Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.mft
File:                     FF823F80E1880256E7090AF76567F22D905D1C47.mft (raw, json)
Hash identifier:          WsP0zAdlzTpJjWsYrIPP54wT4kvl2y1nHl//ttGEpHQ=
Subject key identifier:   B4:9E:4A:ED:16:A9:9D:57:A1:21:23:AD:B3:C7:43:A3:3E:9D:8F:67
Authority key identifier: FF:82:3F:80:E1:88:02:56:E7:09:0A:F7:65:67:F2:2D:90:5D:1C:47
Certificate issuer:       /CN=FF823F80E1880256E7090AF76567F22D905D1C47
Certificate serial:       296BA4619AAA80020FAF0B2642D860B431D068BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF823F80E1880256E7090AF76567F22D905D1C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.mft
Manifest number:          2A
Signing time:             Tue 26 Sep 2023 10:43:07 +0000
Manifest this update:     Tue 26 Sep 2023 10:38:07 +0000
Manifest next update:     Wed 27 Sep 2023 12:25:07 +0000
Files and hashes:         1: 3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa (hash: iR+eO13esQjrtOqzE1sKji/Jn5udiunXpE+JiJKeyeY=)
                          2: FF823F80E1880256E7090AF76567F22D905D1C47.crl (hash: A7xZgB7KdeETQ5I4niEFQ+fM3+NimN7NxmULc/wUO2k=)
                          3: 323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (hash: IZGNECVvSfVgqrwq6Zi5IzpViosh1nyfpUni8b++ni8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6b:a4:61:9a:aa:80:02:0f:af:0b:26:42:d8:60:b4:31:d0:68:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF823F80E1880256E7090AF76567F22D905D1C47
        Validity
            Not Before: Sep 26 10:38:07 2023 GMT
            Not After : Sep 27 12:25:07 2023 GMT
        Subject: CN=B49E4AED16A99D57A12123ADB3C743A33E9D8F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:9a:02:91:1e:33:87:aa:d6:7c:67:22:a5:
                    e6:f5:18:a9:9e:41:61:82:4e:1a:37:c9:de:40:7e:
                    c8:ea:96:ef:f0:60:29:2b:e1:b6:24:b7:ea:41:6e:
                    00:01:d0:67:ae:27:02:25:4a:98:be:c9:09:f6:22:
                    50:57:bf:4f:67:0e:b0:21:51:64:4f:e5:16:b7:c9:
                    30:3e:2e:dc:e2:b5:c8:1f:86:5e:83:e7:9d:4c:b0:
                    cc:e3:cc:c1:3e:c7:52:f4:3d:3a:bd:22:3b:3f:a7:
                    05:d8:6c:87:b3:8c:81:0d:5b:99:dc:02:02:f2:9c:
                    53:28:1c:a5:37:9c:13:e4:69:11:00:7d:47:a4:27:
                    a4:d6:f0:6c:ef:4b:1a:60:86:9e:a7:1b:2e:16:25:
                    bf:63:e1:29:da:0b:70:c8:e5:6b:ce:8e:a5:4b:d3:
                    f0:b5:ee:27:53:9c:b4:89:8f:f3:ab:16:01:68:1d:
                    d3:f5:fa:b9:fd:eb:03:0d:df:1b:87:9a:7c:45:a9:
                    7f:4d:b3:b9:cf:01:4b:9f:33:04:20:3c:b4:d3:4e:
                    8b:bb:a3:54:ef:7b:25:48:18:c9:64:7b:d6:21:aa:
                    c7:4b:b8:5f:2c:47:b9:68:69:53:81:e2:c7:46:6c:
                    ec:03:80:19:a1:73:2d:ac:b2:ee:ca:73:21:ef:d8:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:4A:ED:16:A9:9D:57:A1:21:23:AD:B3:C7:43:A3:3E:9D:8F:67
