Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft
File:                     741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft (raw, json)
Hash identifier:          GUdhUbh6GGGyIPVtNp3VSUYTe7ptxLGQZvuClddmx4c=
Subject key identifier:   89:D1:82:66:1A:DC:9E:6A:EF:81:C7:48:47:B1:FE:19:62:19:FE:81
Authority key identifier: 74:1F:6F:CE:A8:20:E2:DA:7D:2A:3F:BF:8D:D4:EB:68:51:C6:A1:25
Certificate issuer:       /CN=741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125
Certificate serial:       1F01125F52CDE3BDDCA8FBC3F69C14DA25BFE350
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft
Manifest number:          39
Signing time:             Mon 15 Apr 2024 11:22:06 +0000
Manifest this update:     Mon 15 Apr 2024 11:17:06 +0000
Manifest next update:     Tue 16 Apr 2024 14:08:06 +0000
Files and hashes:         1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: kJ15dwbrkdmIk+CTwjsxR+tmHSqnvubaMrOEqqi53Pw=)
                          2: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: pOg2bGlhflJgUue4HlnmHXUdLUkSA6TZ2HIJvIGEMIk=)
                          3: 741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.crl (hash: /84Ri3DwDdQXNckfH2ZjqV6ZAZKsjNpOtXXUwRxjpmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:12:5f:52:cd:e3:bd:dc:a8:fb:c3:f6:9c:14:da:25:bf:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125
        Validity
            Not Before: Apr 15 11:17:06 2024 GMT
            Not After : Apr 16 14:08:06 2024 GMT
        Subject: CN=89D182661ADC9E6AEF81C74847B1FE196219FE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:59:cc:ee:4e:07:83:08:cc:aa:f7:e1:6f:
                    b0:40:b9:38:50:a5:a4:d2:7a:86:0a:84:d6:22:6e:
                    a4:f6:cf:b1:f3:19:0d:be:8d:a8:85:9a:e9:60:12:
                    45:df:29:c9:28:0a:5f:d5:65:1b:73:38:7e:16:ff:
                    34:7f:c2:22:69:a4:8d:d6:03:9a:48:c9:cf:d5:a4:
                    26:d8:ef:78:56:04:7f:52:2f:1e:32:28:29:45:ef:
                    48:7e:9c:bd:ce:72:be:3b:b5:44:28:4a:36:8c:8a:
                    cf:df:62:75:a7:c2:9e:1b:80:94:2b:ef:8e:bb:92:
                    72:52:98:99:a8:88:06:3d:86:c0:47:26:03:a5:01:
                    2f:a0:3c:9b:1d:ce:fe:28:af:a3:b1:39:74:52:4c:
                    39:c6:b3:5b:65:f5:2d:fb:a4:2a:1e:be:3a:26:4e:
                    2a:a2:c7:a3:77:da:47:2a:93:89:d1:e4:53:90:04:
                    30:98:6c:f4:91:3f:e5:46:1b:9b:79:b0:c3:7d:ee:
                    60:a5:e5:21:2b:ee:ac:94:a6:96:86:94:66:c4:8f:
                    e0:66:b0:46:cc:e0:24:e3:53:13:c8:ba:da:ef:18:
                    d3:58:c2:66:15:a0:de:52:e4:f3:db:5d:43:f1:e4:
                    2a:88:2e:85:72:ba:f3:e8:ba:80:94:59:e3:e9:d5:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D1:82:66:1A:DC:9E:6A:EF:81:C7:48:47:B1:FE:19:62:19:FE:81
