Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.mft
File:                     4CE208B60A335AC817BD8345B866877953FA18BA.mft (raw, json)
Hash identifier:          4xFmEJ4Sit8OyGpTtI+7iuIeBnHIQRYxZkCjD7WvCiA=
Subject key identifier:   93:46:5E:CC:9F:8F:56:EA:6F:8D:2C:76:C5:87:7A:1C:A0:21:FA:E6
Authority key identifier: 4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA
Certificate issuer:       /CN=4CE208B60A335AC817BD8345B866877953FA18BA
Certificate serial:       786FE5DBE129BFE564DEE59425C7E54670922F11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.mft
Manifest number:          DE
Signing time:             Sat 26 Oct 2024 05:49:40 +0000
Manifest this update:     Sat 26 Oct 2024 05:44:40 +0000
Manifest next update:     Sun 27 Oct 2024 06:49:40 +0000
Files and hashes:         1: 4CE208B60A335AC817BD8345B866877953FA18BA.crl (hash: sJ/4zQxKSiU/3CPhsF/X+1Kolpqc3aYoQ+qf/vGOtxQ=)
                          2: 323830343a383537383a3a2f33322d3438203d3e20323732353831.roa (hash: sfwCDsF2BVivS4spYt1GwAWn/HEEKUE5ZJnENNTgY5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6f:e5:db:e1:29:bf:e5:64:de:e5:94:25:c7:e5:46:70:92:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE208B60A335AC817BD8345B866877953FA18BA
        Validity
            Not Before: Oct 26 05:44:40 2024 GMT
            Not After : Oct 27 06:49:40 2024 GMT
        Subject: CN=93465ECC9F8F56EA6F8D2C76C5877A1CA021FAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:65:91:c1:3d:0f:65:fa:5e:4b:fc:90:44:
                    87:12:88:6f:5b:c6:f2:ce:10:5a:33:66:01:2a:d9:
                    fd:69:4c:ce:3d:10:98:63:cd:8c:cc:f8:2a:16:bb:
                    d7:f4:75:99:73:74:e0:25:61:ac:03:da:41:91:5a:
                    62:1c:36:c9:75:9d:51:f5:e3:58:75:81:52:a8:43:
                    1e:db:dc:79:22:7f:bd:d7:8a:04:0b:72:7c:25:04:
                    cd:fc:75:db:fc:ea:ad:76:d3:c1:d6:f5:00:db:59:
                    06:b9:a9:ad:c1:ed:16:24:68:fe:c1:ef:4b:49:f8:
                    69:e4:bb:00:1f:38:2c:31:0f:87:2a:5d:d1:fd:38:
                    c1:3e:c3:ea:b2:e1:26:09:6a:e8:7f:dc:c8:69:40:
                    32:80:19:e5:14:2a:01:87:46:62:19:0c:35:7a:10:
                    53:f1:51:63:b1:9c:48:c0:3c:92:71:b4:81:bf:25:
                    ee:d6:3a:b0:41:af:ed:8d:42:5a:d2:f7:08:c5:14:
                    16:8f:4d:5d:66:85:34:c1:6f:f2:bc:e2:de:fb:1e:
                    2c:33:40:a8:c0:a7:97:ee:71:b2:6e:94:75:1b:df:
                    56:fc:c6:71:f9:fb:34:93:73:cb:9d:30:3b:ef:65:
                    ae:99:a8:fe:a4:3c:5a:25:4d:b3:47:28:27:da:65:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:5E:CC:9F:8F:56:EA:6F:8D:2C:76:C5:87:7A:1C:A0:21:FA:E6
            X509v3 Authority Key Identifier:
                keyid:4C:E2:08:B6:0A:33:5A:C8:17:BD:83:45:B8:66:87:79:53:FA:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE208B60A335AC817BD8345B866877953FA18BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/2/4CE208B60A335AC817BD8345B866877953FA18BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:0c:48:e2:c6:c1:c9:53:50:5e:03:fa:14:5c:b1:41:ba:
         80:b4:b0:9d:eb:36:7b:ca:ef:d6:5e:65:17:65:53:37:9e:98:
         ee:5f:59:4e:e9:de:97:f4:b4:00:27:6c:05:2e:a8:b9:a9:03:
         b0:38:32:a2:12:2c:f2:71:9e:ed:5a:98:0d:de:fc:ec:86:3d:
         54:19:2c:ac:47:43:5e:89:02:98:2f:73:d1:e6:98:d5:c3:f7:
         95:9d:0f:6d:6e:1b:c2:b8:50:70:2b:6a:5e:aa:9e:8f:67:9e:
         5a:97:c2:4f:32:80:93:42:86:e2:84:77:57:2d:a9:22:67:a3:
         30:12:82:e2:c1:f7:40:f6:33:eb:e9:01:e4:2d:e3:5b:76:65:
         6c:95:34:42:4a:f2:c0:fb:06:2e:28:0a:2e:c8:2f:13:ae:a6:
         71:c4:30:6c:03:4f:d0:2f:34:78:15:e6:82:33:8f:23:1c:03:
         ba:11:d0:0f:28:14:d5:8b:16:ca:99:f6:0f:b3:4f:f9:5d:c8:
         af:17:bb:1f:d5:40:d7:70:d5:2f:8c:e2:e9:68:2d:08:c5:88:
         85:a9:79:6d:84:d8:37:ea:69:f0:cc:b5:7b:08:84:22:a5:a9:
         6f:35:1c:32:01:83:5b:ef:19:ce:b4:d8:5b:4a:b9:9f:54:91:
         1e:ca:df:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeG/l2+Epv+Vk3uWUJcflRnCSLxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFMjA4QjYwQTMzNUFDODE3QkQ4MzQ1Qjg2Njg3Nzk1
M0ZBMThCQTAeFw0yNDEwMjYwNTQ0NDBaFw0yNDEwMjcwNjQ5NDBaMDMxMTAvBgNV
BAMTKDkzNDY1RUNDOUY4RjU2RUE2RjhEMkM3NkM1ODc3QTFDQTAyMUZBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUGWRwT0PZfpeS/yQRIcSiG9b
xvLOEFozZgEq2f1pTM49EJhjzYzM+CoWu9f0dZlzdOAlYawD2kGRWmIcNsl1nVH1
41h1gVKoQx7b3Hkif73XigQLcnwlBM38ddv86q1208HW9QDbWQa5qa3B7RYkaP7B
70tJ+GnkuwAfOCwxD4cqXdH9OME+w+qy4SYJauh/3MhpQDKAGeUUKgGHRmIZDDV6
EFPxUWOxnEjAPJJxtIG/Je7WOrBBr+2NQlrS9wjFFBaPTV1mhTTBb/K84t77Hiwz
QKjAp5fucbJulHUb31b8xnH5+zSTc8udMDvvZa6ZqP6kPFolTbNHKCfaZQfdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk0ZezJ+PVupvjSx2xYd6HKAh+uYwHwYDVR0j
BBgwFoAUTOIItgozWsgXvYNFuGaHeVP6GLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMi80Q0UyMDhCNjBBMzM1QUM4MTdCRDgzNDVCODY2ODc3OTUzRkExOEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTIwOEI2MEEzMzVBQzgx
N0JEODM0NUI4NjY4Nzc5NTNGQTE4QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZBOXovMi80
Q0UyMDhCNjBBMzM1QUM4MTdCRDgzNDVCODY2ODc3OTUzRkExOEJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAvAMSOLGwclTUF4D+hRcsUG6gLSwnes2e8rv1l5lF2VTN56Y7l9ZTunel/S0
ACdsBS6ouakDsDgyohIs8nGe7VqYDd787IY9VBksrEdDXokCmC9z0eaY1cP3lZ0P
bW4bwrhQcCtqXqqej2eeWpfCTzKAk0KG4oR3Vy2pImejMBKC4sH3QPYz6+kB5C3j
W3ZlbJU0QkrywPsGLigKLsgvE66mccQwbANP0C80eBXmgjOPIxwDuhHQDygU1YsW
ypn2D7NP+V3Irxe7H9VA13DVL4zi6WgtCMWIhal5bYTYN+pp8My1ewiEIqWpbzUc
MgGDW+8ZzrTYW0q5n1SRHsrfCQ==
-----END CERTIFICATE-----