            X509v3 Authority Key Identifier:
                keyid:FF:82:3F:80:E1:88:02:56:E7:09:0A:F7:65:67:F2:2D:90:5D:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF823F80E1880256E7090AF76567F22D905D1C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/FF823F80E1880256E7090AF76567F22D905D1C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:63:be:ad:38:c1:c7:4c:c4:e0:57:04:e7:90:80:8f:40:
         29:9f:ff:53:4e:8f:93:5a:cb:0a:a0:0c:64:38:8e:08:a6:27:
         ec:6d:cd:f8:62:95:de:d2:64:e5:d2:2a:9c:09:05:3e:c9:c2:
         c2:2f:dc:9b:7d:a1:e6:8f:a0:14:3f:1c:30:f1:6a:f9:0a:e9:
         89:be:72:7d:51:0d:ad:f7:b2:90:97:08:cd:56:9a:b5:2b:1a:
         aa:d8:c9:a8:5b:ae:98:4c:d8:c1:7b:3f:07:da:fa:3a:01:7a:
         be:2f:79:61:d0:4a:4e:4c:3c:e9:3f:70:48:19:59:10:d9:ac:
         a7:bc:6b:fa:2b:8b:18:d1:95:6c:17:c4:13:7f:e3:21:ef:cc:
         16:e2:aa:c5:80:5f:3c:c1:d3:28:b8:25:6e:2a:ec:22:21:f7:
         13:80:1e:f7:14:66:e3:82:b6:c8:a6:88:04:15:83:b9:4c:2c:
         51:6d:1b:1b:1b:6e:fc:2d:81:8a:d7:b9:74:5d:0d:27:59:da:
         bb:1d:6b:59:00:9a:8d:69:35:b1:5f:b7:6a:d3:00:df:be:40:
         46:6e:1f:2a:d6:5c:a3:ea:d5:1e:b2:cc:d4:b3:21:d9:1c:8a:
         3b:6d:81:32:28:df:65:07:de:cc:8a:6c:a3:e1:d2:27:6f:b1:
         62:91:ef:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKWukYZqqgAIPrwsmQthgtDHQaL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4MjNGODBFMTg4MDI1NkU3MDkwQUY3NjU2N0YyMkQ5
MDVEMUM0NzAeFw0yMzA5MjYxMDM4MDdaFw0yMzA5MjcxMjI1MDdaMDMxMTAvBgNV
BAMTKEI0OUU0QUVEMTZBOTlENTdBMTIxMjNBREIzQzc0M0EzM0U5RDhGNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCZoCkR4zh6rWfGcipeb1GKme
QWGCTho3yd5Afsjqlu/wYCkr4bYkt+pBbgAB0GeuJwIlSpi+yQn2IlBXv09nDrAh
UWRP5Ra3yTA+Ltzitcgfhl6D551MsMzjzME+x1L0PTq9Ijs/pwXYbIezjIENW5nc
AgLynFMoHKU3nBPkaREAfUekJ6TW8GzvSxpghp6nGy4WJb9j4SnaC3DI5WvOjqVL
0/C17idTnLSJj/OrFgFoHdP1+rn96wMN3xuHmnxFqX9Ns7nPAUufMwQgPLTTTou7
o1TveyVIGMlke9YhqsdLuF8sR7loaVOB4sdGbOwDgBmhcy2ssu7KcyHv2CFdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtJ5K7RapnVehISOts8dDoz6dj2cwHwYDVR0j
BBgwFoAU/4I/gOGIAlbnCQr3ZWfyLZBdHEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWM4cDVuN3BLVjNVUmhidEE4YncxQmtvdkNHUmt2dEpReXRXb0JRZjFR
VGYvMC9GRjgyM0Y4MEUxODgwMjU2RTcwOTBBRjc2NTY3RjIyRDkwNUQxQzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGODIzRjgwRTE4ODAyNTZF
NzA5MEFGNzY1NjdGMjJEOTA1RDFDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWM4cDVuN3BLVjNVUmhidEE4YncxQmtvdkNHUmt2dEpReXRXb0JRZjFRVGYvMC9G
RjgyM0Y4MEUxODgwMjU2RTcwOTBBRjc2NTY3RjIyRDkwNUQxQzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKM9jvq04wcdMxOBXBOeQgI9AKZ//U06Pk1rLCqAMZDiOCKYn7G3N+GKV3tJk
5dIqnAkFPsnCwi/cm32h5o+gFD8cMPFq+Qrpib5yfVENrfeykJcIzVaatSsaqtjJ
qFuumEzYwXs/B9r6OgF6vi95YdBKTkw86T9wSBlZENmsp7xr+iuLGNGVbBfEE3/j
Ie/MFuKqxYBfPMHTKLglbirsIiH3E4Ae9xRm44K2yKaIBBWDuUwsUW0bGxtu/C2B
ite5dF0NJ1naux1rWQCajWk1sV+3atMA375ARm4fKtZco+rVHrLM1LMh2RyKO22B
MijfZQfezIpso+HSJ2+xYpHvvQ==
-----END CERTIFICATE-----