            X509v3 Authority Key Identifier:
                keyid:74:1F:6F:CE:A8:20:E2:DA:7D:2A:3F:BF:8D:D4:EB:68:51:C6:A1:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/741F6FCEA820E2DA7D2A3FBF8DD4EB6851C6A125.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:fd:68:37:10:cf:33:b6:ad:dd:b9:d6:7b:79:a4:f6:5c:
         05:3f:27:d2:16:be:41:b8:2e:2e:47:d8:51:d5:76:8d:cd:49:
         29:0d:05:e8:98:c1:4e:01:2d:aa:d7:f1:21:74:1b:2c:ff:74:
         dc:f6:ca:9c:f7:f1:c6:be:13:86:e3:ef:ec:3c:88:07:1b:49:
         bc:7b:e0:49:6d:33:1f:fe:c8:a0:aa:87:2d:45:ed:82:4d:86:
         4b:a8:08:cc:8c:cd:e4:34:cd:a8:75:9d:e9:91:82:25:20:dd:
         d8:b7:23:ba:72:82:b6:4b:8f:37:c3:29:49:90:99:25:0b:42:
         28:2a:fe:67:90:f7:e6:e6:e2:e9:fe:cc:13:0f:d9:2b:8a:22:
         69:fe:41:fd:eb:14:3e:9a:b2:67:bb:51:88:51:e2:f3:bc:97:
         5e:5e:78:56:9f:8c:da:9c:68:9c:d6:e0:98:fa:7b:55:9f:2a:
         5f:3e:f3:22:67:9b:0b:41:40:af:2a:20:ea:46:87:ac:72:78:
         fe:12:1b:a6:e8:44:8f:22:10:bf:61:25:57:30:ea:04:c7:3e:
         a0:88:71:80:e0:7c:20:19:59:ca:3a:d1:47:be:35:3b:34:94:
         17:4b:91:44:56:c9:ce:19:ed:50:4a:6d:89:0b:e6:c4:d0:f2:
         b1:fd:1f:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHwESX1LN473cqPvD9pwU2iW/41AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQxRjZGQ0VBODIwRTJEQTdEMkEzRkJGOERENEVCNjg1
MUM2QTEyNTAeFw0yNDA0MTUxMTE3MDZaFw0yNDA0MTYxNDA4MDZaMDMxMTAvBgNV
BAMTKDg5RDE4MjY2MUFEQzlFNkFFRjgxQzc0ODQ3QjFGRTE5NjIxOUZFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk91nM7k4HgwjMqvfhb7BAuThQ
paTSeoYKhNYibqT2z7HzGQ2+jaiFmulgEkXfKckoCl/VZRtzOH4W/zR/wiJppI3W
A5pIyc/VpCbY73hWBH9SLx4yKClF70h+nL3Ocr47tUQoSjaMis/fYnWnwp4bgJQr
7467knJSmJmoiAY9hsBHJgOlAS+gPJsdzv4or6OxOXRSTDnGs1tl9S37pCoevjom
Tiqix6N32kcqk4nR5FOQBDCYbPSRP+VGG5t5sMN97mCl5SEr7qyUppaGlGbEj+Bm
sEbM4CTjUxPIutrvGNNYwmYVoN5S5PPbXUPx5CqILoVyuvPouoCUWePp1TAjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUidGCZhrcnmrvgcdIR7H+GWIZ/oEwHwYDVR0j
BBgwFoAUdB9vzqgg4tp9Kj+/jdTraFHGoSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU
d1QvMC83NDFGNkZDRUE4MjBFMkRBN0QyQTNGQkY4REQ0RUI2ODUxQzZBMTI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0MUY2RkNFQTgyMEUyREE3
RDJBM0ZCRjhERDRFQjY4NTFDNkExMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC83
NDFGNkZDRUE4MjBFMkRBN0QyQTNGQkY4REQ0RUI2ODUxQzZBMTI1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh/T9aDcQzzO2rd251nt5pPZcBT8n0ha+QbguLkfYUdV2jc1JKQ0F6JjBTgEt
qtfxIXQbLP903PbKnPfxxr4ThuPv7DyIBxtJvHvgSW0zH/7IoKqHLUXtgk2GS6gI
zIzN5DTNqHWd6ZGCJSDd2LcjunKCtkuPN8MpSZCZJQtCKCr+Z5D35ubi6f7MEw/Z
K4oiaf5B/esUPpqyZ7tRiFHi87yXXl54Vp+M2pxonNbgmPp7VZ8qXz7zImebC0FA
ryog6kaHrHJ4/hIbpuhEjyIQv2ElVzDqBMc+oIhxgOB8IBlZyjrRR741OzSUF0uR
RFbJzhntUEptiQvmxNDysf0ftw==
-----END CERTIFICATE-----