Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft
File:                     DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft (raw, json)
Hash identifier:          g0XQuKin/dBnWXiiOUnqs8l07eT41jbOSwHOlCWFx3M=
Subject key identifier:   AF:A0:73:0E:2D:8F:46:38:80:D9:2D:1F:B6:91:B2:64:C4:85:A8:95
Authority key identifier: DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29
Certificate issuer:       /CN=DAE6F6304F53DFFBF05831AC165CA7EAFE56D529
Certificate serial:       404ABDEDDAFFE7A26D4E94FB6E2F4693DFB2A1EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft
Manifest number:          BF
Signing time:             Wed 24 Jan 2024 06:00:39 +0000
Manifest this update:     Wed 24 Jan 2024 05:55:39 +0000
Manifest next update:     Thu 25 Jan 2024 06:45:39 +0000
Files and hashes:         1: 34352e3136312e3232382e302f32322d3332203d3e20323638343833.roa (hash: yYx36UPWh3IE4FBJ0UJtWe8A5JdSfAnljBBRNVt0HOI=)
                          2: 323830343a353165343a3a2f33322d313238203d3e20323638343833.roa (hash: c0nm6u3EAYZAW0UjikPwKvNc3VHNDsbEsmboOue29zg=)
                          3: DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.crl (hash: ONm8/AUgID3HPISSmXp3nSe/bfePWq+PXAqD6SWsnwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4a:bd:ed:da:ff:e7:a2:6d:4e:94:fb:6e:2f:46:93:df:b2:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAE6F6304F53DFFBF05831AC165CA7EAFE56D529
        Validity
            Not Before: Jan 24 05:55:39 2024 GMT
            Not After : Jan 25 06:45:39 2024 GMT
        Subject: CN=AFA0730E2D8F463880D92D1FB691B264C485A895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:24:a2:dd:17:fb:52:34:80:d4:54:b2:27:
                    ef:41:18:98:2d:01:f0:a1:b8:d9:22:06:b2:17:65:
                    b6:d8:1b:4a:45:44:64:1a:3d:96:e2:a8:19:20:65:
                    b9:5d:aa:b8:8b:15:54:f8:5e:e5:48:dd:be:9e:d3:
                    44:1a:23:b7:d3:78:7c:4c:b0:ab:f3:8f:22:cf:0b:
                    e4:42:55:2c:1f:28:34:02:db:6c:5e:0f:1c:d5:b1:
                    d6:0e:9a:d3:6e:7b:41:92:d9:88:30:b1:29:42:13:
                    fa:f4:a1:e1:2b:52:d0:75:cf:06:99:d9:0a:f5:37:
                    a0:d9:17:81:8b:b1:bf:be:a2:06:e1:c0:7c:56:20:
                    fe:ee:e4:a4:5d:80:f9:b1:cc:37:cd:bc:16:4b:25:
                    c7:37:1c:d1:5b:a9:79:c1:ad:6b:16:f5:69:1c:ac:
                    c6:20:a3:03:6d:b8:73:36:98:72:d8:01:2d:61:0c:
                    e8:62:54:4b:2d:7d:77:83:cc:62:33:8e:e7:15:8f:
                    9c:48:f7:cf:80:55:1e:af:7f:f4:51:27:da:5b:b6:
                    94:81:4a:5c:03:d8:2b:8f:3b:57:d1:c8:24:c8:9b:
                    cd:93:d9:c0:6a:11:51:5b:c5:66:92:11:16:f3:8e:
                    48:de:73:d8:e8:65:70:1f:25:b0:2b:5a:d8:ca:2c:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:73:0E:2D:8F:46:38:80:D9:2D:1F:B6:91:B2:64:C4:85:A8:95
