Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.mft
File:                     616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.mft (raw, json)
Hash identifier:          hwUhNjdVw0IyiEl3MzeXl6jpCZPxZ2sHNCeM0BImfsU=
Subject key identifier:   51:BD:4B:17:3C:D1:00:86:CB:3B:2C:F1:06:EC:C5:CD:67:84:C2:DC
Authority key identifier: 61:6C:DE:B1:DD:DC:AB:54:BC:6C:A1:DC:BD:77:FB:0A:EE:CE:D0:CC
Certificate issuer:       /CN=616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC
Certificate serial:       4022A6684F45650986D6E4F09AD75EA709E20B53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.mft
Manifest number:          5E
Signing time:             Mon 25 Mar 2024 12:19:02 +0000
Manifest this update:     Mon 25 Mar 2024 12:14:02 +0000
Manifest next update:     Tue 26 Mar 2024 13:25:02 +0000
Files and hashes:         1: 616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.crl (hash: HrnyUffaPPW24Ky/zlEBY0fzDzHmWtj4FUy+L/rSQkU=)
                          2: 3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa (hash: B5vQnAaae40+l/PR/hIKVHF762Ocpap2Ui4hlT2lRNA=)
                          3: 323830343a326235343a3a2f33322d3438203d3e20323635313437.roa (hash: 2JDZcqJbTjNUgDt5MPObimhhDeyJ26x0ctOZJckIts4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:a6:68:4f:45:65:09:86:d6:e4:f0:9a:d7:5e:a7:09:e2:0b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC
        Validity
            Not Before: Mar 25 12:14:02 2024 GMT
            Not After : Mar 26 13:25:02 2024 GMT
        Subject: CN=51BD4B173CD10086CB3B2CF106ECC5CD6784C2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:12:49:a0:df:64:dc:c9:f0:4b:b5:79:b2:
                    22:3e:d1:64:ce:21:2a:21:9a:dc:9b:bc:62:c5:63:
                    7c:5b:e5:4d:64:0c:bd:69:a6:79:54:99:77:1a:4d:
                    45:d9:c2:0a:55:0d:8e:3c:a1:17:ca:f0:f4:a8:39:
                    7c:66:f4:9e:07:8e:f4:ab:54:d8:d2:91:8a:70:97:
                    a4:eb:09:a3:43:e9:01:9e:6e:09:a2:53:4d:e9:72:
                    e9:d6:7a:2d:25:05:1f:04:b4:09:e5:b1:00:a1:04:
                    35:a8:65:cf:c3:0d:07:cd:3b:e5:17:c0:bc:d2:19:
                    84:bd:4f:29:85:73:64:2e:c6:23:ef:55:24:89:3a:
                    29:52:04:d7:c7:2f:de:a3:8a:11:99:3b:62:cb:ed:
                    1a:a5:b5:df:9f:c2:57:4a:6c:ac:a4:09:66:20:60:
                    c9:5d:19:d4:4e:70:a7:70:2d:02:ee:24:2b:fa:a1:
                    8a:f8:ed:68:0a:1a:b7:cc:b5:e4:98:0e:5b:b1:31:
                    a9:41:40:6a:e3:58:84:b7:21:62:f6:d6:a7:ef:21:
                    51:d2:93:81:f5:5a:2d:83:88:f8:3e:18:01:e9:a1:
                    d7:15:09:e5:65:2d:f8:ab:46:12:66:bb:92:2e:06:
                    80:7c:53:55:de:55:ab:c6:50:a4:6c:96:0e:af:fe:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BD:4B:17:3C:D1:00:86:CB:3B:2C:F1:06:EC:C5:CD:67:84:C2:DC
