Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.mft
File:                     5561D2DB99D9149F730A58FD1CAE05445752A65C.mft (raw, json)
Hash identifier:          dcl4n38Cs1MLK7h6XSrhOp4ID5kWkN9H4n1HpkevjAg=
Subject key identifier:   8F:CE:34:8E:34:47:C9:C4:84:E9:AD:71:8D:96:66:80:B4:17:28:25
Authority key identifier: 55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C
Certificate issuer:       /CN=5561D2DB99D9149F730A58FD1CAE05445752A65C
Certificate serial:       7533D47015F6A6B74A10E2E52B279B28B25BD0C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561D2DB99D9149F730A58FD1CAE05445752A65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.mft
Manifest number:          7B
Signing time:             Sat 12 Oct 2024 06:26:03 +0000
Manifest this update:     Sat 12 Oct 2024 06:21:03 +0000
Manifest next update:     Sun 13 Oct 2024 08:00:03 +0000
Files and hashes:         1: 34352e3233312e31322e302f32322d3332203d3e20323637313830.roa (hash: KH86QfHJzTQaqLH6V2ln2+2nspCwWJFH+A4ZEqZACi4=)
                          2: 323830343a343935633a3a2f33322d313238203d3e20323637313830.roa (hash: iGazR9A5XtTGjctQsL59h5H7o306s8mo3vSi7QUrNkI=)
                          3: 5561D2DB99D9149F730A58FD1CAE05445752A65C.crl (hash: iSSDLXy96YaH5aVHvqTkrVcC5kFZseLwGBDP8BIftVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:33:d4:70:15:f6:a6:b7:4a:10:e2:e5:2b:27:9b:28:b2:5b:d0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5561D2DB99D9149F730A58FD1CAE05445752A65C
        Validity
            Not Before: Oct 12 06:21:03 2024 GMT
            Not After : Oct 13 08:00:03 2024 GMT
        Subject: CN=8FCE348E3447C9C484E9AD718D966680B4172825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:53:62:f2:e9:12:52:03:17:6d:ed:dc:f3:
                    69:7d:00:1f:22:3f:6c:cf:f5:d8:40:bc:ed:16:76:
                    4b:ad:03:d8:9c:2c:43:8c:38:81:82:b8:42:7f:aa:
                    70:3c:ac:88:70:70:04:19:37:c8:6a:3e:ea:6e:1c:
                    e3:cf:38:8d:61:de:00:ad:f3:d4:ca:70:51:16:ef:
                    54:0c:83:d1:a7:85:bf:72:44:dd:4b:9d:c4:bd:9f:
                    e2:79:12:d1:b1:e1:07:2c:0a:1b:db:94:86:7d:29:
                    82:fc:5a:33:54:62:61:19:1d:ea:d4:c4:c1:b1:e8:
                    1f:e2:9c:7a:3c:62:7b:70:ce:8c:bd:7c:d6:e4:4a:
                    30:48:02:3f:66:4c:71:61:2f:c2:1a:95:d1:b1:80:
                    1e:97:ba:33:0d:79:75:65:13:7e:2e:d5:45:43:57:
                    3e:a6:d6:cd:f8:bb:d7:35:a7:c6:b4:93:91:72:d7:
                    9f:ea:ca:39:aa:de:92:ae:a5:04:c8:54:42:64:fc:
                    eb:2e:40:1d:08:8d:93:c8:ed:2a:fd:b3:a3:3b:53:
                    81:26:d3:e3:fd:8e:7d:26:dd:99:81:69:ee:22:d5:
                    01:5a:45:59:94:d1:00:55:23:d6:35:17:f3:8d:7b:
                    51:83:b5:9d:85:ee:50:3c:42:5f:0a:18:ec:88:dd:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:34:8E:34:47:C9:C4:84:E9:AD:71:8D:96:66:80:B4:17:28:25
