Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft
File:                     5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft (raw, json)
Hash identifier:          M6xTRDTFL/DBRXfUpOz8CpI9nZBfiXx3sZylqwPSPYE=
Subject key identifier:   84:C3:B4:5D:8F:6F:49:2C:8E:55:E2:EA:FE:F6:06:21:BD:F4:D4:75
Authority key identifier: 5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Certificate issuer:       /CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
Certificate serial:       3F6FE2F1D39FAD6D27CE5C4F32785BF0BB76613D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft
Manifest number:          D9
Signing time:             Sun 14 Apr 2024 21:22:12 +0000
Manifest this update:     Sun 14 Apr 2024 21:17:12 +0000
Manifest next update:     Mon 15 Apr 2024 22:54:12 +0000
Files and hashes:         1: 5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl (hash: tPmUlH8E6nOAKJQmeSb8MwldIjhFAioRqw/pF2+kRAI=)
                          2: 3138392e3132362e3132382e302f32342d3234203d3e20323732323238.roa (hash: OJzbRqNxgSIashTSX1SUxs/bjSFkTz1X2F7L1gwFA3w=)
                          3: 3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa (hash: ig9l52yhJ3NqMD50RUplA4zjNLhbJRW86H4ooXiV204=)
                          4: 3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa (hash: Ey052eW7fA5gWzOFZOlzhe/8Yur/0KkDBk+NgQj53jI=)
                          5: 3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa (hash: KdOp7Qm31rea02BWQIFsKnLllPZYJ0oQZPUS1GeAvVg=)
                          6: 3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa (hash: U1/29msN/08fKBuKhJhPabv9Jndfy1KZNFgS5BZSAu8=)
                          7: 3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (hash: OF9/qqhaBwZIdfCZqb3326jk5w8XgxQpWPm+IZzJP1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6f:e2:f1:d3:9f:ad:6d:27:ce:5c:4f:32:78:5b:f0:bb:76:61:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Validity
            Not Before: Apr 14 21:17:12 2024 GMT
            Not After : Apr 15 22:54:12 2024 GMT
        Subject: CN=84C3B45D8F6F492C8E55E2EAFEF60621BDF4D475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:5f:f3:2b:4a:ce:3c:9c:79:f4:cb:71:12:
                    bf:2a:1b:59:9c:7b:26:63:ae:f9:ae:43:53:38:6d:
                    8b:4a:83:77:66:5f:11:1d:04:30:f7:88:ea:78:3f:
                    23:3f:6f:28:e8:a7:3d:c9:c1:03:df:11:45:e4:7a:
                    87:19:0a:99:6d:d7:7d:b1:20:89:d1:b5:f4:ac:70:
                    2d:00:e2:fe:a7:47:f8:2c:25:2d:6a:38:ff:83:93:
                    e4:78:61:c5:ea:6c:9a:f9:9a:3b:bb:81:3b:06:7e:
                    ee:54:af:e1:02:31:ce:3e:79:ab:6e:11:8b:ce:53:
                    93:38:eb:fd:d8:dd:2a:09:72:10:89:f1:f1:92:a5:
                    b4:f2:cf:20:00:af:0c:db:b2:77:f9:a2:87:99:21:
                    f8:61:f7:20:5f:d7:a3:9b:7e:c2:72:8c:21:95:ce:
                    39:a0:e4:c5:c6:50:5f:7e:6b:d6:1a:bd:04:33:3c:
                    d1:cb:e0:5f:6c:0b:10:1d:8c:9c:5d:7d:7b:84:39:
                    13:9d:a8:0a:d6:27:e1:69:12:19:2b:d0:58:3d:d8:
                    15:db:98:1b:4c:a6:bc:87:1e:9e:a2:31:18:9e:ff:
                    af:6d:f5:7c:2e:9a:6b:64:05:3d:8d:cf:76:46:d7:
                    69:c2:67:5a:55:9f:f9:a7:50:45:58:1c:4a:34:73:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:B4:5D:8F:6F:49:2C:8E:55:E2:EA:FE:F6:06:21:BD:F4:D4:75
            X509v3 Authority Key Identifier:
                keyid:5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:bb:ae:95:0f:cc:83:c6:b4:4b:9d:26:7e:b4:67:9c:3d:
         c6:e5:d6:54:46:f1:b3:fb:91:a6:a2:96:26:2a:5c:43:a7:1a:
         97:c3:3b:e3:dc:e1:98:2c:5c:16:4a:2a:a0:f0:46:06:8d:f1:
         7b:08:39:f3:4a:5a:b6:c9:11:67:b7:bf:25:7d:c9:6d:51:82:
         0b:0f:4d:48:6b:10:a6:33:33:f7:bd:e7:b8:7f:f8:b6:94:db:
         e4:24:42:59:83:00:27:a9:1a:08:d1:ac:de:62:63:67:cb:55:
         42:84:8b:ae:17:94:9d:b9:80:8d:b9:d0:70:c4:9b:c8:60:db:
         3c:3d:d1:f4:49:ff:b7:8f:59:22:97:7f:5a:f4:11:1d:cb:e4:
         8d:48:1a:ff:f8:26:0d:6d:39:64:fb:54:f9:f3:de:30:31:35:
         c9:3a:d3:2c:3a:6a:00:62:d5:e3:2c:9e:3a:7e:0c:b9:c8:4a:
         e1:88:30:24:49:15:27:28:f4:97:3b:3b:2f:2b:ed:17:10:49:
         d7:61:96:5c:b5:e6:84:8e:61:e6:cd:c3:c5:67:29:54:4f:d4:
         91:bd:bd:1f:0f:f3:7e:ab:4d:1d:07:f3:dd:7f:f5:8a:8b:c1:
         b5:60:06:e7:bd:14:1c:e3:4f:7f:ec:c9:a6:d3:b2:88:7d:03:
         a2:47:41:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP2/i8dOfrW0nzlxPMnhb8Lt2YT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFRTNCN0FFMUYxODY3MkI2RjUwQzhBQjU5MUFBNzVE
QkI0RjA2MDAeFw0yNDA0MTQyMTE3MTJaFw0yNDA0MTUyMjU0MTJaMDMxMTAvBgNV
BAMTKDg0QzNCNDVEOEY2RjQ5MkM4RTU1RTJFQUZFRjYwNjIxQkRGNEQ0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Vl/zK0rOPJx59MtxEr8qG1mc
eyZjrvmuQ1M4bYtKg3dmXxEdBDD3iOp4PyM/byjopz3JwQPfEUXkeocZCplt132x
IInRtfSscC0A4v6nR/gsJS1qOP+Dk+R4YcXqbJr5mju7gTsGfu5Ur+ECMc4+eatu
EYvOU5M46/3Y3SoJchCJ8fGSpbTyzyAArwzbsnf5ooeZIfhh9yBf16ObfsJyjCGV
zjmg5MXGUF9+a9YavQQzPNHL4F9sCxAdjJxdfXuEOROdqArWJ+FpEhkr0Fg92BXb
mBtMpryHHp6iMRie/69t9XwummtkBT2Nz3ZG12nCZ1pVn/mnUEVYHEo0c7IHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhMO0XY9vSSyOVeLq/vYGIb301HUwHwYDVR0j
BBgwFoAUXe47euHxhnK29QyKtZGqddu08GAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5Z
QUgvMC81REVFM0I3QUUxRjE4NjcyQjZGNTBDOEFCNTkxQUE3NURCQjRGMDYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERUUzQjdBRTFGMTg2NzJC
NkY1MEM4QUI1OTFBQTc1REJCNEYwNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGhEMmpodnNnM211aVA4OGNMem1Xa3ZLMnBUY2h6U2VUaWNVR1pOYk5ZQUgvMC81
REVFM0I3QUUxRjE4NjcyQjZGNTBDOEFCNTkxQUE3NURCQjRGMDYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuz+7rpUPzIPGtEudJn60Z5w9xuXWVEbxs/uRpqKWJipcQ6cal8M749zhmCxc
FkoqoPBGBo3xewg580patskRZ7e/JX3JbVGCCw9NSGsQpjMz973nuH/4tpTb5CRC
WYMAJ6kaCNGs3mJjZ8tVQoSLrheUnbmAjbnQcMSbyGDbPD3R9En/t49ZIpd/WvQR
HcvkjUga//gmDW05ZPtU+fPeMDE1yTrTLDpqAGLV4yyeOn4MuchK4YgwJEkVJyj0
lzs7LyvtFxBJ12GWXLXmhI5h5s3DxWcpVE/Ukb29Hw/zfqtNHQfz3X/1iovBtWAG
570UHONPf+zJptOyiH0DokdBjw==
-----END CERTIFICATE-----