Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.mft
File:                     BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.mft (raw, json)
Hash identifier:          qDdLe3cVGZ61qBpwe91G3jRO8K6kyf+u7waff8hkJ0c=
Subject key identifier:   FF:72:89:2D:19:EE:96:48:6A:3D:B4:08:B7:8F:D3:7F:DF:9A:2D:A8
Authority key identifier: BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15
Certificate issuer:       /CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
Certificate serial:       3CE4046467B6898E2E7F3D29B9836EA95865896D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.mft
Manifest number:          01D3
Signing time:             Mon 15 Apr 2024 05:27:32 +0000
Manifest this update:     Mon 15 Apr 2024 05:22:32 +0000
Manifest next update:     Tue 16 Apr 2024 05:45:32 +0000
Files and hashes:         1: BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.crl (hash: 9AJk2sofoNzFi5JYmgBTg6S5dMdxwM0aSJasssIzm/k=)
                          2: 323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (hash: /Mj4FUOMYsGokDQhCwp3gYzMtCGkWq+Zf5/F7dA3zBg=)
                          3: 3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (hash: 3fD/buJIPXBlK9dSdg0fOPFIcLd7Ggp+VZBYjbsxxiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:04:64:67:b6:89:8e:2e:7f:3d:29:b9:83:6e:a9:58:65:89:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
        Validity
            Not Before: Apr 15 05:22:32 2024 GMT
            Not After : Apr 16 05:45:32 2024 GMT
        Subject: CN=FF72892D19EE96486A3DB408B78FD37FDF9A2DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:7f:b4:6a:e8:5b:45:75:4c:9b:c8:76:78:
                    6d:89:49:59:ee:c2:5c:a5:9e:31:00:3f:3a:5e:14:
                    44:c9:e6:55:a9:e3:3d:f7:57:2b:d5:7a:57:bb:21:
                    19:ee:69:48:f8:e4:15:dc:67:76:ff:f9:ce:d7:62:
                    da:92:7d:94:96:58:bd:a1:9b:d7:36:f2:3d:7c:f9:
                    b2:fc:06:17:89:65:a3:1a:8a:7b:ff:37:db:9c:57:
                    05:6d:00:d4:ee:ba:09:bc:eb:76:42:d6:13:84:b6:
                    8e:c0:66:8c:14:63:04:e6:8d:a8:cc:11:ea:f3:9b:
                    6c:53:88:a2:8e:75:36:6f:11:8e:c5:49:b8:ba:31:
                    65:d2:58:88:cb:d3:c5:91:fb:d3:8b:43:c1:4b:60:
                    40:b8:99:e1:85:10:dd:12:38:ee:39:11:7a:58:65:
                    88:1d:4b:9c:41:26:14:28:73:16:8b:2f:28:35:ec:
                    c9:50:4b:30:60:0a:10:7a:9e:30:bf:d4:53:9d:9e:
                    95:5e:9d:ec:23:7b:5d:04:a4:fe:d0:8f:74:81:dc:
                    f9:19:fa:34:f5:29:d7:f6:1b:3c:63:1e:55:7a:4a:
                    5c:68:12:13:59:37:57:da:52:f8:69:15:1a:f2:0c:
                    47:ad:6e:28:bc:dc:17:38:37:1f:17:e2:16:a1:79:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:89:2D:19:EE:96:48:6A:3D:B4:08:B7:8F:D3:7F:DF:9A:2D:A8
            X509v3 Authority Key Identifier:
                keyid:BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:6f:cf:40:9f:2e:e8:4b:71:74:cf:c6:b3:63:e5:50:6f:
         88:ed:15:f9:af:ed:8b:b3:25:f6:58:a4:15:25:c6:81:8c:30:
         aa:28:25:f6:d8:92:33:32:41:4b:07:f6:6d:51:c1:65:e9:6d:
         c8:c3:5f:e8:10:e1:2e:bf:a1:96:a7:02:af:19:b5:36:18:5a:
         b5:5c:04:f0:56:6a:99:dc:bb:85:c3:6d:fc:88:43:07:21:64:
         72:ab:24:94:aa:55:94:5a:cf:50:d9:00:6b:6c:63:30:f5:b9:
         88:e1:f0:ca:7b:12:53:79:33:13:80:2d:3f:dc:09:8a:41:eb:
         0b:18:29:bf:96:87:68:b3:9a:1e:60:1a:e5:28:ab:5d:b4:53:
         bc:9c:ca:7a:50:26:fd:b6:df:4f:41:4b:dd:af:d2:46:f9:6a:
         16:7d:7f:b7:3c:4a:df:83:46:31:a3:ce:26:37:57:a9:82:2b:
         65:89:5c:09:45:c0:d7:43:2f:16:84:97:6a:04:c8:66:22:d0:
         fb:76:55:3d:53:a4:72:5e:76:51:34:62:6e:82:92:4a:6e:96:
         ef:40:79:9d:75:e7:86:3c:fb:0f:94:22:2a:a7:be:38:7a:39:
         b8:b6:96:a1:15:6b:3b:23:32:d6:cb:bf:16:dd:c0:38:8b:e2:
         b9:2f:20:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPOQEZGe2iY4ufz0puYNuqVhliW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY1QTI5NjREMDRCNERBQ0ZGREQ4Qjk2OUQwQTMwRDZC
MUI2RkYxNTAeFw0yNDA0MTUwNTIyMzJaFw0yNDA0MTYwNTQ1MzJaMDMxMTAvBgNV
BAMTKEZGNzI4OTJEMTlFRTk2NDg2QTNEQjQwOEI3OEZEMzdGREY5QTJEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc3+0auhbRXVMm8h2eG2JSVnu
wlylnjEAPzpeFETJ5lWp4z33VyvVele7IRnuaUj45BXcZ3b/+c7XYtqSfZSWWL2h
m9c28j18+bL8BheJZaMainv/N9ucVwVtANTuugm863ZC1hOEto7AZowUYwTmjajM
Eerzm2xTiKKOdTZvEY7FSbi6MWXSWIjL08WR+9OLQ8FLYEC4meGFEN0SOO45EXpY
ZYgdS5xBJhQocxaLLyg17MlQSzBgChB6njC/1FOdnpVenewje10EpP7Qj3SB3PkZ
+jT1Kdf2GzxjHlV6SlxoEhNZN1faUvhpFRryDEetbii83Bc4Nx8X4haheU67AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/3KJLRnulkhqPbQIt4/Tf9+aLagwHwYDVR0j
BBgwFoAUv1opZNBLTaz/3YuWnQow1rG2/xUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pD
b2kvMC9CRjVBMjk2NEQwNEI0REFDRkZERDhCOTY5RDBBMzBENkIxQjZGRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNUEyOTY0RDA0QjREQUNG
RkREOEI5NjlEMEEzMEQ2QjFCNkZGMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pDb2kvMC9C
RjVBMjk2NEQwNEI0REFDRkZERDhCOTY5RDBBMzBENkIxQjZGRjE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd6Zvz0CfLuhLcXTPxrNj5VBviO0V+a/ti7Ml9likFSXGgYwwqigl9tiSMzJB
Swf2bVHBZeltyMNf6BDhLr+hlqcCrxm1NhhatVwE8FZqmdy7hcNt/IhDByFkcqsk
lKpVlFrPUNkAa2xjMPW5iOHwynsSU3kzE4AtP9wJikHrCxgpv5aHaLOaHmAa5Sir
XbRTvJzKelAm/bbfT0FL3a/SRvlqFn1/tzxK34NGMaPOJjdXqYIrZYlcCUXA10Mv
FoSXagTIZiLQ+3ZVPVOkcl52UTRiboKSSm6W70B5nXXnhjz7D5QiKqe+OHo5uLaW
oRVrOyMy1su/Ft3AOIviuS8gBg==
-----END CERTIFICATE-----