Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.mft
File:                     768804CE7849439F80A6B8BA27FDF31913FB5B00.mft (raw, json)
Hash identifier:          yJleSEsSnyll/0xU6M1N2l/o+To13dI10Qe7iJgAhXI=
Subject key identifier:   E6:70:44:AF:3E:3F:35:6A:2E:F9:23:FC:D9:7E:B5:D3:0D:F3:A8:17
Authority key identifier: 76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00
Certificate issuer:       /CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
Certificate serial:       537F36DFE1CEFCBB54BC96260344640709DBB27A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.mft
Manifest number:          5A
Signing time:             Wed 15 Nov 2023 12:55:43 +0000
Manifest this update:     Wed 15 Nov 2023 12:50:43 +0000
Manifest next update:     Thu 16 Nov 2023 13:59:43 +0000
Files and hashes:         1: 3133382e3138352e3135322e302f32322d3332203d3e20323633383435.roa (hash: 87YhrgVzLzoHtV46HCu7AnuFqO3H1FvbeEF17dwkJDY=)
                          2: 768804CE7849439F80A6B8BA27FDF31913FB5B00.crl (hash: k5logpctYlRS+EMSpghdZ8Ymay6KQA0r/0HBk7v93/4=)
                          3: 323830343a323661303a3a2f33322d313238203d3e20323633383435.roa (hash: VlNgCSfDAiQWTzgQ0RAYM9VYIfVYQLz6RBJqfyKna2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:36:df:e1:ce:fc:bb:54:bc:96:26:03:44:64:07:09:db:b2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
        Validity
            Not Before: Nov 15 12:50:43 2023 GMT
            Not After : Nov 16 13:59:43 2023 GMT
        Subject: CN=E67044AF3E3F356A2EF923FCD97EB5D30DF3A817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:50:a3:b1:2c:99:82:96:34:d2:26:34:ce:
                    82:2b:c0:08:7a:ed:80:4a:d1:7e:8a:f7:a2:7b:0c:
                    49:64:e0:44:bf:f4:81:06:b4:71:53:86:d8:ab:29:
                    4b:98:11:81:05:1f:15:e0:c9:b0:59:d3:57:52:81:
                    56:0f:68:d2:fb:c1:f1:96:2f:e8:1c:a1:19:8e:ec:
                    69:be:14:85:8f:8f:55:08:d5:a1:97:2f:91:1b:98:
                    63:02:80:a2:7b:0c:3f:2f:89:33:a5:2c:28:5c:49:
                    98:5a:c6:39:b6:ed:15:a8:f6:bc:f6:d0:47:0c:b9:
                    9a:15:86:20:56:ce:13:03:1a:d5:f2:07:5f:aa:8a:
                    83:7b:b7:62:03:96:fe:12:ab:75:50:93:7c:ce:7b:
                    b0:c0:d4:0b:ce:fb:b3:40:40:6b:ae:33:85:0f:50:
                    ef:c9:1f:a0:c9:39:93:07:f9:b7:3e:93:9b:04:1d:
                    1f:73:7a:49:21:ab:39:5c:d1:59:f7:54:d8:7b:5e:
                    42:4a:bd:b3:71:3f:2e:92:12:e3:40:8e:bb:dc:0c:
                    dd:d4:5e:35:65:1d:05:9f:d5:66:60:51:c9:49:45:
                    c2:70:a5:21:56:af:1b:ab:e3:04:d4:b4:8d:e7:24:
                    38:0d:de:3c:ca:04:9e:7d:8d:b8:67:7d:f9:79:17:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:70:44:AF:3E:3F:35:6A:2E:F9:23:FC:D9:7E:B5:D3:0D:F3:A8:17
