Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/502CB928D7002338E797308E54A061FAD4F2B48D.mft
File:                     502CB928D7002338E797308E54A061FAD4F2B48D.mft (raw, json)
Hash identifier:          sLYSff5xiHestl+JqgK8CWFU23yXmKMqrYapty4XqUg=
Subject key identifier:   04:8D:D6:D0:89:F1:9B:CA:C1:E7:58:FD:31:B5:5D:9C:DE:20:70:6F
Authority key identifier: 50:2C:B9:28:D7:00:23:38:E7:97:30:8E:54:A0:61:FA:D4:F2:B4:8D
Certificate issuer:       /CN=502CB928D7002338E797308E54A061FAD4F2B48D
Certificate serial:       0C77CB5C57808AB4BD98D9A02B5B8CB25B9C66CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502CB928D7002338E797308E54A061FAD4F2B48D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/502CB928D7002338E797308E54A061FAD4F2B48D.mft
Manifest number:          03
Signing time:             Mon 23 Oct 2023 17:16:09 +0000
Manifest this update:     Mon 23 Oct 2023 17:11:09 +0000
Manifest next update:     Tue 24 Oct 2023 19:14:09 +0000
Files and hashes:         1: 34352e3136332e3138302e302f32322d3332203d3e20323638353739.roa (hash: cEDDcKBdPlDnCAY4koAGrqQvGmhOjLCIbKDaV9t+VEM=)
                          2: 502CB928D7002338E797308E54A061FAD4F2B48D.crl (hash: IkxzpVEtWsqVNbN/bRP3QX/CoR/5ANE1T91dCLnZVOM=)
                          3: 323830343a353335633a3a2f33322d313238203d3e20323638353739.roa (hash: T25ULTQtSVUN1d6tmzejjmHXmh/spIcKLxojX/yix/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:77:cb:5c:57:80:8a:b4:bd:98:d9:a0:2b:5b:8c:b2:5b:9c:66:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502CB928D7002338E797308E54A061FAD4F2B48D
        Validity
            Not Before: Oct 23 17:11:09 2023 GMT
            Not After : Oct 24 19:14:09 2023 GMT
        Subject: CN=048DD6D089F19BCAC1E758FD31B55D9CDE20706F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:a0:63:06:38:ee:e5:6a:8d:a2:4c:04:2a:
                    a6:3d:95:da:a1:4f:01:54:00:72:4e:87:1c:9f:1a:
                    7c:d4:4e:73:a3:f4:df:dd:0d:e1:f8:c5:2f:eb:a0:
                    26:2e:eb:48:58:5d:db:3b:df:2c:31:cf:55:20:01:
                    68:7f:74:c6:7a:22:81:c4:19:8b:1c:dc:f2:fc:ff:
                    e0:ec:4e:97:ee:fd:6d:cb:69:5d:3d:4d:8c:99:3f:
                    6c:c7:fa:28:95:cd:35:73:ea:8e:71:b4:db:8f:77:
                    2f:2b:f9:b1:65:ea:66:60:75:05:e9:3a:37:8a:72:
                    52:a3:dc:aa:08:20:6f:51:50:f7:45:c4:9c:2e:4c:
                    52:85:79:43:85:8a:c8:1d:77:25:46:da:c6:c5:74:
                    07:45:ba:e8:3b:91:f1:e2:a9:68:2d:3a:81:e3:53:
                    3d:65:b9:bc:94:39:dc:f3:09:ac:12:49:4c:72:39:
                    5e:1c:74:4e:4f:e0:30:eb:cc:4f:0f:9c:95:64:71:
                    d4:f7:2b:de:51:0e:46:36:86:35:c6:a9:45:1d:64:
                    29:49:8c:b5:53:d7:d3:9b:78:71:42:5b:cc:10:37:
                    0a:c3:9f:54:72:af:44:b1:36:86:55:3e:80:0a:df:
                    38:53:43:3b:71:6d:90:4e:17:88:32:8f:83:d8:0e:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8D:D6:D0:89:F1:9B:CA:C1:E7:58:FD:31:B5:5D:9C:DE:20:70:6F
            X509v3 Authority Key Identifier:
