Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.mft
File:                     A4D065082CFCE77B01F30B7C1138412F6131A20D.mft (raw, json)
Hash identifier:          CSO1pC+skyQQu/7Cchq2y+Ae/6DtWJ7QnlH/Z1huYpQ=
Subject key identifier:   83:B2:43:BB:3D:ED:16:81:92:DC:7B:E7:AE:69:1F:BE:49:23:4D:31
Authority key identifier: A4:D0:65:08:2C:FC:E7:7B:01:F3:0B:7C:11:38:41:2F:61:31:A2:0D
Certificate issuer:       /CN=A4D065082CFCE77B01F30B7C1138412F6131A20D
Certificate serial:       299EFB6E0BEA5CA0350CD6A778EC968B3CCCD990
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.mft
Manifest number:          0147
Signing time:             Tue 14 Jun 2022 08:50:01 +0000
Manifest this update:     Tue 14 Jun 2022 08:45:01 +0000
Manifest next update:     Wed 15 Jun 2022 10:50:01 +0000
Files and hashes:         1: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: OemlvNl0+HUVpMUc0dadOp5R0KzsrdoT/Xxd3r5kjPs=)
                          2: A4D065082CFCE77B01F30B7C1138412F6131A20D.crl (hash: IDFXOYF0sIWL2A+Z0gA/VTT71qaUNuK2CI4Rzwza9EI=)
                          3: 323830343a376231383a3a2f33322d3334203d3e20323731343130.roa (hash: da+VlxIE1xV1OYl9cckYrK+Ia8qLVhC2ov1W04OdNHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9e:fb:6e:0b:ea:5c:a0:35:0c:d6:a7:78:ec:96:8b:3c:cc:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D065082CFCE77B01F30B7C1138412F6131A20D
        Validity
            Not Before: Jun 14 08:45:01 2022 GMT
            Not After : Jun 15 10:50:01 2022 GMT
        Subject: CN=83B243BB3DED168192DC7BE7AE691FBE49234D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:d9:fb:c8:ed:ae:f4:b5:7a:95:ad:aa:bc:
                    5b:fb:73:04:bf:78:a9:12:f9:d0:b9:0a:2f:d0:5a:
                    24:8e:98:69:a6:67:29:0d:26:ff:90:4f:aa:ee:11:
                    ac:c3:2f:87:f5:49:93:04:22:cc:6d:48:60:12:e1:
                    76:28:aa:0e:42:4d:5c:43:d2:75:80:79:e2:6e:1c:
                    f6:d0:53:8d:a7:53:ec:fd:2d:f5:9c:39:12:f4:b0:
                    09:2f:54:1d:4b:28:8f:6c:0b:b6:48:75:a3:97:cb:
                    c2:8c:04:a9:c4:30:bd:38:80:34:01:7b:47:1d:d3:
                    eb:14:c9:cc:b4:95:af:43:4b:0a:da:1d:02:4b:4c:
                    0c:de:e0:c0:5b:73:0f:19:53:d9:7b:2c:04:f5:86:
                    0d:66:3e:34:42:4a:5d:0c:b3:59:cf:f0:7d:ae:97:
                    54:83:56:09:70:a1:e3:0c:46:89:70:38:0b:55:14:
                    b2:0e:cf:f1:08:08:dd:c4:45:0e:5d:9b:ad:bc:2d:
                    61:86:5b:2f:7b:13:3e:52:ed:53:a0:9f:b2:c2:c2:
                    e0:fe:e7:73:bf:06:1d:15:90:4c:ef:3f:e6:55:22:
                    7b:ab:62:84:0e:93:62:30:2f:c0:c1:38:51:46:88:
                    9b:f4:26:47:7b:e1:be:d3:33:75:a7:9d:50:8e:94:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B2:43:BB:3D:ED:16:81:92:DC:7B:E7:AE:69:1F:BE:49:23:4D:31
