Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.mft
File:                     24D8BCA9BF876E38F028369A0BE446ED24077B61.mft (raw, json)
Hash identifier:          VU2Mf+rF6LCc4fPoZ2fM6knV+WUM4aBNDG1EEHp4GHU=
Subject key identifier:   88:41:59:CA:5A:1C:2B:D7:FB:A6:DE:52:97:4C:BE:D1:E4:BF:51:F5
Authority key identifier: 24:D8:BC:A9:BF:87:6E:38:F0:28:36:9A:0B:E4:46:ED:24:07:7B:61
Certificate issuer:       /CN=24D8BCA9BF876E38F028369A0BE446ED24077B61
Certificate serial:       2BE11B4B7C19B26820CD36FBF0F40204646E0BB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.mft
Manifest number:          0243
Signing time:             Sun 14 Apr 2024 22:35:50 +0000
Manifest this update:     Sun 14 Apr 2024 22:30:50 +0000
Manifest next update:     Tue 16 Apr 2024 00:02:50 +0000
Files and hashes:         1: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: tojulQs+ZNyIZ9rdVD/70F8O905TzgMKZS88rKH0pTE=)
                          2: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: CUoW4f5cLyWFc8rP9P6AlGlw9kjL1MfBJUbfglTVE9k=)
                          3: 24D8BCA9BF876E38F028369A0BE446ED24077B61.crl (hash: hsJoG9i4cTpMNf84UdPYUsH9g+JAVjm3DZnmNXaUSvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e1:1b:4b:7c:19:b2:68:20:cd:36:fb:f0:f4:02:04:64:6e:0b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D8BCA9BF876E38F028369A0BE446ED24077B61
        Validity
            Not Before: Apr 14 22:30:50 2024 GMT
            Not After : Apr 16 00:02:50 2024 GMT
        Subject: CN=884159CA5A1C2BD7FBA6DE52974CBED1E4BF51F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:8f:63:24:fe:53:2f:8a:86:00:0e:85:46:
                    a7:b0:a2:86:95:c6:ee:e0:48:e8:63:10:f4:54:d0:
                    fc:42:bb:b7:98:21:f3:32:a0:31:3f:ce:30:36:5e:
                    19:dd:91:59:9c:ff:e2:ac:fb:6d:50:2b:1d:6a:68:
                    66:be:91:97:cd:26:f2:f8:3b:db:01:00:6a:47:27:
                    b3:b9:e0:36:06:94:37:56:46:41:4f:33:57:a2:fa:
                    7d:0d:c8:4a:cf:dc:30:be:5b:15:4c:95:b8:da:3b:
                    dc:50:bd:4c:bd:b6:a3:d1:93:45:7c:b3:40:e9:68:
                    19:f1:06:69:a5:ef:66:c5:6a:47:04:fe:73:1c:13:
                    52:ab:cc:f7:8c:62:52:c8:c8:c7:07:56:66:bc:d6:
                    4e:38:a3:4b:47:da:f7:99:77:dd:74:c0:7d:65:b8:
                    6a:41:dd:0c:31:04:e2:a8:ee:63:05:d0:75:0a:49:
                    e9:95:41:6a:63:2a:89:50:7f:76:2d:7c:05:81:e4:
                    49:30:1d:d7:08:c4:6c:dc:29:d0:d7:20:69:5a:35:
                    e6:69:36:31:12:fc:9b:24:e4:b8:2a:71:1c:d9:b6:
                    3f:df:5e:73:ea:a6:63:7b:3f:60:86:f4:e1:b6:04:
                    2f:9d:12:eb:ac:d5:06:85:0a:50:7e:39:de:a0:e2:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:41:59:CA:5A:1C:2B:D7:FB:A6:DE:52:97:4C:BE:D1:E4:BF:51:F5
