Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.mft
File:                     24326A41E1604EEB0BA230080D6E547EDDBA58F0.mft (raw, json)
Hash identifier:          hlF1ozcnOnCmESYojm+c5HojOx6x3BZ7ZcX8kkOG1Lg=
Subject key identifier:   37:22:1F:DE:E0:16:AD:4F:63:35:6F:5F:D3:A3:A2:32:B3:10:E4:99
Authority key identifier: 24:32:6A:41:E1:60:4E:EB:0B:A2:30:08:0D:6E:54:7E:DD:BA:58:F0
Certificate issuer:       /CN=24326A41E1604EEB0BA230080D6E547EDDBA58F0
Certificate serial:       6BC537CA29BFAE7ABA79A48E6951FDE0376EE155
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.mft
Manifest number:          5D
Signing time:             Wed 10 Jan 2024 10:19:10 +0000
Manifest this update:     Wed 10 Jan 2024 10:14:10 +0000
Manifest next update:     Thu 11 Jan 2024 10:55:10 +0000
Files and hashes:         1: 24326A41E1604EEB0BA230080D6E547EDDBA58F0.crl (hash: l7cn7L6oq4O7JPl0+UW60Ep9+0xHPwPnE7knP/KkGDk=)
                          2: 323830343a333934303a3a2f33322d3438203d3e20323636303231.roa (hash: CbZvQDW5loni875Gy6mm2rc9xxGzGAXibcKfU+mcS1I=)
                          3: 3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (hash: tuYOcNwfYjIp4SWorseFtyTrB0aflZBm9tdTIqrVzSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c5:37:ca:29:bf:ae:7a:ba:79:a4:8e:69:51:fd:e0:37:6e:e1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24326A41E1604EEB0BA230080D6E547EDDBA58F0
        Validity
            Not Before: Jan 10 10:14:10 2024 GMT
            Not After : Jan 11 10:55:10 2024 GMT
        Subject: CN=37221FDEE016AD4F63356F5FD3A3A232B310E499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:f0:c0:5f:cd:de:83:f7:a8:23:c3:01:ba:
                    3e:41:10:98:d5:64:2b:13:30:25:10:88:8f:1b:32:
                    0e:4d:1d:e8:b3:8e:fa:38:99:f0:56:90:80:3c:ea:
                    09:14:18:a1:dd:76:dd:8a:41:ed:c7:c3:85:5a:05:
                    d4:76:fa:5c:10:be:69:e4:cc:bb:7d:fb:d9:be:77:
                    77:13:81:65:fc:2e:d0:af:73:0c:ad:16:cf:88:ea:
                    07:17:cb:30:fe:46:a1:1a:51:69:77:e5:c1:78:49:
                    4f:df:40:1c:fb:ae:0d:be:48:88:51:77:42:1d:80:
                    72:90:4a:7e:85:0f:b7:37:ae:5b:4d:60:71:ae:2b:
                    92:3e:79:d3:b2:1d:97:68:b9:f8:16:38:bc:d3:37:
                    2b:af:63:ba:dd:08:7a:b5:b9:2f:83:0a:85:60:3a:
                    95:e9:7d:48:16:23:ef:d8:ed:be:e3:4b:95:84:1a:
                    5a:8f:ec:95:86:1f:c0:a2:94:95:c5:a8:31:8c:4c:
                    ce:b2:fb:0a:9f:1f:a2:b7:c6:dc:ad:5d:96:97:69:
                    e8:05:09:4c:b5:32:cd:50:7a:92:dd:6c:6a:cd:38:
                    d7:56:47:ea:46:4d:b3:0e:c0:8e:38:9c:d6:d3:22:
                    f3:71:72:cf:a6:7a:5a:15:b7:d8:1a:f3:11:55:55:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:22:1F:DE:E0:16:AD:4F:63:35:6F:5F:D3:A3:A2:32:B3:10:E4:99
