Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft
File:                     AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft (raw, json)
Hash identifier:          HSXWNe5spjtecwkT+IUJff0n/SLGbcBKZiQJyR/7GiU=
Subject key identifier:   41:E3:49:3D:59:87:60:3F:C4:70:9E:E7:7F:78:73:E4:24:0E:6D:A4
Authority key identifier: AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41
Certificate issuer:       /CN=AA631FAB3A44BD06A767A4F75D7C1474EFCE8341
Certificate serial:       459BB2CE57A0CF283CAB248FAC6F90F7B486976E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft
Manifest number:          032D
Signing time:             Mon 15 Apr 2024 03:49:11 +0000
Manifest this update:     Mon 15 Apr 2024 03:44:11 +0000
Manifest next update:     Tue 16 Apr 2024 06:07:11 +0000
Files and hashes:         1: 3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa (hash: ciEzMsl8XNQvatcy3qlBI91g+PZV+KCj01OxQblzefw=)
                          2: 323830343a326639633a3a2f33322d3438203d3e20323634393032.roa (hash: n/eQsp1YN2sgE4jfEBwa83HKtfIpDrOQd3sEHVAu2Kk=)
                          3: AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.crl (hash: DpOmmx1Vs7ErilSI9ViYfktPjNL6+ZLw4C1epI+0moM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:b2:ce:57:a0:cf:28:3c:ab:24:8f:ac:6f:90:f7:b4:86:97:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA631FAB3A44BD06A767A4F75D7C1474EFCE8341
        Validity
            Not Before: Apr 15 03:44:11 2024 GMT
            Not After : Apr 16 06:07:11 2024 GMT
        Subject: CN=41E3493D5987603FC4709EE77F7873E4240E6DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:55:2d:9d:e8:eb:28:c4:bf:03:6b:cb:f7:
                    37:30:b9:0c:c5:ee:d5:99:61:88:7a:4e:5f:8d:24:
                    10:43:32:ba:0a:14:5c:88:27:f4:9a:b9:db:0f:8c:
                    08:77:d0:cb:ef:ca:92:dc:cb:77:79:f6:1a:31:18:
                    1c:cb:7a:90:f0:11:01:6c:3d:0d:70:9b:37:4f:15:
                    87:83:1c:7a:14:83:b1:e8:35:d3:a9:3f:9b:ac:bb:
                    12:40:66:33:cc:45:f5:ae:1d:5e:fc:2e:08:70:0f:
                    43:de:cd:ab:15:2d:73:7b:9c:8e:bf:28:b2:f4:56:
                    da:0a:7e:c0:f9:45:37:6e:79:83:a3:c7:a2:09:1e:
                    27:bf:15:fe:02:12:1f:6f:ed:6e:fb:75:12:e8:67:
                    24:cb:e5:88:bf:5a:c4:60:47:eb:e1:36:40:4f:30:
                    9b:06:4c:37:b3:e1:21:ce:1c:7f:a9:2e:1f:41:79:
                    f7:66:9b:f7:f3:bb:76:aa:0d:ca:6c:2f:cd:13:f8:
                    71:47:ef:19:09:26:39:4b:ed:90:63:43:6f:fd:4d:
                    ef:e0:d7:ce:ef:06:e1:29:ad:a3:9c:9e:2e:d2:ed:
                    7a:59:4a:0f:0f:b1:7d:ac:15:ac:c6:78:d9:0b:89:
                    88:84:d3:01:0f:66:cb:41:8b:e2:08:a7:46:35:87:
                    b3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:49:3D:59:87:60:3F:C4:70:9E:E7:7F:78:73:E4:24:0E:6D:A4
            X509v3 Authority Key Identifier:
                keyid:AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:a7:d0:2b:cf:e8:b1:d7:d9:7c:e0:66:67:d0:53:9a:51:
         f9:8a:d9:fd:64:3e:3a:7c:5b:a1:d4:3e:15:ea:73:7f:cd:69:
         ae:9a:a1:18:69:34:7c:a3:5a:ba:ba:99:55:3c:4a:e1:6a:d9:
         62:23:3c:a8:2e:5e:e8:4b:00:b6:9c:dc:d4:55:c2:b4:9b:ad:
         a7:25:e6:19:fc:48:ff:af:be:d9:8e:ed:be:55:b6:a8:54:3f:
         6e:11:ca:5c:6e:64:1c:2e:44:ea:01:ff:9d:f0:d5:bb:c7:f0:
         ca:d3:af:37:ad:79:f2:1c:28:dc:44:62:99:5e:e6:35:42:d1:
         83:62:2e:e6:54:47:d3:d7:2c:56:ef:73:11:f1:8a:90:3a:5d:
         f4:1c:dd:f4:f7:3d:fa:cc:48:c1:ef:c6:98:0e:46:5f:3b:ec:
         85:39:a3:4d:04:a9:94:74:ec:e7:8e:c3:66:13:12:a4:4e:be:
         33:bd:7b:33:f0:b1:79:5d:5a:64:1c:52:52:e6:5d:6f:c7:c3:
         06:ee:71:6f:d8:c6:06:89:e1:10:18:12:f5:78:d1:8e:d5:d7:
         3f:50:8d:c1:f8:6d:88:74:e2:ca:f3:3b:68:ee:42:31:ae:d8:
         e7:dc:04:eb:a4:f1:6e:c4:f1:e9:0f:83:23:ce:29:9e:c8:63:
         0a:5c:8f:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURZuyzlegzyg8qySPrG+Q97SGl24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2MzFGQUIzQTQ0QkQwNkE3NjdBNEY3NUQ3QzE0NzRF
RkNFODM0MTAeFw0yNDA0MTUwMzQ0MTFaFw0yNDA0MTYwNjA3MTFaMDMxMTAvBgNV
BAMTKDQxRTM0OTNENTk4NzYwM0ZDNDcwOUVFNzdGNzg3M0U0MjQwRTZEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+1UtnejrKMS/A2vL9zcwuQzF
7tWZYYh6Tl+NJBBDMroKFFyIJ/SaudsPjAh30MvvypLcy3d59hoxGBzLepDwEQFs
PQ1wmzdPFYeDHHoUg7HoNdOpP5usuxJAZjPMRfWuHV78LghwD0PezasVLXN7nI6/
KLL0VtoKfsD5RTdueYOjx6IJHie/Ff4CEh9v7W77dRLoZyTL5Yi/WsRgR+vhNkBP
MJsGTDez4SHOHH+pLh9Befdmm/fzu3aqDcpsL80T+HFH7xkJJjlL7ZBjQ2/9Te/g
187vBuEpraOcni7S7XpZSg8PsX2sFazGeNkLiYiE0wEPZstBi+IIp0Y1h7O7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQeNJPVmHYD/EcJ7nf3hz5CQObaQwHwYDVR0j
BBgwFoAUqmMfqzpEvQanZ6T3XXwUdO/Og0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFo0U204ZXlSZWh5aW9GWHhjYWozSDlGdkx6YmdlcHV6eHR0RFR4c04x
bmMvMC9BQTYzMUZBQjNBNDRCRDA2QTc2N0E0Rjc1RDdDMTQ3NEVGQ0U4MzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNjMxRkFCM0E0NEJEMDZB
NzY3QTRGNzVEN0MxNDc0RUZDRTgzNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFo0U204ZXlSZWh5aW9GWHhjYWozSDlGdkx6YmdlcHV6eHR0RFR4c04xbmMvMC9B
QTYzMUZBQjNBNDRCRDA2QTc2N0E0Rjc1RDdDMTQ3NEVGQ0U4MzQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc1+n0CvP6LHX2XzgZmfQU5pR+YrZ/WQ+OnxbodQ+Fepzf81prpqhGGk0fKNa
urqZVTxK4WrZYiM8qC5e6EsAtpzc1FXCtJutpyXmGfxI/6++2Y7tvlW2qFQ/bhHK
XG5kHC5E6gH/nfDVu8fwytOvN6158hwo3ERimV7mNULRg2Iu5lRH09csVu9zEfGK
kDpd9Bzd9Pc9+sxIwe/GmA5GXzvshTmjTQSplHTs547DZhMSpE6+M717M/CxeV1a
ZBxSUuZdb8fDBu5xb9jGBonhEBgS9XjRjtXXP1CNwfhtiHTiyvM7aO5CMa7Y59wE
66TxbsTx6Q+DI84pnshjClyPBA==
-----END CERTIFICATE-----