Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/0/05282563666771335D0E1A288933FED8BCDE037C.mft
File:                     05282563666771335D0E1A288933FED8BCDE037C.mft (raw, json)
Hash identifier:          xEhFT3mMbQSeLaUGneQsJP5WiUJK8ejDTTt7fPPAI28=
Subject key identifier:   E5:D7:36:FB:90:30:45:FB:BC:D2:D0:F5:8A:A7:5E:2C:FA:B2:CA:F9
Authority key identifier: 05:28:25:63:66:67:71:33:5D:0E:1A:28:89:33:FE:D8:BC:DE:03:7C
Certificate issuer:       /CN=05282563666771335D0E1A288933FED8BCDE037C
Certificate serial:       0B7CD48946CF81EC3DD4A945F85FE65AC9A0FA6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05282563666771335D0E1A288933FED8BCDE037C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/0/05282563666771335D0E1A288933FED8BCDE037C.mft
Manifest number:          89
Signing time:             Wed 10 May 2023 12:12:38 +0000
Manifest this update:     Wed 10 May 2023 12:07:38 +0000
Manifest next update:     Thu 11 May 2023 13:06:38 +0000
Files and hashes:         1: 3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (hash: MuLKLc8AkG2dNTiSLzkZyDcCTdmOtCjHXGDVjm3HtmA=)
                          2: 05282563666771335D0E1A288933FED8BCDE037C.crl (hash: Zr3EhcSbuexKTClFTVB/x2yKTwwC4EyxqgETU69G46w=)
                          3: 323830343a383132343a3a2f33322d3438203d3e20323732343335.roa (hash: l9wtk8R39JuCiTYGFBkYloJRLRHZpbWT34fRZPWd3gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:d4:89:46:cf:81:ec:3d:d4:a9:45:f8:5f:e6:5a:c9:a0:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05282563666771335D0E1A288933FED8BCDE037C
        Validity
            Not Before: May 10 12:07:38 2023 GMT
            Not After : May 11 13:06:38 2023 GMT
        Subject: CN=E5D736FB903045FBBCD2D0F58AA75E2CFAB2CAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:84:6d:33:b8:9e:7c:8b:66:8e:6a:1c:33:
                    e5:1b:c4:e2:e9:0a:a7:7d:84:c0:f9:6e:80:1d:38:
                    4e:f6:5f:48:0d:44:a0:47:fb:99:63:ac:84:09:2d:
                    a9:b0:b8:c3:41:82:37:ed:ea:84:3b:e3:65:02:c6:
                    eb:1b:64:d8:48:2f:f2:ee:53:1b:28:f9:4f:13:b8:
                    c9:fe:b2:37:c9:04:0a:2e:ec:2f:e0:be:2c:a0:9f:
                    48:ae:e9:89:d9:9b:86:c1:be:1a:56:e3:92:7c:53:
                    a4:e5:da:1c:37:9b:e2:ce:da:6a:6f:ff:ae:63:a7:
                    60:9d:2f:67:0c:b4:ce:ac:85:46:b0:8a:f2:04:aa:
                    2e:ea:ec:d3:8f:ba:de:61:0f:f8:d7:e4:78:4b:6a:
                    c7:90:e0:53:c5:b8:c4:af:f3:7e:a2:64:37:03:cf:
                    45:0b:85:47:6c:15:1f:63:ee:ad:c4:3d:45:43:a8:
                    22:ec:8f:7e:96:c7:1f:81:10:d3:ed:c0:16:f6:ca:
                    d0:f6:a2:32:fb:b7:72:5f:05:84:5b:f5:e1:f7:d3:
                    fe:17:b8:3c:89:bf:aa:e1:0f:36:c0:06:81:b5:ab:
                    7e:79:18:f1:52:4c:a8:a9:4a:a3:05:46:98:0a:b0:
                    a3:57:08:98:53:59:7d:13:5e:78:e5:a4:c3:0e:49:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:36:FB:90:30:45:FB:BC:D2:D0:F5:8A:A7:5E:2C:FA:B2:CA:F9
            X509v3 Authority Key Identifier:
                keyid:05:28:25:63:66:67:71:33:5D:0E:1A:28:89:33:FE:D8:BC:DE:03:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/0/05282563666771335D0E1A288933FED8BCDE037C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05282563666771335D0E1A288933FED8BCDE037C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/0/05282563666771335D0E1A288933FED8BCDE037C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:fa:04:ab:4a:9f:ee:78:0f:1b:51:60:e4:f9:77:1b:b6:
         c8:d3:12:9a:69:6b:57:1f:0d:57:62:fb:90:1e:67:35:22:b4:
         29:67:78:d5:ef:04:b4:02:01:89:42:07:7c:42:18:0b:ed:59:
         7a:ae:dc:6e:c0:6b:a4:73:1e:34:b8:1e:d3:7d:81:95:e6:fd:
         02:5c:a3:e6:75:06:5a:41:44:9a:1e:4e:0d:df:ce:0b:d5:a9:
         e1:a0:a8:8b:d5:34:33:68:62:da:87:1d:35:01:e7:62:72:38:
         7c:c9:d1:77:ff:36:c3:83:ee:ca:09:b5:81:9f:bd:68:b3:f0:
         21:37:b9:ea:de:bb:90:91:ba:dd:6c:6a:c9:78:75:83:83:f6:
         10:67:04:7d:5e:e3:dd:ba:c2:f9:76:4d:a0:ce:2b:43:71:9a:
         f1:c2:40:95:ba:c3:a5:3b:a2:03:96:df:bd:2d:95:1b:c4:86:
         4b:fd:6a:4e:32:22:b7:df:c1:7e:ab:03:7d:c3:83:51:4d:8a:
         bb:2c:b8:1e:6a:ea:a0:5b:1c:c0:c2:9c:a9:02:01:8e:bb:45:
         61:2f:8a:51:8a:6f:4a:de:b5:1c:cf:26:3f:bc:20:b8:ab:ba:
         38:b2:04:55:13:d9:13:31:c5:91:c1:77:01:ca:1e:44:a2:7d:
         12:fc:b8:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC3zUiUbPgew91KlF+F/mWsmg+m0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUyODI1NjM2NjY3NzEzMzVEMEUxQTI4ODkzM0ZFRDhC
Q0RFMDM3QzAeFw0yMzA1MTAxMjA3MzhaFw0yMzA1MTExMzA2MzhaMDMxMTAvBgNV
BAMTKEU1RDczNkZCOTAzMDQ1RkJCQ0QyRDBGNThBQTc1RTJDRkFCMkNBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCog4RtM7iefItmjmocM+UbxOLp
Cqd9hMD5boAdOE72X0gNRKBH+5ljrIQJLamwuMNBgjft6oQ742UCxusbZNhIL/Lu
Uxso+U8TuMn+sjfJBAou7C/gviygn0iu6YnZm4bBvhpW45J8U6Tl2hw3m+LO2mpv
/65jp2CdL2cMtM6shUawivIEqi7q7NOPut5hD/jX5HhLaseQ4FPFuMSv836iZDcD
z0ULhUdsFR9j7q3EPUVDqCLsj36Wxx+BENPtwBb2ytD2ojL7t3JfBYRb9eH30/4X
uDyJv6rhDzbABoG1q355GPFSTKipSqMFRpgKsKNXCJhTWX0TXnjlpMMOSegfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5dc2+5AwRfu80tD1iqdeLPqyyvkwHwYDVR0j
BBgwFoAUBSglY2ZncTNdDhooiTP+2LzeA3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE03ZWNmUXU2bnV6YXppeHZVeVpEM2VXOXlQU1phTjFBdEhVTVZLVkd1
Z0svMC8wNTI4MjU2MzY2Njc3MTMzNUQwRTFBMjg4OTMzRkVEOEJDREUwMzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA1MjgyNTYzNjY2NzcxMzM1
RDBFMUEyODg5MzNGRUQ4QkNERTAzN0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RE03ZWNmUXU2bnV6YXppeHZVeVpEM2VXOXlQU1phTjFBdEhVTVZLVkd1Z0svMC8w
NTI4MjU2MzY2Njc3MTMzNUQwRTFBMjg4OTMzRkVEOEJDREUwMzdDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWET6BKtKn+54DxtRYOT5dxu2yNMSmmlrVx8NV2L7kB5nNSK0KWd41e8EtAIB
iUIHfEIYC+1Zeq7cbsBrpHMeNLge032Bleb9Alyj5nUGWkFEmh5ODd/OC9Wp4aCo
i9U0M2hi2ocdNQHnYnI4fMnRd/82w4Puygm1gZ+9aLPwITe56t67kJG63WxqyXh1
g4P2EGcEfV7j3brC+XZNoM4rQ3Ga8cJAlbrDpTuiA5bfvS2VG8SGS/1qTjIit9/B
fqsDfcODUU2Kuyy4HmrqoFscwMKcqQIBjrtFYS+KUYpvSt61HM8mP7wguKu6OLIE
VRPZEzHFkcF3AcoeRKJ9Evy4bQ==
-----END CERTIFICATE-----