Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft
File:                     B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft (raw, json)
Hash identifier:          mAavpJHnlXaONw4CLmfMMhjxb13yGp3bQfel5OI7FTk=
Subject key identifier:   78:D4:1A:97:46:56:8D:BD:4D:8C:E8:DC:79:7F:9E:1E:B9:0B:B8:F7
Authority key identifier: B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B
Certificate issuer:       /CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
Certificate serial:       2D3A08B48BC08D354883750A59662027387806CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft
Manifest number:          32
Signing time:             Mon 15 Apr 2024 08:41:56 +0000
Manifest this update:     Mon 15 Apr 2024 08:36:56 +0000
Manifest next update:     Tue 16 Apr 2024 09:16:56 +0000
Files and hashes:         1: 323830343a373031383a3a2f33322d3438203d3e20323730373035.roa (hash: T7UzXN60G2QMTg5bu5LdmvoeDfrai5D1+5hYH1CYGB0=)
                          2: 3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (hash: b1dcqk9zbC+H/zekDRbsh6Y4ktk3+9neeyOV2IRJUL4=)
                          3: 3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa (hash: aR44QvtvOWlj09JbYNsi9YvJbAd/mCuaM9g8cz9yzog=)
                          4: B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.crl (hash: eptxHvMe7NY1vSAwBVziDd5Q9hmlJwte8ELOdNfJTr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3a:08:b4:8b:c0:8d:35:48:83:75:0a:59:66:20:27:38:78:06:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5CD0AC333BA9A2348AA912613E30B2E699A1B
        Validity
            Not Before: Apr 15 08:36:56 2024 GMT
            Not After : Apr 16 09:16:56 2024 GMT
        Subject: CN=78D41A9746568DBD4D8CE8DC797F9E1EB90BB8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:00:71:25:7e:15:0e:3b:72:c9:23:46:68:
                    ae:cc:33:9d:94:97:7e:c6:de:f4:b6:c0:8d:c2:5d:
                    aa:3a:3f:6c:b2:9b:89:ff:2b:8e:e9:fc:71:71:dd:
                    c2:29:e3:01:0e:d7:0f:5b:18:67:34:63:f0:9a:13:
                    1f:4a:80:47:8a:51:27:ae:27:d5:48:77:a3:51:4a:
                    20:25:e9:10:9a:5d:a6:7e:75:29:5b:16:4d:9a:7e:
                    6b:38:e2:55:1d:68:a2:95:8d:8a:68:46:4b:08:4b:
                    ac:ce:b3:92:df:0a:77:b2:56:14:a8:16:7e:40:b9:
                    de:a0:97:76:d2:0b:55:76:4f:8c:f6:7d:47:e6:e7:
                    58:07:4e:eb:31:6d:df:a6:6c:86:75:19:eb:66:54:
                    1f:a1:7c:89:8b:7b:9b:5d:a0:83:64:97:e2:b9:73:
                    49:db:79:a7:fb:1c:50:77:0c:e3:29:3e:2f:c7:cb:
                    68:47:a6:52:ac:02:60:d7:f3:7b:cd:0c:70:89:31:
                    00:25:97:89:f3:32:15:e4:aa:3d:4c:29:13:59:e1:
                    24:e2:46:b4:46:a9:a3:39:71:2e:b5:e2:27:2c:64:
                    4f:8c:1c:30:d1:f5:ff:fa:7b:8f:94:8c:d9:c1:be:
                    ad:3f:58:77:d8:e6:ff:6a:ef:28:1c:38:2f:7a:88:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D4:1A:97:46:56:8D:BD:4D:8C:E8:DC:79:7F:9E:1E:B9:0B:B8:F7
            X509v3 Authority Key Identifier:
                keyid:B6:E5:CD:0A:C3:33:BA:9A:23:48:AA:91:26:13:E3:0B:2E:69:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/0/B6E5CD0AC333BA9A2348AA912613E30B2E699A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:75:cc:97:c8:ef:39:1c:2d:1d:51:c1:dd:4e:60:b6:e2:a3:
         51:7c:90:2b:a0:53:82:02:7f:34:42:b4:fe:83:27:c8:c1:d1:
         5b:b8:45:97:38:71:27:7e:da:3e:b9:4e:a7:99:99:1b:33:98:
         01:79:63:dd:af:94:ea:06:98:74:eb:75:e7:1a:11:73:cf:71:
         ce:06:0d:9d:2b:5a:fa:72:c5:66:cc:1c:62:81:cf:80:47:1c:
         81:88:7d:db:26:55:e4:4f:d3:c2:d3:90:87:fc:13:e4:d7:5d:
         7d:d9:d4:93:5b:9d:9d:52:85:f5:35:3d:37:4f:b2:7b:50:2d:
         4e:7f:b3:31:80:0f:c5:a6:98:2b:b1:d3:92:72:58:c7:72:e3:
         64:49:47:d4:05:6e:ba:ee:b8:8d:4e:00:6b:ca:48:83:ee:61:
         3c:d6:b3:c5:cf:e8:8f:01:ba:af:a5:36:ba:c8:70:ac:1e:9b:
         87:12:ca:51:fd:c0:0e:99:08:81:96:36:94:52:09:10:13:48:
         1f:f0:88:7d:a1:c0:8d:15:c4:72:e6:49:18:6e:13:31:e8:dc:
         e3:05:2d:3b:65:58:b8:4a:07:36:76:6f:e8:1e:b7:ff:d7:a2:
         b0:ea:d2:0b:12:b2:46:3e:96:5f:cb:80:fb:83:62:60:8f:13:
         0b:f3:e4:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULToItIvAjTVIg3UKWWYgJzh4Bs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFNUNEMEFDMzMzQkE5QTIzNDhBQTkxMjYxM0UzMEIy
RTY5OUExQjAeFw0yNDA0MTUwODM2NTZaFw0yNDA0MTYwOTE2NTZaMDMxMTAvBgNV
BAMTKDc4RDQxQTk3NDY1NjhEQkQ0RDhDRThEQzc5N0Y5RTFFQjkwQkI4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWABxJX4VDjtyySNGaK7MM52U
l37G3vS2wI3CXao6P2yym4n/K47p/HFx3cIp4wEO1w9bGGc0Y/CaEx9KgEeKUSeu
J9VId6NRSiAl6RCaXaZ+dSlbFk2afms44lUdaKKVjYpoRksIS6zOs5LfCneyVhSo
Fn5Aud6gl3bSC1V2T4z2fUfm51gHTusxbd+mbIZ1GetmVB+hfImLe5tdoINkl+K5
c0nbeaf7HFB3DOMpPi/Hy2hHplKsAmDX83vNDHCJMQAll4nzMhXkqj1MKRNZ4STi
RrRGqaM5cS614icsZE+MHDDR9f/6e4+UjNnBvq0/WHfY5v9q7ygcOC96iNb1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeNQal0ZWjb1NjOjceX+eHrkLuPcwHwYDVR0j
BBgwFoAUtuXNCsMzupojSKqRJhPjCy5pmhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNU
ckIvMC9CNkU1Q0QwQUMzMzNCQTlBMjM0OEFBOTEyNjEzRTMwQjJFNjk5QTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2RTVDRDBBQzMzM0JBOUEy
MzQ4QUE5MTI2MTNFMzBCMkU2OTlBMUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNUckIvMC9C
NkU1Q0QwQUMzMzNCQTlBMjM0OEFBOTEyNjEzRTMwQjJFNjk5QTFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ3XMl8jvORwtHVHB3U5gtuKjUXyQK6BTggJ/NEK0/oMnyMHRW7hFlzhxJ37a
PrlOp5mZGzOYAXlj3a+U6gaYdOt15xoRc89xzgYNnSta+nLFZswcYoHPgEccgYh9
2yZV5E/TwtOQh/wT5NddfdnUk1udnVKF9TU9N0+ye1AtTn+zMYAPxaaYK7HTknJY
x3LjZElH1AVuuu64jU4Aa8pIg+5hPNazxc/ojwG6r6U2ushwrB6bhxLKUf3ADpkI
gZY2lFIJEBNIH/CIfaHAjRXEcuZJGG4TMejc4wUtO2VYuEoHNnZv6B63/9eisOrS
CxKyRj6WX8uA+4NiYI8TC/PkLg==
-----END CERTIFICATE-----