Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.mft
File:                     8C4651A3308D8202B96BFAF56F107E60A6D6277C.mft (raw, json)
Hash identifier:          llqoCtKbWWkptvj+BRWzw8sxPfn17FH6cHmI/NiIQdY=
Subject key identifier:   30:84:B8:C5:C4:1A:D0:08:5C:75:7A:62:36:FC:4D:42:FA:1A:C7:AD
Authority key identifier: 8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C
Certificate issuer:       /CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
Certificate serial:       2AF5642B2091565B92A5DBE907D6C998104D6D57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.mft
Manifest number:          20
Signing time:             Mon 15 Apr 2024 04:52:44 +0000
Manifest this update:     Mon 15 Apr 2024 04:47:44 +0000
Manifest next update:     Tue 16 Apr 2024 05:12:44 +0000
Files and hashes:         1: 323830343a336161343a3a2f33322d3436203d3e20323636313031.roa (hash: odAj0lp8CEGiC6oVlUKxTbhosYh4uCYrMkmIhD8f6qg=)
                          2: 8C4651A3308D8202B96BFAF56F107E60A6D6277C.crl (hash: R27EhVcXnRAFC0DsHNV/OzCbShX1T+U2qqsIZU14LTY=)
                          3: 34352e352e3231322e302f32322d3234203d3e20323636313031.roa (hash: hYVNt3NU01CISdIdjj68GnPyaKlNeK75qXOShKrZxsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f5:64:2b:20:91:56:5b:92:a5:db:e9:07:d6:c9:98:10:4d:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
        Validity
            Not Before: Apr 15 04:47:44 2024 GMT
            Not After : Apr 16 05:12:44 2024 GMT
        Subject: CN=3084B8C5C41AD0085C757A6236FC4D42FA1AC7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:e0:2f:13:af:07:e4:e7:d0:16:93:e5:91:
                    15:fd:30:7e:7e:82:3e:05:77:3e:95:58:60:17:9b:
                    89:d7:33:b0:ff:2b:9a:b4:43:35:f3:60:d5:ee:a1:
                    28:50:a2:e2:b4:7a:fe:c3:cc:f5:3b:9b:13:44:30:
                    d2:18:cf:5b:69:15:d9:e4:e3:ab:41:33:53:78:51:
                    96:32:a5:43:07:01:18:cc:94:e5:3c:87:b1:50:f7:
                    85:f9:1c:bb:71:2a:44:2a:31:90:31:82:de:8b:4b:
                    34:8c:4f:68:7b:01:26:a7:76:1b:65:fa:c4:23:34:
                    42:ad:37:8f:e4:cf:87:ed:7c:02:fe:f8:65:9f:2e:
                    34:4f:84:6d:12:17:be:63:53:fb:fb:88:4b:5c:2b:
                    e0:91:10:8d:89:8e:83:2f:56:19:c7:b9:f3:ea:9f:
                    11:5c:4f:05:e7:ad:b8:44:30:0b:56:09:1a:aa:77:
                    a9:52:48:d1:82:98:01:07:42:b8:91:11:68:e9:e4:
                    94:e4:7d:c8:74:55:f1:7d:ec:25:03:32:f9:0e:49:
                    21:97:a3:61:3e:f6:e1:72:35:30:29:50:7d:7d:b6:
                    2c:40:94:79:dc:21:a2:b2:37:5b:8c:1b:8a:de:10:
                    6f:2d:6c:c4:02:a9:f6:44:d3:f3:3f:f8:b8:fd:13:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:B8:C5:C4:1A:D0:08:5C:75:7A:62:36:FC:4D:42:FA:1A:C7:AD
