Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.mft
File:                     C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.mft (raw, json)
Hash identifier:          bmHI5HP8272G8tzsay97OIs0ADlMhRM0jYsGKwV3irA=
Subject key identifier:   B4:D4:6D:E2:E2:FD:37:86:46:9D:1B:4D:84:8F:6C:84:5C:7F:56:26
Authority key identifier: C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A
Certificate issuer:       /CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
Certificate serial:       744270C3FF84E198D5EFC54DE80729DB31C4BFE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.mft
Manifest number:          3F
Signing time:             Sun 14 Apr 2024 21:48:03 +0000
Manifest this update:     Sun 14 Apr 2024 21:43:03 +0000
Manifest next update:     Mon 15 Apr 2024 23:07:03 +0000
Files and hashes:         1: C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.crl (hash: NpmRd6rjKMoRVy5SO+OD7Fm384VLmT3/VJ3X9YM0TIM=)
                          2: 34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (hash: OjAMXbzbKx0/oOdOqe/F1DS67wp2RucgF8zLRUWfMSs=)
                          3: 323830343a363738303a3a2f33322d3332203d3e20323639363332.roa (hash: msnF5Cnla44LPWkDQ7v6aiqlwgrhALiasmrz9YPbev8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:70:c3:ff:84:e1:98:d5:ef:c5:4d:e8:07:29:db:31:c4:bf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
        Validity
            Not Before: Apr 14 21:43:03 2024 GMT
            Not After : Apr 15 23:07:03 2024 GMT
        Subject: CN=B4D46DE2E2FD3786469D1B4D848F6C845C7F5626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:75:38:9a:60:25:e9:15:89:f9:17:74:a7:
                    5f:cd:8c:58:b5:66:87:f6:17:e4:e9:e0:9f:1e:dc:
                    13:6d:ea:a3:fb:58:c1:60:4b:ce:7a:45:84:85:1f:
                    3e:5b:2f:b9:96:07:61:b6:b1:83:7b:fd:85:83:0b:
                    c9:69:b1:6b:ae:24:e7:e8:f7:e9:df:a1:d2:f3:a1:
                    02:ef:28:24:36:0a:4b:cc:c0:fe:49:22:6e:4a:a7:
                    25:f0:53:7d:d5:bd:f9:34:2b:2f:a2:ca:f9:8e:fe:
                    8c:4d:77:62:5a:06:00:cd:c6:99:b2:4e:70:9c:f4:
                    38:94:8c:6d:f8:f7:3c:7d:21:71:07:68:65:72:75:
                    2c:72:fa:ce:80:2a:b6:04:c8:85:8f:d1:65:c5:14:
                    1e:4b:c0:2f:c4:4e:86:6c:4d:37:d2:e0:37:ca:ae:
                    46:39:8f:cb:fb:d3:14:e2:3e:7c:36:e9:96:f4:ec:
                    f3:c2:39:a6:13:e4:0d:a5:db:85:4b:50:3b:8d:9d:
                    17:1c:48:0c:dc:7c:b6:b4:f8:56:ca:8a:71:c0:f6:
                    f1:76:a5:39:aa:b7:7f:f1:10:a1:d1:c8:45:b9:0a:
                    a6:1d:04:7d:49:8c:4b:f7:6d:80:a8:d8:2e:76:f1:
