Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft
File:                     2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft (raw, json)
Hash identifier:          NLiuLgNTHMF6Pj+P6bLB9LT+vdwkb1hTS3BmzNqN5wE=
Subject key identifier:   2D:A3:AC:AF:04:3A:A3:86:09:83:E3:2F:46:27:23:53:0A:C9:B2:D2
Authority key identifier: 2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69
Certificate issuer:       /CN=2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69
Certificate serial:       342DD141594DA8C46A59DE0E072286A48958A0C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft
Manifest number:          01D5
Signing time:             Mon 15 Apr 2024 03:01:23 +0000
Manifest this update:     Mon 15 Apr 2024 02:56:23 +0000
Manifest next update:     Tue 16 Apr 2024 06:05:23 +0000
Files and hashes:         1: 3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (hash: 11KBj11cUEoIHCbfA1Kyr3uZDIu3RbyqUxceqYw/BgE=)
                          2: 2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.crl (hash: 0hVNPi7oSqIRx9Jj857rsTHZq7yYcQyQop8EgNFXSMI=)
                          3: 323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (hash: A2Wzhj0TzZPJiMMIL57uoue1k9SGzuIIZpNHWhct6ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2d:d1:41:59:4d:a8:c4:6a:59:de:0e:07:22:86:a4:89:58:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69
        Validity
            Not Before: Apr 15 02:56:23 2024 GMT
            Not After : Apr 16 06:05:23 2024 GMT
        Subject: CN=2DA3ACAF043AA3860983E32F462723530AC9B2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:eb:06:4b:52:1c:00:39:2b:8b:e5:67:45:
                    fe:0f:3f:51:ea:cc:8a:e2:fb:5d:d0:21:54:b7:c0:
                    47:33:10:1a:14:27:50:0b:52:36:42:c7:90:1b:91:
                    3a:50:83:8f:1a:92:e3:17:92:87:4e:d0:8a:86:3d:
                    6d:96:6e:c8:f5:87:8d:b3:7d:bb:1d:d5:58:6c:ab:
                    16:7d:c7:1a:b5:41:2f:6b:a8:6d:6a:e9:35:ee:1b:
                    48:ed:6b:04:ab:59:e6:9d:ec:5b:19:ca:8e:be:c3:
                    a0:71:37:71:35:6d:10:c4:da:ab:bb:e8:bd:c4:6c:
                    45:40:1a:a0:64:29:a7:fb:a5:6d:ec:0e:13:2a:db:
                    12:b3:46:28:17:ab:4f:b3:1a:1d:54:59:a1:e8:e5:
                    09:5c:8f:98:01:18:80:26:c0:1a:55:a7:2d:db:02:
                    7a:89:cc:09:36:92:6f:2c:1e:79:23:a8:94:fb:70:
                    f0:ef:f0:29:33:de:bf:4a:97:6b:fa:0f:82:bb:ae:
                    61:67:9d:7d:4f:60:f8:98:be:17:05:2f:22:b6:07:
                    fb:95:a6:83:46:eb:2e:43:b6:97:f8:91:16:5a:7b:
                    a8:85:c3:cf:b5:a0:a6:16:16:e8:f4:ae:0e:ec:8f:
                    f9:58:31:9e:8d:26:99:31:8a:42:76:d0:2a:02:e4:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:AC:AF:04:3A:A3:86:09:83:E3:2F:46:27:23:53:0A:C9:B2:D2
