Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft
File:                     5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft (raw, json)
Hash identifier:          qzP/qILls5OBb+E8mixgH1ORHGU8eT51f3X9IDLBc5U=
Subject key identifier:   5A:8F:EC:3D:46:C8:A6:0F:EE:DE:E9:86:B5:52:64:B4:A3:0D:AA:DB
Authority key identifier: 5E:AB:C2:77:6B:B4:75:6F:A1:6A:1A:E7:17:87:EB:A3:5A:71:9F:E1
Certificate issuer:       /CN=5EABC2776BB4756FA16A1AE71787EBA35A719FE1
Certificate serial:       4E54515B5FF198B7AF5234BF5E81C48704ABBA33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft
Manifest number:          11
Signing time:             Fri 10 May 2024 05:40:34 +0000
Manifest this update:     Fri 10 May 2024 05:35:34 +0000
Manifest next update:     Sat 11 May 2024 06:00:34 +0000
Files and hashes:         1: 34352e3232392e32342e302f32322d3233203d3e20323637303936.roa (hash: B50V/lzNI7r79JaQ9fMFNt3GpWfhuEE8DlVAsRvHgz4=)
                          2: 5EABC2776BB4756FA16A1AE71787EBA35A719FE1.crl (hash: eNHlkPnhXHGbnmKRHnX/KqcMNegIcd3SiJZeLgGnETk=)
                          3: 323830343a343831343a3a2f33322d3332203d3e20323637303936.roa (hash: ql6efDP3ZMu3TkxXg33laHeB2X/lMwCn7016VRHoAAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:54:51:5b:5f:f1:98:b7:af:52:34:bf:5e:81:c4:87:04:ab:ba:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EABC2776BB4756FA16A1AE71787EBA35A719FE1
        Validity
            Not Before: May 10 05:35:34 2024 GMT
            Not After : May 11 06:00:34 2024 GMT
        Subject: CN=5A8FEC3D46C8A60FEEDEE986B55264B4A30DAADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:cf:99:b3:ee:36:05:44:8b:b2:30:7d:d8:
                    1c:fb:92:9c:25:c6:a0:f2:85:49:56:c0:d2:6c:58:
                    c8:af:fc:8f:08:80:5f:84:ef:9d:61:b9:9d:26:02:
                    fc:3e:13:f9:be:cf:3a:3c:98:08:07:40:8b:7c:0e:
                    0d:1a:10:e2:af:e2:c3:84:a0:84:75:28:af:1e:7f:
                    2f:e4:e6:c3:b9:bf:27:1d:19:9a:8a:a2:d7:a1:25:
                    33:59:6a:e2:9c:8b:45:47:0b:13:df:31:64:99:79:
                    cf:69:79:cd:4d:36:4a:97:5b:80:48:49:cc:f3:79:
                    1c:a6:a0:79:08:8a:9c:b6:f5:b3:71:99:62:33:e0:
                    56:08:67:18:b4:f6:fc:29:d0:60:1d:49:23:17:28:
                    f7:28:87:10:99:a3:ff:84:2d:4d:59:ef:d9:e5:32:
                    ea:89:c1:ee:85:a8:94:e4:36:d7:ab:c5:aa:29:53:
                    34:73:77:21:c3:31:ed:17:02:f4:4b:83:90:0e:a9:
                    c7:0a:2e:22:87:ee:81:13:cc:52:47:99:5b:16:ab:
                    cc:f2:be:a3:76:13:f7:1d:8c:5a:cc:83:6a:9c:e0:
                    7d:2c:e1:eb:47:c5:1c:d6:18:d1:33:44:5c:70:92:
                    89:d3:ac:f1:29:3a:dd:69:71:e2:aa:49:1c:de:90:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8F:EC:3D:46:C8:A6:0F:EE:DE:E9:86:B5:52:64:B4:A3:0D:AA:DB