                keyid:50:2C:B9:28:D7:00:23:38:E7:97:30:8E:54:A0:61:FA:D4:F2:B4:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/502CB928D7002338E797308E54A061FAD4F2B48D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502CB928D7002338E797308E54A061FAD4F2B48D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/502CB928D7002338E797308E54A061FAD4F2B48D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:38:38:09:12:8b:92:a8:ce:05:44:6c:58:fb:bb:7a:72:82:
         45:d5:59:bd:d5:a4:02:50:66:08:17:b4:00:2f:cc:86:d7:29:
         34:58:ab:f6:37:ab:76:01:84:b0:bc:cd:d3:9c:d5:5d:ea:85:
         e8:6d:25:44:3e:03:ee:ca:b7:c9:d5:93:26:c8:12:de:e0:e7:
         19:94:22:b3:4e:0a:43:d2:db:52:c8:8a:54:cc:2b:99:33:43:
         98:06:84:82:d4:c3:a8:b8:3e:47:e1:c3:0d:a2:e6:33:a5:79:
         ce:74:05:63:db:7a:4a:7c:93:e7:c2:fb:5f:38:24:93:cc:43:
         21:ce:46:fc:51:a9:5c:13:52:2c:a8:93:a7:cb:91:09:dc:5d:
         7e:5e:ae:f0:ee:fd:cb:46:51:0f:41:95:02:9f:22:3a:6a:4f:
         7d:59:f8:fe:8c:50:d1:46:ae:ae:9b:98:67:2c:cb:ff:ee:62:
         42:70:fb:b5:c0:1e:df:ae:51:00:7d:02:87:d1:4e:e5:b7:01:
         34:36:df:ac:58:1e:8a:6b:ed:9e:89:fc:27:97:cf:09:c3:55:
         b2:a8:07:3e:c2:89:58:10:ce:24:9a:47:55:8f:54:d4:0f:9d:
         41:bb:5c:63:d6:44:80:53:e8:34:d0:eb:d2:6d:7a:31:01:c4:
         b2:88:d8:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDHfLXFeAirS9mNmgK1uMslucZswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAyQ0I5MjhENzAwMjMzOEU3OTczMDhFNTRBMDYxRkFE
NEYyQjQ4RDAeFw0yMzEwMjMxNzExMDlaFw0yMzEwMjQxOTE0MDlaMDMxMTAvBgNV
BAMTKDA0OERENkQwODlGMTlCQ0FDMUU3NThGRDMxQjU1RDlDREUyMDcwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AqBjBjju5WqNokwEKqY9ldqh
TwFUAHJOhxyfGnzUTnOj9N/dDeH4xS/roCYu60hYXds73ywxz1UgAWh/dMZ6IoHE
GYsc3PL8/+DsTpfu/W3LaV09TYyZP2zH+iiVzTVz6o5xtNuPdy8r+bFl6mZgdQXp
OjeKclKj3KoIIG9RUPdFxJwuTFKFeUOFisgddyVG2sbFdAdFuug7kfHiqWgtOoHj
Uz1lubyUOdzzCawSSUxyOV4cdE5P4DDrzE8PnJVkcdT3K95RDkY2hjXGqUUdZClJ
jLVT19ObeHFCW8wQNwrDn1Ryr0SxNoZVPoAK3zhTQztxbZBOF4gyj4PYDlxFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBI3W0Inxm8rB51j9MbVdnN4gcG8wHwYDVR0j
BBgwFoAUUCy5KNcAIzjnlzCOVKBh+tTytI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkttbU5ROGIzVmpBcmVURzJ3Mkh5WnFTNUpYd0diM01HVkdDcU5tdnZL
TkUvMC81MDJDQjkyOEQ3MDAyMzM4RTc5NzMwOEU1NEEwNjFGQUQ0RjJCNDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUwMkNCOTI4RDcwMDIzMzhF
Nzk3MzA4RTU0QTA2MUZBRDRGMkI0OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkttbU5ROGIzVmpBcmVURzJ3Mkh5WnFTNUpYd0diM01HVkdDcU5tdnZLTkUvMC81
MDJDQjkyOEQ3MDAyMzM4RTc5NzMwOEU1NEEwNjFGQUQ0RjJCNDhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlTg4CRKLkqjOBURsWPu7enKCRdVZvdWkAlBmCBe0AC/MhtcpNFir9jerdgGE
sLzN05zVXeqF6G0lRD4D7sq3ydWTJsgS3uDnGZQis04KQ9LbUsiKVMwrmTNDmAaE
gtTDqLg+R+HDDaLmM6V5znQFY9t6SnyT58L7Xzgkk8xDIc5G/FGpXBNSLKiTp8uR
Cdxdfl6u8O79y0ZRD0GVAp8iOmpPfVn4/oxQ0UaurpuYZyzL/+5iQnD7tcAe365R
AH0Ch9FO5bcBNDbfrFgeimvtnon8J5fPCcNVsqgHPsKJWBDOJJpHVY9U1A+dQbtc
Y9ZEgFPoNNDr0m16MQHEsojYrw==
-----END CERTIFICATE-----