Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft
File:                     CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft (raw, json)
Hash identifier:          /QLRdGhlPuYzrq4+RF2IVOEsEIpMV55SaMXxWM2J/uA=
Subject key identifier:   10:FE:B4:A7:F6:AB:AC:F0:E0:A4:6B:5D:94:98:C5:FD:C1:8F:2A:D9
Authority key identifier: CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86
Certificate issuer:       /CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
Certificate serial:       80B01A7419CC3971BF099F0A6AD1B259532E5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft
Manifest number:          08
Signing time:             Fri 17 May 2024 08:07:33 +0000
Manifest this update:     Fri 17 May 2024 08:02:33 +0000
Manifest next update:     Sat 18 May 2024 09:51:33 +0000
Files and hashes:         1: 34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa (hash: Z4gFEO+/BCqVczEB0mr6yIygBVaSXg072thgUYWuVTo=)
                          2: 323830343a356631343a3a2f33322d313238203d3e20323639303735.roa (hash: 14qJixhvtn1S2OojF4M9+KfIWGKLa7cRacwQKODZFMU=)
                          3: CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.crl (hash: WjReUpBI+MJNNuuIHg6tTCr8L2k68kTjUb21SZbeQkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            80:b0:1a:74:19:cc:39:71:bf:09:9f:0a:6a:d1:b2:59:53:2e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
        Validity
            Not Before: May 17 08:02:33 2024 GMT
            Not After : May 18 09:51:33 2024 GMT
        Subject: CN=10FEB4A7F6ABACF0E0A46B5D9498C5FDC18F2AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:89:d2:2d:63:5c:9b:45:e9:a3:2c:e9:60:
                    3b:8e:cd:1a:95:61:99:69:6a:ec:73:24:e2:6a:94:
                    ce:86:24:e7:b6:97:8c:0f:37:22:62:b3:2f:92:6c:
                    46:da:e5:a0:f6:3b:a8:32:fe:0f:89:91:a4:d6:f4:
                    79:b5:ff:18:45:73:e0:aa:b9:52:3a:24:8d:59:d6:
                    04:42:b7:9c:7c:04:d3:ce:10:22:64:e5:72:0f:e1:
                    2b:d2:0b:96:96:dc:72:ac:c5:65:c4:51:35:9d:fa:
                    7e:aa:ac:20:ed:6e:46:76:37:ef:98:50:7c:56:aa:
                    b8:b5:33:ee:28:1c:19:46:2d:77:b2:0c:66:3a:45:
                    3e:c2:e8:90:b4:45:89:80:82:38:3b:96:62:ae:96:
                    e3:6c:f7:99:d9:38:f4:29:3b:91:d0:b3:9c:4b:be:
                    fa:37:15:52:2d:a1:e7:45:3b:d2:de:17:75:2b:41:
                    26:77:d6:a2:2f:f2:36:b9:82:e0:c4:9e:78:cb:36:
                    7a:5b:6a:d8:44:c9:61:19:67:c0:86:ea:9a:90:9d:
                    3f:21:e9:48:71:d7:5e:30:06:5c:49:0e:b3:7f:7f:
                    c5:02:46:a9:83:ac:d6:92:94:8c:98:fd:eb:d8:ca:
                    9d:8f:2e:01:ca:cb:5a:0d:2c:a2:2d:4b:95:ce:d9:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:B4:A7:F6:AB:AC:F0:E0:A4:6B:5D:94:98:C5:FD:C1:8F:2A:D9
