Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/AA94373CE0B344219242E406B11C11710C3029F7.mft
File:                     AA94373CE0B344219242E406B11C11710C3029F7.mft (raw, json)
Hash identifier:          o33z4OjH3zVAKl6/fA1oU07xXgs63PieUTCC4mDPWkY=
Subject key identifier:   C6:01:A4:18:D6:02:ED:29:80:B1:C7:96:A4:75:7E:69:0F:3A:01:D4
Authority key identifier: AA:94:37:3C:E0:B3:44:21:92:42:E4:06:B1:1C:11:71:0C:30:29:F7
Certificate issuer:       /CN=AA94373CE0B344219242E406B11C11710C3029F7
Certificate serial:       4D76D3F76906DDF88D55EF043B4EC932D7CCAC4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA94373CE0B344219242E406B11C11710C3029F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/AA94373CE0B344219242E406B11C11710C3029F7.mft
Manifest number:          04
Signing time:             Mon 23 Oct 2023 14:43:28 +0000
Manifest this update:     Mon 23 Oct 2023 14:38:28 +0000
Manifest next update:     Tue 24 Oct 2023 14:57:28 +0000
Files and hashes:         1: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: ZOqXJLrALvjz+rgPoBcqkstxLu/i6v3/b0v3hx+93cM=)
                          2: AA94373CE0B344219242E406B11C11710C3029F7.crl (hash: KND3TXnwS33aK08eBGdPkMHOCawg6lu2xb6HGDlg2wQ=)
                          3: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: /e96AkDNH8ERleMCVMCU1pVAFfr4TZuc/3sLKjXQPkg=)
                          4: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: QtDvV85XR6PUd3FEmYOER+FhO1+nUWpfvqzSYFIhs/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:76:d3:f7:69:06:dd:f8:8d:55:ef:04:3b:4e:c9:32:d7:cc:ac:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA94373CE0B344219242E406B11C11710C3029F7
        Validity
            Not Before: Oct 23 14:38:28 2023 GMT
            Not After : Oct 24 14:57:28 2023 GMT
        Subject: CN=C601A418D602ED2980B1C796A4757E690F3A01D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:0b:00:52:a9:64:33:7d:b6:f6:d8:09:ca:
                    a0:96:96:4d:5f:0f:8c:34:b3:6f:f4:8a:8d:b6:37:
                    08:27:07:af:fc:46:7c:72:9d:5f:e6:0e:ab:40:2f:
                    41:00:5d:a2:6c:db:75:09:12:b0:c2:3e:d8:f1:f8:
                    00:82:a2:09:68:56:95:ea:a3:34:17:c2:4f:30:4a:
                    88:99:2b:bb:db:be:ea:95:45:b1:ee:05:21:7c:41:
                    84:c0:b0:63:36:c5:21:61:5e:54:2e:6e:73:f7:c8:
                    48:2a:c5:69:d1:97:d7:69:3c:b2:f5:e1:ea:87:75:
                    a6:c0:eb:45:75:96:d7:98:50:91:b1:0b:72:78:0c:
                    80:7e:73:ba:9f:8d:0f:ab:b6:b4:f3:d5:0e:1f:57:
                    37:6c:4e:a4:7e:12:6f:86:0f:c7:d5:4e:7d:5a:e6:
                    c9:19:5e:a8:4b:92:36:7b:6b:51:5e:e9:a3:1f:9f:
                    a5:4b:25:44:52:f8:30:97:ef:f0:38:f0:01:11:fc:
                    26:1a:ee:8a:31:7d:fc:68:5c:4f:fe:ed:8e:af:69:
                    d0:9a:b7:2f:15:3e:9a:8a:62:d1:5b:b3:d1:90:bb:
                    07:31:81:f1:d8:4e:69:d0:72:14:e7:c9:58:e7:b6:
                    d8:4e:78:32:18:4a:ed:12:46:60:a2:7f:02:74:b6:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:01:A4:18:D6:02:ED:29:80:B1:C7:96:A4:75:7E:69:0F:3A:01:D4
