Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft
File:                     64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft (raw, json)
Hash identifier:          aVl7XW8s/gerqdYcO05pHm5LJG4Y2bBHtzZgifi3o7U=
Subject key identifier:   5F:49:A9:62:C5:81:CC:CE:C9:49:2E:6F:9C:6A:EF:F1:7F:78:08:97
Authority key identifier: 64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7
Certificate issuer:       /CN=64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7
Certificate serial:       7BD774F3A9125B1EC174E2E178434F0F02B1F902
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft
Manifest number:          02D1
Signing time:             Sun 14 Apr 2024 21:47:02 +0000
Manifest this update:     Sun 14 Apr 2024 21:42:02 +0000
Manifest next update:     Tue 16 Apr 2024 00:26:02 +0000
Files and hashes:         1: 64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.crl (hash: lTg98+iUdRaG5jWE0o0RC76MJfqCrxluu7YIHWywQO0=)
                          2: 3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa (hash: dHaHGN8wvppgz7t5neNVjLTE4kvzLf2uSu0qCAPw928=)
                          3: 323830343a366664343a3a2f33322d3438203d3e20323730363837.roa (hash: iZb3qIke2dw2PFQXhgc3iKWu2zlajYL0Fdl2TCDM4PM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:74:f3:a9:12:5b:1e:c1:74:e2:e1:78:43:4f:0f:02:b1:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7
        Validity
            Not Before: Apr 14 21:42:02 2024 GMT
            Not After : Apr 16 00:26:02 2024 GMT
        Subject: CN=5F49A962C581CCCEC9492E6F9C6AEFF17F780897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:8e:bc:5c:7d:ce:e0:98:2d:44:72:df:50:
                    fe:64:08:fc:df:9c:78:91:40:91:7c:99:b6:d8:1d:
                    56:f6:c3:f6:3d:a8:e4:57:2d:56:81:a0:03:c1:09:
                    e0:f6:73:73:8e:55:88:43:03:cb:9d:28:70:37:f3:
                    84:97:f7:68:bc:22:0c:12:09:96:c6:fc:bf:b9:53:
                    41:e4:c0:47:f9:a1:84:56:a8:5a:e3:9d:e6:c2:45:
                    6d:41:50:63:5b:50:ef:d2:66:c4:e0:6a:b5:f7:b6:
                    db:96:7c:ff:4d:1e:2b:32:5f:ad:c3:38:d0:64:b0:
                    17:31:c1:53:87:2c:8e:55:f9:ae:09:ab:61:af:83:
                    0a:1c:91:18:57:a7:1b:33:d6:b6:07:7b:3a:4b:a9:
                    f0:95:7e:e5:5f:e0:71:59:fb:f0:f8:2d:56:f8:fa:
                    f8:8f:6a:c8:1c:7c:58:1d:a9:11:20:95:36:82:b8:
                    ee:33:b7:5e:3a:3b:85:43:b8:d2:1b:56:57:21:7a:
                    75:09:56:e7:35:38:74:33:61:8f:76:3c:f3:9f:d8:
                    00:58:b9:e7:f3:8e:db:a9:4b:b0:f9:a0:56:62:b2:
                    14:50:72:ab:3f:e5:a0:a5:0e:16:2c:e6:c1:6a:6e:
                    4b:2d:89:64:f3:2e:1b:49:7a:a4:88:1c:38:d9:8a:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:A9:62:C5:81:CC:CE:C9:49:2E:6F:9C:6A:EF:F1:7F:78:08:97
            X509v3 Authority Key Identifier:
