Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft
File:                     EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft (raw, json)
Hash identifier:          PGpX/e5/xJOnwNhhMycvdJycw2iUDf4sUCGwxq1ePYg=
Subject key identifier:   C4:A6:27:8D:88:1E:B8:25:2A:DB:BE:33:DB:1B:7A:1E:13:75:5C:AB
Authority key identifier: EE:A4:87:DF:64:C1:FB:6E:B6:39:4B:D3:B5:A6:C6:4D:9E:92:43:58
Certificate issuer:       /CN=EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358
Certificate serial:       4FC060F51DCC4619954526135CA347522DC2109A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft
Manifest number:          01BB
Signing time:             Mon 28 Aug 2023 21:51:54 +0000
Manifest this update:     Mon 28 Aug 2023 21:46:54 +0000
Manifest next update:     Tue 29 Aug 2023 23:24:54 +0000
Files and hashes:         1: 3138372e36332e3132302e302f32322d3234203d3e20323730373734.roa (hash: vyXPNpUNVDBc5p2krAscJw4mkkCzRoXpVx1bgMquiDQ=)
                          2: EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.crl (hash: k90CeeJQyxzP4ET5LwE2Tux1JbMykSFlZvU2VlBPrcE=)
                          3: 323830343a373133343a3a2f33322d3333203d3e20323730373734.roa (hash: wQRsDMt4WZmbWjFpFPTouNRsTh1NbpT2TDTMKnbyx7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:60:f5:1d:cc:46:19:95:45:26:13:5c:a3:47:52:2d:c2:10:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358
        Validity
            Not Before: Aug 28 21:46:54 2023 GMT
            Not After : Aug 29 23:24:54 2023 GMT
        Subject: CN=C4A6278D881EB8252ADBBE33DB1B7A1E13755CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:a9:9b:50:10:db:c8:b0:8e:b2:42:79:73:
                    1a:89:f6:6a:4d:36:14:b8:b9:5d:2b:5e:ea:13:ab:
                    4b:cc:f6:03:5d:4f:f1:19:19:72:71:6f:14:45:f1:
                    6f:f0:07:11:a7:0b:25:23:e1:17:90:bb:16:93:31:
                    70:b5:1e:12:66:e1:27:45:9c:4f:8a:a9:07:b7:58:
                    d9:d7:97:43:2f:6f:b1:47:e0:b1:89:48:45:7b:f5:
                    86:ab:da:76:b2:38:47:bc:97:c9:e4:cc:7e:78:2d:
                    14:b9:43:6f:35:56:64:48:f3:f2:57:29:d0:01:9f:
                    67:b3:83:ea:79:f5:3b:63:0e:0a:70:d5:b1:9c:55:
                    8c:b6:d6:aa:5f:7f:cc:a6:96:8b:ed:fa:72:a3:e8:
                    21:64:80:fc:a7:6b:77:fa:f4:c3:c7:df:df:d3:c1:
                    84:f5:c4:26:49:a6:56:ec:32:24:c2:fd:45:d6:47:
                    62:26:d8:aa:db:0a:4c:b8:db:8c:77:d2:fe:db:e1:
                    06:26:ca:de:b6:dd:d1:56:f5:40:fb:5b:5a:f2:d8:
                    9d:7d:cb:5e:56:7f:98:22:58:ea:ba:85:d1:24:d5:
                    ce:a9:71:ea:2e:63:2e:d8:bc:6e:72:18:08:b1:09:
                    cc:04:e9:20:67:53:77:8d:93:8d:48:0d:48:0c:b8:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:27:8D:88:1E:B8:25:2A:DB:BE:33:DB:1B:7A:1E:13:75:5C:AB