            X509v3 Authority Key Identifier:
                keyid:55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561D2DB99D9149F730A58FD1CAE05445752A65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:e5:48:c2:26:c7:4d:54:3b:dc:df:fc:8c:2b:4e:1d:72:
         b7:7f:8a:0d:e5:57:35:73:f3:a9:1c:46:d3:c1:d9:69:bf:a6:
         7e:61:8c:c8:d1:76:2f:95:18:e2:65:25:6b:a0:2a:34:35:27:
         05:78:6b:8c:ab:0b:52:c1:eb:02:50:a7:cb:5a:e7:c1:95:27:
         2b:c2:3d:99:86:f6:fe:e1:43:53:6b:77:ff:32:06:1a:b8:19:
         5b:14:a4:96:a3:c4:b5:ca:f0:6d:14:bc:83:3c:6e:d5:e6:92:
         fb:c5:29:69:bb:45:bb:49:f2:2e:45:91:d1:69:a0:20:e6:d8:
         b9:08:e0:25:2d:2d:69:9d:e2:f8:d1:88:04:4f:24:35:54:69:
         8e:b8:f6:a5:66:70:5a:4d:b4:64:30:42:88:32:30:2c:8c:df:
         ba:e4:00:e7:6a:72:f5:9f:6f:49:92:c4:77:ed:cf:85:16:ae:
         c1:45:c5:63:1e:e6:c3:68:99:0d:e5:5d:0c:7b:d5:3e:0c:60:
         8b:6a:b4:6f:4f:cc:fe:40:da:f3:8b:23:c8:4e:ee:0a:86:5a:
         40:af:b4:08:03:cb:d1:a2:1a:69:02:aa:fc:ea:b6:6c:1c:ce:
         0f:96:0d:9a:12:e8:36:e2:ed:e2:fc:82:9d:5a:7a:47:cd:e2:
         6c:8b:f2:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdTPUcBX2prdKEOLlKyebKLJb0MMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2MUQyREI5OUQ5MTQ5RjczMEE1OEZEMUNBRTA1NDQ1
NzUyQTY1QzAeFw0yNDEwMTIwNjIxMDNaFw0yNDEwMTMwODAwMDNaMDMxMTAvBgNV
BAMTKDhGQ0UzNDhFMzQ0N0M5QzQ4NEU5QUQ3MThEOTY2NjgwQjQxNzI4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdFNi8ukSUgMXbe3c82l9AB8i
P2zP9dhAvO0WdkutA9icLEOMOIGCuEJ/qnA8rIhwcAQZN8hqPupuHOPPOI1h3gCt
89TKcFEW71QMg9Gnhb9yRN1LncS9n+J5EtGx4QcsChvblIZ9KYL8WjNUYmEZHerU
xMGx6B/inHo8Yntwzoy9fNbkSjBIAj9mTHFhL8IaldGxgB6XujMNeXVlE34u1UVD
Vz6m1s34u9c1p8a0k5Fy15/qyjmq3pKupQTIVEJk/OsuQB0IjZPI7Sr9s6M7U4Em
0+P9jn0m3ZmBae4i1QFaRVmU0QBVI9Y1F/ONe1GDtZ2F7lA8Ql8KGOyI3daFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj840jjRHycSE6a1xjZZmgLQXKCUwHwYDVR0j
BBgwFoAUVWHS25nZFJ9zClj9HK4FRFdSplwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXM1WHk2NVhyNmNYY2FKZzhXUnNiTDNQQXpXRXgzUGg5bUtmTjRNckIx
b2EvMC81NTYxRDJEQjk5RDkxNDlGNzMwQTU4RkQxQ0FFMDU0NDU3NTJBNjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1NjFEMkRCOTlEOTE0OUY3
MzBBNThGRDFDQUUwNTQ0NTc1MkE2NUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXM1WHk2NVhyNmNYY2FKZzhXUnNiTDNQQXpXRXgzUGg5bUtmTjRNckIxb2EvMC81
NTYxRDJEQjk5RDkxNDlGNzMwQTU4RkQxQ0FFMDU0NDU3NTJBNjVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW3PlSMImx01UO9zf/IwrTh1yt3+KDeVXNXPzqRxG08HZab+mfmGMyNF2L5UY
4mUla6AqNDUnBXhrjKsLUsHrAlCny1rnwZUnK8I9mYb2/uFDU2t3/zIGGrgZWxSk
lqPEtcrwbRS8gzxu1eaS+8UpabtFu0nyLkWR0WmgIObYuQjgJS0taZ3i+NGIBE8k
NVRpjrj2pWZwWk20ZDBCiDIwLIzfuuQA52py9Z9vSZLEd+3PhRauwUXFYx7mw2iZ
DeVdDHvVPgxgi2q0b0/M/kDa84sjyE7uCoZaQK+0CAPL0aIaaQKq/Oq2bBzOD5YN
mhLoNuLt4vyCnVp6R83ibIvykQ==
-----END CERTIFICATE-----