Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft
File:                     A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft (raw, json)
Hash identifier:          WWLD/3gutlh7BHCHEvOVnH3XyPwi0i2Y/5REwIE582M=
Subject key identifier:   D3:29:4D:2E:D8:AE:F9:FD:FB:D5:1B:78:05:A1:83:AC:5B:37:EA:C6
Authority key identifier: A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE
Certificate issuer:       /CN=A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE
Certificate serial:       2F504A84B445AE21EE3E588B954041874313C93A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft
Manifest number:          64
Signing time:             Sat 29 Oct 2022 14:17:29 +0000
Manifest this update:     Sat 29 Oct 2022 14:12:29 +0000
Manifest next update:     Sun 30 Oct 2022 16:21:29 +0000
Files and hashes:         1: A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.crl (hash: aXK0cXT0gYm3dZ/BA2orUDbNikdnV/+3E/nuYpwGZ00=)
                          2: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (hash: ya0oY+z0/Nof2AFjm7TE/vmwsbEsZyipUqUykYAWbB0=)
                          3: 323830343a353864303a3a2f33322d3334203d3e20323638313531.roa (hash: r5jKNjHQWpFbhyLM1/2XAQ2e/qEn0NnwkenvZjIVpEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:4a:84:b4:45:ae:21:ee:3e:58:8b:95:40:41:87:43:13:c9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE
        Validity
            Not Before: Oct 29 14:12:29 2022 GMT
            Not After : Oct 30 16:21:29 2022 GMT
        Subject: CN=D3294D2ED8AEF9FDFBD51B7805A183AC5B37EAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:89:1b:30:40:8b:7c:96:dd:77:a1:86:61:
                    e9:72:6f:1e:08:f2:1e:10:ea:f1:0b:b6:c2:f6:da:
                    58:dc:75:d5:c7:78:aa:49:35:9e:54:4f:f3:f2:f0:
                    5d:be:40:50:f4:73:b4:71:28:4e:2b:da:03:1a:87:
                    e5:57:e1:a0:70:09:60:9a:11:6a:f2:8d:6b:db:ef:
                    68:fc:05:51:7d:da:e3:dd:b6:17:13:f6:86:f2:63:
                    ce:f2:83:cc:a5:60:79:c1:13:9b:fa:24:c3:94:20:
                    73:9f:2d:3b:87:4d:df:57:b0:f2:04:8d:fb:c1:7f:
                    29:c7:73:e9:8f:c8:94:d3:cc:d2:c8:41:a7:e1:12:
                    ac:48:68:1f:72:ec:2a:13:fe:6b:62:fd:89:30:bc:
                    e4:94:40:25:e6:c8:6a:d6:6a:21:11:a4:20:d9:fa:
                    a3:9c:85:ec:0a:f7:2f:74:fd:b1:ba:bb:eb:e8:d2:
                    43:92:65:be:87:cb:04:9a:77:a3:0c:98:fa:67:d9:
                    7e:a4:e3:34:db:18:f9:72:fe:16:77:8e:80:1b:0a:
                    52:07:32:f4:19:cf:88:c0:0f:31:77:d4:38:76:4b:
                    d8:b0:c7:0f:57:8c:57:d4:43:75:8f:c2:ca:f1:8d:
                    50:f8:2b:86:7b:51:bd:92:d2:eb:47:4d:92:1d:48:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:29:4D:2E:D8:AE:F9:FD:FB:D5:1B:78:05:A1:83:AC:5B:37:EA:C6
            X509v3 Authority Key Identifier:
                keyid:A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:9a:0b:52:78:b4:ad:42:65:63:2e:cb:7c:cb:35:53:20:
         77:fa:63:7f:13:4f:a3:df:e7:89:71:57:00:b6:2b:18:49:2a:
         e5:11:7f:c5:f5:93:2f:bc:ba:06:25:2b:10:e4:92:d3:1f:d9:
         19:69:1d:be:f8:ea:5d:69:e9:42:00:11:85:c0:76:f2:49:20:
         a8:0f:0d:9a:5a:5b:e8:99:f2:36:93:27:a5:39:91:97:f0:74:
         b9:44:f4:3a:19:5e:d7:7c:b3:02:4d:3c:6b:1f:32:a6:63:e9:
         64:02:4d:64:23:0e:93:2e:73:01:9b:5c:6a:85:54:49:1c:1e:
         56:bd:19:dc:5a:fa:6b:fb:6d:8c:5a:c1:89:50:04:b5:0b:76:
         91:cc:0f:ed:b4:b3:27:51:4c:69:ee:d5:aa:ff:b9:00:c3:45:
         c8:7a:bf:e1:d5:ed:d6:94:f8:6d:a6:b5:49:55:e3:7a:24:31:
         eb:66:97:0f:b6:dd:ac:fd:79:3d:a5:8a:b1:d3:32:90:63:e0:
         ca:69:10:40:fc:b3:a5:4c:6c:4e:0b:d5:d9:33:51:6a:c4:57:
         21:f8:34:d2:3b:70:4d:1b:bc:b7:61:c6:e7:15:ea:b1:1d:87:
         b3:12:31:1d:4c:b8:66:21:c5:a1:bd:5e:fa:3a:39:15:5a:ce:
         7f:91:72:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL1BKhLRFriHuPliLlUBBh0MTyTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZGMjQyMDg0NUE2REU2NDZERTk1RjRGMjNERjIxQTE4
QTRFRDBGRTAeFw0yMjEwMjkxNDEyMjlaFw0yMjEwMzAxNjIxMjlaMDMxMTAvBgNV
BAMTKEQzMjk0RDJFRDhBRUY5RkRGQkQ1MUI3ODA1QTE4M0FDNUIzN0VBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGIkbMECLfJbdd6GGYelybx4I
8h4Q6vELtsL22ljcddXHeKpJNZ5UT/Py8F2+QFD0c7RxKE4r2gMah+VX4aBwCWCa
EWryjWvb72j8BVF92uPdthcT9obyY87yg8ylYHnBE5v6JMOUIHOfLTuHTd9XsPIE
jfvBfynHc+mPyJTTzNLIQafhEqxIaB9y7CoT/mti/YkwvOSUQCXmyGrWaiERpCDZ
+qOchewK9y90/bG6u+vo0kOSZb6HywSad6MMmPpn2X6k4zTbGPly/hZ3joAbClIH
MvQZz4jADzF31Dh2S9iwxw9XjFfUQ3WPwsrxjVD4K4Z7Ub2S0utHTZIdSLHTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0ylNLtiu+f371Rt4BaGDrFs36sYwHwYDVR0j
BBgwFoAUpvJCCEWm3mRt6V9PI98hoYpO0P4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx
WW0vMC9BNkYyNDIwODQ1QTZERTY0NkRFOTVGNEYyM0RGMjFBMThBNEVEMEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2RjI0MjA4NDVBNkRFNjQ2
REU5NUY0RjIzREYyMUExOEE0RUQwRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZxWW0vMC9B
NkYyNDIwODQ1QTZERTY0NkRFOTVGNEYyM0RGMjFBMThBNEVEMEZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVp+aC1J4tK1CZWMuy3zLNVMgd/pjfxNPo9/niXFXALYrGEkq5RF/xfWTL7y6
BiUrEOSS0x/ZGWkdvvjqXWnpQgARhcB28kkgqA8Nmlpb6JnyNpMnpTmRl/B0uUT0
Ohle13yzAk08ax8ypmPpZAJNZCMOky5zAZtcaoVUSRweVr0Z3Fr6a/ttjFrBiVAE
tQt2kcwP7bSzJ1FMae7Vqv+5AMNFyHq/4dXt1pT4baa1SVXjeiQx62aXD7bdrP15
PaWKsdMykGPgymkQQPyzpUxsTgvV2TNRasRXIfg00jtwTRu8t2HG5xXqsR2HsxIx
HUy4ZiHFob1e+jo5FVrOf5Fymg==
-----END CERTIFICATE-----