Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.mft
File:                     DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.mft (raw, json)
Hash identifier:          kLh3ko+2zeU/vhO0YghRsb3+AjlfG9y1AmrNAnIJ8EE=
Subject key identifier:   FA:4B:9F:B7:36:8E:7A:18:4A:75:B6:9F:10:F3:51:A2:AC:40:59:74
Authority key identifier: DA:9C:5E:CB:39:C3:3F:26:56:1B:05:C5:E2:B3:29:93:AE:50:A7:BC
Certificate issuer:       /CN=DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC
Certificate serial:       501632859EE50D6B39348FEFDB8037FFB41AA7DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.mft
Manifest number:          64
Signing time:             Sun 16 Jun 2024 22:42:49 +0000
Manifest this update:     Sun 16 Jun 2024 22:37:49 +0000
Manifest next update:     Tue 18 Jun 2024 01:48:49 +0000
Files and hashes:         1: 323830343a376133633a3a2f33322d313238203d3e20323731333537.roa (hash: CanBX7Wt54bo0O86lHZPXiCPg2QlhXKUKk6ZW8z1PEA=)
                          2: 3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa (hash: cscHJAy+gvubyeh3TTczr/b4BP5TItyH2GamZial+Ds=)
                          3: DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.crl (hash: FMj1lM30+cnhYYB4p+UO+7wkPZPCeouZNxAwgi6GAkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:16:32:85:9e:e5:0d:6b:39:34:8f:ef:db:80:37:ff:b4:1a:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC
        Validity
            Not Before: Jun 16 22:37:49 2024 GMT
            Not After : Jun 18 01:48:49 2024 GMT
        Subject: CN=FA4B9FB7368E7A184A75B69F10F351A2AC405974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:99:a9:7c:b6:05:ab:4a:ef:e5:ad:1f:77:
                    7c:6b:33:89:7c:28:c6:63:b2:f7:c4:3b:6c:0e:85:
                    cc:21:e3:d7:40:33:6e:b2:06:b4:08:bd:70:34:c1:
                    f5:2e:60:d8:f7:02:79:a6:f1:31:57:f1:b2:04:fc:
                    f2:c5:1c:8c:3b:48:fa:89:99:0b:b8:84:ba:48:a4:
                    f5:2a:87:6f:d9:3c:36:97:08:72:c5:c7:f4:bb:c3:
                    ec:84:ed:e3:d0:a7:74:47:e4:53:38:49:1e:d6:37:
                    81:5b:b7:65:8c:b9:87:4e:54:86:5c:85:c2:e9:4c:
                    16:68:40:b6:d2:0f:1a:72:cb:da:30:40:72:56:b7:
                    d2:60:af:32:a6:f3:31:ee:49:e4:31:3b:63:b9:be:
                    47:ce:0f:90:18:62:1f:f1:a0:c9:b8:b8:b4:fe:3a:
                    99:a7:a2:27:75:6b:54:15:91:53:9e:44:59:ff:64:
                    22:7f:91:8e:51:60:d7:a4:67:dd:df:85:b3:57:4b:
                    e1:96:76:27:96:05:36:07:80:a7:f4:43:ef:3f:aa:
                    12:30:17:c7:25:83:d4:4b:ee:e2:51:da:c2:a5:39:
                    3d:5e:09:8c:be:eb:b8:e1:b8:bd:a4:5d:fd:2e:de:
                    a6:1c:dd:89:55:07:e5:ce:33:64:26:61:1d:e2:55:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4B:9F:B7:36:8E:7A:18:4A:75:B6:9F:10:F3:51:A2:AC:40:59:74
