Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft
File:                     F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft (raw, json)
Hash identifier:          oQ9DI961+ELz+TnW/41U66OuXj/Es3A3n1uBVFvgPbM=
Subject key identifier:   56:AD:6F:67:E7:88:EA:D4:32:18:A5:3A:57:8C:34:75:78:75:CC:6E
Authority key identifier: F8:BB:2A:FC:CF:E1:ED:DB:7C:98:24:96:1E:88:F0:3A:4D:CD:9D:82
Certificate issuer:       /CN=F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82
Certificate serial:       7161B7832B4DE8D678FC792F63DFD0ED49C2DE24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft
Manifest number:          020F
Signing time:             Sun 14 Apr 2024 22:34:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:29:04 +0000
Manifest next update:     Tue 16 Apr 2024 00:54:04 +0000
Files and hashes:         1: F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.crl (hash: K5IwGv/5bX66EnB8bc+3SpKP6Zd1nfsl9yfx046fjGk=)
                          2: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: r26QZlcq0ZYpuR/U71QYFp4+Qy5pADRhb/iOwJJw/2U=)
                          3: 323830343a333535303a3a2f33322d3438203d3e20323636323830.roa (hash: +nzRplsKXWGV/Yz2/VzfGX4n7f/QM762qfgkrgEp9lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:b7:83:2b:4d:e8:d6:78:fc:79:2f:63:df:d0:ed:49:c2:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82
        Validity
            Not Before: Apr 14 22:29:04 2024 GMT
            Not After : Apr 16 00:54:04 2024 GMT
        Subject: CN=56AD6F67E788EAD43218A53A578C34757875CC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5e:e9:59:0c:d1:e5:47:80:55:4b:db:9b:11:
                    b1:01:c6:83:51:b2:f5:19:85:3d:b0:e2:c2:8d:03:
                    31:ed:89:12:44:6f:2e:0d:53:1a:d3:fc:c4:58:19:
                    10:9a:f0:e7:a0:dc:93:9a:b8:a1:67:62:b4:cf:ab:
                    fd:20:9f:84:08:0f:40:40:e3:c4:95:c3:4c:a4:bb:
                    48:c1:5b:24:41:13:a6:f5:a5:e0:70:e1:56:8e:4c:
                    b6:d4:60:b4:2a:96:84:7a:4a:c9:ab:ed:21:c6:9e:
                    69:04:7a:0a:f6:76:e4:7d:1a:95:69:5d:9e:0b:ef:
                    16:9c:5d:96:83:65:08:60:df:30:85:21:5b:8f:4f:
                    d3:ee:40:54:bb:0f:d6:30:df:6b:f2:7b:71:d4:75:
                    09:bb:27:bf:40:74:79:36:ab:ad:57:72:70:1f:69:
                    47:b2:c3:99:ba:78:2c:46:ab:39:e7:f2:20:d5:d7:
                    93:65:da:aa:5d:a4:01:5f:ba:f0:59:93:1a:eb:d9:
                    99:41:f9:30:04:83:02:0d:7b:ba:1c:1b:d6:7a:3d:
                    b4:ba:bc:0a:3a:d6:64:c5:43:40:eb:b1:20:c6:83:
                    d9:b3:ec:04:85:2f:8f:19:6a:03:3b:5e:bc:d9:81:
                    b7:ed:2a:70:f3:07:68:6a:b1:77:2c:b1:1e:29:f0:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AD:6F:67:E7:88:EA:D4:32:18:A5:3A:57:8C:34:75:78:75:CC:6E
