Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.mft
File:                     2EBCA12266480FA2635C1DB38D44B5240CFA8934.mft (raw, json)
Hash identifier:          nXsMj+vnoP+sWV5KqV8OiOeCmVYjPDzEuzJiPQxWTic=
Subject key identifier:   3F:AC:F9:11:63:98:B2:10:64:5E:33:BD:5E:11:9B:8B:B5:8C:C7:FC
Authority key identifier: 2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34
Certificate issuer:       /CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
Certificate serial:       47D234305BCD527CBA65360B7A8E77E2234D91F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.mft
Manifest number:          08
Signing time:             Wed 20 Dec 2023 12:54:34 +0000
Manifest this update:     Wed 20 Dec 2023 12:49:34 +0000
Manifest next update:     Thu 21 Dec 2023 15:34:34 +0000
Files and hashes:         1: 323830343a346436633a3a2f33322d3438203d3e20323638313935.roa (hash: rjehOXjnOUNIbbz0h8hwOwiTX2oMNPmbcCzXZxcVVOg=)
                          2: 34352e3233352e3130302e302f32322d3234203d3e20323638313935.roa (hash: /dNmkQfACy+TLZi5S07qNlHCgAD4cbmHGM2W5HcXvnk=)
                          3: 2EBCA12266480FA2635C1DB38D44B5240CFA8934.crl (hash: ixVH7jUR3+qN5mb+TbIzdJazCiLimgexrGF6eRhHQvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d2:34:30:5b:cd:52:7c:ba:65:36:0b:7a:8e:77:e2:23:4d:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBCA12266480FA2635C1DB38D44B5240CFA8934
        Validity
            Not Before: Dec 20 12:49:34 2023 GMT
            Not After : Dec 21 15:34:34 2023 GMT
        Subject: CN=3FACF9116398B210645E33BD5E119B8BB58CC7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:9d:1f:98:ac:53:70:24:03:2d:ca:a4:f7:
                    68:8f:49:d5:85:50:14:e2:0b:40:b7:f2:e2:56:73:
                    04:81:40:a2:78:6b:12:96:dd:32:55:d8:94:56:a9:
                    b9:7f:4d:0b:97:5f:dc:82:db:25:03:a9:4d:7f:b0:
                    0e:6c:2c:a1:38:a5:7a:c5:d0:34:49:55:27:26:0f:
                    36:6d:a9:a4:c4:88:35:f8:08:76:f2:f5:eb:47:ec:
                    4a:b5:e1:1b:34:7e:0a:05:cb:71:a8:9f:8e:0a:be:
                    94:ed:53:35:69:6c:44:8c:a6:30:02:1b:47:17:ff:
                    db:6b:07:1d:03:e3:31:09:1b:0a:aa:0b:1d:f2:00:
                    00:1c:38:4a:81:c6:15:9d:79:4d:cf:59:51:a6:5b:
                    d0:f2:83:45:41:b8:fc:8b:56:3a:81:67:3a:a0:7f:
                    5a:03:1f:95:00:d6:61:7c:a5:8c:0f:9c:2a:eb:18:
                    5f:6d:94:93:6a:eb:6f:9f:4c:9e:7f:78:00:63:c1:
                    96:6a:fa:49:c3:cd:f9:48:5a:f4:fa:6d:be:ec:f4:
                    1c:ee:e9:19:b1:9f:34:55:df:cd:ca:a3:73:56:92:
                    d3:73:f9:59:28:e2:db:f4:4d:29:cc:0a:f2:5c:60:
                    f3:7d:66:c4:eb:42:e5:05:21:3c:cb:87:12:09:29:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AC:F9:11:63:98:B2:10:64:5E:33:BD:5E:11:9B:8B:B5:8C:C7:FC
