Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/205E11FC057208BD35A389938A30DF75B51DBE05.mft
File:                     205E11FC057208BD35A389938A30DF75B51DBE05.mft (raw, json)
Hash identifier:          Uy7W4DKrRZYp937nrg2UgYMpz5BguncYo2LQsSoAwi0=
Subject key identifier:   F6:A0:E4:E3:C8:5C:DE:9C:8D:B8:BE:84:E5:22:16:A8:8C:D7:73:01
Authority key identifier: 20:5E:11:FC:05:72:08:BD:35:A3:89:93:8A:30:DF:75:B5:1D:BE:05
Certificate issuer:       /CN=205E11FC057208BD35A389938A30DF75B51DBE05
Certificate serial:       167D33D5D6974C706B3688B966D4EBCD31E1FD19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/205E11FC057208BD35A389938A30DF75B51DBE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/205E11FC057208BD35A389938A30DF75B51DBE05.mft
Manifest number:          69
Signing time:             Fri 24 Mar 2023 22:45:11 +0000
Manifest this update:     Fri 24 Mar 2023 22:40:11 +0000
Manifest next update:     Sun 26 Mar 2023 02:41:11 +0000
Files and hashes:         1: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: s2jnrZWGohP5teE7bj5x9+ZylyYM/2TBqViD7vx5b4k=)
                          2: 205E11FC057208BD35A389938A30DF75B51DBE05.crl (hash: T0KyqF5dKRM8ZzLRcQhbkmIKDWZlEcfPL92X+zHRhTg=)
                          3: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: fm62Llkbetn/cB/itRaxABgU9ZFY5JJI8wogipPPk/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7d:33:d5:d6:97:4c:70:6b:36:88:b9:66:d4:eb:cd:31:e1:fd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205E11FC057208BD35A389938A30DF75B51DBE05
        Validity
            Not Before: Mar 24 22:40:11 2023 GMT
            Not After : Mar 26 02:41:11 2023 GMT
        Subject: CN=F6A0E4E3C85CDE9C8DB8BE84E52216A88CD77301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:29:92:c8:46:6f:5a:30:3b:6c:33:5c:4e:
                    2c:19:65:fa:12:e0:0a:47:99:5a:39:45:98:9e:18:
                    c5:52:47:59:f5:77:00:32:b1:0d:90:95:0b:6a:d7:
                    c8:c9:58:53:f9:86:13:b0:02:40:73:c4:5b:f4:a3:
                    bb:31:0c:e2:e0:37:82:5d:2d:c2:d2:ae:80:fe:bc:
                    3e:a0:c7:16:de:6a:68:67:7b:fe:a3:dc:34:97:a4:
                    02:0e:43:cc:b3:b7:f4:98:b0:3a:9a:d8:99:79:f4:
                    d1:2d:d8:c9:ae:94:56:47:80:1c:55:cd:8b:65:82:
                    7f:c2:82:1f:f4:13:cc:66:0b:5e:7f:27:66:cb:62:
                    9e:06:9d:a0:9f:7a:1f:15:be:a2:66:ee:eb:c2:e2:
                    a2:fd:e7:30:08:f0:39:18:52:24:50:46:cc:24:be:
                    62:a5:86:47:18:35:e6:09:f3:39:f9:a1:c2:24:a5:
                    ce:b3:84:14:2f:7f:0e:db:3a:2c:ce:90:95:06:3a:
                    a4:ab:d3:30:ee:d6:45:1f:ec:47:4c:7d:97:45:4c:
                    38:08:61:1f:79:6e:5f:87:42:e0:0c:09:be:17:f0:
                    d4:78:e9:4a:23:ed:d0:37:b1:35:76:02:f2:5f:2e:
                    fe:04:e8:87:38:de:bf:fb:12:09:b4:8d:ab:ab:98:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:E4:E3:C8:5C:DE:9C:8D:B8:BE:84:E5:22:16:A8:8C:D7:73:01
