Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft
File:                     D53176AB725D41F3BF221A9749BC59C1DC62F981.mft (raw, json)
Hash identifier:          dCFIj6oJZOcP3La3Jz8cckYxX+RRuPF51gtCY+AoER8=
Subject key identifier:   44:29:E9:5A:8A:BE:29:E9:05:D8:97:E4:5E:39:08:28:47:0E:25:1E
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       10B699DC0CA42DDD0FD77D04CF5652A2512C1F75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft
Manifest number:          0175
Signing time:             Sun 14 Apr 2024 18:14:14 +0000
Manifest this update:     Sun 14 Apr 2024 18:09:14 +0000
Manifest next update:     Mon 15 Apr 2024 19:43:14 +0000
Files and hashes:         1: 3137302e3233332e3230342e302f32322d3233203d3e20323633333231.roa (hash: 4SN+fNPiz0YAYOrBSImWD4aO4walUJ7FF9f6hr8gObw=)
                          2: 3133382e3131372e32342e302f32322d3233203d3e20323633333231.roa (hash: eImA1c/eD84WNKSn/M3yxgoDeKhPI856ZuIR8Clqgfo=)
                          3: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: lxzulD/cJ0vj7TBlEAHTX0/av5qI3Pw+xNRcFRdaFaE=)
                          4: D53176AB725D41F3BF221A9749BC59C1DC62F981.crl (hash: yV0UR+AWF0buLgWF2aKGXMDcItA1F3H8+99yyAFTJaE=)
                          5: 3133382e3131372e32342e302f32322d3234203d3e20323633363231.roa (hash: /1IT1NMJwZ0dJFZ8JC+K+8pJafRdOQFeUCeTFKDAmLg=)
                          6: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: YxW33lW8ebcHyuj8KamtO/HSZK/MyK0QGmuoWnQZxqo=)
                          7: 3136382e39302e32342e302f32322d3233203d3e20323633333231.roa (hash: QxxNqtfLw/jya5RWWpgi+018WaZ0u0+pdovV8Y2+jw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b6:99:dc:0c:a4:2d:dd:0f:d7:7d:04:cf:56:52:a2:51:2c:1f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Apr 14 18:09:14 2024 GMT
            Not After : Apr 15 19:43:14 2024 GMT
        Subject: CN=4429E95A8ABE29E905D897E45E390828470E251E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:10:f1:67:23:8f:9f:3c:7f:46:1b:fe:fa:
                    8b:56:55:2f:36:1f:23:94:5b:68:be:7e:95:12:48:
                    9d:9c:63:ba:a3:8b:32:fe:3b:88:7b:ba:78:67:22:
                    08:09:11:45:9d:2d:d0:11:45:a3:af:81:b2:84:f8:
                    c1:1c:20:b6:ef:47:4f:73:52:50:98:61:b8:2f:d6:
                    80:94:e2:dd:08:6c:e4:cb:64:60:2f:c9:ae:4d:80:
                    1f:42:bb:32:d8:9b:c5:9c:45:11:da:eb:93:fc:49:
                    57:b8:15:12:7c:cf:a5:34:3c:39:14:b5:e3:98:5d:
                    14:f6:c7:15:a6:9c:d8:2e:85:aa:35:65:f2:9a:ae:
                    ec:36:c2:a7:bb:b2:5c:9f:d8:68:1d:8c:65:e7:8c:
                    5d:91:8f:fd:bd:70:ee:5c:89:2a:be:8c:62:f1:00:
                    3a:9a:95:fc:47:df:e1:6b:29:66:f4:f2:36:13:77:
                    8a:5a:40:df:0e:8c:41:83:ae:c4:1c:0c:c1:4b:0b:
                    97:c4:89:a4:40:3f:c0:41:29:c0:3b:7a:73:86:18:
                    30:44:61:e7:4b:6a:fd:69:cb:77:c5:f5:6f:7b:f1:
                    1a:c9:d3:18:ae:34:18:7f:93:96:a1:27:ef:17:4c:
                    6b:6f:0d:13:e7:f4:2b:1d:96:78:e1:38:9f:02:57:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:29:E9:5A:8A:BE:29:E9:05:D8:97:E4:5E:39:08:28:47:0E:25:1E
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:41:a3:30:76:92:b1:25:16:4e:2d:14:a8:99:da:58:8d:
         3a:64:c6:4b:55:78:49:00:2d:e3:80:16:6c:cd:33:6d:a1:30:
         7c:d7:48:8a:86:89:e0:b5:d5:54:86:b9:00:51:31:c1:94:29:
         c3:81:c4:29:69:04:d9:ba:77:e9:a6:2f:5a:25:dc:12:c8:47:
         06:56:10:6d:81:9b:2e:34:75:d5:a0:ca:da:8d:31:55:35:a4:
         6a:07:fc:9b:ba:bd:9f:0a:f5:f7:ff:9b:3d:97:97:be:31:e7:
         f4:92:3a:b7:c0:38:34:c7:e5:b7:0d:83:fe:15:dd:d5:08:2d:
         d6:b0:0e:46:94:f1:2b:1b:93:37:2a:43:85:cb:95:79:11:67:
         a2:75:d3:49:94:26:ee:22:9a:e9:fd:32:30:13:f1:2a:23:01:
         43:38:22:22:5a:6e:c8:15:f4:55:ee:e4:76:a3:e8:bc:8d:fa:
         17:91:83:52:a8:19:95:ca:76:2f:85:4f:13:a8:8d:2d:39:70:
         23:cc:29:0a:38:52:7e:a0:d9:12:3b:cb:66:e0:9a:b2:00:ce:
         74:c6:04:e1:1e:41:d9:b8:44:98:35:e4:50:2b:3a:29:eb:65:
         cf:db:be:73:91:1a:4c:37:de:da:28:29:73:3e:8a:a4:43:2d:
         4e:80:df:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUELaZ3AykLd0P130Ez1ZSolEsH3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzMTc2QUI3MjVENDFGM0JGMjIxQTk3NDlCQzU5QzFE
QzYyRjk4MTAeFw0yNDA0MTQxODA5MTRaFw0yNDA0MTUxOTQzMTRaMDMxMTAvBgNV
BAMTKDQ0MjlFOTVBOEFCRTI5RTkwNUQ4OTdFNDVFMzkwODI4NDcwRTI1MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbhDxZyOPnzx/Rhv++otWVS82
HyOUW2i+fpUSSJ2cY7qjizL+O4h7unhnIggJEUWdLdARRaOvgbKE+MEcILbvR09z
UlCYYbgv1oCU4t0IbOTLZGAvya5NgB9CuzLYm8WcRRHa65P8SVe4FRJ8z6U0PDkU
teOYXRT2xxWmnNguhao1ZfKaruw2wqe7slyf2GgdjGXnjF2Rj/29cO5ciSq+jGLx
ADqalfxH3+FrKWb08jYTd4paQN8OjEGDrsQcDMFLC5fEiaRAP8BBKcA7enOGGDBE
YedLav1py3fF9W978RrJ0xiuNBh/k5ahJ+8XTGtvDRPn9CsdlnjhOJ8CV3IbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURCnpWoq+KekF2JfkXjkIKEcOJR4wHwYDVR0j
BBgwFoAU1TF2q3JdQfO/IhqXSbxZwdxi+YEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMC9ENTMxNzZBQjcyNUQ0MUYzQkYyMjFBOTc0OUJDNTlDMURDNjJGOTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1MzE3NkFCNzI1RDQxRjNC
RjIyMUE5NzQ5QkM1OUMxREM2MkY5ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1BqSHEvMC9E
NTMxNzZBQjcyNUQ0MUYzQkYyMjFBOTc0OUJDNTlDMURDNjJGOTgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXYRBozB2krElFk4tFKiZ2liNOmTGS1V4SQAt44AWbM0zbaEwfNdIioaJ4LXV
VIa5AFExwZQpw4HEKWkE2bp36aYvWiXcEshHBlYQbYGbLjR11aDK2o0xVTWkagf8
m7q9nwr19/+bPZeXvjHn9JI6t8A4NMfltw2D/hXd1Qgt1rAORpTxKxuTNypDhcuV
eRFnonXTSZQm7iKa6f0yMBPxKiMBQzgiIlpuyBX0Ve7kdqPovI36F5GDUqgZlcp2
L4VPE6iNLTlwI8wpCjhSfqDZEjvLZuCasgDOdMYE4R5B2bhEmDXkUCs6Ketlz9u+
c5EaTDfe2igpcz6KpEMtToDf+g==
-----END CERTIFICATE-----