            X509v3 Authority Key Identifier:
                keyid:DA:9C:5E:CB:39:C3:3F:26:56:1B:05:C5:E2:B3:29:93:AE:50:A7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:01:fc:12:92:90:a8:55:68:a0:5c:84:a5:fb:86:7d:fc:
         01:4d:cd:bd:80:d3:6e:fd:29:a3:b9:a7:ac:bc:5b:85:17:d3:
         a2:0f:f3:61:1d:94:55:a2:cd:5f:3f:bf:a9:bd:0f:14:6d:b2:
         b4:93:24:32:09:d6:0d:54:f0:93:c5:66:bc:be:7e:11:aa:97:
         13:5b:37:dd:54:22:99:a7:55:d0:f5:c4:09:d0:7c:c3:50:cc:
         3d:01:c2:9c:58:95:cd:d7:aa:d5:9b:ce:24:4a:09:a6:c9:17:
         3f:cf:68:40:b4:0f:37:6c:f9:91:5d:ca:45:c4:49:63:77:ce:
         2d:42:75:58:21:c0:07:b9:cc:cd:06:b0:5a:1d:51:95:3d:5d:
         27:04:29:1d:20:64:cf:e9:d4:f9:89:3c:c9:88:b7:56:97:1b:
         12:2e:f1:46:1d:d9:53:39:4e:90:a6:dd:c2:c4:04:f5:fb:b0:
         19:55:74:61:b4:91:03:34:94:44:e1:37:5c:22:87:e1:a0:4d:
         f8:15:93:de:b6:dd:84:1e:16:1b:2b:6a:81:80:91:8a:fa:0f:
         06:a6:18:ff:25:b9:28:99:b4:98:a6:68:31:1a:64:f2:d6:fc:
         37:3c:cb:d6:3f:92:6c:50:f7:32:a9:0d:6f:c8:fa:8e:93:33:
         73:87:2b:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUBYyhZ7lDWs5NI/v24A3/7Qap94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE5QzVFQ0IzOUMzM0YyNjU2MUIwNUM1RTJCMzI5OTNB
RTUwQTdCQzAeFw0yNDA2MTYyMjM3NDlaFw0yNDA2MTgwMTQ4NDlaMDMxMTAvBgNV
BAMTKEZBNEI5RkI3MzY4RTdBMTg0QTc1QjY5RjEwRjM1MUEyQUM0MDU5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQnpmpfLYFq0rv5a0fd3xrM4l8
KMZjsvfEO2wOhcwh49dAM26yBrQIvXA0wfUuYNj3Anmm8TFX8bIE/PLFHIw7SPqJ
mQu4hLpIpPUqh2/ZPDaXCHLFx/S7w+yE7ePQp3RH5FM4SR7WN4Fbt2WMuYdOVIZc
hcLpTBZoQLbSDxpyy9owQHJWt9JgrzKm8zHuSeQxO2O5vkfOD5AYYh/xoMm4uLT+
Opmnoid1a1QVkVOeRFn/ZCJ/kY5RYNekZ93fhbNXS+GWdieWBTYHgKf0Q+8/qhIw
F8clg9RL7uJR2sKlOT1eCYy+67jhuL2kXf0u3qYc3YlVB+XOM2QmYR3iVWZBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+kuftzaOehhKdbafEPNRoqxAWXQwHwYDVR0j
BBgwFoAU2pxeyznDPyZWGwXF4rMpk65Qp7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVUxQWNSeHFwbVZaalJnM3ZnU1V3NmVpV0pKYU50MTZldkVTdktEOWVi
U1EvMS9EQTlDNUVDQjM5QzMzRjI2NTYxQjA1QzVFMkIzMjk5M0FFNTBBN0JDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBOUM1RUNCMzlDMzNGMjY1
NjFCMDVDNUUyQjMyOTkzQUU1MEE3QkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVUxQWNSeHFwbVZaalJnM3ZnU1V3NmVpV0pKYU50MTZldkVTdktEOWViU1EvMS9E
QTlDNUVDQjM5QzMzRjI2NTYxQjA1QzVFMkIzMjk5M0FFNTBBN0JDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO0cB/BKSkKhVaKBchKX7hn38AU3NvYDTbv0po7mnrLxbhRfTog/zYR2UVaLN
Xz+/qb0PFG2ytJMkMgnWDVTwk8VmvL5+EaqXE1s33VQimadV0PXECdB8w1DMPQHC
nFiVzdeq1ZvOJEoJpskXP89oQLQPN2z5kV3KRcRJY3fOLUJ1WCHAB7nMzQawWh1R
lT1dJwQpHSBkz+nU+Yk8yYi3VpcbEi7xRh3ZUzlOkKbdwsQE9fuwGVV0YbSRAzSU
ROE3XCKH4aBN+BWT3rbdhB4WGytqgYCRivoPBqYY/yW5KJm0mKZoMRpk8tb8NzzL
1j+SbFD3MqkNb8j6jpMzc4crCg==
-----END CERTIFICATE-----