Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.mft
File:                     A071F7D70C7997D600B4290FBC57847D6F3C0F2A.mft (raw, json)
Hash identifier:          lyeAUcSPslQ1B7V6a4dzfe6tdikBhhwNZzTK+TXjNRQ=
Subject key identifier:   15:46:DB:5C:AB:0A:18:54:07:E2:D1:C3:5F:AE:4A:AF:8F:C1:63:82
Authority key identifier: A0:71:F7:D7:0C:79:97:D6:00:B4:29:0F:BC:57:84:7D:6F:3C:0F:2A
Certificate issuer:       /CN=A071F7D70C7997D600B4290FBC57847D6F3C0F2A
Certificate serial:       433C9D0F83B009436675DE83E0C54A2D7598153A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.mft
Manifest number:          49
Signing time:             Sun 14 Apr 2024 21:18:31 +0000
Manifest this update:     Sun 14 Apr 2024 21:13:31 +0000
Manifest next update:     Mon 15 Apr 2024 23:36:31 +0000
Files and hashes:         1: 34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (hash: /u9ryj0LVsatrS1/U3IB8B2L5sKnfhwASATrSSH9BDY=)
                          2: 323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (hash: fAYuQlnS5Q9JijAsScIAW7/gKntZ7I7ql9UpDGxf8Q0=)
                          3: A071F7D70C7997D600B4290FBC57847D6F3C0F2A.crl (hash: 1txg4HQFUELy6i0PuuSV/+SNU5ssvoMa9KZgexMhA0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:9d:0f:83:b0:09:43:66:75:de:83:e0:c5:4a:2d:75:98:15:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A071F7D70C7997D600B4290FBC57847D6F3C0F2A
        Validity
            Not Before: Apr 14 21:13:31 2024 GMT
            Not After : Apr 15 23:36:31 2024 GMT
        Subject: CN=1546DB5CAB0A185407E2D1C35FAE4AAF8FC16382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:80:96:6a:37:7c:4e:95:7b:a2:33:7a:72:
                    73:2c:4b:84:6b:1d:3c:3d:75:b1:b0:21:67:b5:c3:
                    af:1c:d6:8f:e9:76:df:22:ea:f8:0f:43:65:10:6c:
                    b7:32:32:58:b6:5f:6e:db:f1:bb:ee:c9:71:b2:71:
                    9c:19:bf:ee:22:8f:f9:c0:38:11:f4:c2:db:90:7f:
                    16:1f:7e:57:7e:d9:34:9d:d2:0c:59:90:aa:4c:b6:
                    5c:d8:c3:26:7e:17:e8:ac:03:55:57:93:6d:d7:79:
                    4a:cd:36:40:3b:00:35:29:93:11:4e:8a:b7:6f:86:
                    47:95:bc:45:c1:14:99:5f:20:f1:fd:16:18:60:e4:
                    4f:51:18:6f:26:28:7f:8a:2c:21:fb:13:03:d1:c2:
                    02:e7:aa:69:c0:3c:77:3c:a6:e7:0c:25:2f:b1:32:
                    96:d9:26:55:8d:cd:0b:60:51:1f:b9:d3:8b:e1:40:
                    c2:a1:93:63:87:c6:8c:49:23:c2:8f:54:b9:6c:06:
                    86:d3:d0:0f:fd:40:d5:dc:4f:e4:20:de:8c:71:e8:
                    25:84:55:d3:24:17:16:29:d4:5b:28:41:2a:36:ba:
                    63:48:d1:1e:f8:e7:b7:2e:e2:2e:f4:04:35:be:56:
                    15:a0:b5:86:41:9a:c4:ee:f3:32:3c:a2:61:0e:a2:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:DB:5C:AB:0A:18:54:07:E2:D1:C3:5F:AE:4A:AF:8F:C1:63:82
            X509v3 Authority Key Identifier:
