Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft
File:                     6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft (raw, json)
Hash identifier:          k+Zt16UAITYxmtNmHjexuBvk2Cslim0FWldOL70t/8E=
Subject key identifier:   6D:01:DC:14:BA:7A:BC:B1:04:DB:7B:E5:6B:A2:B5:44:EE:F8:49:03
Authority key identifier: 65:09:C1:AC:3A:C2:E9:13:FD:B1:2B:8E:9D:88:E6:04:26:28:6F:C9
Certificate issuer:       /CN=6509C1AC3AC2E913FDB12B8E9D88E60426286FC9
Certificate serial:       2E43156FC209CB0249D01308B6DE4B0C074034C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft
Manifest number:          E5
Signing time:             Sun 14 Apr 2024 22:40:33 +0000
Manifest this update:     Sun 14 Apr 2024 22:35:33 +0000
Manifest next update:     Tue 16 Apr 2024 00:17:33 +0000
Files and hashes:         1: 323830343a356463343a3a2f33322d313238203d3e20323638393931.roa (hash: zndvtdPd72fM3UBRMLyGUcXwXXCqwfAJ7YvpIvopu6U=)
                          2: 34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (hash: po8GWHMdgQ+zcKdwP3IPD4J86/QMEniuVfJ6tAeFI6s=)
                          3: 6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.crl (hash: GrBqw1NFn54Nqszswaop8Pbr6wrz3xFHe0zO3C60rHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:15:6f:c2:09:cb:02:49:d0:13:08:b6:de:4b:0c:07:40:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6509C1AC3AC2E913FDB12B8E9D88E60426286FC9
        Validity
            Not Before: Apr 14 22:35:33 2024 GMT
            Not After : Apr 16 00:17:33 2024 GMT
        Subject: CN=6D01DC14BA7ABCB104DB7BE56BA2B544EEF84903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:15:eb:70:be:01:a5:5d:45:45:6d:85:9b:
                    8a:98:f3:f1:5f:6f:62:11:8c:59:39:00:d6:16:ea:
                    e2:cd:f2:63:57:7b:df:26:4d:22:ec:88:8c:7f:fe:
                    c4:15:5f:77:58:51:87:f3:64:46:1a:11:7f:e0:a4:
                    08:09:a6:3a:e3:be:b7:db:c7:43:3a:9f:53:ba:fc:
                    22:a5:5b:0e:5b:43:7a:b7:7b:b2:4e:77:bf:c3:40:
                    d0:42:7d:2f:c0:5f:81:56:54:be:07:61:53:40:c2:
                    3b:d1:7f:09:90:b4:44:3f:bb:28:0c:19:56:8b:eb:
                    a8:ec:32:b7:76:ab:49:fe:7d:4e:2c:e1:86:ac:16:
                    53:dd:66:7a:d3:06:14:20:c0:5b:ed:34:b4:13:73:
                    45:64:c1:4f:a9:69:d3:5e:5f:63:46:25:66:2d:c4:
                    8c:28:60:05:bc:07:13:61:09:66:5b:6d:f8:66:af:
                    ac:8a:e2:ea:ba:b2:16:66:e4:f7:05:c3:4d:42:c9:
                    08:4f:bb:49:6c:e7:a3:40:43:d3:22:9b:c5:bc:82:
                    b0:92:17:c3:3f:fb:d1:8a:4e:31:07:f2:d3:49:af:
                    ab:e2:8f:b2:14:86:10:4b:0a:e6:6b:6d:c4:d7:30:
                    a7:f0:bb:f1:ca:56:52:f8:a7:11:69:75:99:f7:df:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:01:DC:14:BA:7A:BC:B1:04:DB:7B:E5:6B:A2:B5:44:EE:F8:49:03
