Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.mft
File:                     B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.mft (raw, json)
Hash identifier:          Fm2MtDA7E8YvD4H0z0JWB7un1mGMZ2+muKYKFk3N0Q8=
Subject key identifier:   DC:D2:B8:13:BA:DB:51:E4:6A:9E:73:AB:58:A8:AE:ED:05:34:AD:2C
Authority key identifier: B4:B7:AC:26:7E:61:DB:A6:6D:85:BB:EA:A7:D6:6C:48:23:CA:8C:D1
Certificate issuer:       /CN=B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1
Certificate serial:       2A3AF06A780AC97FADF1FF88FA9F887BF47EFE1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.mft
Manifest number:          13
Signing time:             Mon 15 Apr 2024 09:59:15 +0000
Manifest this update:     Mon 15 Apr 2024 09:54:15 +0000
Manifest next update:     Tue 16 Apr 2024 10:53:15 +0000
Files and hashes:         1: 3137302e38322e35322e302f32322d3234203d3e20323636343334.roa (hash: XkhD46x2THV+svDJXIroCrViRsJLHaZsNrS6OViE/b8=)
                          2: 323830343a333763303a3a2f33322d3336203d3e20323636343334.roa (hash: M74NdQ5tYOJbDiZ6nHmLf8yEg7FG7Q4ImTSm4yqE5z4=)
                          3: B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.crl (hash: mIYCodz9TKFT1L5H00Z5uKbykBqrvKywRAOpqAfaz44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:f0:6a:78:0a:c9:7f:ad:f1:ff:88:fa:9f:88:7b:f4:7e:fe:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1
        Validity
            Not Before: Apr 15 09:54:15 2024 GMT
            Not After : Apr 16 10:53:15 2024 GMT
        Subject: CN=DCD2B813BADB51E46A9E73AB58A8AEED0534AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:d2:20:5b:d1:53:10:85:ad:9d:7e:90:78:
                    ac:c3:25:8f:54:79:4b:68:21:74:6d:9f:fd:b4:48:
                    6e:aa:7e:1d:b7:af:69:97:f5:8d:f3:fb:81:15:61:
                    90:72:36:7c:72:58:20:3b:50:cc:9c:b4:5b:dd:94:
                    9d:93:91:04:66:af:6c:09:48:06:dd:81:e8:23:13:
                    1c:71:c9:ab:a3:d9:bf:31:b8:14:ce:d5:05:cd:e8:
                    dd:92:c9:2b:a7:01:84:79:b5:41:ee:6a:48:e9:d5:
                    3f:1d:be:6b:07:e7:fc:21:f1:7c:39:f8:74:71:fb:
                    5d:71:02:e6:b1:cf:42:e7:22:25:d0:78:46:40:b7:
                    3a:16:f6:03:04:4e:af:9f:b4:14:df:0c:4f:a0:9d:
                    ab:b4:3b:78:10:12:ee:ba:c4:e6:90:37:e6:92:22:
                    ad:4a:99:d4:fe:2b:ed:7e:af:c2:38:b9:af:1e:a6:
                    de:e2:3c:9f:cf:47:6b:38:50:a4:f4:04:4f:d5:cb:
                    06:c1:d6:db:6d:ad:42:5e:71:6b:b7:39:f4:c6:d9:
                    d9:cf:c7:b6:82:9f:fe:c7:df:ef:24:28:5b:9b:b4:
                    06:8c:f6:9c:4d:ce:5d:88:05:5c:9d:57:50:9a:c0:
                    c6:d8:8f:b3:63:5e:ce:2a:7a:14:7a:bd:8e:5c:3b:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D2:B8:13:BA:DB:51:E4:6A:9E:73:AB:58:A8:AE:ED:05:34:AD:2C