                    6a:ed:f3:b7:bf:2b:d3:58:96:ce:65:07:85:c0:dc:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:6D:E2:E2:FD:37:86:46:9D:1B:4D:84:8F:6C:84:5C:7F:56:26
            X509v3 Authority Key Identifier:
                keyid:C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:95:46:a9:ac:b6:bd:33:cf:3b:e8:7c:e5:92:37:8c:1e:a6:
         3c:e0:39:c9:f4:5e:78:cd:af:3e:f8:35:30:d4:60:41:6f:4e:
         bc:ab:a9:33:53:c6:ba:47:89:62:65:f2:68:df:ed:86:8f:77:
         f4:b0:1f:8d:10:e0:bf:94:99:4b:0b:a4:eb:10:d9:ee:02:55:
         29:a2:9e:56:ba:16:d8:a1:f6:1f:35:2f:66:12:2c:31:c8:d1:
         a4:ef:0b:a2:e2:33:77:0e:51:05:5a:c7:64:93:49:21:d4:c2:
         84:7e:a5:10:39:62:44:b3:1a:a8:f1:9d:f5:45:63:56:3f:bd:
         84:a9:6e:f1:70:4e:9b:93:86:9c:4c:2f:a3:17:28:d6:ca:75:
         f2:bf:74:48:d2:4a:61:50:71:fa:3f:84:3e:03:d8:e0:66:bc:
         fb:70:00:da:28:6b:82:4b:f4:23:3f:f5:13:5a:9a:1e:72:d2:
         e2:97:98:1f:2d:74:c5:1a:03:9d:fd:81:98:79:68:e8:12:6e:
         50:44:c2:37:4e:5f:f8:68:db:8d:7f:1d:34:47:29:4b:2f:42:
         3d:6f:21:65:43:37:be:e4:8f:5a:2c:a3:21:2b:ec:b6:0d:85:
         1e:26:09:6d:6d:94:e3:fe:3f:7c:a5:2a:a7:ee:28:7e:f9:8d:
         0c:0a:a6:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdEJww/+E4ZjV78VN6Acp2zHEv+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCMkM0OUY4N0M0NzQ3NDJENkYwRjdDN0EzRDFEQ0M4
NDE5MzQ2QTAeFw0yNDA0MTQyMTQzMDNaFw0yNDA0MTUyMzA3MDNaMDMxMTAvBgNV
BAMTKEI0RDQ2REUyRTJGRDM3ODY0NjlEMUI0RDg0OEY2Qzg0NUM3RjU2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbnU4mmAl6RWJ+Rd0p1/NjFi1
Zof2F+Tp4J8e3BNt6qP7WMFgS856RYSFHz5bL7mWB2G2sYN7/YWDC8lpsWuuJOfo
9+nfodLzoQLvKCQ2CkvMwP5JIm5KpyXwU33Vvfk0Ky+iyvmO/oxNd2JaBgDNxpmy
TnCc9DiUjG349zx9IXEHaGVydSxy+s6AKrYEyIWP0WXFFB5LwC/EToZsTTfS4DfK
rkY5j8v70xTiPnw26Zb07PPCOaYT5A2l24VLUDuNnRccSAzcfLa0+FbKinHA9vF2
pTmqt3/xEKHRyEW5CqYdBH1JjEv3bYCo2C528Wrt87e/K9NYls5lB4XA3GrvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtNRt4uL9N4ZGnRtNhI9shFx/ViYwHwYDVR0j
BBgwFoAUybLEn4fEdHQtbw98ej0dzIQZNGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1
TDgvMC9DOUIyQzQ5Rjg3QzQ3NDc0MkQ2RjBGN0M3QTNEMURDQzg0MTkzNDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5QjJDNDlGODdDNDc0NzQy
RDZGMEY3QzdBM0QxRENDODQxOTM0NkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC9D
OUIyQzQ5Rjg3QzQ3NDc0MkQ2RjBGN0M3QTNEMURDQzg0MTkzNDZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgpVGqay2vTPPO+h85ZI3jB6mPOA5yfReeM2vPvg1MNRgQW9OvKupM1PGukeJ
YmXyaN/tho939LAfjRDgv5SZSwuk6xDZ7gJVKaKeVroW2KH2HzUvZhIsMcjRpO8L
ouIzdw5RBVrHZJNJIdTChH6lEDliRLMaqPGd9UVjVj+9hKlu8XBOm5OGnEwvoxco
1sp18r90SNJKYVBx+j+EPgPY4Ga8+3AA2ihrgkv0Iz/1E1qaHnLS4peYHy10xRoD
nf2BmHlo6BJuUETCN05f+GjbjX8dNEcpSy9CPW8hZUM3vuSPWiyjISvstg2FHiYJ
bW2U4/4/fKUqp+4ofvmNDAqmUA==
-----END CERTIFICATE-----