Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft
File:                     7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft (raw, json)
Hash identifier:          H15kLcWCrIErdcAa1FTqsqXiH9aSzPrdMsvuZ0ZuFB0=
Subject key identifier:   93:5E:40:1F:52:B5:CA:B1:54:21:5C:1F:4D:D9:38:6D:97:4B:12:29
Authority key identifier: 7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
Certificate issuer:       /CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
Certificate serial:       729B6C868DEC1A0E2E1A34B239D7B9B553E87A3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft
Manifest number:          75
Signing time:             Tue 10 Oct 2023 21:09:49 +0000
Manifest this update:     Tue 10 Oct 2023 21:04:49 +0000
Manifest next update:     Wed 11 Oct 2023 23:43:49 +0000
Files and hashes:         1: 323830343a343466303a3a2f33322d3438203d3e20323637363632.roa (hash: iUwraubuWWitmd/gtiED7N74gd+xuY33ybcpAD7XsT8=)
                          2: 34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa (hash: jB8LdBfHb9cotYkJDeG1kEWynpjsrzFmAt9qeA1EPRM=)
                          3: 7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.crl (hash: JTTJHQJyWgVZvwnFd8dENvcsrJ/860tEqojmd2M6eAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:6c:86:8d:ec:1a:0e:2e:1a:34:b2:39:d7:b9:b5:53:e8:7a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
        Validity
            Not Before: Oct 10 21:04:49 2023 GMT
            Not After : Oct 11 23:43:49 2023 GMT
        Subject: CN=935E401F52B5CAB154215C1F4DD9386D974B1229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:d7:fd:93:18:a4:a1:f4:a3:25:88:26:63:
                    36:78:d2:67:2f:75:c2:9e:8d:52:f8:5f:07:9c:94:
                    38:75:d9:07:54:10:2c:35:d6:27:3a:71:a3:0f:d6:
                    bc:be:8d:e3:07:4e:d9:62:26:f9:6b:8e:06:0d:cc:
                    13:c4:5c:10:35:ac:5a:06:de:93:04:f4:4b:08:74:
                    e1:1b:d6:fc:f4:f6:5a:4c:c2:b3:28:be:d3:61:da:
                    d2:3a:25:62:aa:cf:7a:ac:9c:02:5c:ec:67:b8:86:
                    30:fe:ba:ef:7f:2b:d4:eb:35:7d:3b:87:3d:56:d8:
                    6a:4c:c8:52:d1:c6:85:4d:4d:f2:b0:be:50:d1:30:
                    a2:1b:af:bc:8b:ae:2f:9b:ba:f0:eb:70:65:46:b1:
                    64:fc:a1:7b:ba:17:48:73:d5:17:91:01:03:b6:d1:
                    c9:89:eb:18:ec:dd:15:72:23:ae:f1:cd:12:21:38:
                    29:ba:cf:9e:e3:d4:00:2d:7a:a6:bb:5f:73:d1:b5:
                    80:fd:c8:b4:43:f9:86:6e:be:47:95:e0:53:a8:31:
                    f6:f4:7d:e7:ea:69:51:6c:63:ae:55:67:31:f2:40:
                    a7:3f:9f:30:46:9f:62:c5:5c:fb:00:ad:91:14:42:
                    19:b6:ba:1a:d4:77:62:d3:cf:4d:09:75:23:a6:80:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:40:1F:52:B5:CA:B1:54:21:5C:1F:4D:D9:38:6D:97:4B:12:29