            X509v3 Authority Key Identifier:
                keyid:76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:46:39:e5:8a:ea:b4:0a:35:8d:8c:7b:03:fa:53:be:82:00:
         2f:5e:2a:53:3c:62:03:5e:ea:8a:db:01:9c:f2:14:a9:16:a0:
         c6:90:2a:ef:a5:d7:60:fe:bd:b9:ff:f9:e6:80:48:ea:9e:0f:
         c5:ed:2d:64:f1:b1:17:03:a1:f1:99:92:09:b4:34:15:44:f9:
         3c:0e:9d:9c:ee:0f:64:40:11:26:5f:84:69:dd:62:0e:13:0e:
         e1:c8:31:6d:a1:75:d5:5a:2f:e2:86:64:c4:ad:02:1e:e6:83:
         16:6c:9d:f2:4c:41:b8:54:7d:8f:d0:0e:32:98:03:ed:56:a7:
         82:af:a2:0d:f1:df:28:51:f4:f5:dc:f1:75:92:39:06:80:23:
         2a:54:2f:c3:34:4d:7a:68:1b:da:5d:12:07:2f:ee:3b:58:44:
         91:fc:16:7a:0b:66:9e:58:ef:70:63:f4:b2:e5:cd:a1:d5:0b:
         c9:10:69:62:88:5b:d8:f6:3d:ac:a0:53:6b:2d:ed:10:ec:3b:
         25:7c:77:d1:94:97:02:f4:4c:6c:e0:0b:90:66:69:1a:e5:b6:
         46:59:01:79:ed:f3:9c:2a:43:e8:c9:1f:81:31:a5:16:1e:a8:
         1f:06:3b:bd:27:54:2a:62:9e:77:1a:50:87:16:f8:80:1d:f2:
         5f:4e:0f:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU3823+HO/LtUvJYmA0RkBwnbsnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY4ODA0Q0U3ODQ5NDM5RjgwQTZCOEJBMjdGREYzMTkx
M0ZCNUIwMDAeFw0yMzExMTUxMjUwNDNaFw0yMzExMTYxMzU5NDNaMDMxMTAvBgNV
BAMTKEU2NzA0NEFGM0UzRjM1NkEyRUY5MjNGQ0Q5N0VCNUQzMERGM0E4MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrl1CjsSyZgpY00iY0zoIrwAh6
7YBK0X6K96J7DElk4ES/9IEGtHFThtirKUuYEYEFHxXgybBZ01dSgVYPaNL7wfGW
L+gcoRmO7Gm+FIWPj1UI1aGXL5EbmGMCgKJ7DD8viTOlLChcSZhaxjm27RWo9rz2
0EcMuZoVhiBWzhMDGtXyB1+qioN7t2IDlv4Sq3VQk3zOe7DA1AvO+7NAQGuuM4UP
UO/JH6DJOZMH+bc+k5sEHR9zekkhqzlc0Vn3VNh7XkJKvbNxPy6SEuNAjrvcDN3U
XjVlHQWf1WZgUclJRcJwpSFWrxur4wTUtI3nJDgN3jzKBJ59jbhnffl5F1kTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5nBErz4/NWou+SP82X610w3zqBcwHwYDVR0j
BBgwFoAUdogEznhJQ5+Apri6J/3zGRP7WwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJmdEdndkM3V3NMVGdtUVhzQkN5cDFQd3J3N3lLYnFUUjlMVE15VXBL
UXMvMC83Njg4MDRDRTc4NDk0MzlGODBBNkI4QkEyN0ZERjMxOTEzRkI1QjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2ODgwNENFNzg0OTQzOUY4
MEE2QjhCQTI3RkRGMzE5MTNGQjVCMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXJmdEdndkM3V3NMVGdtUVhzQkN5cDFQd3J3N3lLYnFUUjlMVE15VXBLUXMvMC83
Njg4MDRDRTc4NDk0MzlGODBBNkI4QkEyN0ZERjMxOTEzRkI1QjAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaEY55YrqtAo1jYx7A/pTvoIAL14qUzxiA17qitsBnPIUqRagxpAq76XXYP69
uf/55oBI6p4Pxe0tZPGxFwOh8ZmSCbQ0FUT5PA6dnO4PZEARJl+Ead1iDhMO4cgx
baF11Vov4oZkxK0CHuaDFmyd8kxBuFR9j9AOMpgD7Vangq+iDfHfKFH09dzxdZI5
BoAjKlQvwzRNemgb2l0SBy/uO1hEkfwWegtmnljvcGP0suXNodULyRBpYohb2PY9
rKBTay3tEOw7JXx30ZSXAvRMbOALkGZpGuW2RlkBee3znCpD6MkfgTGlFh6oHwY7
vSdUKmKedxpQhxb4gB3yX04PbA==
-----END CERTIFICATE-----