            X509v3 Authority Key Identifier:
                keyid:5E:AB:C2:77:6B:B4:75:6F:A1:6A:1A:E7:17:87:EB:A3:5A:71:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5EABC2776BB4756FA16A1AE71787EBA35A719FE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:23:e3:e8:65:b3:9b:38:ff:8b:2b:56:77:7b:6d:00:8c:
         7b:c1:9b:05:19:95:e2:45:bb:6e:6d:a0:63:87:f6:26:9b:88:
         ec:b7:51:c0:4d:24:b9:1f:4d:bb:c4:ea:8a:25:a2:41:74:21:
         db:9d:31:4c:d3:64:00:66:65:76:89:0e:0a:68:7d:31:07:5a:
         e9:40:92:73:23:9d:92:48:5c:f7:54:e6:14:ac:37:da:8d:cd:
         38:ac:c4:0a:2b:35:f4:ac:e6:f3:a2:09:c6:7b:30:97:fb:a2:
         f6:ed:6f:6b:54:db:f7:e2:9a:37:36:81:0b:bc:7c:b3:a1:f1:
         a5:29:2f:53:44:fd:0e:a2:e4:13:89:3c:d2:60:b9:7c:d1:35:
         56:7c:04:40:78:0d:d9:76:b8:8b:7f:51:4c:ef:e4:77:5f:90:
         eb:50:ad:17:da:6a:f0:d4:ef:37:c6:67:86:ad:57:60:64:d8:
         77:48:7d:f1:34:42:9f:1a:c4:f8:50:7b:31:7a:73:46:97:03:
         6c:12:d6:a5:01:86:cc:31:6d:ea:39:c0:66:33:75:d9:fa:21:
         4b:b6:d4:8c:08:16:55:87:e1:29:9f:92:c9:24:fc:8a:04:71:
         11:13:b1:c2:7c:33:11:61:db:2c:05:b5:9c:6f:6d:09:e6:e4:
         6f:6f:2d:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTlRRW1/xmLevUjS/XoHEhwSrujMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBQkMyNzc2QkI0NzU2RkExNkExQUU3MTc4N0VCQTM1
QTcxOUZFMTAeFw0yNDA1MTAwNTM1MzRaFw0yNDA1MTEwNjAwMzRaMDMxMTAvBgNV
BAMTKDVBOEZFQzNENDZDOEE2MEZFRURFRTk4NkI1NTI2NEI0QTMwREFBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDys8+Zs+42BUSLsjB92Bz7kpwl
xqDyhUlWwNJsWMiv/I8IgF+E751huZ0mAvw+E/m+zzo8mAgHQIt8Dg0aEOKv4sOE
oIR1KK8efy/k5sO5vycdGZqKotehJTNZauKci0VHCxPfMWSZec9pec1NNkqXW4BI
SczzeRymoHkIipy29bNxmWIz4FYIZxi09vwp0GAdSSMXKPcohxCZo/+ELU1Z79nl
MuqJwe6FqJTkNterxaopUzRzdyHDMe0XAvRLg5AOqccKLiKH7oETzFJHmVsWq8zy
vqN2E/cdjFrMg2qc4H0s4etHxRzWGNEzRFxwkonTrPEpOt1pceKqSRzekJQfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWo/sPUbIpg/u3umGtVJktKMNqtswHwYDVR0j
BBgwFoAUXqvCd2u0dW+hahrnF4fro1pxn+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNms4QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVK
bjQvMC81RUFCQzI3NzZCQjQ3NTZGQTE2QTFBRTcxNzg3RUJBMzVBNzE5RkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQUJDMjc3NkJCNDc1NkZB
MTZBMUFFNzE3ODdFQkEzNUE3MTlGRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nms4QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVKbjQvMC81
RUFCQzI3NzZCQjQ3NTZGQTE2QTFBRTcxNzg3RUJBMzVBNzE5RkUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOs0j4+hls5s4/4srVnd7bQCMe8GbBRmV4kW7bm2gY4f2JpuI7LdRwE0kuR9N
u8TqiiWiQXQh250xTNNkAGZldokOCmh9MQda6UCScyOdkkhc91TmFKw32o3NOKzE
Cis19Kzm86IJxnswl/ui9u1va1Tb9+KaNzaBC7x8s6HxpSkvU0T9DqLkE4k80mC5
fNE1VnwEQHgN2Xa4i39RTO/kd1+Q61CtF9pq8NTvN8Znhq1XYGTYd0h98TRCnxrE
+FB7MXpzRpcDbBLWpQGGzDFt6jnAZjN12fohS7bUjAgWVYfhKZ+SyST8igRxEROx
wnwzEWHbLAW1nG9tCebkb28tYg==
-----END CERTIFICATE-----