            X509v3 Authority Key Identifier:
                keyid:A4:D0:65:08:2C:FC:E7:7B:01:F3:0B:7C:11:38:41:2F:61:31:A2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/A4D065082CFCE77B01F30B7C1138412F6131A20D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:19:0d:25:af:51:95:23:6a:d7:63:b7:57:d3:ee:13:77:
         16:42:b4:d3:10:6a:a7:8f:70:07:ca:cb:a2:54:75:d4:eb:36:
         8d:cb:11:fb:23:9c:47:16:a8:69:d7:49:0d:09:13:62:b7:8e:
         19:8e:09:f3:27:bc:28:ce:5a:66:a5:16:98:40:12:a2:b6:6e:
         75:fa:52:0c:31:78:a4:fd:e3:f1:d4:b4:8e:ac:63:81:e2:dc:
         cc:5b:73:a5:6e:85:82:4c:6f:45:3a:12:c7:48:07:e2:2f:cf:
         c7:9d:27:a7:66:85:a7:b2:d0:77:5b:31:92:92:1c:7b:57:86:
         da:9c:3f:20:73:a4:b9:53:03:d7:0f:c2:cd:a8:9d:cb:7e:5b:
         04:9a:99:99:6d:c7:9c:22:97:b8:6a:c0:46:68:16:21:86:81:
         77:8f:5a:4a:d0:51:14:80:45:26:ca:88:af:6f:f2:c5:90:59:
         5c:a8:f0:b5:8c:9f:c9:d4:3d:ae:32:be:c9:d3:0b:f3:f8:df:
         6a:fa:61:c8:69:a3:57:ac:b7:ae:5b:3f:76:a0:9f:e8:f5:53:
         3b:83:e0:bd:da:ee:8c:bd:82:9d:54:d6:c4:02:28:7c:40:8d:
         e9:81:98:e2:1b:b0:66:ea:19:94:1e:bf:4f:4d:26:48:c8:84:
         f2:7d:1e:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKZ77bgvqXKA1DNaneOyWizzM2ZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREMDY1MDgyQ0ZDRTc3QjAxRjMwQjdDMTEzODQxMkY2
MTMxQTIwRDAeFw0yMjA2MTQwODQ1MDFaFw0yMjA2MTUxMDUwMDFaMDMxMTAvBgNV
BAMTKDgzQjI0M0JCM0RFRDE2ODE5MkRDN0JFN0FFNjkxRkJFNDkyMzREMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYtn7yO2u9LV6la2qvFv7cwS/
eKkS+dC5Ci/QWiSOmGmmZykNJv+QT6ruEazDL4f1SZMEIsxtSGAS4XYoqg5CTVxD
0nWAeeJuHPbQU42nU+z9LfWcORL0sAkvVB1LKI9sC7ZIdaOXy8KMBKnEML04gDQB
e0cd0+sUycy0la9DSwraHQJLTAze4MBbcw8ZU9l7LAT1hg1mPjRCSl0Ms1nP8H2u
l1SDVglwoeMMRolwOAtVFLIOz/EICN3ERQ5dm628LWGGWy97Ez5S7VOgn7LCwuD+
53O/Bh0VkEzvP+ZVInurYoQOk2IwL8DBOFFGiJv0Jkd74b7TM3WnnVCOlHOBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUg7JDuz3tFoGS3HvnrmkfvkkjTTEwHwYDVR0j
BBgwFoAUpNBlCCz853sB8wt8EThBL2Exog0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY
eXIvMC9BNEQwNjUwODJDRkNFNzdCMDFGMzBCN0MxMTM4NDEyRjYxMzFBMjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDA2NTA4MkNGQ0U3N0Iw
MUYzMEI3QzExMzg0MTJGNjEzMUEyMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBYeXIvMC9B
NEQwNjUwODJDRkNFNzdCMDFGMzBCN0MxMTM4NDEyRjYxMzFBMjBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfwoZDSWvUZUjatdjt1fT7hN3FkK00xBqp49wB8rLolR11Os2jcsR+yOcRxao
addJDQkTYreOGY4J8ye8KM5aZqUWmEASorZudfpSDDF4pP3j8dS0jqxjgeLczFtz
pW6FgkxvRToSx0gH4i/Px50np2aFp7LQd1sxkpIce1eG2pw/IHOkuVMD1w/Czaid
y35bBJqZmW3HnCKXuGrARmgWIYaBd49aStBRFIBFJsqIr2/yxZBZXKjwtYyfydQ9
rjK+ydML8/jfavphyGmjV6y3rls/dqCf6PVTO4PgvdrujL2CnVTWxAIofECN6YGY
4huwZuoZlB6/T00mSMiE8n0eqA==
-----END CERTIFICATE-----