Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft
File:                     0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft (raw, json)
Hash identifier:          fyFt91ztHlWJxoWJl0jSLJwWP3L8HW2A6g0Ww/UN0Vk=
Subject key identifier:   D7:37:1E:38:16:29:B5:C6:D9:B5:40:8C:6A:C4:E3:FC:81:01:17:C1
Authority key identifier: 0A:C0:39:FE:3E:FA:5C:55:EA:40:5C:30:32:F8:73:47:09:5F:5E:D8
Certificate issuer:       /CN=0AC039FE3EFA5C55EA405C3032F87347095F5ED8
Certificate serial:       0D96A4DC8722C7D9BBB1714091E307FCCD8400E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft
Manifest number:          25
Signing time:             Mon 15 Apr 2024 06:04:44 +0000
Manifest this update:     Mon 15 Apr 2024 05:59:44 +0000
Manifest next update:     Tue 16 Apr 2024 09:35:44 +0000
Files and hashes:         1: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: yz0um3NWrZD7jinLwarDSkMpBj+1zgsrnVvLPypiT0M=)
                          2: 0AC039FE3EFA5C55EA405C3032F87347095F5ED8.crl (hash: etJ6OcT/t8x0A2jlYp/LxtDYpmeD3aLZJN0W8kCnfDQ=)
                          3: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: V8JMBo86yF28DbJpthpYuF9XuxztVzgDzMVURtzXXfg=)
                          4: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: hWRdTx1IeIBniZQOKdHWkOMDCl9Ps6QRVWMorBkqpDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:96:a4:dc:87:22:c7:d9:bb:b1:71:40:91:e3:07:fc:cd:84:00:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC039FE3EFA5C55EA405C3032F87347095F5ED8
        Validity
            Not Before: Apr 15 05:59:44 2024 GMT
            Not After : Apr 16 09:35:44 2024 GMT
        Subject: CN=D7371E381629B5C6D9B5408C6AC4E3FC810117C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:45:d9:8f:79:84:bf:94:01:14:19:3c:11:
                    ce:10:3f:18:47:7a:b2:46:00:46:1f:f8:a3:e0:66:
                    59:09:74:3a:c4:9f:f2:62:e0:9b:d6:5c:f3:c5:81:
                    31:46:72:b3:a5:96:11:2a:99:d3:88:29:cd:e8:aa:
                    6a:7a:e4:e6:48:7e:e4:69:32:35:e9:2b:84:48:36:
                    64:72:e7:90:4d:90:52:b0:1d:68:74:61:e6:b1:f2:
                    bc:63:f1:25:88:2d:b3:ba:0c:c9:b6:f3:74:c6:d8:
                    d3:94:22:09:61:ea:77:89:02:98:13:d2:3b:15:49:
                    ca:c9:78:a4:7f:ad:28:1f:7c:2a:62:da:98:e9:cb:
                    65:97:20:17:6f:89:bd:f2:91:38:a1:27:b1:d4:5f:
                    e9:c4:fb:9f:87:4a:d0:5b:0c:ff:8d:5d:e5:bf:6f:
                    fa:a0:06:b2:43:47:48:e6:96:fe:7e:12:21:03:9a:
                    a8:42:55:dd:99:c7:cf:df:48:a7:02:88:01:4a:cf:
                    55:bd:4c:ef:cf:76:ed:ee:83:4c:14:48:46:3a:5b:
                    04:14:ba:71:f5:ec:08:1c:16:16:ad:df:bd:c6:b8:
                    1d:67:e7:30:77:0f:29:6c:cd:9f:93:1c:69:bf:f4:
                    4f:a1:0e:21:32:9e:0c:0d:d1:22:11:77:d1:64:63:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:1E:38:16:29:B5:C6:D9:B5:40:8C:6A:C4:E3:FC:81:01:17:C1
            X509v3 Authority Key Identifier:
                keyid:0A:C0:39:FE:3E:FA:5C:55:EA:40:5C:30:32:F8:73:47:09:5F:5E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f4:c5:28:b6:d7:d9:14:05:07:4b:6c:a1:bd:31:29:3f:1b:
         88:3e:db:6e:75:c4:f1:47:a1:5f:1f:c9:22:73:38:4c:8c:dc:
         1c:65:11:06:fe:21:11:7b:7e:c4:b3:ea:52:bc:d8:3f:9b:c8:
         81:6e:6a:fe:66:4e:39:d7:20:13:de:23:8d:e2:a9:e2:45:1d:
         ad:c8:2e:de:c5:f6:b5:88:0e:9f:20:6a:41:fd:3b:ad:86:b9:
         52:a0:80:ef:30:c0:65:7c:ea:15:fa:f6:d6:ac:b2:67:f1:cb:
         ba:53:a5:98:f9:6e:b9:17:77:47:62:08:f6:cd:bf:64:24:ab:
         09:cb:ff:70:fa:66:b3:e8:e2:2c:d1:84:d2:fd:17:48:ff:86:
         f0:5c:72:58:f7:8d:a5:c9:6c:29:81:4d:32:d2:c6:6a:53:7c:
         06:8e:f8:16:8e:a1:85:8a:86:81:fb:2a:e7:f5:ba:3c:04:ad:
         d8:3b:d2:37:38:e7:dc:9a:a9:67:84:4f:26:39:18:64:83:ea:
         53:ab:b0:62:45:25:d7:dd:97:48:5c:71:42:33:c1:17:dd:8a:
         4d:2c:ec:46:27:9c:e7:45:cd:63:34:c0:79:d2:9f:d2:32:a0:
         85:d3:e2:eb:0a:ed:f1:d8:30:fb:91:3b:d6:e7:d3:e2:77:17:
         a3:b3:cc:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDZak3Icix9m7sXFAkeMH/M2EAOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFDMDM5RkUzRUZBNUM1NUVBNDA1QzMwMzJGODczNDcw
OTVGNUVEODAeFw0yNDA0MTUwNTU5NDRaFw0yNDA0MTYwOTM1NDRaMDMxMTAvBgNV
BAMTKEQ3MzcxRTM4MTYyOUI1QzZEOUI1NDA4QzZBQzRFM0ZDODEwMTE3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDEXZj3mEv5QBFBk8Ec4QPxhH
erJGAEYf+KPgZlkJdDrEn/Ji4JvWXPPFgTFGcrOllhEqmdOIKc3oqmp65OZIfuRp
MjXpK4RINmRy55BNkFKwHWh0Yeax8rxj8SWILbO6DMm283TG2NOUIglh6neJApgT
0jsVScrJeKR/rSgffCpi2pjpy2WXIBdvib3ykTihJ7HUX+nE+5+HStBbDP+NXeW/
b/qgBrJDR0jmlv5+EiEDmqhCVd2Zx8/fSKcCiAFKz1W9TO/Pdu3ug0wUSEY6WwQU
unH17AgcFhat373GuB1n5zB3DylszZ+THGm/9E+hDiEyngwN0SIRd9FkY+wjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1zceOBYptcbZtUCMasTj/IEBF8EwHwYDVR0j
BBgwFoAUCsA5/j76XFXqQFwwMvhzRwlfXtgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5
Q3QvMC8wQUMwMzlGRTNFRkE1QzU1RUE0MDVDMzAzMkY4NzM0NzA5NUY1RUQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBQzAzOUZFM0VGQTVDNTVF
QTQwNUMzMDMyRjg3MzQ3MDk1RjVFRDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMC8w
QUMwMzlGRTNFRkE1QzU1RUE0MDVDMzAzMkY4NzM0NzA5NUY1RUQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs/TFKLbX2RQFB0tsob0xKT8biD7bbnXE8UehXx/JInM4TIzcHGURBv4hEXt+
xLPqUrzYP5vIgW5q/mZOOdcgE94jjeKp4kUdrcgu3sX2tYgOnyBqQf07rYa5UqCA
7zDAZXzqFfr21qyyZ/HLulOlmPluuRd3R2II9s2/ZCSrCcv/cPpms+jiLNGE0v0X
SP+G8FxyWPeNpclsKYFNMtLGalN8Bo74Fo6hhYqGgfsq5/W6PASt2DvSNzjn3Jqp
Z4RPJjkYZIPqU6uwYkUl192XSFxxQjPBF92KTSzsRiec50XNYzTAedKf0jKghdPi
6wrt8dgw+5E71ufT4ncXo7PMhA==
-----END CERTIFICATE-----