Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.mft
File:                     2CBCA125662055C6A9F373BFBB29A448D69C2061.mft (raw, json)
Hash identifier:          IZcrEzEawT5Sk1ITPZo47wXKjlOr3ljViSXp342lvws=
Subject key identifier:   8F:A0:23:D1:46:8C:85:D6:2E:F6:1C:28:F8:90:A7:F2:73:14:8F:5D
Authority key identifier: 2C:BC:A1:25:66:20:55:C6:A9:F3:73:BF:BB:29:A4:48:D6:9C:20:61
Certificate issuer:       /CN=2CBCA125662055C6A9F373BFBB29A448D69C2061
Certificate serial:       4C363601B612396FBDDA2D0AA968D0BCCED0DAEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.mft
Manifest number:          03
Signing time:             Sun 10 Apr 2022 15:00:00 +0000
Manifest this update:     Sun 10 Apr 2022 14:55:00 +0000
Manifest next update:     Mon 11 Apr 2022 15:32:00 +0000
Files and hashes:         1: 3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa (hash: N16sYFCOgmR57k4VHvqRUjbpJVxrqcKPq37z89vUh14=)
                          2: 2CBCA125662055C6A9F373BFBB29A448D69C2061.crl (hash: N/Qojtb7IeROrV3SuDsRxvKJ6mMz7T99BWt1hAHjrww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:36:36:01:b6:12:39:6f:bd:da:2d:0a:a9:68:d0:bc:ce:d0:da:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CBCA125662055C6A9F373BFBB29A448D69C2061
        Validity
            Not Before: Apr 10 14:55:00 2022 GMT
            Not After : Apr 11 15:32:00 2022 GMT
        Subject: CN=8FA023D1468C85D62EF61C28F890A7F273148F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:cf:e9:9c:b0:65:33:42:90:5c:a5:75:54:
                    f9:d9:40:43:72:fe:74:8b:77:c7:54:18:32:60:ab:
                    2a:2f:0d:ca:95:fc:9a:e8:01:99:30:53:e7:0c:88:
                    ea:04:48:77:31:23:09:8f:f8:ba:12:12:a0:10:39:
                    84:32:d8:61:65:e2:4a:74:cb:cf:bb:fb:9f:e8:5d:
                    44:ff:4c:49:1b:0d:99:b3:0c:37:cd:85:29:32:60:
                    8a:34:a1:b2:9e:d1:6a:4c:04:5e:65:e9:bb:fc:36:
                    cc:ae:cc:96:6d:31:95:d9:81:fa:09:52:e1:11:2c:
                    35:d6:0a:19:a0:67:a2:32:58:2d:85:88:83:69:0c:
                    63:c6:58:06:14:c6:16:e6:08:0d:54:75:70:28:2d:
                    8a:da:da:e0:f2:1a:e7:98:50:0a:df:16:e6:a6:6f:
                    9b:86:78:b7:b4:90:13:27:64:1e:58:02:96:c5:56:
                    03:65:1f:86:c2:d7:f5:53:79:bb:17:30:b7:a6:34:
                    76:04:56:07:ad:97:6d:1a:bb:e6:74:6e:a9:e7:91:
                    f8:da:b6:90:ca:3b:3b:5e:37:8e:fe:27:e7:21:20:
                    65:06:82:09:11:d9:00:99:12:e2:b7:54:39:0e:7c:
                    97:df:b8:2e:8d:d5:28:c5:fb:24:df:65:05:34:cd:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A0:23:D1:46:8C:85:D6:2E:F6:1C:28:F8:90:A7:F2:73:14:8F:5D
            X509v3 Authority Key Identifier:
                keyid:2C:BC:A1:25:66:20:55:C6:A9:F3:73:BF:BB:29:A4:48:D6:9C:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:a3:e2:03:64:27:2b:c1:2e:bb:d3:2f:67:89:a0:07:70:
         b7:fb:91:fd:a1:16:ad:77:5c:73:62:46:a2:a6:e4:21:c2:a0:
         3d:f3:1a:3a:8a:fd:f5:85:be:c9:50:1b:94:67:e1:37:c9:10:
         e9:be:46:7f:0c:58:96:86:15:61:e4:58:68:a4:d0:76:3c:f8:
         4c:6f:f1:1d:34:a2:6c:23:e9:d2:d3:c2:5c:b3:dc:a2:cb:7d:
         d5:2d:7d:2d:89:99:de:a0:18:22:5d:73:61:cc:60:c2:0a:72:
         f7:97:45:4a:f3:e7:af:7d:1d:27:08:7c:29:f3:3f:72:31:89:
         ad:4f:7c:80:c8:9e:17:1f:c8:ac:df:0d:61:6a:d5:29:09:d1:
         22:8a:38:6c:47:8a:f8:af:5b:da:c4:41:ce:76:21:b7:9c:69:
         08:b2:83:f9:79:3c:66:43:c0:28:28:0b:ae:50:35:3f:a5:52:
         22:14:f6:93:ae:43:71:2a:49:5c:eb:e6:5c:c7:0d:4c:ff:a4:
         8f:04:4e:cd:5c:17:f5:0d:7d:a5:a2:ee:2e:a3:76:5a:12:23:
         c8:5e:f6:9d:f5:d5:b5:52:ef:20:3d:7c:f0:99:f7:bf:5f:13:
         9d:70:c2:23:56:58:d3:50:5b:78:5c:1b:3b:67:f1:3f:c1:32:
         dd:97:4b:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTDY2AbYSOW+92i0KqWjQvM7Q2uswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCQ0ExMjU2NjIwNTVDNkE5RjM3M0JGQkIyOUE0NDhE
NjlDMjA2MTAeFw0yMjA0MTAxNDU1MDBaFw0yMjA0MTExNTMyMDBaMDMxMTAvBgNV
BAMTKDhGQTAyM0QxNDY4Qzg1RDYyRUY2MUMyOEY4OTBBN0YyNzMxNDhGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSM/pnLBlM0KQXKV1VPnZQENy
/nSLd8dUGDJgqyovDcqV/JroAZkwU+cMiOoESHcxIwmP+LoSEqAQOYQy2GFl4kp0
y8+7+5/oXUT/TEkbDZmzDDfNhSkyYIo0obKe0WpMBF5l6bv8NsyuzJZtMZXZgfoJ
UuERLDXWChmgZ6IyWC2FiINpDGPGWAYUxhbmCA1UdXAoLYra2uDyGueYUArfFuam
b5uGeLe0kBMnZB5YApbFVgNlH4bC1/VTebsXMLemNHYEVgetl20au+Z0bqnnkfja
tpDKOzteN47+J+chIGUGggkR2QCZEuK3VDkOfJffuC6N1SjF+yTfZQU0zUZFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj6Aj0UaMhdYu9hwo+JCn8nMUj10wHwYDVR0j
BBgwFoAULLyhJWYgVcap83O/uymkSNacIGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JkVVkxN01wTkFuWjlZZ1JGNmtFdVR1Skx3RjdRYlpvckZqNFhzZVpR
VjcvMC8yQ0JDQTEyNTY2MjA1NUM2QTlGMzczQkZCQjI5QTQ0OEQ2OUMyMDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDQkNBMTI1NjYyMDU1QzZB
OUYzNzNCRkJCMjlBNDQ4RDY5QzIwNjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0JkVVkxN01wTkFuWjlZZ1JGNmtFdVR1Skx3RjdRYlpvckZqNFhzZVpRVjcvMC8y
Q0JDQTEyNTY2MjA1NUM2QTlGMzczQkZCQjI5QTQ0OEQ2OUMyMDYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtsKj4gNkJyvBLrvTL2eJoAdwt/uR/aEWrXdcc2JGoqbkIcKgPfMaOor99YW+
yVAblGfhN8kQ6b5GfwxYloYVYeRYaKTQdjz4TG/xHTSibCPp0tPCXLPcost91S19
LYmZ3qAYIl1zYcxgwgpy95dFSvPnr30dJwh8KfM/cjGJrU98gMieFx/IrN8NYWrV
KQnRIoo4bEeK+K9b2sRBznYht5xpCLKD+Xk8ZkPAKCgLrlA1P6VSIhT2k65DcSpJ
XOvmXMcNTP+kjwROzVwX9Q19paLuLqN2WhIjyF72nfXVtVLvID188Jn3v18TnXDC
I1ZY01BbeFwbO2fxP8Ey3ZdLGg==
-----END CERTIFICATE-----