Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft
File:                     A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft (raw, json)
Hash identifier:          4mATY9k6yhFcFBXO4m//7ojKUXLOmr/DSwa4eKkF3Xs=
Subject key identifier:   1E:11:5B:00:A2:96:67:C4:35:A8:78:BA:39:88:EA:61:C8:DB:A0:85
Authority key identifier: A2:FB:72:FF:52:FF:94:70:9F:69:00:B1:F0:FA:B8:36:08:FC:2C:70
Certificate issuer:       /CN=A2FB72FF52FF94709F6900B1F0FAB83608FC2C70
Certificate serial:       2E23A0F69B3ED0559C1A70FF39F3D67A7EF9F031
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft
Manifest number:          E1
Signing time:             Fri 10 Mar 2023 09:02:06 +0000
Manifest this update:     Fri 10 Mar 2023 08:57:06 +0000
Manifest next update:     Sat 11 Mar 2023 11:26:06 +0000
Files and hashes:         1: 3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (hash: nZLNnerotXM9ZT0LETzjxlNnZQ9buxghDMfpxBN3mzo=)
                          2: 323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (hash: eoL0S7XXq5CzOvfRGZUzwzaTCqkZn3uUOBDi6e2q/fY=)
                          3: A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.crl (hash: GXK3sTQ4qETn0Fu6tZ4H2Zn7DwH/qH4O0ywmypthrFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:23:a0:f6:9b:3e:d0:55:9c:1a:70:ff:39:f3:d6:7a:7e:f9:f0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB72FF52FF94709F6900B1F0FAB83608FC2C70
        Validity
            Not Before: Mar 10 08:57:06 2023 GMT
            Not After : Mar 11 11:26:06 2023 GMT
        Subject: CN=1E115B00A29667C435A878BA3988EA61C8DBA085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:42:fc:f1:28:cf:3e:e4:88:80:8f:d1:6f:
                    1c:ac:46:31:2b:71:22:dc:c8:3c:3b:5e:a7:cb:2d:
                    13:c5:45:9b:0e:47:1a:ad:0b:54:77:5a:ed:8a:bb:
                    26:e4:a3:11:26:e5:47:cd:f5:a2:84:f8:ad:e7:50:
                    59:c5:0d:a9:a0:c7:02:b3:c9:d8:08:96:78:62:5d:
                    81:db:b3:51:d2:32:fc:03:d6:02:50:30:1f:63:43:
                    b4:46:40:68:a9:15:9e:6b:e1:70:33:9a:6f:7c:2a:
                    86:a6:a5:3c:ef:57:fc:e6:12:10:0c:f4:de:3b:10:
                    63:00:38:57:99:f6:40:91:11:96:da:1e:a2:48:20:
                    ad:e0:5d:95:2b:1a:7c:1c:c1:13:b1:93:89:05:ad:
                    d0:f3:ab:f0:0a:c2:86:6b:9b:13:e0:f5:15:0d:cb:
                    a7:7c:26:a4:e1:db:62:c9:15:8d:12:b3:42:b0:b1:
                    e3:02:c7:f3:23:af:d2:6f:35:87:96:06:2f:97:ff:
                    0f:e5:b7:c3:ec:98:83:cf:b8:c6:f8:33:12:fe:2b:
                    0b:d6:4d:ad:55:6a:00:24:04:ea:dd:88:d5:1b:d5:
                    b5:fc:82:b8:9f:43:f6:f3:8a:1d:36:95:85:b2:9b:
                    ae:b7:09:82:13:29:77:3b:72:ea:a3:8a:c4:41:31:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:11:5B:00:A2:96:67:C4:35:A8:78:BA:39:88:EA:61:C8:DB:A0:85