            X509v3 Authority Key Identifier:
                keyid:B4:B7:AC:26:7E:61:DB:A6:6D:85:BB:EA:A7:D6:6C:48:23:CA:8C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/B4B7AC267E61DBA66D85BBEAA7D66C4823CA8CD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b8:b2:04:d2:c7:9d:ed:32:1d:84:5d:5c:f4:82:83:41:bf:
         18:4d:22:de:d4:05:1f:cc:fb:74:f9:6a:09:7f:ba:d8:88:7a:
         fd:e0:f9:b9:db:ab:a5:b8:fb:c3:86:ce:7e:2f:60:87:4f:80:
         08:fe:bc:ce:92:f3:7c:79:a6:e3:67:41:68:71:3a:d2:11:0d:
         ba:a6:7d:9f:cc:2a:65:0a:d9:0a:83:d3:40:69:1f:97:b5:4d:
         5f:4f:a6:c2:ec:6b:90:d3:5d:61:5f:b7:03:40:5c:82:cc:f4:
         5e:11:26:49:33:bf:5a:72:2a:2b:4d:84:58:d3:50:37:43:cf:
         1d:4f:39:ce:bf:91:3e:bb:ba:fc:b1:8d:0c:aa:b0:94:33:d7:
         a9:1a:9b:06:9a:c9:d6:27:30:67:9d:88:c0:72:8f:a8:9a:58:
         da:9c:7b:08:e0:76:58:66:ee:ae:12:08:1b:cc:46:32:73:74:
         90:68:a0:09:30:18:74:d7:38:a5:31:ad:ac:38:e2:11:00:7e:
         18:b4:ae:f2:5b:2a:42:ad:ad:48:b9:cb:15:56:43:65:9f:72:
         2e:57:d8:68:0e:17:3d:98:f9:2a:c0:25:ad:ab:1f:09:f8:15:
         e5:24:af:25:53:28:68:43:a0:a7:6f:37:93:ff:e9:2a:01:dc:
         ad:c2:c4:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKjrwangKyX+t8f+I+p+Ie/R+/hwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRCN0FDMjY3RTYxREJBNjZEODVCQkVBQTdENjZDNDgy
M0NBOENEMTAeFw0yNDA0MTUwOTU0MTVaFw0yNDA0MTYxMDUzMTVaMDMxMTAvBgNV
BAMTKERDRDJCODEzQkFEQjUxRTQ2QTlFNzNBQjU4QThBRUVEMDUzNEFEMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9NIgW9FTEIWtnX6QeKzDJY9U
eUtoIXRtn/20SG6qfh23r2mX9Y3z+4EVYZByNnxyWCA7UMyctFvdlJ2TkQRmr2wJ
SAbdgegjExxxyauj2b8xuBTO1QXN6N2SySunAYR5tUHuakjp1T8dvmsH5/wh8Xw5
+HRx+11xAuaxz0LnIiXQeEZAtzoW9gMETq+ftBTfDE+gnau0O3gQEu66xOaQN+aS
Iq1KmdT+K+1+r8I4ua8ept7iPJ/PR2s4UKT0BE/VywbB1tttrUJecWu3OfTG2dnP
x7aCn/7H3+8kKFubtAaM9pxNzl2IBVydV1CawMbYj7NjXs4qehR6vY5cO+MzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3NK4E7rbUeRqnnOrWKiu7QU0rSwwHwYDVR0j
BBgwFoAUtLesJn5h26Zthbvqp9ZsSCPKjNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkREdm81QmtoYUNIa2VVVTcyd2ExbmtGTUFLdzZjaTJvRUdNUUVHVWVE
eGYvMC9CNEI3QUMyNjdFNjFEQkE2NkQ4NUJCRUFBN0Q2NkM0ODIzQ0E4Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0QjdBQzI2N0U2MURCQTY2
RDg1QkJFQUE3RDY2QzQ4MjNDQThDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkREdm81QmtoYUNIa2VVVTcyd2ExbmtGTUFLdzZjaTJvRUdNUUVHVWVEeGYvMC9C
NEI3QUMyNjdFNjFEQkE2NkQ4NUJCRUFBN0Q2NkM0ODIzQ0E4Q0QxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLiyBNLHne0yHYRdXPSCg0G/GE0i3tQFH8z7dPlqCX+62Ih6/eD5udurpbj7
w4bOfi9gh0+ACP68zpLzfHmm42dBaHE60hENuqZ9n8wqZQrZCoPTQGkfl7VNX0+m
wuxrkNNdYV+3A0Bcgsz0XhEmSTO/WnIqK02EWNNQN0PPHU85zr+RPru6/LGNDKqw
lDPXqRqbBprJ1icwZ52IwHKPqJpY2px7COB2WGburhIIG8xGMnN0kGigCTAYdNc4
pTGtrDjiEQB+GLSu8lsqQq2tSLnLFVZDZZ9yLlfYaA4XPZj5KsAlrasfCfgV5SSv
JVMoaEOgp283k//pKgHcrcLEJg==
-----END CERTIFICATE-----