            X509v3 Authority Key Identifier:
                keyid:2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:05:73:fe:3f:02:db:a3:d0:19:72:f7:a8:fd:53:0e:66:a1:
         d3:6a:e8:89:23:71:a9:ac:db:78:13:25:70:51:b8:c0:29:d7:
         bf:f8:65:1d:a1:7d:a9:cd:e1:2d:7a:eb:46:7a:f5:69:ca:3a:
         16:20:92:b7:19:1c:06:cd:d7:18:18:5c:75:02:ca:c5:c1:e4:
         92:1a:23:5f:e1:1e:69:c9:fb:13:3c:e2:b8:d3:0a:8b:f2:79:
         02:d2:15:2e:21:ee:73:e3:91:99:57:55:03:2e:28:ff:51:59:
         54:79:7e:4e:78:17:64:c6:a3:93:9a:b0:ba:ed:09:d9:83:fe:
         8b:e1:10:3e:99:06:cb:77:24:bf:0c:e5:b9:8c:69:80:80:47:
         61:9e:04:28:c2:39:aa:3d:9b:ba:8e:c1:5a:78:9e:9b:43:d9:
         b6:f5:96:1a:d9:a8:c7:3b:da:bb:92:79:ce:8e:d5:08:96:8a:
         7b:6d:1d:d3:80:30:fd:55:b7:a9:c9:1f:15:74:0d:b8:0b:61:
         94:7a:22:b8:bb:35:a7:42:96:f0:ae:a8:40:f7:6c:90:6c:85:
         99:43:79:ee:28:6b:5c:a2:30:ba:12:3d:1f:e4:1c:1f:4e:06:
         c9:31:6b:2f:61:34:c9:e7:40:e3:b9:69:85:97:5c:35:5e:f1:
         90:8f:b1:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNC3RQVlNqMRqWd4OByKGpIlYoMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNDMEM3M0JCMEFDQzdBOTc0N0Y4RTk2MjI0RDUzN0NC
QTJDQUU2OTAeFw0yNDA0MTUwMjU2MjNaFw0yNDA0MTYwNjA1MjNaMDMxMTAvBgNV
BAMTKDJEQTNBQ0FGMDQzQUEzODYwOTgzRTMyRjQ2MjcyMzUzMEFDOUIyRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKa+sGS1IcADkri+VnRf4PP1Hq
zIri+13QIVS3wEczEBoUJ1ALUjZCx5AbkTpQg48akuMXkodO0IqGPW2Wbsj1h42z
fbsd1VhsqxZ9xxq1QS9rqG1q6TXuG0jtawSrWead7FsZyo6+w6BxN3E1bRDE2qu7
6L3EbEVAGqBkKaf7pW3sDhMq2xKzRigXq0+zGh1UWaHo5Qlcj5gBGIAmwBpVpy3b
AnqJzAk2km8sHnkjqJT7cPDv8Ckz3r9Kl2v6D4K7rmFnnX1PYPiYvhcFLyK2B/uV
poNG6y5Dtpf4kRZae6iFw8+1oKYWFuj0rg7sj/lYMZ6NJpkxikJ20CoC5JzLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULaOsrwQ6o4YJg+MvRicjUwrJstIwHwYDVR0j
BBgwFoAULMDHO7Csx6l0f46WIk1TfLosrmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyMmhvQ1lWeDc2dUFlNmdKRm0xc2lnU0RWRTJRb3BneEU4NTVIZVlY
THEvMC8yQ0MwQzczQkIwQUNDN0E5NzQ3RjhFOTYyMjRENTM3Q0JBMkNBRTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDQzBDNzNCQjBBQ0M3QTk3
NDdGOEU5NjIyNEQ1MzdDQkEyQ0FFNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUsyMmhvQ1lWeDc2dUFlNmdKRm0xc2lnU0RWRTJRb3BneEU4NTVIZVlYTHEvMC8y
Q0MwQzczQkIwQUNDN0E5NzQ3RjhFOTYyMjRENTM3Q0JBMkNBRTY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWQVz/j8C26PQGXL3qP1TDmah02roiSNxqazbeBMlcFG4wCnXv/hlHaF9qc3h
LXrrRnr1aco6FiCStxkcBs3XGBhcdQLKxcHkkhojX+Eeacn7EzziuNMKi/J5AtIV
LiHuc+ORmVdVAy4o/1FZVHl+TngXZMajk5qwuu0J2YP+i+EQPpkGy3ckvwzluYxp
gIBHYZ4EKMI5qj2buo7BWniem0PZtvWWGtmoxzvau5J5zo7VCJaKe20d04Aw/VW3
qckfFXQNuAthlHoiuLs1p0KW8K6oQPdskGyFmUN57ihrXKIwuhI9H+QcH04GyTFr
L2E0yedA47lphZdcNV7xkI+x0w==
-----END CERTIFICATE-----