Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft
File:                     A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft (raw, json)
Hash identifier:          FSy9S0tfvS0Xt1ZKKZ82mX2//1laGijCJAFOR1gMa0g=
Subject key identifier:   F4:8B:DA:40:23:25:47:BA:72:DA:EA:72:8B:09:9D:E9:1F:10:7B:8B
Authority key identifier: A3:EA:C5:7E:A1:E8:25:5E:82:D1:64:94:F3:A8:DF:A7:C1:00:45:AA
Certificate issuer:       /CN=A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA
Certificate serial:       48D9BF7DB06F32C8BCA051466A7F8D15D31E8823
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft
Manifest number:          0A
Signing time:             Mon 16 Oct 2023 19:30:11 +0000
Manifest this update:     Mon 16 Oct 2023 19:25:11 +0000
Manifest next update:     Tue 17 Oct 2023 21:29:11 +0000
Files and hashes:         1: 34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa (hash: obWEkVQhmi+GaeYCugh6nMCi7Wt1ccfc94nYuk/oiIY=)
                          2: A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.crl (hash: Q6l19PL6xvxBp1iPXTEnPiQHbkUfcju/V3Fn3C71Rhg=)
                          3: 323830343a353637343a3a2f33322d313238203d3e20323637393939.roa (hash: EgWUemmSC/FPlRtMGRjyafLTcYS03TO4UTuwmJdzSkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d9:bf:7d:b0:6f:32:c8:bc:a0:51:46:6a:7f:8d:15:d3:1e:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA
        Validity
            Not Before: Oct 16 19:25:11 2023 GMT
            Not After : Oct 17 21:29:11 2023 GMT
        Subject: CN=F48BDA40232547BA72DAEA728B099DE91F107B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:58:88:dc:ec:1c:10:97:24:26:8c:99:3a:
                    4a:90:50:c0:99:48:d6:04:aa:36:6b:c5:dd:d3:fc:
                    bd:81:6a:ca:47:ac:93:89:ba:21:97:9f:03:eb:6d:
                    37:c3:4b:10:56:5e:b0:9c:8d:a2:45:28:73:97:9d:
                    b1:be:3f:70:2f:e9:c0:56:d6:71:b3:c7:88:8f:6d:
                    45:a7:ed:7c:df:63:b7:98:5a:d5:aa:7d:38:a2:b4:
                    18:3e:a7:fd:73:30:f4:13:80:a5:66:ec:ec:b8:28:
                    be:71:1c:64:b6:45:a6:3f:34:c1:de:41:0d:5c:6e:
                    70:67:c8:61:9d:e9:d4:cf:bc:15:e3:27:aa:c6:a9:
                    84:cc:6c:31:b7:46:44:20:b1:ad:a8:a6:b6:28:e3:
                    cf:59:74:d7:b1:d4:91:c0:f6:c5:16:50:66:be:21:
                    64:30:ed:26:ad:f1:55:af:e3:d7:1e:09:00:96:c8:
                    c8:72:b9:76:21:76:c6:c5:c4:f8:0a:d0:38:8b:bc:
                    38:3a:a2:3e:8a:26:ef:72:8e:36:8a:57:0b:b2:bf:
                    8b:bf:0f:60:6c:e8:21:de:63:39:cc:50:e3:64:03:
                    38:2c:4d:60:8a:7d:15:c9:c9:8a:da:0f:35:9d:f2:
                    73:cf:32:9a:12:7b:55:14:7e:c3:6a:35:14:61:e3:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:DA:40:23:25:47:BA:72:DA:EA:72:8B:09:9D:E9:1F:10:7B:8B
