfqwEZXz7lTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUev3RoeKqVrjWVubHp4gZvur6ZiEwHwYDVR0j
BBgwFoAUXSa5+jS6Ae9p3juwGLyAYM8+joYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURXRDlMZnVSOVVjWWk2aFl4OVhnR1hZQUVGV2dveXVnVVlXNzNCaEFZ
VnkvMC81RDI2QjlGQTM0QkEwMUVGNjlERTNCQjAxOEJDODA2MENGM0U4RTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEMjZCOUZBMzRCQTAxRUY2
OURFM0JCMDE4QkM4MDYwQ0YzRThFODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NURXRDlMZnVSOVVjWWk2aFl4OVhnR1hZQUVGV2dveXVnVVlXNzNCaEFZVnkvMC81
RDI2QjlGQTM0QkEwMUVGNjlERTNCQjAxOEJDODA2MENGM0U4RTg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWJKhbg7CdLBkwH72hfK13DldcgfPAnljs3W+nBc2ri3Qhm3mkA+3oMLsYl7P
DcpPCWrMiNHfdiB6KfT7X5E3zkbz10QJz0rHn8EZ6Ld7K3OIguy2qw82oc9cdref
aDOavLhK7TUfvUh7SER31yjoGRcHEFYGmW58P+yTm9G60iZWJbYtdec+6RipDhON
+Jdf6r68ciRRcebwgpj+lzM2iQUxLDhi8Vz+JrD2815E6Rcq66l+RtD+ZbMa7+AD
AGYK7sy2Mepsv2ZpAVXc1Wfb+v04ZkUQc/40qAVQ7snPzXHY0kQCAyzcFB0yb73+
6KlI2finLAOtlh+clA6xV9xUOw==
-----END CERTIFICATE-----