            X509v3 Authority Key Identifier:
                keyid:24:32:6A:41:E1:60:4E:EB:0B:A2:30:08:0D:6E:54:7E:DD:BA:58:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/24326A41E1604EEB0BA230080D6E547EDDBA58F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:bb:5a:ba:da:1c:66:85:9c:35:79:99:7c:a2:d3:41:de:
         c5:a1:4d:2c:68:98:5c:54:84:a6:40:7b:a3:8f:a8:f9:ac:ce:
         98:dc:b5:48:7b:f3:be:ef:8a:98:64:d6:15:bb:eb:0d:43:51:
         12:82:b5:89:b6:7b:5e:e1:2d:c4:b7:e6:ee:c7:e9:a2:a2:8e:
         3a:14:a1:e8:8a:db:c7:d7:1d:64:ba:fc:49:57:5c:71:c1:62:
         2a:cc:d9:7d:f5:c6:04:48:c1:f8:19:7b:4f:6b:6f:59:58:66:
         af:b8:94:5e:e4:29:15:db:e1:21:df:32:c3:ea:a4:52:2c:64:
         57:3c:ef:db:d2:68:5e:37:20:04:8c:8c:d0:df:4e:e9:80:4d:
         64:8b:be:cb:e3:7a:06:cf:1f:e3:0c:ed:d8:6f:e4:04:44:e8:
         8b:9e:d7:e0:04:22:17:48:30:d8:89:ea:7f:d2:cc:ef:79:63:
         5f:f8:ab:11:78:6c:0c:d4:3a:2a:7e:17:19:f8:51:0d:74:78:
         2a:62:37:b3:4f:d2:30:3a:30:05:8e:eb:c4:12:e1:f6:89:30:
         2a:76:95:41:b6:e8:97:b9:e1:2d:1b:22:5c:75:55:b1:53:4c:
         8a:6d:d1:7e:08:9a:fa:4c:fd:8e:01:9f:f6:8e:1b:a5:38:d3:
         43:41:4e:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa8U3yim/rnq6eaSOaVH94Ddu4VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMjZBNDFFMTYwNEVFQjBCQTIzMDA4MEQ2RTU0N0VE
REJBNThGMDAeFw0yNDAxMTAxMDE0MTBaFw0yNDAxMTExMDU1MTBaMDMxMTAvBgNV
BAMTKDM3MjIxRkRFRTAxNkFENEY2MzM1NkY1RkQzQTNBMjMyQjMxMEU0OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvvDAX83eg/eoI8MBuj5BEJjV
ZCsTMCUQiI8bMg5NHeizjvo4mfBWkIA86gkUGKHddt2KQe3Hw4VaBdR2+lwQvmnk
zLt9+9m+d3cTgWX8LtCvcwytFs+I6gcXyzD+RqEaUWl35cF4SU/fQBz7rg2+SIhR
d0IdgHKQSn6FD7c3rltNYHGuK5I+edOyHZdoufgWOLzTNyuvY7rdCHq1uS+DCoVg
OpXpfUgWI+/Y7b7jS5WEGlqP7JWGH8CilJXFqDGMTM6y+wqfH6K3xtytXZaXaegF
CUy1Ms1QepLdbGrNONdWR+pGTbMOwI44nNbTIvNxcs+meloVt9ga8xFVVatbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNyIf3uAWrU9jNW9f06OiMrMQ5JkwHwYDVR0j
BBgwFoAUJDJqQeFgTusLojAIDW5Uft26WPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC8yNDMyNkE0MUUxNjA0RUVCMEJBMjMwMDgwRDZFNTQ3RUREQkE1OEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0MzI2QTQxRTE2MDRFRUIw
QkEyMzAwODBENkU1NDdFRERCQTU4RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXlaNWEvMC8y
NDMyNkE0MUUxNjA0RUVCMEJBMjMwMDgwRDZFNTQ3RUREQkE1OEYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASYu7WrraHGaFnDV5mXyi00HexaFNLGiYXFSEpkB7o4+o+azOmNy1SHvzvu+K
mGTWFbvrDUNREoK1ibZ7XuEtxLfm7sfpoqKOOhSh6Irbx9cdZLr8SVdcccFiKszZ
ffXGBEjB+Bl7T2tvWVhmr7iUXuQpFdvhId8yw+qkUixkVzzv29JoXjcgBIyM0N9O
6YBNZIu+y+N6Bs8f4wzt2G/kBEToi57X4AQiF0gw2Inqf9LM73ljX/irEXhsDNQ6
Kn4XGfhRDXR4KmI3s0/SMDowBY7rxBLh9okwKnaVQbbol7nhLRsiXHVVsVNMim3R
fgia+kz9jgGf9o4bpTjTQ0FOLQ==
-----END CERTIFICATE-----