Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.mft
File:                     5302D22E25022C2AC70F9FFE36DEA4859889F443.mft (raw, json)
Hash identifier:          JN98nmmJWAsfsfsel7bEWyvAxXoPsBkMkOGd8M2Xm3s=
Subject key identifier:   A2:5B:DE:AC:83:D4:CC:84:5D:7B:6F:0F:6E:21:ED:46:9E:63:89:CA
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       0DB2B7CFA837637C35F798D6C7B6771DD1FFCCFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.mft
Manifest number:          01DF
Signing time:             Mon 15 Apr 2024 09:00:24 +0000
Manifest this update:     Mon 15 Apr 2024 08:55:24 +0000
Manifest next update:     Tue 16 Apr 2024 09:57:24 +0000
Files and hashes:         1: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: QXpu0s36EKjsVf9ycvIwTc3dyssKAKAmIOTp1fSCOes=)
                          2: 5302D22E25022C2AC70F9FFE36DEA4859889F443.crl (hash: cm2TFC2WDbpRVomfKhl8zPmUCOH48O8cCMu3UEwxGhI=)
                          3: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: jxbfOFRWjQm9qEC5ZllX5ZkhkwE1np+YLlVpSwS9Zio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b2:b7:cf:a8:37:63:7c:35:f7:98:d6:c7:b6:77:1d:d1:ff:cc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: Apr 15 08:55:24 2024 GMT
            Not After : Apr 16 09:57:24 2024 GMT
        Subject: CN=A25BDEAC83D4CC845D7B6F0F6E21ED469E6389CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:5c:db:89:f9:33:b0:f0:34:4c:58:54:80:
                    54:54:e3:52:3c:33:2d:64:03:dd:aa:23:98:9e:04:
                    f0:f4:32:e0:0f:ae:32:31:aa:8d:14:2b:e1:62:f5:
                    c5:c4:f1:86:0c:24:93:7f:7c:e2:1a:37:3f:18:a1:
                    d8:cf:3d:0b:45:f5:d6:d7:8e:4c:ae:35:df:95:75:
                    79:8e:63:4e:37:cb:d8:cb:81:bd:ef:fa:34:d1:44:
                    a9:04:1d:64:5f:c4:5b:c2:ed:b0:76:51:69:6d:2e:
                    20:d5:1f:47:c1:82:43:f5:94:f0:d7:72:75:97:41:
                    ff:bc:e1:bc:90:b3:6d:be:96:32:b8:c9:5f:41:9a:
                    15:8d:5b:a9:da:7c:9e:1c:27:88:f5:5d:b2:c7:13:
                    2d:e5:e0:34:64:ce:ae:70:52:fb:39:79:23:21:40:
                    2d:a0:f0:5c:bd:f0:97:82:49:56:14:8c:5e:d0:54:
                    ec:6c:7f:cc:1a:95:89:d8:fa:64:2b:96:12:ba:76:
                    9e:97:68:1e:85:5d:ec:6a:7e:62:6c:6d:f5:53:86:
                    ab:fc:b0:8c:dc:c2:2b:7c:e7:9b:86:a3:f2:2a:cb:
                    cf:26:07:22:1a:21:a0:71:78:0d:96:f6:c3:fe:6f:
                    34:47:ad:6c:8e:78:53:12:05:94:83:0e:44:e7:63:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:DE:AC:83:D4:CC:84:5D:7B:6F:0F:6E:21:ED:46:9E:63:89:CA
