Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft
File:                     FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft (raw, json)
Hash identifier:          yoZZhBlu0xlHwbppzjid0CYWa/XaQx0ZutK0ZolH6qw=
Subject key identifier:   28:C0:2A:97:10:FE:60:F2:BE:AE:5C:69:FE:A6:81:DE:D1:5A:5E:6D
Authority key identifier: FD:54:03:48:EF:29:25:AD:F9:1C:06:E3:91:E8:7C:E9:B8:16:AE:F1
Certificate issuer:       /CN=FD540348EF2925ADF91C06E391E87CE9B816AEF1
Certificate serial:       15D81C9DF533EFDD9D33F7F6F119BB57F073FA5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft
Manifest number:          0171
Signing time:             Mon 15 Apr 2024 07:53:02 +0000
Manifest this update:     Mon 15 Apr 2024 07:48:02 +0000
Manifest next update:     Tue 16 Apr 2024 11:44:02 +0000
Files and hashes:         1: 323830343a326164383a3a2f33322d313238203d3e20323635313232.roa (hash: 7JHv2684l+bnFnovNuWNI6vObMBPuTsK0GoD6SLuOO0=)
                          2: FD540348EF2925ADF91C06E391E87CE9B816AEF1.crl (hash: /89yz25eQW9WMwX8e6ouyzzb0h7v5Meh5ZjABvK4sMQ=)
                          3: 3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (hash: M+7WH7xy1JagTYkYaZeP8UZsfAkkUd3KY6kUqsDhOu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:1c:9d:f5:33:ef:dd:9d:33:f7:f6:f1:19:bb:57:f0:73:fa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD540348EF2925ADF91C06E391E87CE9B816AEF1
        Validity
            Not Before: Apr 15 07:48:02 2024 GMT
            Not After : Apr 16 11:44:02 2024 GMT
        Subject: CN=28C02A9710FE60F2BEAE5C69FEA681DED15A5E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:ec:14:88:2d:a8:e5:5e:12:c5:1e:c8:4f:
                    11:e6:fe:34:0f:18:66:8f:ee:08:d6:3f:4f:74:10:
                    bf:13:82:ad:65:ab:33:00:68:bc:08:0a:38:56:91:
                    9d:ce:0f:2a:3f:08:bc:26:da:40:1c:2b:0e:4a:21:
                    da:4b:03:eb:d2:62:0c:db:cd:f1:81:94:35:0a:44:
                    8d:05:3a:24:78:e1:fc:1a:40:f4:b0:69:9e:7d:ae:
                    27:94:2a:7f:80:b8:d8:a1:d9:bb:ec:9a:3f:72:df:
                    19:f7:d8:41:1c:ed:d2:c2:e3:b4:a6:e9:da:f0:93:
                    5d:84:f1:e2:e9:37:43:70:58:7a:da:1e:ec:c8:77:
                    35:76:bf:a2:c1:99:b0:93:e0:e4:a8:ac:b7:57:4f:
                    ad:4b:5e:d5:cb:dc:de:0d:0d:2f:4b:1e:34:52:de:
                    36:89:fb:17:73:43:98:e7:fb:93:76:2f:86:ae:b8:
                    14:cb:fb:dd:bb:f0:3f:c0:39:fa:6a:52:a4:2f:db:
                    d2:db:8f:8d:f1:af:83:fc:18:1c:7d:43:c8:9d:62:
                    c9:08:3a:13:78:f6:01:1f:72:3d:08:78:31:de:1e:
                    cb:7f:c7:5e:cd:d6:73:c2:00:ab:34:84:68:ab:ad:
                    7c:3d:d8:07:b5:a3:79:dc:d2:aa:20:2e:e7:b6:d8:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C0:2A:97:10:FE:60:F2:BE:AE:5C:69:FE:A6:81:DE:D1:5A:5E:6D