            X509v3 Authority Key Identifier:
                keyid:61:6C:DE:B1:DD:DC:AB:54:BC:6C:A1:DC:BD:77:FB:0A:EE:CE:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:b3:eb:75:11:18:c7:fc:cc:fc:12:07:c0:92:b4:34:ce:f8:
         34:f5:8f:f2:6b:36:ff:f7:6b:d1:92:59:73:59:db:0a:15:26:
         72:ea:e1:33:66:26:1e:97:99:78:7f:12:24:29:ec:00:e4:ec:
         8b:fc:6a:1c:c7:0b:d4:54:e5:d6:d1:f5:7c:b3:57:16:06:ea:
         fd:5a:1b:7e:46:d7:e8:73:fd:0d:f1:17:2a:4f:10:e4:4c:c8:
         d4:aa:23:b4:72:b4:73:09:99:ca:c2:9f:6f:70:5e:d1:e5:91:
         2b:d2:0e:c5:e2:ab:f0:39:0e:0e:eb:81:dc:84:5e:fa:71:47:
         9e:2f:b7:e3:16:e5:32:0e:8a:dc:ec:df:72:b9:37:d5:f6:3f:
         a1:2b:02:a0:eb:9a:cf:6b:95:ab:18:f5:40:51:8a:d6:1a:0a:
         b9:c9:dd:e6:fd:af:26:fb:d4:00:66:83:43:db:e6:4a:b6:f5:
         b8:03:bb:96:1f:84:7d:b4:f6:bd:11:fc:e9:73:bf:bc:51:6a:
         7e:c1:a6:79:77:a0:75:85:8b:64:26:11:4c:30:4e:54:c6:7a:
         79:3d:8f:9a:89:50:1d:70:73:21:b2:aa:8d:c8:59:17:1a:c2:
         fd:e0:47:0b:43:76:e5:da:93:e1:cf:83:f6:9e:8c:a1:c3:3a:
         9d:e7:6a:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQCKmaE9FZQmG1uTwmtdepwniC1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE2Q0RFQjFERERDQUI1NEJDNkNBMURDQkQ3N0ZCMEFF
RUNFRDBDQzAeFw0yNDAzMjUxMjE0MDJaFw0yNDAzMjYxMzI1MDJaMDMxMTAvBgNV
BAMTKDUxQkQ0QjE3M0NEMTAwODZDQjNCMkNGMTA2RUNDNUNENjc4NEMyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXxJJoN9k3MnwS7V5siI+0WTO
ISohmtybvGLFY3xb5U1kDL1ppnlUmXcaTUXZwgpVDY48oRfK8PSoOXxm9J4HjvSr
VNjSkYpwl6TrCaND6QGebgmiU03pcunWei0lBR8EtAnlsQChBDWoZc/DDQfNO+UX
wLzSGYS9TymFc2QuxiPvVSSJOilSBNfHL96jihGZO2LL7Rqltd+fwldKbKykCWYg
YMldGdROcKdwLQLuJCv6oYr47WgKGrfMteSYDluxMalBQGrjWIS3IWL21qfvIVHS
k4H1Wi2DiPg+GAHpodcVCeVlLfirRhJmu5IuBoB8U1XeVavGUKRslg6v/vXBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUb1LFzzRAIbLOyzxBuzFzWeEwtwwHwYDVR0j
BBgwFoAUYWzesd3cq1S8bKHcvXf7Cu7O0MwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2V0U0VHc29OUWNxeWlqMUJ2WXk5eHVnUDV5TXp5RFRBeTg5RW4zVXl1
VUQvMC82MTZDREVCMURERENBQjU0QkM2Q0ExRENCRDc3RkIwQUVFQ0VEMENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxNkNERUIxREREQ0FCNTRC
QzZDQTFEQ0JENzdGQjBBRUVDRUQwQ0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2V0U0VHc29OUWNxeWlqMUJ2WXk5eHVnUDV5TXp5RFRBeTg5RW4zVXl1VUQvMC82
MTZDREVCMURERENBQjU0QkM2Q0ExRENCRDc3RkIwQUVFQ0VEMENDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3rPrdREYx/zM/BIHwJK0NM74NPWP8ms2//dr0ZJZc1nbChUmcurhM2YmHpeZ
eH8SJCnsAOTsi/xqHMcL1FTl1tH1fLNXFgbq/VobfkbX6HP9DfEXKk8Q5EzI1Koj
tHK0cwmZysKfb3Be0eWRK9IOxeKr8DkODuuB3IRe+nFHni+34xblMg6K3Ozfcrk3
1fY/oSsCoOuaz2uVqxj1QFGK1hoKucnd5v2vJvvUAGaDQ9vmSrb1uAO7lh+EfbT2
vRH86XO/vFFqfsGmeXegdYWLZCYRTDBOVMZ6eT2PmolQHXBzIbKqjchZFxrC/eBH
C0N25dqT4c+D9p6MocM6nedqmg==
-----END CERTIFICATE-----