            X509v3 Authority Key Identifier:
                keyid:24:D8:BC:A9:BF:87:6E:38:F0:28:36:9A:0B:E4:46:ED:24:07:7B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:40:35:7f:ed:86:b8:fa:30:4b:f0:fa:93:ee:a5:2c:42:cb:
         ac:8b:4a:74:44:c3:18:18:59:77:93:fb:80:67:9f:d8:8a:c3:
         a1:19:c1:ee:f7:3c:35:28:ad:4d:50:8b:05:af:6e:8d:0f:86:
         87:01:de:7c:9b:9a:06:bd:b8:98:0c:7f:b1:73:b5:cb:40:03:
         e7:b1:cb:94:9f:59:7a:18:9a:20:82:81:f7:f4:b9:fa:05:76:
         b6:66:0a:7a:0e:fd:da:f0:e0:aa:88:eb:19:4b:b0:c4:bb:3d:
         68:c0:e3:bd:99:3a:6d:96:eb:c9:fe:80:3c:fe:fa:01:2d:40:
         d5:21:18:3a:44:c1:fa:9c:ec:94:ba:da:e1:89:c8:ca:c1:67:
         4e:47:56:b0:c5:ea:83:fd:5f:f1:78:2b:13:e7:c8:97:36:c1:
         61:d6:bc:6f:b1:1b:11:f7:b8:9d:e5:ab:b0:3b:15:59:05:f8:
         18:e7:a7:53:86:7e:13:99:8b:36:3d:25:c3:5e:2b:1c:e9:92:
         eb:5c:f3:61:c6:a0:94:52:19:62:82:a0:9a:2b:11:50:5e:87:
         fd:8c:fc:e5:91:cb:ea:21:8e:8f:aa:68:ef:bf:e1:18:9e:3d:
         b9:75:6b:1b:85:46:7e:ad:6a:ab:41:ad:e4:67:73:cd:fb:a5:
         35:16:2c:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK+EbS3wZsmggzTb78PQCBGRuC7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjREOEJDQTlCRjg3NkUzOEYwMjgzNjlBMEJFNDQ2RUQy
NDA3N0I2MTAeFw0yNDA0MTQyMjMwNTBaFw0yNDA0MTYwMDAyNTBaMDMxMTAvBgNV
BAMTKDg4NDE1OUNBNUExQzJCRDdGQkE2REU1Mjk3NENCRUQxRTRCRjUxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55Y9jJP5TL4qGAA6FRqewooaV
xu7gSOhjEPRU0PxCu7eYIfMyoDE/zjA2XhndkVmc/+Ks+21QKx1qaGa+kZfNJvL4
O9sBAGpHJ7O54DYGlDdWRkFPM1ei+n0NyErP3DC+WxVMlbjaO9xQvUy9tqPRk0V8
s0DpaBnxBmml72bFakcE/nMcE1KrzPeMYlLIyMcHVma81k44o0tH2veZd910wH1l
uGpB3QwxBOKo7mMF0HUKSemVQWpjKolQf3YtfAWB5EkwHdcIxGzcKdDXIGlaNeZp
NjES/Jsk5LgqcRzZtj/fXnPqpmN7P2CG9OG2BC+dEuus1QaFClB+Od6g4uIfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiEFZylocK9f7pt5Sl0y+0eS/UfUwHwYDVR0j
BBgwFoAUJNi8qb+HbjjwKDaaC+RG7SQHe2EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC8yNEQ4QkNBOUJGODc2RTM4RjAyODM2OUEwQkU0NDZFRDI0MDc3QjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0RDhCQ0E5QkY4NzZFMzhG
MDI4MzY5QTBCRTQ0NkVEMjQwNzdCNjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdGdzMvMC8y
NEQ4QkNBOUJGODc2RTM4RjAyODM2OUEwQkU0NDZFRDI0MDc3QjYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhkA1f+2GuPowS/D6k+6lLELLrItKdETDGBhZd5P7gGef2IrDoRnB7vc8NSit
TVCLBa9ujQ+GhwHefJuaBr24mAx/sXO1y0AD57HLlJ9ZehiaIIKB9/S5+gV2tmYK
eg792vDgqojrGUuwxLs9aMDjvZk6bZbryf6APP76AS1A1SEYOkTB+pzslLra4YnI
ysFnTkdWsMXqg/1f8XgrE+fIlzbBYda8b7EbEfe4neWrsDsVWQX4GOenU4Z+E5mL
Nj0lw14rHOmS61zzYcaglFIZYoKgmisRUF6H/Yz85ZHL6iGOj6po77/hGJ49uXVr
G4VGfq1qq0Gt5GdzzfulNRYsdw==
-----END CERTIFICATE-----