            X509v3 Authority Key Identifier:
                keyid:EE:A4:87:DF:64:C1:FB:6E:B6:39:4B:D3:B5:A6:C6:4D:9E:92:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:09:63:09:9b:22:43:a3:78:6a:6a:99:3b:dc:8c:85:c3:39:
         cc:5f:39:2d:f9:a7:bf:ef:d0:fd:42:64:06:10:23:df:b2:ed:
         c3:fe:56:d2:b1:53:dd:3f:9a:fd:c3:34:98:eb:50:44:d5:1b:
         b9:42:58:e3:f3:0a:06:5d:84:c3:45:d8:a3:57:ef:5b:d8:4f:
         fe:08:b8:03:b6:0b:60:82:3a:77:05:3e:5f:57:60:c7:54:e9:
         ec:30:7b:d2:6f:08:84:3b:50:f7:0a:e6:6a:90:96:ab:13:e2:
         37:66:aa:61:ad:89:cf:95:10:ee:16:a4:42:38:b6:00:ef:18:
         47:c9:80:c8:3f:47:77:06:d4:69:21:bf:51:77:42:5f:93:94:
         3b:a4:e3:cb:44:a4:d8:1a:c3:5c:ad:56:69:20:7b:3a:f5:8d:
         bc:7c:08:56:84:d1:06:09:f2:f9:aa:f4:2b:0e:42:97:12:82:
         6a:f2:14:2d:1a:00:a7:5f:b9:8a:f5:35:1b:93:2d:cf:63:3c:
         f1:07:df:72:b1:1d:30:23:c9:88:ea:88:42:9b:dc:6c:14:30:
         7e:08:f9:e2:62:d2:e8:da:1a:32:36:5e:51:1d:1c:b4:8a:cf:
         ff:18:80:d0:89:89:8d:48:7b:25:0d:ad:13:40:16:dc:21:45:
         ef:92:c6:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT8Bg9R3MRhmVRSYTXKNHUi3CEJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBNDg3REY2NEMxRkI2RUI2Mzk0QkQzQjVBNkM2NEQ5
RTkyNDM1ODAeFw0yMzA4MjgyMTQ2NTRaFw0yMzA4MjkyMzI0NTRaMDMxMTAvBgNV
BAMTKEM0QTYyNzhEODgxRUI4MjUyQURCQkUzM0RCMUI3QTFFMTM3NTVDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07KmbUBDbyLCOskJ5cxqJ9mpN
NhS4uV0rXuoTq0vM9gNdT/EZGXJxbxRF8W/wBxGnCyUj4ReQuxaTMXC1HhJm4SdF
nE+KqQe3WNnXl0Mvb7FH4LGJSEV79Yar2nayOEe8l8nkzH54LRS5Q281VmRI8/JX
KdABn2ezg+p59TtjDgpw1bGcVYy21qpff8ymlovt+nKj6CFkgPyna3f69MPH39/T
wYT1xCZJplbsMiTC/UXWR2Im2KrbCky424x30v7b4QYmyt623dFW9UD7W1ry2J19
y15Wf5giWOq6hdEk1c6pceouYy7YvG5yGAixCcwE6SBnU3eNk41IDUgMuG2/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxKYnjYgeuCUq274z2xt6HhN1XKswHwYDVR0j
BBgwFoAU7qSH32TB+262OUvTtabGTZ6SQ1gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHFKUEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0Zt
WHYvMS9FRUE0ODdERjY0QzFGQjZFQjYzOTRCRDNCNUE2QzY0RDlFOTI0MzU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFQTQ4N0RGNjRDMUZCNkVC
NjM5NEJEM0I1QTZDNjREOUU5MjQzNTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHFKUEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0ZtWHYvMS9F
RUE0ODdERjY0QzFGQjZFQjYzOTRCRDNCNUE2QzY0RDlFOTI0MzU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArwljCZsiQ6N4amqZO9yMhcM5zF85Lfmnv+/Q/UJkBhAj37Ltw/5W0rFT3T+a
/cM0mOtQRNUbuUJY4/MKBl2Ew0XYo1fvW9hP/gi4A7YLYII6dwU+X1dgx1Tp7DB7
0m8IhDtQ9wrmapCWqxPiN2aqYa2Jz5UQ7hakQji2AO8YR8mAyD9HdwbUaSG/UXdC
X5OUO6Tjy0Sk2BrDXK1WaSB7OvWNvHwIVoTRBgny+ar0Kw5ClxKCavIULRoAp1+5
ivU1G5Mtz2M88QffcrEdMCPJiOqIQpvcbBQwfgj54mLS6NoaMjZeUR0ctIrP/xiA
0ImJjUh7JQ2tE0AW3CFF75LGnw==
-----END CERTIFICATE-----