            X509v3 Authority Key Identifier:
                keyid:F8:BB:2A:FC:CF:E1:ED:DB:7C:98:24:96:1E:88:F0:3A:4D:CD:9D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/F8BB2AFCCFE1EDDB7C9824961E88F03A4DCD9D82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:00:cb:14:de:e3:3f:a8:e4:ba:1c:39:5d:07:24:3f:94:
         ac:c8:6a:35:15:52:9c:53:64:76:f0:96:2c:e2:56:67:97:1c:
         cf:09:a1:82:26:a4:c1:0b:46:02:23:36:65:90:8a:8f:17:ad:
         65:fb:31:ca:3e:a5:06:cf:7b:2f:29:55:56:1b:a4:ab:60:56:
         8b:43:01:b7:09:92:e1:b4:63:fd:d1:79:2f:6c:98:16:56:c6:
         c3:e1:08:04:e9:eb:00:c3:87:86:c6:8d:92:19:10:23:86:c6:
         3c:29:e2:c7:b0:73:e7:14:f2:e4:9e:a2:87:fa:a8:52:22:e5:
         aa:1b:09:9e:f9:e9:1f:9c:a2:79:06:0b:5c:90:ec:33:3f:1c:
         4c:73:78:39:80:e3:00:ff:4c:2a:0c:b1:c3:e2:b9:3a:98:0b:
         34:0d:0e:be:1a:6f:fe:23:e6:e6:bf:49:f4:b8:22:57:49:a5:
         14:61:4e:46:fd:ea:b5:25:c3:b6:66:07:f2:10:c4:b3:53:73:
         a6:c2:84:be:e8:8d:cd:fa:d1:5a:35:59:0c:a1:b1:fa:c5:9f:
         37:31:00:8c:65:71:ba:3a:3d:e0:a5:41:8b:fc:97:e3:f6:43:
         d3:8a:34:bf:6a:a9:2e:44:2f:68:4a:ab:fa:08:60:01:48:d2:
         fe:ee:cd:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcWG3gytN6NZ4/HkvY9/Q7UnC3iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCQjJBRkNDRkUxRUREQjdDOTgyNDk2MUU4OEYwM0E0
RENEOUQ4MjAeFw0yNDA0MTQyMjI5MDRaFw0yNDA0MTYwMDU0MDRaMDMxMTAvBgNV
BAMTKDU2QUQ2RjY3RTc4OEVBRDQzMjE4QTUzQTU3OEMzNDc1Nzg3NUNDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6XulZDNHlR4BVS9ubEbEBxoNR
svUZhT2w4sKNAzHtiRJEby4NUxrT/MRYGRCa8Oeg3JOauKFnYrTPq/0gn4QID0BA
48SVw0yku0jBWyRBE6b1peBw4VaOTLbUYLQqloR6Ssmr7SHGnmkEegr2duR9GpVp
XZ4L7xacXZaDZQhg3zCFIVuPT9PuQFS7D9Yw32vye3HUdQm7J79AdHk2q61XcnAf
aUeyw5m6eCxGqznn8iDV15Nl2qpdpAFfuvBZkxrr2ZlB+TAEgwINe7ocG9Z6PbS6
vAo61mTFQ0DrsSDGg9mz7ASFL48ZagM7XrzZgbftKnDzB2hqsXcssR4p8D0XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVq1vZ+eI6tQyGKU6V4w0dXh1zG4wHwYDVR0j
BBgwFoAU+Lsq/M/h7dt8mCSWHojwOk3NnYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3
NDIvMC9GOEJCMkFGQ0NGRTFFRERCN0M5ODI0OTYxRTg4RjAzQTREQ0Q5RDgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4QkIyQUZDQ0ZFMUVEREI3
Qzk4MjQ5NjFFODhGMDNBNERDRDlEODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC9G
OEJCMkFGQ0NGRTFFRERCN0M5ODI0OTYxRTg4RjAzQTREQ0Q5RDgyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlvsAyxTe4z+o5LocOV0HJD+UrMhqNRVSnFNkdvCWLOJWZ5cczwmhgiakwQtG
AiM2ZZCKjxetZfsxyj6lBs97LylVVhukq2BWi0MBtwmS4bRj/dF5L2yYFlbGw+EI
BOnrAMOHhsaNkhkQI4bGPCnix7Bz5xTy5J6ih/qoUiLlqhsJnvnpH5yieQYLXJDs
Mz8cTHN4OYDjAP9MKgyxw+K5OpgLNA0Ovhpv/iPm5r9J9LgiV0mlFGFORv3qtSXD
tmYH8hDEs1NzpsKEvuiNzfrRWjVZDKGx+sWfNzEAjGVxujo94KVBi/yX4/ZD04o0
v2qpLkQvaEqr+ghgAUjS/u7Nlw==
-----END CERTIFICATE-----