            X509v3 Authority Key Identifier:
                keyid:20:5E:11:FC:05:72:08:BD:35:A3:89:93:8A:30:DF:75:B5:1D:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/205E11FC057208BD35A389938A30DF75B51DBE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/205E11FC057208BD35A389938A30DF75B51DBE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/205E11FC057208BD35A389938A30DF75B51DBE05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:42:5e:a4:e8:8d:31:3b:5e:5c:ca:a2:3f:d9:d0:4c:ab:
         27:8c:33:e4:98:ac:c8:92:e4:fb:d3:43:98:ed:4b:1c:40:cb:
         6b:17:22:bf:75:1f:47:ef:81:12:bb:4a:7a:f8:d8:01:db:68:
         ee:28:a0:55:6b:91:e9:ad:5d:3e:68:4d:54:06:c6:b2:8c:20:
         6e:f3:12:49:8b:f1:26:8c:27:6a:70:2a:32:4f:65:1c:99:c3:
         08:15:e9:9f:4a:fe:36:71:90:8e:78:81:15:32:9f:e9:d8:c5:
         a5:ae:29:12:44:f5:eb:49:19:2b:3f:e6:aa:44:42:ec:7b:ce:
         7e:23:60:e3:da:59:19:b9:5d:e7:15:f8:a6:ba:3b:a8:7e:79:
         2c:39:c7:5c:97:2a:b6:f6:49:e5:16:3c:2f:24:ac:6c:ce:dc:
         aa:93:7f:ee:0c:5a:b1:c8:90:74:1f:34:43:6d:db:5a:c4:72:
         11:05:8b:2b:d0:d7:d5:b1:26:97:81:9e:d6:03:9d:f8:9a:7f:
         7c:06:b1:9b:1f:f3:cd:73:47:65:94:bf:7b:b9:c6:82:3d:49:
         7d:43:9b:15:6d:e6:7e:8e:09:af:26:11:b9:c2:2e:70:8b:6a:
         cf:20:e1:12:b0:27:9f:f1:fe:c5:19:66:a5:3b:d2:4c:5d:3d:
         64:75:ef:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFn0z1daXTHBrNoi5ZtTrzTHh/RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA1RTExRkMwNTcyMDhCRDM1QTM4OTkzOEEzMERGNzVC
NTFEQkUwNTAeFw0yMzAzMjQyMjQwMTFaFw0yMzAzMjYwMjQxMTFaMDMxMTAvBgNV
BAMTKEY2QTBFNEUzQzg1Q0RFOUM4REI4QkU4NEU1MjIxNkE4OENENzczMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSCmSyEZvWjA7bDNcTiwZZfoS
4ApHmVo5RZieGMVSR1n1dwAysQ2QlQtq18jJWFP5hhOwAkBzxFv0o7sxDOLgN4Jd
LcLSroD+vD6gxxbeamhne/6j3DSXpAIOQ8yzt/SYsDqa2Jl59NEt2MmulFZHgBxV
zYtlgn/Cgh/0E8xmC15/J2bLYp4GnaCfeh8VvqJm7uvC4qL95zAI8DkYUiRQRswk
vmKlhkcYNeYJ8zn5ocIkpc6zhBQvfw7bOizOkJUGOqSr0zDu1kUf7EdMfZdFTDgI
YR95bl+HQuAMCb4X8NR46Uoj7dA3sTV2AvJfLv4E6Ic43r/7Egm0jaurmL2xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9qDk48hc3pyNuL6E5SIWqIzXcwEwHwYDVR0j
BBgwFoAUIF4R/AVyCL01o4mTijDfdbUdvgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC8yMDVFMTFGQzA1NzIwOEJEMzVBMzg5OTM4QTMwREY3NUI1MURCRTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNUUxMUZDMDU3MjA4QkQz
NUEzODk5MzhBMzBERjc1QjUxREJFMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC8y
MDVFMTFGQzA1NzIwOEJEMzVBMzg5OTM4QTMwREY3NUI1MURCRTA1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKxxCXqTojTE7XlzKoj/Z0EyrJ4wz5JisyJLk+9NDmO1LHEDLaxciv3UfR++B
ErtKevjYAdto7iigVWuR6a1dPmhNVAbGsowgbvMSSYvxJownanAqMk9lHJnDCBXp
n0r+NnGQjniBFTKf6djFpa4pEkT160kZKz/mqkRC7HvOfiNg49pZGbld5xX4pro7
qH55LDnHXJcqtvZJ5RY8LySsbM7cqpN/7gxasciQdB80Q23bWsRyEQWLK9DX1bEm
l4Ge1gOd+Jp/fAaxmx/zzXNHZZS/e7nGgj1JfUObFW3mfo4JryYRucIucItqzyDh
ErAnn/H+xRlmpTvSTF09ZHXvJg==
-----END CERTIFICATE-----