            X509v3 Authority Key Identifier:
                keyid:DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:a8:d8:a2:e9:4d:e1:d9:b6:04:c1:be:a8:14:24:17:db:76:
         41:1f:98:7e:78:04:c9:30:57:71:74:2b:b2:2d:c1:dd:09:10:
         7f:0d:c6:db:92:0d:2c:1c:d0:9e:fb:9b:a6:16:22:c7:3a:cf:
         f7:98:dd:1c:88:91:28:9f:59:f2:2d:79:7c:09:8d:26:8c:08:
         a0:d0:c0:34:d0:5b:e8:2b:c3:49:46:c1:c7:fa:29:31:80:d9:
         4a:47:f5:88:83:22:13:d5:b4:39:85:31:8d:ee:a5:7d:5a:e4:
         2b:df:a5:8c:4f:20:00:38:0f:b3:70:b0:78:ca:d8:39:b2:35:
         7d:e3:83:79:d5:97:90:65:d8:20:a7:cd:76:a0:af:ac:d5:2b:
         51:84:80:55:16:c6:07:ed:19:bd:ef:d8:12:a2:ab:7f:53:b0:
         55:8a:0a:a6:02:1e:55:6c:9e:47:e8:6f:f8:7f:61:65:3e:1c:
         ce:1e:17:90:40:04:89:a2:bf:69:99:95:5b:78:2c:79:50:35:
         56:20:56:93:19:9f:07:3d:c5:91:a7:71:25:82:b5:22:f3:d9:
         46:a2:10:8a:a2:42:fd:87:be:19:44:b9:a6:56:5e:e4:ca:46:
         2d:02:e4:6e:5c:1e:b9:4a:e6:b8:97:94:a4:ae:22:e2:65:21:
         c5:d6:82:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQEq97dr/56JtTpT7bi9Gk9+yoewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFFNkY2MzA0RjUzREZGQkYwNTgzMUFDMTY1Q0E3RUFG
RTU2RDUyOTAeFw0yNDAxMjQwNTU1MzlaFw0yNDAxMjUwNjQ1MzlaMDMxMTAvBgNV
BAMTKEFGQTA3MzBFMkQ4RjQ2Mzg4MEQ5MkQxRkI2OTFCMjY0QzQ4NUE4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhSSi3Rf7UjSA1FSyJ+9BGJgt
AfChuNkiBrIXZbbYG0pFRGQaPZbiqBkgZbldqriLFVT4XuVI3b6e00QaI7fTeHxM
sKvzjyLPC+RCVSwfKDQC22xeDxzVsdYOmtNue0GS2YgwsSlCE/r0oeErUtB1zwaZ
2Qr1N6DZF4GLsb++ogbhwHxWIP7u5KRdgPmxzDfNvBZLJcc3HNFbqXnBrWsW9Wkc
rMYgowNtuHM2mHLYAS1hDOhiVEstfXeDzGIzjucVj5xI98+AVR6vf/RRJ9pbtpSB
SlwD2CuPO1fRyCTIm82T2cBqEVFbxWaSERbzjkjec9joZXAfJbArWtjKLJq9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr6BzDi2PRjiA2S0ftpGyZMSFqJUwHwYDVR0j
BBgwFoAU2ub2ME9T3/vwWDGsFlyn6v5W1SkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEhKc2FUTWdXeU52M3NDZVlRaFp4enI0eXh6YnhYckVpZHBIMXcyZDlH
b0svMC9EQUU2RjYzMDRGNTNERkZCRjA1ODMxQUMxNjVDQTdFQUZFNTZENTI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RBRTZGNjMwNEY1M0RGRkJG
MDU4MzFBQzE2NUNBN0VBRkU1NkQ1MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEhKc2FUTWdXeU52M3NDZVlRaFp4enI0eXh6YnhYckVpZHBIMXcyZDlHb0svMC9E
QUU2RjYzMDRGNTNERkZCRjA1ODMxQUMxNjVDQTdFQUZFNTZENTI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy6jYoulN4dm2BMG+qBQkF9t2QR+YfngEyTBXcXQrsi3B3QkQfw3G25INLBzQ
nvubphYixzrP95jdHIiRKJ9Z8i15fAmNJowIoNDANNBb6CvDSUbBx/opMYDZSkf1
iIMiE9W0OYUxje6lfVrkK9+ljE8gADgPs3CweMrYObI1feODedWXkGXYIKfNdqCv
rNUrUYSAVRbGB+0Zve/YEqKrf1OwVYoKpgIeVWyeR+hv+H9hZT4czh4XkEAEiaK/
aZmVW3gseVA1ViBWkxmfBz3FkadxJYK1IvPZRqIQiqJC/Ye+GUS5plZe5MpGLQLk
blweuUrmuJeUpK4i4mUhxdaCLw==
-----END CERTIFICATE-----