Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft
File:                     A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft (raw, json)
Hash identifier:          yHKiU1uW8wnEpm9F6AmkT0clmswx06KDbBayRSi2J+g=
Subject key identifier:   50:62:31:03:32:F8:6A:49:1E:1A:AA:F2:CC:86:12:B5:A7:58:EC:00
Authority key identifier: A4:EE:90:86:83:8F:C8:FB:24:11:06:1B:25:1E:9E:40:5C:2B:56:DF
Certificate issuer:       /CN=A4EE9086838FC8FB2411061B251E9E405C2B56DF
Certificate serial:       33B257405A0B9EE49CE9EB8AE3F5F776BD123A9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft
Manifest number:          052C
Signing time:             Sun 14 Apr 2024 19:53:00 +0000
Manifest this update:     Sun 14 Apr 2024 19:48:00 +0000
Manifest next update:     Mon 15 Apr 2024 22:59:00 +0000
Files and hashes:         1: 323830343a373731303a3a2f33322d3438203d3e20323731313532.roa (hash: 2swmeVfWCxtomEnCciQGSPEgy7xoGx5m/U28qj0qb8E=)
                          2: 3137392e34322e3134302e302f32322d3234203d3e20323731313532.roa (hash: t/d2k55wKzeO4QQPfFi6OWI/UuaaA/Xhw+jEcPF+ZLA=)
                          3: A4EE9086838FC8FB2411061B251E9E405C2B56DF.crl (hash: GDb7Z+nZOUAZbgQhG+M+jzpS6tvIjanZ8oiCCto8soo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b2:57:40:5a:0b:9e:e4:9c:e9:eb:8a:e3:f5:f7:76:bd:12:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EE9086838FC8FB2411061B251E9E405C2B56DF
        Validity
            Not Before: Apr 14 19:48:00 2024 GMT
            Not After : Apr 15 22:59:00 2024 GMT
        Subject: CN=5062310332F86A491E1AAAF2CC8612B5A758EC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:fb:bc:ff:71:05:8a:2e:8b:a7:76:f6:d9:
                    23:91:a0:1f:69:b3:93:f8:4b:85:72:1c:f1:b3:02:
                    4a:76:63:e7:c2:21:59:5e:18:87:e6:d3:3b:41:f1:
                    8c:bc:b6:39:cc:ff:f6:1c:05:bb:81:42:12:5f:f0:
                    cd:d5:1b:c4:a8:76:b0:76:11:eb:3d:b3:d2:6e:a6:
                    c1:68:1c:67:ea:95:4e:27:9f:b3:63:6b:d7:3b:f4:
                    60:7b:76:90:a1:eb:48:46:6a:04:f8:3e:7b:ec:b3:
                    83:9f:83:af:ba:a5:f6:56:20:10:cc:3d:fa:38:c7:
                    2f:d5:fb:ee:57:90:2c:45:61:c0:25:e7:31:df:70:
                    d2:63:7f:b0:bd:bc:d9:82:16:3c:34:c0:28:d8:1c:
                    d1:8d:4a:24:46:87:33:52:fd:11:9c:63:9e:a1:48:
                    67:46:8e:20:a1:46:f7:5f:a7:a1:a6:07:08:9a:9b:
                    28:41:3e:6b:b7:2a:bf:cf:e6:11:df:ac:0a:26:24:
                    76:bd:db:51:b6:b9:c6:0c:e1:3b:be:1d:47:46:91:
                    dc:5b:de:0c:94:b2:b1:4a:e7:63:13:1d:dc:4c:9b:
                    8e:c3:cd:d6:7f:86:c6:9d:0d:f4:a1:ef:06:24:0b:
                    b2:85:a3:da:7f:65:95:b8:97:ca:c2:e8:b6:c5:22:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:31:03:32:F8:6A:49:1E:1A:AA:F2:CC:86:12:B5:A7:58:EC:00
            X509v3 Authority Key Identifier:
                keyid:A4:EE:90:86:83:8F:C8:FB:24:11:06:1B:25:1E:9E:40:5C:2B:56:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8FnCKSGhj2z1dTBBrWHFxTEVVw1ZKhFQPYJPnmBw4cj/0/A4EE9086838FC8FB2411061B251E9E405C2B56DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:9b:89:14:f1:ef:4e:df:0e:2e:f6:56:fd:76:ff:7a:e9:
         e5:d7:40:4f:e1:71:b0:9a:5d:03:08:f4:78:ed:ce:0e:a5:53:
         a5:06:07:8e:5c:ed:c4:60:e7:29:17:cd:d1:9b:a9:ac:df:27:
         60:12:05:1b:af:7e:09:55:ac:f7:4a:bd:c8:94:0e:41:8d:c2:
         e9:36:36:1f:10:d5:ff:14:31:d0:85:a1:86:7d:0f:63:a8:e3:
         46:90:b6:95:e1:b4:70:f4:54:16:1f:d7:3e:aa:9b:5b:11:44:
         04:d6:d8:81:2b:ae:9f:25:e3:7d:9b:60:f8:ce:21:f3:23:50:
         86:3f:c6:73:b4:fd:db:29:b9:0d:52:a0:be:9a:b7:ef:cd:45:
         a9:2b:04:47:ca:72:60:5d:7b:cc:a3:94:3b:d4:4b:fc:54:57:
         34:d4:ea:93:84:55:85:0f:52:74:27:52:8b:06:34:74:18:7a:
         a1:c9:92:ff:c4:0d:c9:2a:45:14:26:d7:7a:27:97:0c:8d:4d:
         fe:0b:25:31:1b:8f:40:00:fe:fe:43:13:cf:b1:7a:3a:08:0a:
         77:ba:74:39:41:24:53:b1:27:93:ef:83:d8:83:5a:96:6d:c7:
         7d:a2:41:d1:02:70:fb:65:9b:ec:1c:29:0e:45:ac:7c:cb:fc:
         90:4d:32:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM7JXQFoLnuSc6euK4/X3dr0SOp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFRTkwODY4MzhGQzhGQjI0MTEwNjFCMjUxRTlFNDA1
QzJCNTZERjAeFw0yNDA0MTQxOTQ4MDBaFw0yNDA0MTUyMjU5MDBaMDMxMTAvBgNV
BAMTKDUwNjIzMTAzMzJGODZBNDkxRTFBQUFGMkNDODYxMkI1QTc1OEVDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLa/u8/3EFii6Lp3b22SORoB9p
s5P4S4VyHPGzAkp2Y+fCIVleGIfm0ztB8Yy8tjnM//YcBbuBQhJf8M3VG8SodrB2
Ees9s9JupsFoHGfqlU4nn7Nja9c79GB7dpCh60hGagT4Pnvss4Ofg6+6pfZWIBDM
Pfo4xy/V++5XkCxFYcAl5zHfcNJjf7C9vNmCFjw0wCjYHNGNSiRGhzNS/RGcY56h
SGdGjiChRvdfp6GmBwiamyhBPmu3Kr/P5hHfrAomJHa921G2ucYM4Tu+HUdGkdxb
3gyUsrFK52MTHdxMm47DzdZ/hsadDfSh7wYkC7KFo9p/ZZW4l8rC6LbFItCbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUGIxAzL4akkeGqryzIYStadY7AAwHwYDVR0j
BBgwFoAUpO6QhoOPyPskEQYbJR6eQFwrVt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThGbkNLU0doajJ6MWRUQkJyV0hGeFRFVlZ3MVpLaEZRUFlKUG5tQnc0
Y2ovMC9BNEVFOTA4NjgzOEZDOEZCMjQxMTA2MUIyNTFFOUU0MDVDMkI1NkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RUU5MDg2ODM4RkM4RkIy
NDExMDYxQjI1MUU5RTQwNUMyQjU2REYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RThGbkNLU0doajJ6MWRUQkJyV0hGeFRFVlZ3MVpLaEZRUFlKUG5tQnc0Y2ovMC9B
NEVFOTA4NjgzOEZDOEZCMjQxMTA2MUIyNTFFOUU0MDVDMkI1NkRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJLubiRTx707fDi72Vv12/3rp5ddAT+FxsJpdAwj0eO3ODqVTpQYHjlztxGDn
KRfN0ZuprN8nYBIFG69+CVWs90q9yJQOQY3C6TY2HxDV/xQx0IWhhn0PY6jjRpC2
leG0cPRUFh/XPqqbWxFEBNbYgSuunyXjfZtg+M4h8yNQhj/Gc7T92ym5DVKgvpq3
781FqSsER8pyYF17zKOUO9RL/FRXNNTqk4RVhQ9SdCdSiwY0dBh6ocmS/8QNySpF
FCbXeieXDI1N/gslMRuPQAD+/kMTz7F6OggKd7p0OUEkU7Enk++D2INalm3HfaJB
0QJw+2Wb7BwpDkWsfMv8kE0y1g==
-----END CERTIFICATE-----