            X509v3 Authority Key Identifier:
                keyid:AA:94:37:3C:E0:B3:44:21:92:42:E4:06:B1:1C:11:71:0C:30:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/AA94373CE0B344219242E406B11C11710C3029F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA94373CE0B344219242E406B11C11710C3029F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/AA94373CE0B344219242E406B11C11710C3029F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:79:ee:3a:f0:d2:12:c9:e7:bb:47:00:2a:01:ea:80:a1:3c:
         3f:13:61:33:4c:ab:ac:f2:04:f6:56:b8:5e:df:ce:55:3e:88:
         9e:36:a1:f2:4a:be:35:5d:7b:93:08:95:8f:bb:56:1e:b2:9e:
         36:b3:91:c0:07:a4:30:18:e8:d0:f2:25:16:4c:2d:1b:14:16:
         c5:3b:e3:80:b5:cb:16:1f:0b:48:17:88:87:26:0a:49:d5:3f:
         5c:5e:0b:c1:b9:00:0e:c1:1d:14:ab:47:f5:f5:83:b2:53:30:
         47:6a:23:eb:4a:98:68:d6:73:dc:32:d4:4d:53:dd:0d:c1:a1:
         99:a1:f8:ec:1c:80:bb:7e:7d:ca:be:a8:53:9b:c9:ed:45:5c:
         5b:5b:0a:b2:8f:08:61:4a:92:e2:10:9f:45:2f:86:2b:d6:8b:
         f9:01:cd:12:39:fa:f9:b1:c6:61:74:98:f2:34:89:7f:2c:06:
         ee:72:25:51:b9:df:37:32:46:27:95:dc:f5:30:3d:63:99:ac:
         e6:7f:43:e8:54:a0:bd:35:8f:e7:30:2f:7e:a1:3d:c3:56:e3:
         be:96:f1:66:bc:8e:14:d0:ab:a5:bd:a8:17:72:04:a3:3c:34:
         f3:fa:e6:68:51:0e:9e:f2:ba:37:25:bd:ab:0d:f0:2c:81:b8:
         67:0c:90:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTXbT92kG3fiNVe8EO07JMtfMrEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE5NDM3M0NFMEIzNDQyMTkyNDJFNDA2QjExQzExNzEw
QzMwMjlGNzAeFw0yMzEwMjMxNDM4MjhaFw0yMzEwMjQxNDU3MjhaMDMxMTAvBgNV
BAMTKEM2MDFBNDE4RDYwMkVEMjk4MEIxQzc5NkE0NzU3RTY5MEYzQTAxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvyAsAUqlkM3229tgJyqCWlk1f
D4w0s2/0io22NwgnB6/8RnxynV/mDqtAL0EAXaJs23UJErDCPtjx+ACCogloVpXq
ozQXwk8wSoiZK7vbvuqVRbHuBSF8QYTAsGM2xSFhXlQubnP3yEgqxWnRl9dpPLL1
4eqHdabA60V1lteYUJGxC3J4DIB+c7qfjQ+rtrTz1Q4fVzdsTqR+Em+GD8fVTn1a
5skZXqhLkjZ7a1Fe6aMfn6VLJURS+DCX7/A48AER/CYa7ooxffxoXE/+7Y6vadCa
ty8VPpqKYtFbs9GQuwcxgfHYTmnQchTnyVjntthOeDIYSu0SRmCifwJ0tsBvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxgGkGNYC7SmAsceWpHV+aQ86AdQwHwYDVR0j
BBgwFoAUqpQ3POCzRCGSQuQGsRwRcQwwKfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB
VXAvMC9BQTk0MzczQ0UwQjM0NDIxOTI0MkU0MDZCMTFDMTE3MTBDMzAyOUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBOTQzNzNDRTBCMzQ0MjE5
MjQyRTQwNkIxMUMxMTcxMEMzMDI5RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC9B
QTk0MzczQ0UwQjM0NDIxOTI0MkU0MDZCMTFDMTE3MTBDMzAyOUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoXnuOvDSEsnnu0cAKgHqgKE8PxNhM0yrrPIE9la4Xt/OVT6Injah8kq+NV17
kwiVj7tWHrKeNrORwAekMBjo0PIlFkwtGxQWxTvjgLXLFh8LSBeIhyYKSdU/XF4L
wbkADsEdFKtH9fWDslMwR2oj60qYaNZz3DLUTVPdDcGhmaH47ByAu359yr6oU5vJ
7UVcW1sKso8IYUqS4hCfRS+GK9aL+QHNEjn6+bHGYXSY8jSJfywG7nIlUbnfNzJG
J5Xc9TA9Y5ms5n9D6FSgvTWP5zAvfqE9w1bjvpbxZryOFNCrpb2oF3IEozw08/rm
aFEOnvK6NyW9qw3wLIG4ZwyQBw==
-----END CERTIFICATE-----