Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.mft
File:                     D29C49008A9094CA7B653908E9F464C85DDEB5F7.mft (raw, json)
Hash identifier:          Qb4AAjs3ZmYqH8Igluv+8hgUNqMhMeNI86kfaHjTWcM=
Subject key identifier:   85:3A:04:89:64:B4:8E:5E:69:BD:EE:69:A7:34:AD:DF:0A:4F:33:D4
Authority key identifier: D2:9C:49:00:8A:90:94:CA:7B:65:39:08:E9:F4:64:C8:5D:DE:B5:F7
Certificate issuer:       /CN=D29C49008A9094CA7B653908E9F464C85DDEB5F7
Certificate serial:       40D732C268EA774B7FC7F150433625FE310CDC64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.mft
Manifest number:          0D
Signing time:             Thu 15 Feb 2024 07:57:01 +0000
Manifest this update:     Thu 15 Feb 2024 07:52:01 +0000
Manifest next update:     Fri 16 Feb 2024 09:43:01 +0000
Files and hashes:         1: 3137372e33392e3135362e302f32322d3234203d3e203532373732.roa (hash: NgcXdcpsIyIqcsQU8ENLUQxoQLVkSmrH+w+P4u0Ez3M=)
                          2: 323830343a323539633a3a2f33322d3438203d3e203532373732.roa (hash: VI2CN4QhOysfMw9PZ4HI/CNK1gsVRZYos5mO+l3M99Y=)
                          3: D29C49008A9094CA7B653908E9F464C85DDEB5F7.crl (hash: 9N7DUCQ0u1ZJeEreoqBKm0BvLWiEB6q6v/ZMu+mKhxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d7:32:c2:68:ea:77:4b:7f:c7:f1:50:43:36:25:fe:31:0c:dc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29C49008A9094CA7B653908E9F464C85DDEB5F7
        Validity
            Not Before: Feb 15 07:52:01 2024 GMT
            Not After : Feb 16 09:43:01 2024 GMT
        Subject: CN=853A048964B48E5E69BDEE69A734ADDF0A4F33D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:3f:7c:d8:4e:02:35:49:2a:b6:46:88:7b:
                    09:fa:54:7a:99:c1:ff:8a:1c:d6:26:a1:5c:f0:4b:
                    86:ff:c0:5f:d2:2e:16:67:18:1b:89:57:00:45:47:
                    d0:cd:04:09:0e:60:b6:c6:0c:f4:b9:de:37:d8:87:
                    68:5c:46:1d:1c:26:6c:16:15:c4:67:31:f9:6e:14:
                    a7:51:d0:19:e8:b4:55:5c:45:99:a2:1f:f2:ec:a2:
                    48:ec:c9:2c:18:63:45:fb:50:0e:a6:6e:b3:0f:2e:
                    9a:58:b1:d3:14:cc:08:a0:82:16:98:31:06:e5:d6:
                    7b:a1:98:c1:51:8e:d8:b3:00:c7:1e:dc:48:bd:b3:
                    6b:d6:8f:e2:18:88:40:10:2a:e0:04:4d:2d:65:13:
                    22:c7:9e:25:e7:19:11:5e:0e:bb:a2:af:0f:01:02:
                    f6:66:aa:d9:a5:3b:3e:b9:98:a5:f1:87:bb:7c:bc:
                    f7:4a:3a:4a:23:f6:1f:f0:b6:bb:80:b1:b1:75:fb:
                    1b:c0:fb:7b:6b:ba:09:89:5b:6d:19:28:1b:0c:bf:
                    a7:24:9d:a2:8a:5f:19:66:4f:36:83:3a:07:ad:bc:
                    45:74:ac:35:5d:29:95:20:3d:94:06:05:15:e2:0c:
                    e3:1f:28:ce:ee:86:93:67:9f:38:57:d0:2d:e7:05:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:04:89:64:B4:8E:5E:69:BD:EE:69:A7:34:AD:DF:0A:4F:33:D4