            X509v3 Authority Key Identifier:
                keyid:CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:ff:1d:ba:a9:b3:8c:cd:df:cb:49:b4:eb:b0:aa:69:4c:
         d6:5a:1e:74:fb:28:a2:54:fe:7c:6d:5e:05:82:b4:58:4e:b0:
         9e:f6:71:be:fd:45:ce:21:65:c7:12:92:53:b0:19:b9:0b:31:
         9b:b3:c2:15:83:13:c3:69:3f:3a:2e:f1:e2:f6:37:a5:6a:00:
         88:4f:23:5c:ef:0c:86:7b:6a:7a:a3:1f:89:0c:a1:6e:5d:8d:
         97:6e:a1:91:bc:d8:d7:44:3d:1a:04:f7:8e:50:d9:f4:88:fc:
         b7:95:7b:9f:e2:e8:a6:92:12:86:a0:66:71:52:2b:09:a5:dd:
         72:e8:4e:62:25:96:26:b2:39:47:78:ae:f4:7b:4f:f8:0d:71:
         dc:6e:d2:8f:48:ee:66:c1:19:f5:58:57:3c:b5:f9:4e:3c:4c:
         cf:3e:57:b8:f7:59:f0:0c:82:a8:fc:fc:62:18:69:8c:bb:c4:
         7c:8e:4c:e1:1b:de:cd:77:18:08:c2:3a:70:04:a5:e0:9d:77:
         3f:39:16:75:1a:8a:28:88:67:93:21:9c:5e:04:92:2d:73:08:
         e9:e1:2e:5c:09:de:f4:52:f2:92:22:74:a1:91:61:b1:ad:4c:
         6e:a2:c3:28:76:e8:35:cc:f4:3e:36:5f:0a:1b:ee:67:03:ad:
         26:68:76:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAICwGnQZzDlxvwmfCmrRsllTLl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IyNDYwOTc3NkY1QThGQ0NBQTZGRjlGRjZENTRFQTRG
QzcxNTg4NjAeFw0yNDA1MTcwODAyMzNaFw0yNDA1MTgwOTUxMzNaMDMxMTAvBgNV
BAMTKDEwRkVCNEE3RjZBQkFDRjBFMEE0NkI1RDk0OThDNUZEQzE4RjJBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO74nSLWNcm0XpoyzpYDuOzRqV
YZlpauxzJOJqlM6GJOe2l4wPNyJisy+SbEba5aD2O6gy/g+JkaTW9Hm1/xhFc+Cq
uVI6JI1Z1gRCt5x8BNPOECJk5XIP4SvSC5aW3HKsxWXEUTWd+n6qrCDtbkZ2N++Y
UHxWqri1M+4oHBlGLXeyDGY6RT7C6JC0RYmAgjg7lmKuluNs95nZOPQpO5HQs5xL
vvo3FVItoedFO9LeF3UrQSZ31qIv8ja5guDEnnjLNnpbathEyWEZZ8CG6pqQnT8h
6Uhx114wBlxJDrN/f8UCRqmDrNaSlIyY/evYyp2PLgHKy1oNLKItS5XO2f5JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEP60p/arrPDgpGtdlJjF/cGPKtkwHwYDVR0j
BBgwFoAUyyRgl3b1qPzKpv+f9tVOpPxxWIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVc3dVNTeE1OOUhIU0RLRkxSWmNmOVFQN3VQOG82NGFKa1F5ejdLa0di
QXAvMC9DQjI0NjA5Nzc2RjVBOEZDQ0FBNkZGOUZGNkQ1NEVBNEZDNzE1ODg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMjQ2MDk3NzZGNUE4RkND
QUE2RkY5RkY2RDU0RUE0RkM3MTU4ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVc3dVNTeE1OOUhIU0RLRkxSWmNmOVFQN3VQOG82NGFKa1F5ejdLa0diQXAvMC9D
QjI0NjA5Nzc2RjVBOEZDQ0FBNkZGOUZGNkQ1NEVBNEZDNzE1ODg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACw7/Hbqps4zN38tJtOuwqmlM1loedPsoolT+fG1eBYK0WE6wnvZxvv1FziFl
xxKSU7AZuQsxm7PCFYMTw2k/Oi7x4vY3pWoAiE8jXO8MhntqeqMfiQyhbl2Nl26h
kbzY10Q9GgT3jlDZ9Ij8t5V7n+LoppIShqBmcVIrCaXdcuhOYiWWJrI5R3iu9HtP
+A1x3G7Sj0juZsEZ9VhXPLX5TjxMzz5XuPdZ8AyCqPz8YhhpjLvEfI5M4RvezXcY
CMI6cASl4J13PzkWdRqKKIhnkyGcXgSSLXMI6eEuXAne9FLykiJ0oZFhsa1MbqLD
KHboNcz0PjZfChvuZwOtJmh2Fw==
-----END CERTIFICATE-----