Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft
File:                     5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft (raw, json)
Hash identifier:          /qlJ2uVUY3GSrHkpSxXcCx7nKmzH+5nAYW3wXzdEooc=
Subject key identifier:   66:56:05:BD:B0:00:3A:5F:B1:AB:F1:FE:D5:D9:15:F4:AD:A0:42:4B
Authority key identifier: 5E:83:6E:5E:C5:2C:22:56:3B:2B:B8:EB:C9:93:2B:F3:85:D3:52:A8
Certificate issuer:       /CN=5E836E5EC52C22563B2BB8EBC9932BF385D352A8
Certificate serial:       260B6A2C276E224E51584E12EF95BCD25F824D99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft
Manifest number:          020D
Signing time:             Sun 14 Apr 2024 18:16:45 +0000
Manifest this update:     Sun 14 Apr 2024 18:11:45 +0000
Manifest next update:     Mon 15 Apr 2024 20:13:45 +0000
Files and hashes:         1: 5E836E5EC52C22563B2BB8EBC9932BF385D352A8.crl (hash: l+10nY9/KWhmsNjLmx+V9316BTaOx6WgOB/vBwxKQPU=)
                          2: 3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa (hash: 8O8izV9eIswYrwMBKEa3cHoOmRmC3RoKrtxa6KvKbKs=)
                          3: 3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa (hash: F20ZkRRw/1aLrx5ub+ShbvV4U3/PpTwkSkeZ6hJD1Iw=)
                          4: 3138392e32382e3136302e302f32302d3234203d3e203238333030.roa (hash: hxAKYwWvcYsqgl+YAqB6ZZzj1OsJ4Deh/fAf4OpKOhY=)
                          5: 3137392e39372e3232342e302f31392d3234203d3e203238333030.roa (hash: RIl6Om0l9DJY19wL3pf9kIIiw51Q+xxa1Nv04ypPaHs=)
                          6: 323830343a3261633a3a2f33322d3634203d3e203238333030.roa (hash: askpTqdr/MrhuY43FIQxFJT5oias5fDGk6Prr4k36OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0b:6a:2c:27:6e:22:4e:51:58:4e:12:ef:95:bc:d2:5f:82:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E836E5EC52C22563B2BB8EBC9932BF385D352A8
        Validity
            Not Before: Apr 14 18:11:45 2024 GMT
            Not After : Apr 15 20:13:45 2024 GMT
        Subject: CN=665605BDB0003A5FB1ABF1FED5D915F4ADA0424B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:6d:3c:3a:f4:d0:bb:c7:03:67:76:d2:02:
                    f7:f3:4e:28:34:c4:db:96:a4:4d:94:6e:0c:fd:8c:
                    1e:e1:fe:67:d9:79:5a:07:61:36:89:7a:1d:d3:1b:
                    5f:83:67:b7:59:34:0c:0d:f4:42:15:03:bc:a0:5c:
                    9f:37:79:c8:d3:59:8f:54:7b:22:fd:e5:b1:9e:47:
                    80:be:fe:f1:52:51:01:25:54:50:04:52:f0:a3:02:
                    0e:3c:dd:c8:df:a7:50:7c:d3:33:bd:0a:b4:52:34:
                    7b:5e:66:0d:00:13:8e:93:1a:f2:1a:63:2a:b4:d7:
                    ed:11:af:c2:94:f6:14:4c:40:93:97:38:5c:b2:e6:
                    5a:14:64:bf:a5:66:d0:07:54:16:7e:bc:07:40:ca:
                    56:28:65:3a:9c:0d:fd:b9:bb:88:a8:46:b7:10:6b:
                    8c:b7:5b:1f:fe:b2:2d:0a:ea:b2:1b:68:c5:4e:5f:
                    0c:83:d6:75:f5:ec:7b:66:d4:1f:a8:7a:0c:c7:92:
                    f2:10:c2:ca:9d:5e:e9:74:5d:d5:8d:88:1f:08:06:
                    f1:d7:a8:0f:8a:2a:cd:8d:8d:cb:ec:f3:14:9a:01:
                    30:c0:e1:d4:ff:1f:e7:3d:1e:97:bb:ce:88:45:0d:
                    ca:0f:14:c4:a7:f0:b8:71:19:a9:2e:97:f9:8f:89:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:05:BD:B0:00:3A:5F:B1:AB:F1:FE:D5:D9:15:F4:AD:A0:42:4B
            X509v3 Authority Key Identifier:
                keyid:5E:83:6E:5E:C5:2C:22:56:3B:2B:B8:EB:C9:93:2B:F3:85:D3:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:3e:37:63:b7:51:59:f1:92:ad:7e:7d:a2:77:b4:84:9d:
         7b:0b:b7:c9:bd:22:05:ce:eb:6e:7e:59:9b:97:81:13:89:d1:
         34:99:11:bb:08:b9:6a:98:bc:f7:16:4c:4a:f7:61:e6:51:a4:
         94:53:02:cf:a9:4c:c9:23:4c:c7:c4:9e:6b:9c:d7:87:94:8a:
         77:cf:bc:78:cd:65:ed:d6:26:90:fe:b9:38:89:3b:15:dc:53:
         de:95:2d:c4:01:b5:4d:6a:51:1b:11:7a:9e:4b:64:16:f3:74:
         73:1b:3c:64:ea:01:9a:0c:0e:9d:36:45:3f:89:44:5d:37:f5:
         e5:77:5b:6e:34:b0:2b:03:78:52:59:77:42:9f:f2:6e:8b:4a:
         00:0c:87:fe:fa:2b:ae:f3:ee:6b:9d:b6:7e:85:85:f3:05:99:
         74:62:ee:f0:e1:31:d5:4c:04:d6:63:21:18:4a:f0:69:a7:70:
         bd:b6:45:30:ee:5d:76:d7:73:ce:f4:84:4d:f0:00:c4:90:a6:
         66:17:c2:ed:b6:d8:dd:f4:bb:b8:66:83:4c:dc:58:c1:eb:1c:
         64:b1:db:88:95:d0:85:3c:f6:fc:9d:25:ac:e0:b2:f5:73:54:
         e9:02:2d:2b:17:22:ac:7d:ed:2d:09:2d:72:39:7d:72:34:f2:
         0e:25:bc:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJgtqLCduIk5RWE4S75W80l+CTZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4MzZFNUVDNTJDMjI1NjNCMkJCOEVCQzk5MzJCRjM4
NUQzNTJBODAeFw0yNDA0MTQxODExNDVaFw0yNDA0MTUyMDEzNDVaMDMxMTAvBgNV
BAMTKDY2NTYwNUJEQjAwMDNBNUZCMUFCRjFGRUQ1RDkxNUY0QURBMDQyNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/y208OvTQu8cDZ3bSAvfzTig0
xNuWpE2Ubgz9jB7h/mfZeVoHYTaJeh3TG1+DZ7dZNAwN9EIVA7ygXJ83ecjTWY9U
eyL95bGeR4C+/vFSUQElVFAEUvCjAg483cjfp1B80zO9CrRSNHteZg0AE46TGvIa
Yyq01+0Rr8KU9hRMQJOXOFyy5loUZL+lZtAHVBZ+vAdAylYoZTqcDf25u4ioRrcQ
a4y3Wx/+si0K6rIbaMVOXwyD1nX17Htm1B+oegzHkvIQwsqdXul0XdWNiB8IBvHX
qA+KKs2Njcvs8xSaATDA4dT/H+c9Hpe7zohFDcoPFMSn8LhxGakul/mPiQl/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZlYFvbAAOl+xq/H+1dkV9K2gQkswHwYDVR0j
BBgwFoAUXoNuXsUsIlY7K7jryZMr84XTUqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpTTmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1l
eXkvMC81RTgzNkU1RUM1MkMyMjU2M0IyQkI4RUJDOTkzMkJGMzg1RDM1MkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFODM2RTVFQzUyQzIyNTYz
QjJCQjhFQkM5OTMyQkYzODVEMzUyQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXpTTmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1leXkvMC81
RTgzNkU1RUM1MkMyMjU2M0IyQkI4RUJDOTkzMkJGMzg1RDM1MkE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsJ4+N2O3UVnxkq1+faJ3tISdewu3yb0iBc7rbn5Zm5eBE4nRNJkRuwi5api8
9xZMSvdh5lGklFMCz6lMySNMx8Sea5zXh5SKd8+8eM1l7dYmkP65OIk7FdxT3pUt
xAG1TWpRGxF6nktkFvN0cxs8ZOoBmgwOnTZFP4lEXTf15XdbbjSwKwN4Ull3Qp/y
botKAAyH/vorrvPua522foWF8wWZdGLu8OEx1UwE1mMhGErwaadwvbZFMO5ddtdz
zvSETfAAxJCmZhfC7bbY3fS7uGaDTNxYwescZLHbiJXQhTz2/J0lrOCy9XNU6QIt
KxcirH3tLQktcjl9cjTyDiW8WQ==
-----END CERTIFICATE-----