Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.mft
File:                     2DC75F71775F0FF523E03D23AA0CE47889FC63EA.mft (raw, json)
Hash identifier:          QE7Dmj+ruaUuHkz023rWHfQ8XQvvfCoeEvuSrcn1CTU=
Subject key identifier:   48:6C:94:38:00:55:50:3B:F9:68:2C:61:B6:38:6D:F2:2F:16:15:A8
Authority key identifier: 2D:C7:5F:71:77:5F:0F:F5:23:E0:3D:23:AA:0C:E4:78:89:FC:63:EA
Certificate issuer:       /CN=2DC75F71775F0FF523E03D23AA0CE47889FC63EA
Certificate serial:       25AF4CFBF909A5E3A6E9E67A4B3ACD0D3701A16A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.mft
Manifest number:          0E
Signing time:             Thu 15 Feb 2024 19:09:59 +0000
Manifest this update:     Thu 15 Feb 2024 19:04:59 +0000
Manifest next update:     Fri 16 Feb 2024 19:38:59 +0000
Files and hashes:         1: 2DC75F71775F0FF523E03D23AA0CE47889FC63EA.crl (hash: bkIgx1I5gzuMmQ714CO3sc9bwlait2nj0IyIf4rRyz0=)
                          2: 3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (hash: YeLzf9F5EOFb0OmE2MlJZ0CG88lDsYaU+IhmD8u08VE=)
                          3: 323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (hash: teaz/VS7vKyyyGxNKNDP+pnKso3DmxCCTiRRaKlpII0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:af:4c:fb:f9:09:a5:e3:a6:e9:e6:7a:4b:3a:cd:0d:37:01:a1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC75F71775F0FF523E03D23AA0CE47889FC63EA
        Validity
            Not Before: Feb 15 19:04:59 2024 GMT
            Not After : Feb 16 19:38:59 2024 GMT
        Subject: CN=486C94380055503BF9682C61B6386DF22F1615A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:50:44:c8:ac:e5:b8:62:00:d0:b8:7b:9d:
                    63:10:d4:6b:d9:0d:96:1a:ae:62:de:f5:15:d5:1a:
                    30:df:64:a3:03:1a:80:c9:e5:b7:0d:f1:9a:5f:0e:
                    58:04:76:ef:e7:83:1f:91:f3:4a:25:3f:90:10:63:
                    23:e0:24:81:f8:14:12:e2:e3:4e:f3:65:ac:26:3e:
                    27:a6:80:30:b3:6c:cc:a8:5b:b5:0a:df:3c:13:37:
                    3f:d2:cd:5d:78:03:aa:50:75:49:79:f8:e5:e8:5a:
                    a1:0e:a9:c8:f8:10:97:ff:5d:b5:51:78:2d:b1:92:
                    98:ea:9b:7a:ca:07:92:2c:54:27:93:fe:90:38:ea:
                    1d:81:e7:2c:eb:f9:6b:bd:4a:57:8e:64:1f:73:76:
                    48:89:52:89:57:e0:7a:a6:d6:21:05:d3:1a:9b:c4:
                    95:5a:a0:e4:1b:9b:d3:64:1d:8d:c1:5b:1b:ec:78:
                    4c:29:e1:11:0a:1e:83:30:21:03:d8:a0:6d:1e:8b:
                    12:35:cd:cf:d9:a9:e8:16:a5:ff:5b:b7:1f:e3:58:
                    7f:18:5b:5f:29:8f:c2:63:e0:e0:02:db:a2:33:8c:
                    65:dc:31:99:5c:16:b8:da:e4:64:22:18:ec:76:d0:
                    1e:4b:df:93:12:ed:a9:23:59:f5:5c:db:91:9f:8b:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:94:38:00:55:50:3B:F9:68:2C:61:B6:38:6D:F2:2F:16:15:A8
            X509v3 Authority Key Identifier:
                keyid:2D:C7:5F:71:77:5F:0F:F5:23:E0:3D:23:AA:0C:E4:78:89:FC:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/2DC75F71775F0FF523E03D23AA0CE47889FC63EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:3d:8a:3b:46:1f:fc:af:f1:93:02:bb:42:74:01:01:9f:
         89:9c:be:ca:ec:63:54:c4:9c:0c:0d:64:99:d7:92:62:d9:bf:
         4a:8f:d5:6e:b7:a2:9a:3a:8a:6d:a3:24:8f:ff:05:52:98:d7:
         08:d3:ab:0c:0c:d6:55:e0:a5:74:2f:ff:2b:56:48:15:56:85:
         ed:b9:70:9b:4f:bc:8c:0d:b7:61:2e:e5:d9:7e:3b:0c:10:f2:
         2f:f1:44:4e:cd:20:34:26:72:9d:aa:35:dd:c7:c3:d8:9b:f7:
         a8:90:aa:d7:5c:c6:7d:5f:82:fb:7e:c6:bc:56:c3:75:3d:68:
         19:91:70:bc:35:8a:2b:83:a0:a5:dc:65:44:1d:9d:ae:1e:74:
         a9:e3:f8:78:b9:4d:f3:16:51:a4:6b:51:ba:94:6d:62:d2:e4:
         0f:b1:45:e9:ff:ce:fe:0e:46:90:fe:08:46:c9:75:ce:66:6f:
         0a:3f:dd:7f:e8:4b:c3:e1:ae:64:e8:3b:d8:4e:ff:8f:41:bd:
         10:63:f9:07:54:d4:f8:6a:c1:8b:70:83:0e:bb:5f:81:07:e3:
         9e:c5:4d:83:b1:3c:a9:56:af:ea:bd:6d:1d:ca:e2:08:26:bc:
         88:79:26:97:16:21:b1:5f:e4:f8:6d:16:88:88:bb:e5:58:98:
         91:22:59:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJa9M+/kJpeOm6eZ6SzrNDTcBoWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRDNzVGNzE3NzVGMEZGNTIzRTAzRDIzQUEwQ0U0Nzg4
OUZDNjNFQTAeFw0yNDAyMTUxOTA0NTlaFw0yNDAyMTYxOTM4NTlaMDMxMTAvBgNV
BAMTKDQ4NkM5NDM4MDA1NTUwM0JGOTY4MkM2MUI2Mzg2REYyMkYxNjE1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+FBEyKzluGIA0Lh7nWMQ1GvZ
DZYarmLe9RXVGjDfZKMDGoDJ5bcN8ZpfDlgEdu/ngx+R80olP5AQYyPgJIH4FBLi
407zZawmPiemgDCzbMyoW7UK3zwTNz/SzV14A6pQdUl5+OXoWqEOqcj4EJf/XbVR
eC2xkpjqm3rKB5IsVCeT/pA46h2B5yzr+Wu9SleOZB9zdkiJUolX4Hqm1iEF0xqb
xJVaoOQbm9NkHY3BWxvseEwp4REKHoMwIQPYoG0eixI1zc/ZqegWpf9btx/jWH8Y
W18pj8Jj4OAC26IzjGXcMZlcFrja5GQiGOx20B5L35MS7akjWfVc25Gfiz4lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSGyUOABVUDv5aCxhtjht8i8WFagwHwYDVR0j
BBgwFoAULcdfcXdfD/Uj4D0jqgzkeIn8Y+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVdCUFBNMW9tRU00SGYzRlpUeThMWEJkQTZRZ0xmcVBkcDVlWDNxOERX
a1UvMC8yREM3NUY3MTc3NUYwRkY1MjNFMDNEMjNBQTBDRTQ3ODg5RkM2M0VBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEQzc1RjcxNzc1RjBGRjUy
M0UwM0QyM0FBMENFNDc4ODlGQzYzRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVdCUFBNMW9tRU00SGYzRlpUeThMWEJkQTZRZ0xmcVBkcDVlWDNxOERXa1UvMC8y
REM3NUY3MTc3NUYwRkY1MjNFMDNEMjNBQTBDRTQ3ODg5RkM2M0VBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKt49ijtGH/yv8ZMCu0J0AQGfiZy+yuxjVMScDA1kmdeSYtm/So/VbreimjqK
baMkj/8FUpjXCNOrDAzWVeCldC//K1ZIFVaF7blwm0+8jA23YS7l2X47DBDyL/FE
Ts0gNCZynao13cfD2Jv3qJCq11zGfV+C+37GvFbDdT1oGZFwvDWKK4OgpdxlRB2d
rh50qeP4eLlN8xZRpGtRupRtYtLkD7FF6f/O/g5GkP4IRsl1zmZvCj/df+hLw+Gu
ZOg72E7/j0G9EGP5B1TU+GrBi3CDDrtfgQfjnsVNg7E8qVav6r1tHcriCCa8iHkm
lxYhsV/k+G0WiIi75ViYkSJZ5g==
-----END CERTIFICATE-----