Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.mft
File:                     24458C13F40474E3749CBA0A49F59B362B4D3E0B.mft (raw, json)
Hash identifier:          xARIhBNHF832eXSLLw0fgZQXp1ERFlolld5pFTgWmp0=
Subject key identifier:   A3:E2:41:5F:DC:2B:B4:3A:0E:A0:75:30:A6:41:62:68:0B:35:8E:A2
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Certificate issuer:       /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial:       79B4ACCB5D6BF4F0D55E069E97898EA4B398FEB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.mft
Manifest number:          0282
Signing time:             Mon 15 Apr 2024 05:51:31 +0000
Manifest this update:     Mon 15 Apr 2024 05:46:31 +0000
Manifest next update:     Tue 16 Apr 2024 07:08:31 +0000
Files and hashes:         1: 323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa (hash: klMXR6l6C1xYWWJV7orDQlv3ZB5h+KJhXLqGL6D0dVc=)
                          2: 323830343a336462303a3a2f33322d3332203d3e20323636353437.roa (hash: bePWeoU0CBse7veTHwVqDkv/j1cL7yYQ+PN0VWGWv0c=)
                          3: 3136302e3233382e3132382e302f32332d3233203d3e20323636353437.roa (hash: lVcTGW/7LslT9RxkELDSS1IenhYTv+vmtKfi/P1KIGo=)
                          4: 323830343a336462303a3a2f33332d3333203d3e20323636353437.roa (hash: M74gZoHPN+8AXpBdPQDH7yrshpMCPda+X0OAEqSdh/U=)
                          5: 3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa (hash: q8NqHedQNfxzRCi9q4lWSBJV5MnRNcB4wwlx6XZypSs=)
                          6: 24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl (hash: 2OsRLqUk0E2Zo27JSpcE2+Epbu8bQVJLPK5GrXzWoFA=)
                          7: 3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa (hash: efHPZ5gEFSIBNkiZOXI8ecVsLm81qw+6pSHitpjJNu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b4:ac:cb:5d:6b:f4:f0:d5:5e:06:9e:97:89:8e:a4:b3:98:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
        Validity
            Not Before: Apr 15 05:46:31 2024 GMT
            Not After : Apr 16 07:08:31 2024 GMT
        Subject: CN=A3E2415FDC2BB43A0EA07530A64162680B358EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:b5:5a:3a:f3:08:7d:69:7d:fa:2f:e7:46:
                    ff:44:e8:13:74:af:12:79:08:5a:9f:2e:41:80:52:
                    dd:bd:32:1e:83:36:72:27:21:71:4d:4b:77:22:e9:
                    73:de:c5:6f:e3:c6:77:3c:c6:17:d3:a0:a3:fc:4c:
                    df:e1:64:de:84:40:b1:54:ec:0e:32:c5:94:96:a0:
                    8e:6d:fa:33:15:2f:81:84:1c:00:27:b1:0f:00:52:
                    96:1f:5d:de:85:f6:80:ad:35:1b:08:7c:7c:d1:cf:
                    ee:00:0a:d9:76:dd:2c:05:41:77:ec:db:58:0e:ab:
                    d0:36:c6:26:ca:b9:66:3f:b9:10:4a:4d:df:5c:5f:
                    fa:93:e9:e6:48:fa:a4:58:6f:6d:f3:a1:64:bf:6a:
                    32:12:af:a5:3a:9f:20:8d:29:43:8d:23:52:89:12:
                    1d:4d:10:c9:ac:8a:04:aa:b8:98:32:c2:2b:97:d2:
                    0d:1b:91:a8:5e:36:f9:d0:a5:f7:4e:d8:9c:41:7a:
                    9f:fd:33:ed:3e:8e:02:c6:98:87:c6:39:69:2c:51:
                    c2:70:94:b9:2d:c9:d9:2c:10:b5:d7:50:6d:ae:96:
                    68:24:f0:45:c9:0c:89:ae:01:51:72:20:06:1b:56:
                    31:06:c4:9d:2a:a8:c2:1c:2e:ef:06:4c:37:ca:67:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:41:5F:DC:2B:B4:3A:0E:A0:75:30:A6:41:62:68:0B:35:8E:A2
            X509v3 Authority Key Identifier:
                keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:78:84:da:d0:b7:fe:45:b0:de:1a:11:96:ff:5c:59:2f:
         7c:6a:52:c0:01:68:1b:e3:fc:98:f6:78:23:20:95:96:62:ff:
         21:48:73:1b:fd:a1:a5:fd:a1:69:81:1e:d4:54:59:3f:47:69:
         1a:64:d3:d5:f4:09:86:90:d1:8b:88:eb:9e:73:36:40:0e:73:
         98:a5:54:e8:29:66:0e:35:06:dc:3b:cf:ae:f9:3f:aa:c4:4f:
         9e:ce:ba:96:42:d1:c1:79:a0:d5:e4:b6:46:76:d3:f1:82:23:
         9c:c6:9d:b1:dc:dd:de:4c:51:94:89:aa:55:94:5f:d6:06:05:
         e3:11:82:3c:24:87:5f:a9:b7:f3:12:6b:fb:b2:d4:0a:49:17:
         61:d8:e0:77:26:4e:50:80:16:2e:7f:d2:f0:1d:ea:ed:11:c8:
         5a:d2:9f:41:73:58:b1:a1:b3:0f:b7:c4:c5:9f:43:2f:64:b0:
         3c:05:64:71:6c:e0:9c:45:40:88:13:40:f4:33:d0:ac:df:31:
         5a:ff:54:71:42:b6:30:28:96:21:59:c2:c6:4d:6f:4d:42:2e:
         cb:7d:b6:60:0f:dd:59:50:50:31:74:c1:93:5c:14:b1:57:91:
         be:0f:b9:92:a8:5c:8c:90:92:93:49:9b:9a:c4:0a:4e:a7:7f:
         e5:6f:b5:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUebSsy11r9PDVXgael4mOpLOY/rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0NThDMTNGNDA0NzRFMzc0OUNCQTBBNDlGNTlCMzYy
QjREM0UwQjAeFw0yNDA0MTUwNTQ2MzFaFw0yNDA0MTYwNzA4MzFaMDMxMTAvBgNV
BAMTKEEzRTI0MTVGREMyQkI0M0EwRUEwNzUzMEE2NDE2MjY4MEIzNThFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmrVaOvMIfWl9+i/nRv9E6BN0
rxJ5CFqfLkGAUt29Mh6DNnInIXFNS3ci6XPexW/jxnc8xhfToKP8TN/hZN6EQLFU
7A4yxZSWoI5t+jMVL4GEHAAnsQ8AUpYfXd6F9oCtNRsIfHzRz+4ACtl23SwFQXfs
21gOq9A2xibKuWY/uRBKTd9cX/qT6eZI+qRYb23zoWS/ajISr6U6nyCNKUONI1KJ
Eh1NEMmsigSquJgywiuX0g0bkaheNvnQpfdO2JxBep/9M+0+jgLGmIfGOWksUcJw
lLktydksELXXUG2ulmgk8EXJDImuAVFyIAYbVjEGxJ0qqMIcLu8GTDfKZ1wlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo+JBX9wrtDoOoHUwpkFiaAs1jqIwHwYDVR0j
BBgwFoAUJEWME/QEdON0nLoKSfWbNitNPgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMC8yNDQ1OEMxM0Y0MDQ3NEUzNzQ5Q0JBMEE0OUY1OUIzNjJCNEQzRTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0NDU4QzEzRjQwNDc0RTM3
NDlDQkEwQTQ5RjU5QjM2MkI0RDNFMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JWOEEvMC8y
NDQ1OEMxM0Y0MDQ3NEUzNzQ5Q0JBMEE0OUY1OUIzNjJCNEQzRTBCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlMV4hNrQt/5FsN4aEZb/XFkvfGpSwAFoG+P8mPZ4IyCVlmL/IUhzG/2hpf2h
aYEe1FRZP0dpGmTT1fQJhpDRi4jrnnM2QA5zmKVU6ClmDjUG3DvPrvk/qsRPns66
lkLRwXmg1eS2RnbT8YIjnMadsdzd3kxRlImqVZRf1gYF4xGCPCSHX6m38xJr+7LU
CkkXYdjgdyZOUIAWLn/S8B3q7RHIWtKfQXNYsaGzD7fExZ9DL2SwPAVkcWzgnEVA
iBNA9DPQrN8xWv9UcUK2MCiWIVnCxk1vTUIuy322YA/dWVBQMXTBk1wUsVeRvg+5
kqhcjJCSk0mbmsQKTqd/5W+1HA==
-----END CERTIFICATE-----