            X509v3 Authority Key Identifier:
                keyid:7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:48:d4:15:84:39:7b:18:0d:81:20:0c:c5:25:88:c3:07:
         bd:8a:aa:a5:3a:a6:67:72:0d:7a:af:0e:c9:af:89:d6:ce:17:
         0d:00:6d:69:c8:12:46:e7:c6:e5:ce:f9:21:bf:6c:c9:86:3d:
         4e:47:54:96:f8:06:80:d0:56:90:8d:ac:a5:8a:61:44:29:21:
         b1:6c:df:7f:77:c0:b2:4d:2b:34:9a:e0:82:b7:ba:e3:2e:60:
         61:3f:ca:d0:22:9a:c2:7b:f5:bd:51:51:39:c4:c9:f4:63:60:
         4b:a1:9a:1c:c4:5d:ba:66:a8:84:81:69:4b:ae:6a:89:9c:e2:
         54:1b:dd:09:59:6e:2e:0e:6f:7c:5f:fb:21:81:df:39:bc:20:
         11:f3:01:24:cb:c9:1d:fc:f7:05:50:ab:0b:2a:1b:dc:66:5d:
         ec:c0:ef:e0:53:04:2c:76:ad:6a:b0:ce:d1:0c:e3:99:f5:10:
         86:93:2a:aa:4e:79:58:7e:49:8a:76:c4:fd:af:b6:2c:c6:ba:
         ba:71:3d:cf:71:c3:b3:de:94:d1:13:7c:43:72:ab:25:5f:3e:
         80:c2:d8:d0:14:9a:b2:87:2e:38:9c:8c:14:43:25:1c:22:8d:
         eb:ad:80:82:34:7e:b0:c8:ed:ae:d4:43:7f:cc:93:da:29:a8:
         3e:09:3f:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcptsho3sGg4uGjSyOde5tVPoej4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FBRkNGQjlERTc0NjJCQjQ5RjA3NDhCODMwMDA0M0Qz
Qjg5NURDQTAeFw0yMzEwMTAyMTA0NDlaFw0yMzEwMTEyMzQzNDlaMDMxMTAvBgNV
BAMTKDkzNUU0MDFGNTJCNUNBQjE1NDIxNUMxRjRERDkzODZEOTc0QjEyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC139f9kxikofSjJYgmYzZ40mcv
dcKejVL4XweclDh12QdUECw11ic6caMP1ry+jeMHTtliJvlrjgYNzBPEXBA1rFoG
3pME9EsIdOEb1vz09lpMwrMovtNh2tI6JWKqz3qsnAJc7Ge4hjD+uu9/K9TrNX07
hz1W2GpMyFLRxoVNTfKwvlDRMKIbr7yLri+buvDrcGVGsWT8oXu6F0hz1ReRAQO2
0cmJ6xjs3RVyI67xzRIhOCm6z57j1AAteqa7X3PRtYD9yLRD+YZuvkeV4FOoMfb0
fefqaVFsY65VZzHyQKc/nzBGn2LFXPsArZEUQhm2uhrUd2LTz00JdSOmgKoDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk15AH1K1yrFUIVwfTdk4bZdLEikwHwYDVR0j
BBgwFoAUeq/Pud50YrtJ8HSLgwAEPTuJXcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1WZ2VMOWhqak1NdWJCYTFXWVRURlhvRjYzWnhCR0s0MllSU1hhbkxV
b00vMC83QUFGQ0ZCOURFNzQ2MkJCNDlGMDc0OEI4MzAwMDQzRDNCODk1RENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQUZDRkI5REU3NDYyQkI0
OUYwNzQ4QjgzMDAwNDNEM0I4OTVEQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU1WZ2VMOWhqak1NdWJCYTFXWVRURlhvRjYzWnhCR0s0MllSU1hhbkxVb00vMC83
QUFGQ0ZCOURFNzQ2MkJCNDlGMDc0OEI4MzAwMDQzRDNCODk1RENBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/pI1BWEOXsYDYEgDMUliMMHvYqqpTqmZ3INeq8Oya+J1s4XDQBtacgSRufG
5c75Ib9syYY9TkdUlvgGgNBWkI2spYphRCkhsWzff3fAsk0rNJrggre64y5gYT/K
0CKawnv1vVFROcTJ9GNgS6GaHMRdumaohIFpS65qiZziVBvdCVluLg5vfF/7IYHf
ObwgEfMBJMvJHfz3BVCrCyob3GZd7MDv4FMELHatarDO0QzjmfUQhpMqqk55WH5J
inbE/a+2LMa6unE9z3HDs96U0RN8Q3KrJV8+gMLY0BSasocuOJyMFEMlHCKN662A
gjR+sMjtrtRDf8yT2imoPgk/EA==
-----END CERTIFICATE-----