            X509v3 Authority Key Identifier:
                keyid:2E:BC:A1:22:66:48:0F:A2:63:5C:1D:B3:8D:44:B5:24:0C:FA:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/2EBCA12266480FA2635C1DB38D44B5240CFA8934.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:f2:09:f9:a3:17:c0:db:ee:df:d3:52:66:c9:55:96:c0:
         7f:ba:ed:97:5b:fb:11:68:06:12:9a:c8:c6:6a:e4:f3:9a:81:
         a1:69:f3:6e:10:00:10:78:ed:3c:1b:04:71:85:fd:32:18:8d:
         7c:52:5d:24:c1:42:74:c7:ef:79:88:9f:f2:82:f7:6b:b3:33:
         ad:c1:78:b3:2c:72:d5:06:c8:06:cf:92:b0:5d:80:1e:b1:28:
         8c:26:35:a9:05:58:84:3b:76:40:bf:f8:5a:71:be:dc:08:02:
         1e:32:8c:8a:ec:6b:51:b3:c6:9b:d7:34:45:68:ff:39:b7:ca:
         7d:64:56:ab:89:1d:97:d0:50:f0:8e:2d:31:a8:d8:02:88:31:
         6d:54:e1:89:6c:b5:1f:e3:d6:a7:0b:e2:96:ab:b9:19:9e:c3:
         5f:ed:d3:0a:43:e3:12:41:46:3a:83:e4:d1:7a:34:c5:b9:cb:
         4f:1d:f2:58:d3:a7:ff:59:97:61:5c:cc:4e:5a:47:bd:d0:37:
         fe:0f:a6:f2:48:c8:58:4b:fc:3d:c5:a7:ae:c6:17:c8:8d:56:
         ce:9a:15:22:94:d8:17:f9:c3:ec:42:cf:0a:bf:9f:6f:61:aa:
         a9:f2:fd:f5:38:93:1c:65:6a:f7:66:1d:c6:56:e1:8a:48:c2:
         a1:79:2a:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR9I0MFvNUny6ZTYLeo534iNNkfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVCQ0ExMjI2NjQ4MEZBMjYzNUMxREIzOEQ0NEI1MjQw
Q0ZBODkzNDAeFw0yMzEyMjAxMjQ5MzRaFw0yMzEyMjExNTM0MzRaMDMxMTAvBgNV
BAMTKDNGQUNGOTExNjM5OEIyMTA2NDVFMzNCRDVFMTE5QjhCQjU4Q0M3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdT50fmKxTcCQDLcqk92iPSdWF
UBTiC0C38uJWcwSBQKJ4axKW3TJV2JRWqbl/TQuXX9yC2yUDqU1/sA5sLKE4pXrF
0DRJVScmDzZtqaTEiDX4CHby9etH7Eq14Rs0fgoFy3Gon44KvpTtUzVpbESMpjAC
G0cX/9trBx0D4zEJGwqqCx3yAAAcOEqBxhWdeU3PWVGmW9Dyg0VBuPyLVjqBZzqg
f1oDH5UA1mF8pYwPnCrrGF9tlJNq62+fTJ5/eABjwZZq+knDzflIWvT6bb7s9Bzu
6RmxnzRV383Ko3NWktNz+Vko4tv0TSnMCvJcYPN9ZsTrQuUFITzLhxIJKXLVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUP6z5EWOYshBkXjO9XhGbi7WMx/wwHwYDVR0j
BBgwFoAULryhImZID6JjXB2zjUS1JAz6iTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFLRlh4OGp5Q3ZyRHc3c1A1a3duZHU3UUFkTmlIUFdQWlF2ejhpNUhU
QU0vMC8yRUJDQTEyMjY2NDgwRkEyNjM1QzFEQjM4RDQ0QjUyNDBDRkE4OTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJFQkNBMTIyNjY0ODBGQTI2
MzVDMURCMzhENDRCNTI0MENGQTg5MzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWFLRlh4OGp5Q3ZyRHc3c1A1a3duZHU3UUFkTmlIUFdQWlF2ejhpNUhUQU0vMC8y
RUJDQTEyMjY2NDgwRkEyNjM1QzFEQjM4RDQ0QjUyNDBDRkE4OTM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAREHyCfmjF8Db7t/TUmbJVZbAf7rtl1v7EWgGEprIxmrk85qBoWnzbhAAEHjt
PBsEcYX9MhiNfFJdJMFCdMfveYif8oL3a7MzrcF4syxy1QbIBs+SsF2AHrEojCY1
qQVYhDt2QL/4WnG+3AgCHjKMiuxrUbPGm9c0RWj/ObfKfWRWq4kdl9BQ8I4tMajY
AogxbVThiWy1H+PWpwvilqu5GZ7DX+3TCkPjEkFGOoPk0Xo0xbnLTx3yWNOn/1mX
YVzMTlpHvdA3/g+m8kjIWEv8PcWnrsYXyI1WzpoVIpTYF/nD7ELPCr+fb2GqqfL9
9TiTHGVq92YdxlbhikjCoXkq5A==
-----END CERTIFICATE-----