            X509v3 Authority Key Identifier:
                keyid:8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:f9:19:2b:c3:e8:f4:1b:0c:10:87:fb:68:3e:f9:b7:c1:
         5e:ca:ab:f8:ea:69:0b:d3:0b:de:7b:0a:c2:a5:e2:a3:41:c7:
         9e:ec:75:ed:35:db:79:22:6a:4a:f9:2a:71:24:e4:56:9d:44:
         7f:8f:46:40:5a:ab:81:d0:bd:5c:90:e4:8f:ac:ee:7a:64:83:
         bf:0a:ed:76:9e:de:68:90:d9:61:5c:f3:3f:7b:7a:fc:2b:09:
         73:8c:35:f2:55:4c:22:47:c7:13:5a:d7:f7:90:a3:06:64:d9:
         75:1d:9d:b9:a4:ac:af:62:c7:b1:8a:d5:e0:ed:b7:b2:d1:20:
         cd:41:4b:16:c7:6c:8e:80:06:ad:79:4e:2b:ae:02:24:a8:f2:
         6b:25:c0:f3:05:09:66:ce:90:c2:19:05:0a:ce:07:be:d5:bf:
         f2:f9:7e:db:a7:bb:e0:cd:fa:e5:05:01:27:23:e3:8e:42:4b:
         0f:f6:0f:55:ca:ae:8f:75:7a:26:d0:13:3a:fb:15:10:56:63:
         88:ac:30:0d:c0:57:3c:29:8d:f9:5e:ba:34:7d:69:47:76:1c:
         b4:71:81:1b:38:56:93:dd:dd:8e:27:9b:6a:91:5c:9b:f6:d8:
         ec:45:ae:48:15:ff:96:07:30:21:6a:73:d1:f7:6e:d4:d8:81:
         41:d7:0a:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKvVkKyCRVluSpdvpB9bJmBBNbVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM0NjUxQTMzMDhEODIwMkI5NkJGQUY1NkYxMDdFNjBB
NkQ2Mjc3QzAeFw0yNDA0MTUwNDQ3NDRaFw0yNDA0MTYwNTEyNDRaMDMxMTAvBgNV
BAMTKDMwODRCOEM1QzQxQUQwMDg1Qzc1N0E2MjM2RkM0RDQyRkExQUM3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFuAvE68H5OfQFpPlkRX9MH5+
gj4Fdz6VWGAXm4nXM7D/K5q0QzXzYNXuoShQouK0ev7DzPU7mxNEMNIYz1tpFdnk
46tBM1N4UZYypUMHARjMlOU8h7FQ94X5HLtxKkQqMZAxgt6LSzSMT2h7ASandhtl
+sQjNEKtN4/kz4ftfAL++GWfLjRPhG0SF75jU/v7iEtcK+CREI2JjoMvVhnHufPq
nxFcTwXnrbhEMAtWCRqqd6lSSNGCmAEHQriREWjp5JTkfch0VfF97CUDMvkOSSGX
o2E+9uFyNTApUH19tixAlHncIaKyN1uMG4reEG8tbMQCqfZE0/M/+Lj9E6FhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMIS4xcQa0AhcdXpiNvxNQvoax60wHwYDVR0j
BBgwFoAUjEZRozCNggK5a/r1bxB+YKbWJ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhXc29NaTM0UDRKVFF2aUFTa2lXN0t4RXZEZ21aZDlUN0hSOUV5OTQz
ZmUvMS84QzQ2NTFBMzMwOEQ4MjAyQjk2QkZBRjU2RjEwN0U2MEE2RDYyNzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNDY1MUEzMzA4RDgyMDJC
OTZCRkFGNTZGMTA3RTYwQTZENjI3N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUhXc29NaTM0UDRKVFF2aUFTa2lXN0t4RXZEZ21aZDlUN0hSOUV5OTQzZmUvMS84
QzQ2NTFBMzMwOEQ4MjAyQjk2QkZBRjU2RjEwN0U2MEE2RDYyNzdDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsPT5GSvD6PQbDBCH+2g++bfBXsqr+OppC9ML3nsKwqXio0HHnux17TXbeSJq
SvkqcSTkVp1Ef49GQFqrgdC9XJDkj6zuemSDvwrtdp7eaJDZYVzzP3t6/CsJc4w1
8lVMIkfHE1rX95CjBmTZdR2duaSsr2LHsYrV4O23stEgzUFLFsdsjoAGrXlOK64C
JKjyayXA8wUJZs6QwhkFCs4HvtW/8vl+26e74M365QUBJyPjjkJLD/YPVcquj3V6
JtATOvsVEFZjiKwwDcBXPCmN+V66NH1pR3YctHGBGzhWk93djiebapFcm/bY7EWu
SBX/lgcwIWpz0fdu1NiBQdcKIA==
-----END CERTIFICATE-----