Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.mft
File:                     869F06292831A01521243CA24882F2D83807942B.mft (raw, json)
Hash identifier:          VoISIuwFicKtDLmE8tGFkZTpWP5wmFaskcth9TMrmVA=
Subject key identifier:   71:4B:88:2A:E3:F5:D1:6E:AB:D7:85:25:D8:F3:3D:82:B0:E0:8C:EA
Authority key identifier: 86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B
Certificate issuer:       /CN=869F06292831A01521243CA24882F2D83807942B
Certificate serial:       73C1B749D8C71B17BC10FD1CA814B5DA6D69437D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.mft
Manifest number:          02A6
Signing time:             Mon 15 Apr 2024 08:56:48 +0000
Manifest this update:     Mon 15 Apr 2024 08:51:48 +0000
Manifest next update:     Tue 16 Apr 2024 12:41:48 +0000
Files and hashes:         1: 869F06292831A01521243CA24882F2D83807942B.crl (hash: 2W+kwgkLcLRvH3eygRBObGjrFFtCTNNOGo6OiwbPbck=)
                          2: 3133312e302e3131362e302f32322d3234203d3e203631383834.roa (hash: cFQTtiDuCS92BihxPW6eEbnXuETkmJAImrjlgqcwx1w=)
                          3: 323830343a316163343a3a2f33322d3438203d3e203631383834.roa (hash: SObENV3XyuNfKG31mXeVrEnMf6UpbhxMHEjvZzoo0AQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:b7:49:d8:c7:1b:17:bc:10:fd:1c:a8:14:b5:da:6d:69:43:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869F06292831A01521243CA24882F2D83807942B
        Validity
            Not Before: Apr 15 08:51:48 2024 GMT
            Not After : Apr 16 12:41:48 2024 GMT
        Subject: CN=714B882AE3F5D16EABD78525D8F33D82B0E08CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:6b:27:07:76:74:49:a1:da:1b:85:f6:df:
                    d2:ef:9a:8b:49:ce:be:df:b8:ef:ea:86:b9:1d:81:
                    6f:ca:de:38:84:85:c8:64:40:29:bf:57:9c:06:63:
                    12:e5:26:46:4d:fe:7d:cf:3e:a0:5d:41:eb:ee:d2:
                    5d:7a:df:ea:af:aa:19:5b:bb:df:51:99:cf:c4:79:
                    c7:04:da:2c:c6:a1:11:fb:b6:a2:3b:9e:8b:51:1b:
                    06:5d:a6:48:11:56:6d:9c:9b:38:2b:d4:9c:7a:e8:
                    32:62:b7:7e:c0:8d:25:93:61:11:b4:b3:48:d8:39:
                    94:bc:37:07:cb:8a:81:f0:f4:5d:a6:47:30:d8:89:
                    a5:64:3e:51:1f:ce:de:56:e3:18:4c:b0:1a:4b:6a:
                    8d:d1:09:75:08:35:6f:1f:a3:f3:79:34:99:9f:96:
                    7e:60:ae:eb:00:20:0f:8d:e2:18:bb:ea:01:81:e2:
                    04:13:ea:85:95:e5:01:ee:d8:56:33:9f:39:74:76:
                    e3:43:00:47:ef:06:a6:17:f1:95:57:d5:b9:22:3b:
                    10:fa:cc:3e:fc:7d:fd:51:34:d4:e5:c8:13:ef:aa:
                    ff:30:f8:aa:d9:b0:09:d7:42:93:4e:59:27:2a:6f:
                    78:22:51:32:a7:a6:01:c6:8f:d3:21:aa:a7:d0:6b:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:88:2A:E3:F5:D1:6E:AB:D7:85:25:D8:F3:3D:82:B0:E0:8C:EA