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:aa:f9:f9:6c:66:eb:e8:7e:1a:f6:e4:72:47:1f:a1:f7:
         24:e0:ed:62:f3:dc:e4:77:f0:de:c1:0f:74:5b:5d:21:a3:36:
         35:11:ae:0a:42:4b:bd:2f:68:9b:37:af:18:2b:bb:63:17:73:
         24:a3:64:79:80:89:b6:62:33:bd:79:41:7b:ca:97:c8:f7:4b:
         f0:0c:3a:49:b6:5a:b6:ed:ac:2c:e2:14:37:61:2e:4f:ea:e9:
         7c:48:b8:d7:77:dd:f5:2a:c3:a5:09:29:09:38:37:eb:1b:cf:
         c8:b6:01:1d:c4:31:de:f5:87:1c:23:d7:98:2c:ae:a5:a3:1b:
         fc:6e:a1:c6:b2:36:ba:1a:56:38:8b:d6:d8:12:23:08:32:10:
         0f:a5:db:af:dc:57:33:d3:fb:83:b9:90:a3:a3:f5:3f:45:67:
         36:b6:43:49:5c:78:33:c9:84:d1:1c:30:41:d1:c4:23:a6:f7:
         e7:76:62:cf:b7:37:66:d8:05:9d:2a:3d:9d:f3:c4:96:c5:60:
         f1:88:3f:5e:5a:07:da:50:e0:f8:53:f6:81:15:fd:78:0a:42:
         a5:bb:d8:7d:70:7b:29:fb:9e:1c:92:ef:c3:68:31:06:5f:5f:
         32:74:4d:cf:a1:4f:89:57:65:c7:c6:58:42:2e:7d:c9:09:df:
         e5:ed:7b:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDbK3z6g3Y3w195jWx7Z3HdH/zP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwMkQyMkUyNTAyMkMyQUM3MEY5RkZFMzZERUE0ODU5
ODg5RjQ0MzAeFw0yNDA0MTUwODU1MjRaFw0yNDA0MTYwOTU3MjRaMDMxMTAvBgNV
BAMTKEEyNUJERUFDODNENENDODQ1RDdCNkYwRjZFMjFFRDQ2OUU2Mzg5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnFzbifkzsPA0TFhUgFRU41I8
My1kA92qI5ieBPD0MuAPrjIxqo0UK+Fi9cXE8YYMJJN/fOIaNz8YodjPPQtF9dbX
jkyuNd+VdXmOY043y9jLgb3v+jTRRKkEHWRfxFvC7bB2UWltLiDVH0fBgkP1lPDX
cnWXQf+84byQs22+ljK4yV9BmhWNW6nafJ4cJ4j1XbLHEy3l4DRkzq5wUvs5eSMh
QC2g8Fy98JeCSVYUjF7QVOxsf8walYnY+mQrlhK6dp6XaB6FXexqfmJsbfVThqv8
sIzcwit855uGo/Iqy88mByIaIaBxeA2W9sP+bzRHrWyOeFMSBZSDDkTnY9Q/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUolverIPUzIRde28PbiHtRp5jicowHwYDVR0j
BBgwFoAUUwLSLiUCLCrHD5/+Nt6khZiJ9EMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhn
QVUvMC81MzAyRDIyRTI1MDIyQzJBQzcwRjlGRkUzNkRFQTQ4NTk4ODlGNDQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzMDJEMjJFMjUwMjJDMkFD
NzBGOUZGRTM2REVBNDg1OTg4OUY0NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhnQVUvMC81
MzAyRDIyRTI1MDIyQzJBQzcwRjlGRkUzNkRFQTQ4NTk4ODlGNDQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD2yq+flsZuvofhr25HJHH6H3JODtYvPc5Hfw3sEPdFtdIaM2NRGuCkJLvS9o
mzevGCu7YxdzJKNkeYCJtmIzvXlBe8qXyPdL8Aw6SbZatu2sLOIUN2EuT+rpfEi4
13fd9SrDpQkpCTg36xvPyLYBHcQx3vWHHCPXmCyupaMb/G6hxrI2uhpWOIvW2BIj
CDIQD6Xbr9xXM9P7g7mQo6P1P0VnNrZDSVx4M8mE0RwwQdHEI6b353Ziz7c3ZtgF
nSo9nfPElsVg8Yg/XloH2lDg+FP2gRX9eApCpbvYfXB7KfueHJLvw2gxBl9fMnRN
z6FPiVdlx8ZYQi59yQnf5e17Sg==
-----END CERTIFICATE-----