Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.mft
File:                     8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.mft (raw, json)
Hash identifier:          37KYTDd2Kghs5fE2Kv7TZe5UPQI+dr8zn4Ac02YKE6Y=
Subject key identifier:   77:66:98:0D:25:4D:3C:AC:F8:25:B3:DB:BB:5F:3D:B1:50:F7:0A:C9
Authority key identifier: 8E:E7:F9:AC:25:9C:15:EB:EB:D5:BD:97:CE:7E:7E:A5:30:89:95:4E
Certificate issuer:       /CN=8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E
Certificate serial:       54AF4615A4D841DA8E1F28A2596416098B69045E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.mft
Manifest number:          20
Signing time:             Fri 17 Mar 2023 17:02:18 +0000
Manifest this update:     Fri 17 Mar 2023 16:57:18 +0000
Manifest next update:     Sat 18 Mar 2023 19:12:18 +0000
Files and hashes:         1: 34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (hash: /EX0KdBV3HUR12mdMIDNFNT56emiqpfBHCEp5tvF9mU=)
                          2: 8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.crl (hash: EsZTlqlEyAs/EfrTk3bqzgaJJLJSO1DCe2tx3GCBwM4=)
                          3: 323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (hash: 0SH6l/631xoo36AneMiJbI8EgOxkHjVfT/MadqzqQU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:af:46:15:a4:d8:41:da:8e:1f:28:a2:59:64:16:09:8b:69:04:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E
        Validity
            Not Before: Mar 17 16:57:18 2023 GMT
            Not After : Mar 18 19:12:18 2023 GMT
        Subject: CN=7766980D254D3CACF825B3DBBB5F3DB150F70AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:1e:ac:0d:ed:f1:82:90:bb:f9:fd:c8:32:
                    f7:10:e1:6f:c6:42:09:92:ad:c2:69:1f:f6:53:df:
                    ab:cd:b5:2c:fe:aa:a8:54:09:21:92:cf:74:f9:7e:
                    7e:d3:71:ad:ef:4c:1b:6a:05:20:84:6e:66:f6:e0:
                    8e:e2:d5:fc:26:78:9a:6d:7b:0d:5d:38:0f:cd:76:
                    fe:64:aa:ab:89:d9:59:6a:39:8a:42:a3:b3:c8:da:
                    09:77:4c:b1:97:d3:8c:0a:61:8f:ed:af:42:8d:36:
                    29:f8:ff:76:61:c8:05:91:bd:5e:66:53:a9:aa:4c:
                    0a:7c:a2:9a:98:5a:d9:5e:a6:9f:6b:51:c6:e9:fc:
                    44:1d:e6:7e:52:f6:1f:fa:bf:f9:b8:2b:72:b8:29:
                    ab:85:20:d1:2a:f1:d4:22:9a:26:4b:4f:a9:3b:24:
                    63:f0:c0:c7:07:ea:06:b0:f6:5d:0f:dd:3f:e1:84:
                    f4:a8:e3:ae:96:b6:09:bc:67:fb:94:8c:c5:e8:99:
                    54:3e:95:ea:54:6b:39:1f:ff:e9:cd:4c:fa:d9:f6:
                    eb:09:bd:25:ee:f3:4a:02:a2:91:fb:f9:70:cb:3a:
                    c9:6d:31:6a:d5:8f:01:9c:03:d7:eb:50:95:73:e3:
                    c5:bd:cd:b5:3f:9c:13:82:f8:a7:66:4c:d4:26:d1:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:66:98:0D:25:4D:3C:AC:F8:25:B3:DB:BB:5F:3D:B1:50:F7:0A:C9