            X509v3 Authority Key Identifier:
                keyid:A3:EA:C5:7E:A1:E8:25:5E:82:D1:64:94:F3:A8:DF:A7:C1:00:45:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:53:72:37:09:5d:7d:4f:e5:17:4a:7a:39:10:68:24:d8:
         c1:89:b5:75:92:d9:ed:41:a1:2a:0e:76:e3:af:d7:3a:aa:7f:
         e6:a2:77:2e:50:9f:4f:73:ca:d7:86:8b:23:48:1d:86:c9:55:
         21:ad:68:17:fe:a5:d8:a8:62:13:e3:f7:ab:8e:f6:af:65:55:
         5c:a3:c8:e8:a3:f1:c9:cf:4a:9c:82:3f:ca:bb:b1:be:c9:53:
         25:96:9f:49:9d:92:a5:47:38:82:4d:18:2e:20:c3:30:44:18:
         fc:2e:84:95:b0:62:c0:f8:9b:85:81:f5:63:3d:f2:4c:e6:30:
         30:85:0d:22:67:b3:66:be:26:e8:ec:7b:60:eb:dc:94:18:21:
         6b:76:1e:84:d5:4f:dd:74:06:a1:05:f8:3d:1a:d2:90:e0:0b:
         e8:4e:b0:f4:e2:5b:e9:b1:f9:7c:1f:6f:10:2a:88:f1:f5:7c:
         00:65:ad:ac:67:65:a0:af:97:3c:e0:d4:12:80:e7:84:66:a5:
         68:22:72:0e:c0:0b:e3:73:80:ac:f2:7c:19:5c:7e:09:5d:56:
         46:ee:d5:46:58:bb:ca:90:7e:b8:42:7d:4f:f0:ad:ec:35:1b:
         e9:5f:c1:b8:93:a0:39:82:e4:5d:9c:3d:71:09:85:09:04:06:
         2a:1a:f0:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSNm/fbBvMsi8oFFGan+NFdMeiCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNFQUM1N0VBMUU4MjU1RTgyRDE2NDk0RjNBOERGQTdD
MTAwNDVBQTAeFw0yMzEwMTYxOTI1MTFaFw0yMzEwMTcyMTI5MTFaMDMxMTAvBgNV
BAMTKEY0OEJEQTQwMjMyNTQ3QkE3MkRBRUE3MjhCMDk5REU5MUYxMDdCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg1iI3OwcEJckJoyZOkqQUMCZ
SNYEqjZrxd3T/L2BaspHrJOJuiGXnwPrbTfDSxBWXrCcjaJFKHOXnbG+P3Av6cBW
1nGzx4iPbUWn7XzfY7eYWtWqfTiitBg+p/1zMPQTgKVm7Oy4KL5xHGS2RaY/NMHe
QQ1cbnBnyGGd6dTPvBXjJ6rGqYTMbDG3RkQgsa2oprYo489ZdNex1JHA9sUWUGa+
IWQw7Sat8VWv49ceCQCWyMhyuXYhdsbFxPgK0DiLvDg6oj6KJu9yjjaKVwuyv4u/
D2Bs6CHeYznMUONkAzgsTWCKfRXJyYraDzWd8nPPMpoSe1UUfsNqNRRh4/49AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9IvaQCMlR7py2upyiwmd6R8Qe4swHwYDVR0j
BBgwFoAUo+rFfqHoJV6C0WSU86jfp8EARaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy
S2QvMC9BM0VBQzU3RUExRTgyNTVFODJEMTY0OTRGM0E4REZBN0MxMDA0NUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzRUFDNTdFQTFFODI1NUU4
MkQxNjQ5NEYzQThERkE3QzEwMDQ1QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC9B
M0VBQzU3RUExRTgyNTVFODJEMTY0OTRGM0E4REZBN0MxMDA0NUFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjltTcjcJXX1P5RdKejkQaCTYwYm1dZLZ7UGhKg5246/XOqp/5qJ3LlCfT3PK
14aLI0gdhslVIa1oF/6l2KhiE+P3q472r2VVXKPI6KPxyc9KnII/yruxvslTJZaf
SZ2SpUc4gk0YLiDDMEQY/C6ElbBiwPibhYH1Yz3yTOYwMIUNImezZr4m6Ox7YOvc
lBgha3YehNVP3XQGoQX4PRrSkOAL6E6w9OJb6bH5fB9vECqI8fV8AGWtrGdloK+X
PODUEoDnhGalaCJyDsAL43OArPJ8GVx+CV1WRu7VRli7ypB+uEJ9T/Ct7DUb6V/B
uJOgOYLkXZw9cQmFCQQGKhrwOQ==
-----END CERTIFICATE-----