            X509v3 Authority Key Identifier:
                keyid:D2:9C:49:00:8A:90:94:CA:7B:65:39:08:E9:F4:64:C8:5D:DE:B5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D29C49008A9094CA7B653908E9F464C85DDEB5F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:02:0b:ed:9b:f9:cb:7e:a5:0b:dd:05:30:31:e1:6c:92:
         ce:42:09:7e:16:c8:9c:78:db:a5:5e:e1:7f:53:8f:55:82:7f:
         bb:b4:ac:98:3e:50:0e:13:74:15:b9:ed:92:80:5c:f2:c2:2b:
         11:f6:c6:9b:35:5b:76:1d:06:f3:f7:69:58:26:11:7a:ab:9a:
         7e:16:44:d9:6a:1b:6f:e0:13:e0:77:86:8d:1d:2c:11:4a:fc:
         53:d6:7c:84:8b:d9:33:83:67:d8:b7:d5:e2:e2:98:31:60:de:
         ae:fc:3a:b1:6f:2f:e6:d5:e4:f4:3a:3e:28:c6:d8:cf:c2:2c:
         0c:e8:32:82:8d:da:63:89:13:9e:db:21:4b:e2:41:4b:2a:cc:
         3b:73:e5:6b:a3:0f:94:fc:cd:aa:48:4a:07:fd:1d:c8:99:f7:
         78:0f:77:c1:7d:6b:f1:0e:f7:2d:90:36:e3:33:f2:2b:1a:23:
         48:10:03:3c:8f:0b:ab:63:e2:65:08:90:3b:d1:8d:f9:c0:b6:
         c6:c5:c7:a8:eb:36:f3:e2:25:67:09:b1:55:57:36:ad:c5:6a:
         e7:67:b5:5c:eb:57:74:4d:37:fa:ba:85:b1:95:bd:f7:6a:a1:
         b3:a8:68:13:9d:36:30:ae:1f:b6:7e:42:a3:9a:76:89:71:5d:
         10:a8:fe:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQNcywmjqd0t/x/FQQzYl/jEM3GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5QzQ5MDA4QTkwOTRDQTdCNjUzOTA4RTlGNDY0Qzg1
RERFQjVGNzAeFw0yNDAyMTUwNzUyMDFaFw0yNDAyMTYwOTQzMDFaMDMxMTAvBgNV
BAMTKDg1M0EwNDg5NjRCNDhFNUU2OUJERUU2OUE3MzRBRERGMEE0RjMzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprT982E4CNUkqtkaIewn6VHqZ
wf+KHNYmoVzwS4b/wF/SLhZnGBuJVwBFR9DNBAkOYLbGDPS53jfYh2hcRh0cJmwW
FcRnMfluFKdR0BnotFVcRZmiH/LsokjsySwYY0X7UA6mbrMPLppYsdMUzAigghaY
MQbl1nuhmMFRjtizAMce3Ei9s2vWj+IYiEAQKuAETS1lEyLHniXnGRFeDruirw8B
AvZmqtmlOz65mKXxh7t8vPdKOkoj9h/wtruAsbF1+xvA+3trugmJW20ZKBsMv6ck
naKKXxlmTzaDOgetvEV0rDVdKZUgPZQGBRXiDOMfKM7uhpNnnzhX0C3nBS8lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhToEiWS0jl5pve5ppzSt3wpPM9QwHwYDVR0j
BBgwFoAU0pxJAIqQlMp7ZTkI6fRkyF3etfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC9EMjlDNDkwMDhBOTA5NENBN0I2NTM5MDhFOUY0NjRDODVEREVCNUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyOUM0OTAwOEE5MDk0Q0E3
QjY1MzkwOEU5RjQ2NEM4NURERUI1RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4VGYvMC9E
MjlDNDkwMDhBOTA5NENBN0I2NTM5MDhFOUY0NjRDODVEREVCNUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmq4CC+2b+ct+pQvdBTAx4WySzkIJfhbInHjbpV7hf1OPVYJ/u7SsmD5QDhN0
FbntkoBc8sIrEfbGmzVbdh0G8/dpWCYRequafhZE2Wobb+AT4HeGjR0sEUr8U9Z8
hIvZM4Nn2LfV4uKYMWDervw6sW8v5tXk9Do+KMbYz8IsDOgygo3aY4kTntshS+JB
SyrMO3Pla6MPlPzNqkhKB/0dyJn3eA93wX1r8Q73LZA24zPyKxojSBADPI8Lq2Pi
ZQiQO9GN+cC2xsXHqOs28+IlZwmxVVc2rcVq52e1XOtXdE03+rqFsZW992qhs6ho
E502MK4ftn5Co5p2iXFdEKj+EQ==
-----END CERTIFICATE-----