            X509v3 Authority Key Identifier:
                keyid:FD:54:03:48:EF:29:25:AD:F9:1C:06:E3:91:E8:7C:E9:B8:16:AE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/FD540348EF2925ADF91C06E391E87CE9B816AEF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b5:a1:19:3f:61:63:f3:a0:5e:8e:cc:7e:96:36:b6:a5:ef:
         8b:a7:94:7e:76:1d:8d:50:af:44:36:df:2e:ea:b0:81:28:6d:
         73:3f:7b:ae:ac:92:12:e4:80:1d:cd:2a:80:19:46:a5:45:38:
         c1:53:dd:45:90:61:18:b8:0f:50:80:94:98:60:70:e1:15:a5:
         8b:78:95:73:fc:a7:f8:3a:e3:f4:a6:7b:c5:51:06:44:90:e2:
         c3:8b:b5:8a:ea:f1:64:7a:e1:36:78:f3:c7:6e:c7:81:02:71:
         c7:22:84:02:a2:3b:bc:f9:46:1e:b7:a8:af:43:1c:cf:a1:4d:
         4b:1a:14:1e:f3:49:6a:b3:8b:5f:9b:0b:4c:d8:2c:47:25:91:
         e5:6a:45:f9:09:3a:44:90:43:a9:9a:eb:22:0e:0b:79:45:e8:
         1d:c8:6d:01:c7:01:24:46:d0:c4:7c:33:b0:ba:d0:e1:9e:45:
         a3:b1:9f:95:cd:6f:39:96:97:ee:33:de:ae:db:05:fb:ee:0f:
         c6:cf:8f:fc:89:39:fe:7e:3a:b7:bb:bd:ba:6c:15:84:5d:d9:
         cb:76:d8:3f:1d:0a:b3:11:9e:7d:e4:32:85:25:0a:2f:f6:22:
         bf:c3:3b:a0:96:a8:ec:68:50:e0:02:aa:fc:21:93:15:a0:97:
         07:8a:03:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFdgcnfUz792dM/f28Rm7V/Bz+lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDAzNDhFRjI5MjVBREY5MUMwNkUzOTFFODdDRTlC
ODE2QUVGMTAeFw0yNDA0MTUwNzQ4MDJaFw0yNDA0MTYxMTQ0MDJaMDMxMTAvBgNV
BAMTKDI4QzAyQTk3MTBGRTYwRjJCRUFFNUM2OUZFQTY4MURFRDE1QTVFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdewUiC2o5V4SxR7ITxHm/jQP
GGaP7gjWP090EL8Tgq1lqzMAaLwICjhWkZ3ODyo/CLwm2kAcKw5KIdpLA+vSYgzb
zfGBlDUKRI0FOiR44fwaQPSwaZ59rieUKn+AuNih2bvsmj9y3xn32EEc7dLC47Sm
6drwk12E8eLpN0NwWHraHuzIdzV2v6LBmbCT4OSorLdXT61LXtXL3N4NDS9LHjRS
3jaJ+xdzQ5jn+5N2L4auuBTL+9278D/AOfpqUqQv29Lbj43xr4P8GBx9Q8idYskI
OhN49gEfcj0IeDHeHst/x17N1nPCAKs0hGirrXw92Ae1o3nc0qogLue22Ok1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKMAqlxD+YPK+rlxp/qaB3tFaXm0wHwYDVR0j
BBgwFoAU/VQDSO8pJa35HAbjkeh86bgWrvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRSRjk5R1RTa0U0WXVZN2hGQ2p0eXlzb0xBVVV1SkNOdmh2RHJkQllY
dWUvMC9GRDU0MDM0OEVGMjkyNUFERjkxQzA2RTM5MUU4N0NFOUI4MTZBRUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZENTQwMzQ4RUYyOTI1QURG
OTFDMDZFMzkxRTg3Q0U5QjgxNkFFRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjRSRjk5R1RTa0U0WXVZN2hGQ2p0eXlzb0xBVVV1SkNOdmh2RHJkQllYdWUvMC9G
RDU0MDM0OEVGMjkyNUFERjkxQzA2RTM5MUU4N0NFOUI4MTZBRUYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlrWhGT9hY/OgXo7MfpY2tqXvi6eUfnYdjVCvRDbfLuqwgShtcz97rqySEuSA
Hc0qgBlGpUU4wVPdRZBhGLgPUICUmGBw4RWli3iVc/yn+Drj9KZ7xVEGRJDiw4u1
iurxZHrhNnjzx27HgQJxxyKEAqI7vPlGHreor0Mcz6FNSxoUHvNJarOLX5sLTNgs
RyWR5WpF+Qk6RJBDqZrrIg4LeUXoHchtAccBJEbQxHwzsLrQ4Z5Fo7Gflc1vOZaX
7jPertsF++4Pxs+P/Ik5/n46t7u9umwVhF3Zy3bYPx0KsxGefeQyhSUKL/Yiv8M7
oJao7GhQ4AKq/CGTFaCXB4oDxQ==
-----END CERTIFICATE-----