                keyid:A0:71:F7:D7:0C:79:97:D6:00:B4:29:0F:BC:57:84:7D:6F:3C:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/A071F7D70C7997D600B4290FBC57847D6F3C0F2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:50:af:94:c1:ae:fe:10:30:cc:9d:b4:47:22:e2:2d:f2:
         93:b2:cb:36:c7:57:f0:54:83:85:a9:20:8b:ed:23:99:6d:1e:
         e7:35:8d:80:33:bc:c3:85:64:63:12:04:a4:85:f3:84:2a:e0:
         f2:78:43:7e:da:a4:40:f1:35:c9:b7:30:a2:7c:79:ce:ad:b6:
         ff:9a:06:a9:69:ba:05:64:1b:89:63:2e:65:1a:70:bb:57:36:
         bc:fe:4c:4f:5b:a7:4b:1b:37:9b:92:ed:5c:59:a2:6b:46:d1:
         e9:6c:87:fe:95:32:1d:01:ae:2a:df:c0:5f:36:18:45:70:09:
         dd:5f:c8:ba:17:6f:19:4e:9a:06:92:b5:7d:86:81:9c:8a:fa:
         9b:41:37:2e:ae:2c:4a:66:9e:37:bc:13:d6:83:79:c4:37:28:
         7b:4a:e4:7b:a2:f9:96:ef:b4:3c:54:44:86:cd:6e:b7:45:c9:
         da:20:07:a3:cd:a5:ef:85:5f:68:b5:de:9d:cf:71:05:87:7a:
         99:61:f9:43:6d:c3:3c:d6:cb:9c:b4:b9:b8:9c:5b:8c:a5:4e:
         34:58:c5:76:f8:8c:24:26:9e:06:9e:d2:22:75:16:d8:37:ab:
         f0:3b:cc:e9:66:ce:e5:42:68:64:3d:59:9e:08:9d:d6:4f:94:
         7b:f2:0d:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQzydD4OwCUNmdd6D4MVKLXWYFTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3MUY3RDcwQzc5OTdENjAwQjQyOTBGQkM1Nzg0N0Q2
RjNDMEYyQTAeFw0yNDA0MTQyMTEzMzFaFw0yNDA0MTUyMzM2MzFaMDMxMTAvBgNV
BAMTKDE1NDZEQjVDQUIwQTE4NTQwN0UyRDFDMzVGQUU0QUFGOEZDMTYzODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KYCWajd8TpV7ojN6cnMsS4Rr
HTw9dbGwIWe1w68c1o/pdt8i6vgPQ2UQbLcyMli2X27b8bvuyXGycZwZv+4ij/nA
OBH0wtuQfxYffld+2TSd0gxZkKpMtlzYwyZ+F+isA1VXk23XeUrNNkA7ADUpkxFO
irdvhkeVvEXBFJlfIPH9Fhhg5E9RGG8mKH+KLCH7EwPRwgLnqmnAPHc8pucMJS+x
MpbZJlWNzQtgUR+504vhQMKhk2OHxoxJI8KPVLlsBobT0A/9QNXcT+Qg3oxx6CWE
VdMkFxYp1FsoQSo2umNI0R7457cu4i70BDW+VhWgtYZBmsTu8zI8omEOohVrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFUbbXKsKGFQH4tHDX65Kr4/BY4IwHwYDVR0j
BBgwFoAUoHH31wx5l9YAtCkPvFeEfW88DyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHlNYUJBRm1UYkVidTFZeHN2Mm5kd0NKR1RHY2g1RW1CcFJWaWt2SnVx
QksvMC9BMDcxRjdENzBDNzk5N0Q2MDBCNDI5MEZCQzU3ODQ3RDZGM0MwRjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwNzFGN0Q3MEM3OTk3RDYw
MEI0MjkwRkJDNTc4NDdENkYzQzBGMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHlNYUJBRm1UYkVidTFZeHN2Mm5kd0NKR1RHY2g1RW1CcFJWaWt2SnVxQksvMC9B
MDcxRjdENzBDNzk5N0Q2MDBCNDI5MEZCQzU3ODQ3RDZGM0MwRjJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACLNQr5TBrv4QMMydtEci4i3yk7LLNsdX8FSDhakgi+0jmW0e5zWNgDO8w4Vk
YxIEpIXzhCrg8nhDftqkQPE1ybcwonx5zq22/5oGqWm6BWQbiWMuZRpwu1c2vP5M
T1unSxs3m5LtXFmia0bR6WyH/pUyHQGuKt/AXzYYRXAJ3V/IuhdvGU6aBpK1fYaB
nIr6m0E3Lq4sSmaeN7wT1oN5xDcoe0rke6L5lu+0PFREhs1ut0XJ2iAHo82l74Vf
aLXenc9xBYd6mWH5Q23DPNbLnLS5uJxbjKVONFjFdviMJCaeBp7SInUW2Der8DvM
6WbO5UJoZD1Zngid1k+Ue/INaQ==
-----END CERTIFICATE-----