                keyid:64:CF:7F:A7:AF:F5:D7:80:6F:86:7C:5F:3E:DF:CE:14:61:E7:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/64CF7FA7AFF5D7806F867C5F3EDFCE1461E78AC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:42:36:8d:1e:c7:b6:24:c0:08:da:f4:e1:54:8e:15:77:c5:
         15:0c:26:62:f1:be:67:ee:39:f9:58:f0:1a:14:fa:f7:6c:f6:
         9b:43:22:3d:cf:39:bb:3d:75:bc:83:b5:97:0a:f8:d5:c2:f5:
         d6:02:e8:9f:b4:c8:b6:cb:7d:92:1d:c9:07:4b:b1:33:f8:5c:
         2c:8e:ac:08:6e:0d:8b:0d:13:2f:5c:d8:dd:f0:57:20:0e:dc:
         a3:8c:6a:2f:2f:bb:01:b2:0b:65:e3:74:99:3c:38:1e:7a:44:
         8a:1f:c9:4b:d0:65:2c:50:fa:ce:0d:04:c8:f0:f5:0b:e2:92:
         79:59:1c:d1:26:09:a3:28:fb:00:fa:9f:9f:dd:d2:10:5b:97:
         30:a7:36:0f:af:56:08:a9:52:69:8f:b8:c5:38:d9:cc:3f:fb:
         a7:bc:29:ae:dd:30:40:34:18:63:d0:61:da:d2:bb:9f:f7:e9:
         88:f0:6c:ce:74:84:ad:9b:19:18:4e:b8:29:82:58:4f:42:54:
         35:ac:76:09:0a:f5:7c:7b:be:88:6b:db:88:58:bc:cf:61:63:
         2e:a3:a1:0b:2f:21:31:f6:19:97:7b:e4:46:f2:6d:31:72:cb:
         ff:eb:66:0f:f6:8a:3e:c1:68:2a:7b:27:bb:4e:42:f0:2f:a5:
         9e:53:6b:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe9d086kSWx7BdOLheENPDwKx+QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRDRjdGQTdBRkY1RDc4MDZGODY3QzVGM0VERkNFMTQ2
MUU3OEFDNzAeFw0yNDA0MTQyMTQyMDJaFw0yNDA0MTYwMDI2MDJaMDMxMTAvBgNV
BAMTKDVGNDlBOTYyQzU4MUNDQ0VDOTQ5MkU2RjlDNkFFRkYxN0Y3ODA4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCn468XH3O4JgtRHLfUP5kCPzf
nHiRQJF8mbbYHVb2w/Y9qORXLVaBoAPBCeD2c3OOVYhDA8udKHA384SX92i8IgwS
CZbG/L+5U0HkwEf5oYRWqFrjnebCRW1BUGNbUO/SZsTgarX3ttuWfP9NHisyX63D
ONBksBcxwVOHLI5V+a4Jq2GvgwockRhXpxsz1rYHezpLqfCVfuVf4HFZ+/D4LVb4
+viPasgcfFgdqREglTaCuO4zt146O4VDuNIbVlchenUJVuc1OHQzYY92PPOf2ABY
uefzjtupS7D5oFZishRQcqs/5aClDhYs5sFqbkstiWTzLhtJeqSIHDjZivIDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX0mpYsWBzM7JSS5vnGrv8X94CJcwHwYDVR0j
BBgwFoAUZM9/p6/114BvhnxfPt/OFGHniscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWoyc3hjcWJvaW9DMW5WZGQxNGQ2UTg4N2JQeWNuaVc5YnZlMVJEd284
VUcvMC82NENGN0ZBN0FGRjVENzgwNkY4NjdDNUYzRURGQ0UxNDYxRTc4QUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0Q0Y3RkE3QUZGNUQ3ODA2
Rjg2N0M1RjNFREZDRTE0NjFFNzhBQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWoyc3hjcWJvaW9DMW5WZGQxNGQ2UTg4N2JQeWNuaVc5YnZlMVJEd284VUcvMC82
NENGN0ZBN0FGRjVENzgwNkY4NjdDNUYzRURGQ0UxNDYxRTc4QUM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIEI2jR7HtiTACNr04VSOFXfFFQwmYvG+Z+45+VjwGhT692z2m0MiPc85uz11
vIO1lwr41cL11gLon7TItst9kh3JB0uxM/hcLI6sCG4Niw0TL1zY3fBXIA7co4xq
Ly+7AbILZeN0mTw4HnpEih/JS9BlLFD6zg0EyPD1C+KSeVkc0SYJoyj7APqfn93S
EFuXMKc2D69WCKlSaY+4xTjZzD/7p7wprt0wQDQYY9Bh2tK7n/fpiPBsznSErZsZ
GE64KYJYT0JUNax2CQr1fHu+iGvbiFi8z2FjLqOhCy8hMfYZl3vkRvJtMXLL/+tm
D/aKPsFoKnsnu05C8C+lnlNrzQ==
-----END CERTIFICATE-----