Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft
File:                     DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft (raw, json)
Hash identifier:          8iUn8D/4hk6HC6gNLyvip7wtD+gEBwJz+Aw/s2iSPkU=
Subject key identifier:   34:87:84:CC:78:EA:CC:BB:1F:7B:56:04:3B:6D:A1:3C:9D:8F:B2:0F
Authority key identifier: DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1
Certificate issuer:       /CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
Certificate serial:       7A575C05DA5C97C83365D8B28275623549CF80B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft
Manifest number:          1F
Signing time:             Mon 15 Apr 2024 05:53:48 +0000
Manifest this update:     Mon 15 Apr 2024 05:48:48 +0000
Manifest next update:     Tue 16 Apr 2024 06:28:48 +0000
Files and hashes:         1: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 7xjun7IoLdNRMKh33fRIQEcMTNHCS4DQ2jnOLXvjbyE=)
                          2: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: 4OjSze0hujDgJEe0to0RdG3m2sTcCkQc2Runauzz3so=)
                          3: DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.crl (hash: QbYYqLbxQsS7nUZ9V4MoIuOVuUixrTsQEJgr/7hQITk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:5c:05:da:5c:97:c8:33:65:d8:b2:82:75:62:35:49:cf:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
        Validity
            Not Before: Apr 15 05:48:48 2024 GMT
            Not After : Apr 16 06:28:48 2024 GMT
        Subject: CN=348784CC78EACCBB1F7B56043B6DA13C9D8FB20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:83:8a:cc:d9:a9:59:a4:80:30:fb:85:9e:
                    07:bf:d4:f6:7f:1b:3f:36:05:ad:63:ed:2f:3a:09:
                    94:93:a5:b7:35:97:72:42:24:c3:4b:24:17:bf:b2:
                    43:ec:20:0f:fa:ec:83:bc:37:fa:21:2d:c7:60:e1:
                    c5:63:31:c8:f5:1d:2c:5a:92:e9:9c:3a:2b:00:66:
                    2a:fe:1a:50:dd:d4:29:e3:b4:23:59:5d:4e:27:e8:
                    ca:39:d3:a6:ae:78:2b:61:23:65:f3:b1:78:58:67:
                    75:a6:81:04:a8:15:74:70:e5:50:9e:c4:91:97:63:
                    48:c8:8e:21:c0:a4:fc:3a:4f:e9:f2:a4:78:4d:04:
                    45:43:f2:0f:cb:3c:18:ea:0d:49:8a:e6:7b:a3:fb:
                    04:39:b8:35:26:09:5e:67:90:05:6a:85:c5:96:a4:
                    f3:bc:b4:33:1d:7a:89:9c:da:9d:ee:98:12:c7:43:
                    6a:44:94:18:00:37:4a:78:70:58:a9:55:7c:04:24:
                    ca:0b:89:41:41:de:d6:2e:8c:06:63:52:49:0c:35:
                    3f:ea:2e:b4:1d:44:68:57:b4:a2:a7:9d:a9:a0:c5:
                    4c:59:d6:5b:a5:34:3f:b7:25:f6:7b:81:af:ae:71:
                    66:f0:4d:0a:97:fd:5f:9f:51:8a:4b:f3:53:65:93:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:87:84:CC:78:EA:CC:BB:1F:7B:56:04:3B:6D:A1:3C:9D:8F:B2:0F
            X509v3 Authority Key Identifier:
                keyid:DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:1c:8f:47:87:18:de:4e:0f:f6:5d:89:84:74:24:af:2b:
         2f:c3:0a:51:5c:ce:53:58:fd:f1:83:f4:ee:29:89:45:be:f8:
         03:d8:91:a5:b8:32:6f:44:9d:cb:66:50:9a:d9:15:85:f2:df:
         69:63:b4:31:aa:4f:46:73:fe:97:e7:f1:bb:b4:2a:71:26:d5:
         af:d7:0a:a8:20:7d:3d:90:3f:4a:79:4c:e3:51:f1:6f:b0:6e:
         20:59:d8:e1:de:d0:4c:03:53:76:27:47:47:f6:f5:7c:e9:71:
         dc:18:76:5f:7d:54:83:75:92:86:92:6e:a8:10:e1:85:c5:a5:
         21:dd:f1:64:5d:b3:79:1a:60:98:f4:91:8d:98:14:05:ff:c5:
         73:0a:d3:fc:ed:67:4f:6f:a2:58:b9:d3:76:60:ee:48:12:63:
         fb:e1:35:cb:14:df:73:fe:47:80:99:b2:78:b9:e2:47:d4:84:
         2f:10:2f:c8:3d:df:51:82:da:d0:3f:79:d1:a9:75:5b:0c:69:
         e4:c9:7b:c4:75:04:c8:f7:b1:bd:b9:14:3f:7a:d2:c2:ea:e7:
         fa:0b:12:88:27:42:4a:41:0e:79:b7:d8:8c:e4:b9:d3:73:8c:
         c2:61:53:83:5f:7d:59:e0:fa:04:d4:ad:24:5d:07:c6:1e:49:
         4a:c2:7e:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeldcBdpcl8gzZdiygnViNUnPgLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBNDZDNkRDQTZGM0IzNUExMEI4QTlCNDU2RDFGN0Ux
Mzc1MDdBMTAeFw0yNDA0MTUwNTQ4NDhaFw0yNDA0MTYwNjI4NDhaMDMxMTAvBgNV
BAMTKDM0ODc4NENDNzhFQUNDQkIxRjdCNTYwNDNCNkRBMTNDOUQ4RkIyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezYOKzNmpWaSAMPuFnge/1PZ/
Gz82Ba1j7S86CZSTpbc1l3JCJMNLJBe/skPsIA/67IO8N/ohLcdg4cVjMcj1HSxa
kumcOisAZir+GlDd1CnjtCNZXU4n6Mo506aueCthI2XzsXhYZ3WmgQSoFXRw5VCe
xJGXY0jIjiHApPw6T+nypHhNBEVD8g/LPBjqDUmK5nuj+wQ5uDUmCV5nkAVqhcWW
pPO8tDMdeomc2p3umBLHQ2pElBgAN0p4cFipVXwEJMoLiUFB3tYujAZjUkkMNT/q
LrQdRGhXtKKnnamgxUxZ1lulND+3JfZ7ga+ucWbwTQqX/V+fUYpL81Nlk5yJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNIeEzHjqzLsfe1YEO22hPJ2Psg8wHwYDVR0j
BBgwFoAU3qRsbcpvOzWhC4qbRW0ffhN1B6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202
WDMvMC9ERUE0NkM2RENBNkYzQjM1QTEwQjhBOUI0NTZEMUY3RTEzNzUwN0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFQTQ2QzZEQ0E2RjNCMzVB
MTBCOEE5QjQ1NkQxRjdFMTM3NTA3QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMC9E
RUE0NkM2RENBNkYzQjM1QTEwQjhBOUI0NTZEMUY3RTEzNzUwN0ExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsEcj0eHGN5OD/ZdiYR0JK8rL8MKUVzOU1j98YP07imJRb74A9iRpbgyb0Sd
y2ZQmtkVhfLfaWO0MapPRnP+l+fxu7QqcSbVr9cKqCB9PZA/SnlM41Hxb7BuIFnY
4d7QTANTdidHR/b1fOlx3Bh2X31Ug3WShpJuqBDhhcWlId3xZF2zeRpgmPSRjZgU
Bf/FcwrT/O1nT2+iWLnTdmDuSBJj++E1yxTfc/5HgJmyeLniR9SELxAvyD3fUYLa
0D950al1Wwxp5Ml7xHUEyPexvbkUP3rSwurn+gsSiCdCSkEOebfYjOS503OMwmFT
g199WeD6BNStJF0Hxh5JSsJ+Lg==
-----END CERTIFICATE-----