            X509v3 Authority Key Identifier:
                keyid:86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:6d:04:b9:80:e7:ea:fe:da:5d:63:0c:26:26:03:59:19:
         9c:d7:d7:9b:10:3a:d1:db:3d:23:fa:3b:26:19:36:71:70:c4:
         59:40:40:20:0f:22:b7:c5:a4:20:a6:0d:c5:f5:4a:82:e8:1d:
         f2:2f:60:26:9d:7e:7a:1c:60:ed:85:72:16:7f:2f:bf:d0:1e:
         cb:50:2b:22:9e:12:81:29:39:16:e4:74:dc:ca:38:c5:20:9e:
         55:f5:8b:67:01:60:ff:45:2a:14:c9:f6:5f:51:4d:9d:ed:9c:
         4a:99:df:76:e7:fe:7f:9f:52:b1:07:26:59:a9:2c:93:6e:0c:
         08:87:5c:f2:b1:92:f2:18:1e:da:f4:cc:42:29:db:dd:0e:d5:
         b6:db:d8:76:77:34:db:85:b5:0a:dd:b9:d0:41:ac:50:15:50:
         7e:30:e5:c7:76:a4:64:af:22:bd:55:bb:5b:e2:85:91:7e:d7:
         60:36:da:93:7f:4b:bb:84:ca:60:9e:d5:ad:d4:16:e1:b5:d6:
         09:4e:05:46:40:0a:4a:5e:00:58:d1:ff:fb:8e:25:24:65:70:
         71:82:fe:be:f0:8a:7b:06:f8:94:6a:1c:79:91:3e:4f:33:62:
         56:d0:d4:dc:39:06:55:11:d8:ff:b8:db:49:80:71:b0:47:76:
         67:ca:6b:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUc8G3SdjHGxe8EP0cqBS12m1pQ30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY5RjA2MjkyODMxQTAxNTIxMjQzQ0EyNDg4MkYyRDgz
ODA3OTQyQjAeFw0yNDA0MTUwODUxNDhaFw0yNDA0MTYxMjQxNDhaMDMxMTAvBgNV
BAMTKDcxNEI4ODJBRTNGNUQxNkVBQkQ3ODUyNUQ4RjMzRDgyQjBFMDhDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEmsnB3Z0SaHaG4X239LvmotJ
zr7fuO/qhrkdgW/K3jiEhchkQCm/V5wGYxLlJkZN/n3PPqBdQevu0l163+qvqhlb
u99Rmc/EeccE2izGoRH7tqI7notRGwZdpkgRVm2cmzgr1Jx66DJit37AjSWTYRG0
s0jYOZS8NwfLioHw9F2mRzDYiaVkPlEfzt5W4xhMsBpLao3RCXUINW8fo/N5NJmf
ln5grusAIA+N4hi76gGB4gQT6oWV5QHu2FYznzl0duNDAEfvBqYX8ZVX1bkiOxD6
zD78ff1RNNTlyBPvqv8w+KrZsAnXQpNOWScqb3giUTKnpgHGj9MhqqfQa65zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcUuIKuP10W6r14Ul2PM9grDgjOowHwYDVR0j
BBgwFoAUhp8GKSgxoBUhJDyiSILy2DgHlCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTgzemdnNUZSYm5FOFJqWHlrVTg5R1QxQmVrS2ZuUTJpU2VCc3VQUzFD
OUEvMC84NjlGMDYyOTI4MzFBMDE1MjEyNDNDQTI0ODgyRjJEODM4MDc5NDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg2OUYwNjI5MjgzMUEwMTUy
MTI0M0NBMjQ4ODJGMkQ4MzgwNzk0MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTgzemdnNUZSYm5FOFJqWHlrVTg5R1QxQmVrS2ZuUTJpU2VCc3VQUzFDOUEvMC84
NjlGMDYyOTI4MzFBMDE1MjEyNDNDQTI0ODgyRjJEODM4MDc5NDJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvNtBLmA5+r+2l1jDCYmA1kZnNfXmxA60ds9I/o7Jhk2cXDEWUBAIA8it8Wk
IKYNxfVKgugd8i9gJp1+ehxg7YVyFn8vv9Aey1ArIp4SgSk5FuR03Mo4xSCeVfWL
ZwFg/0UqFMn2X1FNne2cSpnfduf+f59SsQcmWaksk24MCIdc8rGS8hge2vTMQinb
3Q7VttvYdnc024W1Ct250EGsUBVQfjDlx3akZK8ivVW7W+KFkX7XYDbak39Lu4TK
YJ7VrdQW4bXWCU4FRkAKSl4AWNH/+44lJGVwcYL+vvCKewb4lGoceZE+TzNiVtDU
3DkGVRHY/7jbSYBxsEd2Z8prEw==
-----END CERTIFICATE-----