Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.mft
File:                     540962CBF5A6938F04BFA3344E3804D30CB723D7.mft (raw, json)
Hash identifier:          mafYfSsB22mwkoNuNsNp0w8MKFP7QCTotP/RB8XMH3A=
Subject key identifier:   06:79:D4:40:21:A4:B4:30:B9:2F:71:38:2C:CA:B4:1D:2C:C1:41:00
Authority key identifier: 54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7
Certificate issuer:       /CN=540962CBF5A6938F04BFA3344E3804D30CB723D7
Certificate serial:       06B8D755A84CE84BCB125303DD475EBFA1C0DCC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.mft
Manifest number:          AC
Signing time:             Tue 09 Jul 2024 10:06:28 +0000
Manifest this update:     Tue 09 Jul 2024 10:01:28 +0000
Manifest next update:     Wed 10 Jul 2024 12:11:28 +0000
Files and hashes:         1: 323830343a6363633a3a2f33322d3438203d3e20323632383237.roa (hash: eD2Vy2d//n7e6yFIONcVTldjtOf4H42pax0wutkop1A=)
                          2: 540962CBF5A6938F04BFA3344E3804D30CB723D7.crl (hash: VZHNO5rf2+BLaAmaa045yXL73dM292/MTcO3lP4V37g=)
                          3: 3138372e38342e3137362e302f32302d3234203d3e20323632383237.roa (hash: VhnnqTjkHPXtu2qajnb9LSjo2df2zH2O+/sxdUG9o2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:d7:55:a8:4c:e8:4b:cb:12:53:03:dd:47:5e:bf:a1:c0:dc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540962CBF5A6938F04BFA3344E3804D30CB723D7
        Validity
            Not Before: Jul  9 10:01:28 2024 GMT
            Not After : Jul 10 12:11:28 2024 GMT
        Subject: CN=0679D44021A4B430B92F71382CCAB41D2CC14100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:a4:70:3a:4a:e0:2b:74:4c:af:90:b7:eb:
                    c1:ec:f2:8e:21:8b:d1:cf:c2:7b:ed:7f:96:30:d0:
                    14:9b:67:c4:02:8b:c6:37:99:73:c8:03:44:73:80:
                    eb:5c:8a:f2:22:0d:f0:10:11:42:7f:63:fc:ca:ee:
                    2d:d6:1d:14:7c:8d:73:f3:f6:a5:4e:58:0a:d6:fd:
                    5e:ed:ea:b7:82:17:7c:ba:cd:00:01:06:81:06:48:
                    c3:48:7a:5e:64:a1:08:4d:73:04:09:08:62:4e:18:
                    e7:77:82:fe:33:e2:23:89:69:a6:3e:0a:f9:3a:f0:
                    0e:91:35:c7:26:84:10:fd:8b:fd:ef:13:c0:54:87:
                    1f:91:53:54:34:5e:39:9b:16:f4:56:10:17:c3:41:
                    5e:8e:3f:c4:a7:f7:b9:69:ba:ef:00:dc:b2:b1:8d:
                    98:ed:c5:f9:d5:fc:d6:5c:56:fe:38:fe:40:b5:1f:
                    6f:dc:ce:5f:fb:10:14:50:dd:99:53:99:c4:51:23:
                    d0:55:f2:46:aa:58:14:51:ed:17:9e:ab:8d:1c:9c:
                    4d:cb:a4:5a:92:a4:6d:aa:1d:b5:1f:30:bc:de:4c:
                    02:ad:c8:62:9f:aa:4c:2f:3b:a3:7c:3a:12:73:b2:
                    04:76:c3:3f:f1:50:d4:d0:c3:a6:b6:3d:70:c5:e9:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:D4:40:21:A4:B4:30:B9:2F:71:38:2C:CA:B4:1D:2C:C1:41:00
            X509v3 Authority Key Identifier:
                keyid:54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:44:50:d3:25:9b:b8:c2:c5:0e:38:46:b6:0a:b9:fd:d1:
         b6:3c:e0:ba:af:50:96:9f:4a:7c:ae:84:3c:4f:ad:12:6e:e4:
         e7:57:99:bf:7d:56:1f:da:7a:e6:9b:d6:43:a9:a4:92:94:bc:
         31:b5:3a:36:ca:56:2b:fe:5e:60:01:5d:06:7e:84:bb:48:d9:
         46:c0:bd:7b:d9:7b:c1:ca:be:cd:68:02:e8:23:c4:1c:6b:40:
         0c:0a:40:da:c8:36:1e:e4:64:42:d1:93:50:f0:e2:49:76:34:
         9d:f2:08:fa:8c:2e:68:c8:bf:fb:a3:3e:81:d9:70:1a:d7:ad:
         bb:b0:90:3e:a2:2e:20:3a:71:d9:48:6e:dc:1e:8e:e5:eb:2e:
         3f:26:37:9d:6f:72:9f:87:19:d6:e8:16:5f:89:b4:fa:81:ba:
         e3:55:e3:45:21:b1:9a:ce:75:9d:27:6a:49:2e:f1:77:0b:78:
         33:68:06:b8:f1:54:2b:ba:99:a8:23:5e:da:34:ad:69:c6:18:
         ec:42:b1:28:6b:e8:d4:34:b8:11:67:57:1a:60:2c:9a:ee:17:
         69:0b:27:d2:82:ce:a3:3d:79:f1:84:78:fe:5a:7e:ec:ba:71:
         ee:ae:04:76:04:cb:6a:43:b5:cf:b4:87:9b:57:6a:81:79:1f:
         9b:06:0d:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBrjXVahM6EvLElMD3Udev6HA3MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQwOTYyQ0JGNUE2OTM4RjA0QkZBMzM0NEUzODA0RDMw
Q0I3MjNENzAeFw0yNDA3MDkxMDAxMjhaFw0yNDA3MTAxMjExMjhaMDMxMTAvBgNV
BAMTKDA2NzlENDQwMjFBNEI0MzBCOTJGNzEzODJDQ0FCNDFEMkNDMTQxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0KRwOkrgK3RMr5C368Hs8o4h
i9HPwnvtf5Yw0BSbZ8QCi8Y3mXPIA0RzgOtcivIiDfAQEUJ/Y/zK7i3WHRR8jXPz
9qVOWArW/V7t6reCF3y6zQABBoEGSMNIel5koQhNcwQJCGJOGOd3gv4z4iOJaaY+
Cvk68A6RNccmhBD9i/3vE8BUhx+RU1Q0XjmbFvRWEBfDQV6OP8Sn97lpuu8A3LKx
jZjtxfnV/NZcVv44/kC1H2/czl/7EBRQ3ZlTmcRRI9BV8kaqWBRR7Reeq40cnE3L
pFqSpG2qHbUfMLzeTAKtyGKfqkwvO6N8OhJzsgR2wz/xUNTQw6a2PXDF6bU1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBnnUQCGktDC5L3E4LMq0HSzBQQAwHwYDVR0j
BBgwFoAUVAliy/Wmk48Ev6M0TjgE0wy3I9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMS81NDA5NjJDQkY1QTY5MzhGMDRCRkEzMzQ0RTM4MDREMzBDQjcyM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MDk2MkNCRjVBNjkzOEYw
NEJGQTMzNDRFMzgwNEQzMENCNzIzRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1puM2MvMS81
NDA5NjJDQkY1QTY5MzhGMDRCRkEzMzQ0RTM4MDREMzBDQjcyM0Q3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjn5EUNMlm7jCxQ44RrYKuf3Rtjzguq9Qlp9KfK6EPE+tEm7k51eZv31WH9p6
5pvWQ6mkkpS8MbU6NspWK/5eYAFdBn6Eu0jZRsC9e9l7wcq+zWgC6CPEHGtADApA
2sg2HuRkQtGTUPDiSXY0nfII+owuaMi/+6M+gdlwGtetu7CQPqIuIDpx2Uhu3B6O
5esuPyY3nW9yn4cZ1ugWX4m0+oG641XjRSGxms51nSdqSS7xdwt4M2gGuPFUK7qZ
qCNe2jStacYY7EKxKGvo1DS4EWdXGmAsmu4XaQsn0oLOoz158YR4/lp+7Lpx7q4E
dgTLakO1z7SHm1dqgXkfmwYN5A==
-----END CERTIFICATE-----