            X509v3 Authority Key Identifier:
                keyid:8E:E7:F9:AC:25:9C:15:EB:EB:D5:BD:97:CE:7E:7E:A5:30:89:95:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/8EE7F9AC259C15EBEBD5BD97CE7E7EA53089954E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:87:f3:a8:82:b6:c6:b5:df:19:57:b0:9b:bc:eb:88:1b:ef:
         48:aa:fd:98:83:54:a6:0a:82:51:e6:1a:a6:13:6c:df:e9:15:
         ab:f6:dc:a7:b8:a3:b7:62:9b:c0:55:2b:60:be:f5:ff:ea:07:
         74:eb:65:9e:07:aa:92:94:d9:03:be:cb:ed:b0:94:f4:ef:a0:
         99:9d:d3:64:e6:c9:00:42:b2:39:56:0b:78:a4:ec:5e:29:0a:
         05:12:40:2f:7b:c4:a5:75:e4:c1:f8:23:47:df:d6:74:cb:b2:
         87:9e:3f:86:82:25:6e:2c:8a:77:c5:33:2c:74:c8:d6:17:3a:
         5e:c7:eb:c5:5d:2c:89:88:7f:9b:12:db:eb:2b:93:c2:a0:eb:
         1f:f4:46:06:e3:c0:21:b1:21:50:62:a2:c1:f5:f4:f0:9c:eb:
         e6:76:77:02:f5:bc:90:d3:3e:86:c5:ee:9b:e5:1e:b0:56:a4:
         70:80:54:89:2b:c2:42:48:b3:69:0e:bc:e0:5d:98:86:cd:f5:
         79:3e:aa:4c:35:2b:fc:60:92:d4:2a:13:a7:6c:d5:93:df:34:
         c3:6c:9b:b4:fa:b8:91:fe:a4:10:ea:64:64:4b:66:e7:da:98:
         9d:34:13:30:75:4e:8e:fc:00:99:e5:71:32:0c:d1:e4:47:83:
         b7:e7:bc:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVK9GFaTYQdqOHyiiWWQWCYtpBF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFN0Y5QUMyNTlDMTVFQkVCRDVCRDk3Q0U3RTdFQTUz
MDg5OTU0RTAeFw0yMzAzMTcxNjU3MThaFw0yMzAzMTgxOTEyMThaMDMxMTAvBgNV
BAMTKDc3NjY5ODBEMjU0RDNDQUNGODI1QjNEQkJCNUYzREIxNTBGNzBBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6th6sDe3xgpC7+f3IMvcQ4W/G
QgmSrcJpH/ZT36vNtSz+qqhUCSGSz3T5fn7Tca3vTBtqBSCEbmb24I7i1fwmeJpt
ew1dOA/Ndv5kqquJ2VlqOYpCo7PI2gl3TLGX04wKYY/tr0KNNin4/3ZhyAWRvV5m
U6mqTAp8opqYWtlepp9rUcbp/EQd5n5S9h/6v/m4K3K4KauFINEq8dQimiZLT6k7
JGPwwMcH6gaw9l0P3T/hhPSo466Wtgm8Z/uUjMXomVQ+lepUazkf/+nNTPrZ9usJ
vSXu80oCopH7+XDLOsltMWrVjwGcA9frUJVz48W9zbU/nBOC+KdmTNQm0Wr/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUd2aYDSVNPKz4JbPbu189sVD3CskwHwYDVR0j
BBgwFoAUjuf5rCWcFevr1b2Xzn5+pTCJlU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2
ZGgvMC84RUU3RjlBQzI1OUMxNUVCRUJENUJEOTdDRTdFN0VBNTMwODk5NTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhFRTdGOUFDMjU5QzE1RUJF
QkQ1QkQ5N0NFN0U3RUE1MzA4OTk1NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2ZGgvMC84
RUU3RjlBQzI1OUMxNUVCRUJENUJEOTdDRTdFN0VBNTMwODk5NTRFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFIfzqIK2xrXfGVewm7zriBvvSKr9mINUpgqCUeYaphNs3+kVq/bcp7ijt2Kb
wFUrYL71/+oHdOtlngeqkpTZA77L7bCU9O+gmZ3TZObJAEKyOVYLeKTsXikKBRJA
L3vEpXXkwfgjR9/WdMuyh54/hoIlbiyKd8UzLHTI1hc6XsfrxV0siYh/mxLb6yuT
wqDrH/RGBuPAIbEhUGKiwfX08Jzr5nZ3AvW8kNM+hsXum+UesFakcIBUiSvCQkiz
aQ684F2Yhs31eT6qTDUr/GCS1CoTp2zVk980w2ybtPq4kf6kEOpkZEtm59qYnTQT
MHVOjvwAmeVxMgzR5EeDt+e8tw==
-----END CERTIFICATE-----