            X509v3 Authority Key Identifier:
                keyid:A2:FB:72:FF:52:FF:94:70:9F:69:00:B1:F0:FA:B8:36:08:FC:2C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:40:a6:06:11:a3:41:76:3d:38:52:2f:69:56:ea:b9:82:
         4f:64:e0:c6:1a:ca:de:7e:a3:33:e6:89:f9:48:2c:e7:a3:29:
         18:01:51:59:60:46:27:c7:4e:10:3d:a7:22:d6:c4:23:75:ec:
         ce:b0:b1:71:7d:26:46:f5:76:b5:18:12:4c:59:61:7c:5c:7e:
         b9:a4:06:12:17:ce:cf:28:55:c1:37:b4:b2:62:7e:ae:be:02:
         24:e2:a9:c9:f6:c7:32:43:2b:43:e6:8c:60:e9:56:d7:c9:4a:
         4a:48:c1:77:6b:fa:1f:bc:3b:cf:25:ec:51:f2:d7:4c:c6:22:
         49:56:00:cf:71:7c:5d:ac:3c:af:d0:c9:9a:9f:9d:2f:48:74:
         df:14:fb:09:57:33:2f:1b:d8:8a:c2:62:12:40:90:8c:9e:78:
         63:17:28:74:77:54:d5:8b:af:49:44:52:3a:2d:48:1b:64:e7:
         c6:1f:87:59:8b:51:30:b2:01:c0:d1:8f:59:46:0f:95:93:d7:
         22:81:0a:97:a4:9f:e8:e7:dc:a5:7b:fe:fb:80:af:29:4b:f4:
         7c:7b:ff:00:bf:01:d0:be:cb:9a:55:4d:bc:46:1a:51:3e:6b:
         37:94:65:23:9e:03:dd:d5:21:20:8c:09:45:f6:5a:bd:0e:0c:
         60:0d:f4:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULiOg9ps+0FWcGnD/OfPWen758DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJGQjcyRkY1MkZGOTQ3MDlGNjkwMEIxRjBGQUI4MzYw
OEZDMkM3MDAeFw0yMzAzMTAwODU3MDZaFw0yMzAzMTExMTI2MDZaMDMxMTAvBgNV
BAMTKDFFMTE1QjAwQTI5NjY3QzQzNUE4NzhCQTM5ODhFQTYxQzhEQkEwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhkL88SjPPuSIgI/RbxysRjEr
cSLcyDw7XqfLLRPFRZsORxqtC1R3Wu2KuybkoxEm5UfN9aKE+K3nUFnFDamgxwKz
ydgIlnhiXYHbs1HSMvwD1gJQMB9jQ7RGQGipFZ5r4XAzmm98KoampTzvV/zmEhAM
9N47EGMAOFeZ9kCREZbaHqJIIK3gXZUrGnwcwROxk4kFrdDzq/AKwoZrmxPg9RUN
y6d8JqTh22LJFY0Ss0KwseMCx/Mjr9JvNYeWBi+X/w/lt8PsmIPPuMb4MxL+KwvW
Ta1VagAkBOrdiNUb1bX8grifQ/bzih02lYWym663CYITKXc7cuqjisRBMSMTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHhFbAKKWZ8Q1qHi6OYjqYcjboIUwHwYDVR0j
BBgwFoAUovty/1L/lHCfaQCx8Pq4Ngj8LHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxL
cHIvMC9BMkZCNzJGRjUyRkY5NDcwOUY2OTAwQjFGMEZBQjgzNjA4RkMyQzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyRkI3MkZGNTJGRjk0NzA5
RjY5MDBCMUYwRkFCODM2MDhGQzJDNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxLcHIvMC9B
MkZCNzJGRjUyRkY5NDcwOUY2OTAwQjFGMEZBQjgzNjA4RkMyQzcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZKBApgYRo0F2PThSL2lW6rmCT2TgxhrK3n6jM+aJ+Ugs56MpGAFRWWBGJ8dO
ED2nItbEI3XszrCxcX0mRvV2tRgSTFlhfFx+uaQGEhfOzyhVwTe0smJ+rr4CJOKp
yfbHMkMrQ+aMYOlW18lKSkjBd2v6H7w7zyXsUfLXTMYiSVYAz3F8Xaw8r9DJmp+d
L0h03xT7CVczLxvYisJiEkCQjJ54YxcodHdU1YuvSURSOi1IG2Tnxh+HWYtRMLIB
wNGPWUYPlZPXIoEKl6Sf6OfcpXv++4CvKUv0fHv/AL8B0L7LmlVNvEYaUT5rN5Rl
I54D3dUhIIwJRfZavQ4MYA30+Q==
-----END CERTIFICATE-----