            X509v3 Authority Key Identifier:
                keyid:65:09:C1:AC:3A:C2:E9:13:FD:B1:2B:8E:9D:88:E6:04:26:28:6F:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:cc:dd:3a:e4:fc:7e:63:58:a7:c5:c9:3a:1f:cc:3b:3d:8d:
         9f:d8:53:d9:0e:62:65:96:e5:80:eb:e9:c5:93:45:1a:0a:90:
         f7:fd:61:1b:22:fd:ee:0b:7d:ad:a2:86:2b:10:1a:92:97:68:
         6b:e0:c2:10:ef:c4:53:2c:80:f3:31:53:45:bb:54:b3:1e:6d:
         85:c7:99:c5:26:bd:2e:0b:7c:b5:1c:2d:b0:7d:ec:b4:0a:01:
         c0:83:79:06:f9:ca:37:a2:7b:32:87:44:58:bb:c6:ae:c3:5c:
         11:6c:ca:ac:f7:e8:a5:5f:eb:44:18:56:c0:a3:f0:a7:da:34:
         08:0b:8b:33:ca:d9:4d:92:49:ff:97:06:5c:91:e2:26:5f:94:
         79:b1:09:38:fb:44:79:e7:82:3f:e3:28:0d:53:f8:a3:61:47:
         93:6d:b6:07:3e:39:d9:c3:64:9f:2f:63:22:3a:43:82:24:ea:
         74:ec:83:74:5c:55:a6:ab:2e:b9:e3:55:14:d9:2a:cd:ff:b6:
         25:c0:46:4c:5c:9d:30:95:4b:d7:2e:63:16:4e:ef:ec:f2:ac:
         ef:51:32:1d:ce:41:63:c5:3b:ac:16:b3:3a:9d:d6:f8:20:0d:
         af:d5:03:09:ad:ad:aa:35:6d:b2:6e:27:1f:48:b6:28:66:f2:
         84:20:52:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULkMVb8IJywJJ0BMItt5LDAdANMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUwOUMxQUMzQUMyRTkxM0ZEQjEyQjhFOUQ4OEU2MDQy
NjI4NkZDOTAeFw0yNDA0MTQyMjM1MzNaFw0yNDA0MTYwMDE3MzNaMDMxMTAvBgNV
BAMTKDZEMDFEQzE0QkE3QUJDQjEwNERCN0JFNTZCQTJCNTQ0RUVGODQ5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwhXrcL4BpV1FRW2Fm4qY8/Ff
b2IRjFk5ANYW6uLN8mNXe98mTSLsiIx//sQVX3dYUYfzZEYaEX/gpAgJpjrjvrfb
x0M6n1O6/CKlWw5bQ3q3e7JOd7/DQNBCfS/AX4FWVL4HYVNAwjvRfwmQtEQ/uygM
GVaL66jsMrd2q0n+fU4s4YasFlPdZnrTBhQgwFvtNLQTc0VkwU+padNeX2NGJWYt
xIwoYAW8BxNhCWZbbfhmr6yK4uq6shZm5PcFw01CyQhPu0ls56NAQ9Mim8W8grCS
F8M/+9GKTjEH8tNJr6vij7IUhhBLCuZrbcTXMKfwu/HKVlL4pxFpdZn33wYbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbQHcFLp6vLEE23vla6K1RO74SQMwHwYDVR0j
BBgwFoAUZQnBrDrC6RP9sSuOnYjmBCYob8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3
bXIvMC82NTA5QzFBQzNBQzJFOTEzRkRCMTJCOEU5RDg4RTYwNDI2Mjg2RkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1MDlDMUFDM0FDMkU5MTNG
REIxMkI4RTlEODhFNjA0MjYyODZGQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3bXIvMC82
NTA5QzFBQzNBQzJFOTEzRkRCMTJCOEU5RDg4RTYwNDI2Mjg2RkM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt8zdOuT8fmNYp8XJOh/MOz2Nn9hT2Q5iZZblgOvpxZNFGgqQ9/1hGyL97gt9
raKGKxAakpdoa+DCEO/EUyyA8zFTRbtUsx5thceZxSa9Lgt8tRwtsH3stAoBwIN5
BvnKN6J7ModEWLvGrsNcEWzKrPfopV/rRBhWwKPwp9o0CAuLM8rZTZJJ/5cGXJHi
Jl+UebEJOPtEeeeCP+MoDVP4o2FHk222Bz452cNkny9jIjpDgiTqdOyDdFxVpqsu
ueNVFNkqzf+2JcBGTFydMJVL1y5jFk7v7PKs71EyHc5BY8U7rBazOp3W+CANr9UD
Ca2tqjVtsm4nH0i2KGbyhCBSxQ==
-----END CERTIFICATE-----