Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft
File:                     6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft (raw, json)
Hash identifier:          lqd8aMlOv17CoULWwCnPa/nt7CoUWuD6Meh9Mxze/74=
Subject key identifier:   3F:94:FB:89:AE:DE:D2:E5:60:6C:47:7D:C8:CB:ED:16:B1:1B:6A:D0
Authority key identifier: 6F:A4:A5:CA:DE:E7:A7:4F:91:95:D9:A0:0E:09:AD:8C:D8:83:F5:CF
Certificate issuer:       /CN=6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF
Certificate serial:       0566314CD794A036910CBC7359BE664F1206C11C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft
Manifest number:          02
Signing time:             Fri 16 Dec 2022 18:03:34 +0000
Manifest this update:     Fri 16 Dec 2022 17:58:34 +0000
Manifest next update:     Sat 17 Dec 2022 18:18:34 +0000
Files and hashes:         1: 3138312e3139322e3131322e302f32322d3234203d3e20323730363935.roa (hash: cQn8ZefnU2nU1D/r89EBNIXGWkP3lHb8vh+7UEpFqPE=)
                          2: 6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.crl (hash: lf+OhmI4yD5Fn5zG4S9UW/Zz6knuYpUW+/ctprcYu/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:31:4c:d7:94:a0:36:91:0c:bc:73:59:be:66:4f:12:06:c1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF
        Validity
            Not Before: Dec 16 17:58:34 2022 GMT
            Not After : Dec 17 18:18:34 2022 GMT
        Subject: CN=3F94FB89AEDED2E5606C477DC8CBED16B11B6AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:62:ab:b4:ba:80:4c:a7:88:21:66:39:30:
                    c1:7d:2c:27:b9:f2:ee:38:2f:50:db:4f:48:9e:ff:
                    85:d0:0b:c6:05:53:8a:d0:a0:83:30:10:25:29:ff:
                    a6:18:1e:68:9c:cd:a4:eb:ea:bd:40:c5:c4:4b:d3:
                    74:4d:5a:05:ad:24:44:b1:6e:0f:24:7b:11:94:60:
                    8c:f7:56:da:75:ac:4f:70:54:f0:08:e2:77:48:6b:
                    ab:11:9c:c8:f5:48:b6:a8:5a:05:ca:80:8b:c8:c7:
                    ce:f5:04:f4:92:11:73:b7:9d:ae:da:5b:a4:75:14:
                    9b:52:13:59:d4:85:74:c1:ee:a3:5a:e4:7c:d4:e6:
                    18:f0:46:5c:4b:d2:0b:fb:f7:9d:2e:ed:a0:56:03:
                    a6:98:1d:83:87:29:23:a2:1c:5c:0a:53:23:3b:24:
                    46:74:fe:4f:4b:b5:59:f7:45:9c:09:da:17:20:26:
                    76:3c:00:19:f4:50:8b:57:fa:20:d8:78:39:5e:64:
                    32:04:de:f0:68:e0:c7:3e:e2:8c:61:3d:e7:8e:03:
                    18:2c:5b:8f:ed:e5:3f:4a:25:57:8f:af:10:35:a2:
                    31:b1:33:84:35:44:b5:05:cb:06:f2:86:e4:58:f5:
                    36:e9:ae:f1:79:ef:ec:be:37:ab:60:cf:ab:ed:58:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:FB:89:AE:DE:D2:E5:60:6C:47:7D:C8:CB:ED:16:B1:1B:6A:D0
            X509v3 Authority Key Identifier:
                keyid:6F:A4:A5:CA:DE:E7:A7:4F:91:95:D9:A0:0E:09:AD:8C:D8:83:F5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:37:91:ca:4c:94:3d:3a:c3:5e:e1:cb:69:2d:4a:9c:cf:dd:
         06:54:17:16:6b:75:47:db:79:23:37:7c:8f:ab:0d:09:00:26:
         42:00:37:8b:78:94:a1:ee:70:4e:6b:36:0a:38:11:bb:75:79:
         97:e2:5a:be:11:9e:99:b6:e3:6b:f2:a2:05:db:b6:b4:39:ec:
         e9:2b:c9:ef:6a:98:ec:c1:c9:9e:cb:fb:2e:72:74:b7:0c:46:
         32:b5:e6:58:92:c9:db:d3:20:68:66:0b:79:0a:44:d8:1d:a7:
         68:99:0a:63:16:25:f1:bc:98:b0:73:be:79:e0:e4:62:33:ce:
         0c:d7:2f:8d:c5:b2:e9:96:d6:93:94:dd:e8:e3:b2:cb:12:c5:
         57:17:9f:5f:bf:0a:1c:03:92:22:eb:85:af:4e:f4:f8:f1:a5:
         ee:ff:e1:dd:ac:68:f6:47:70:c7:ba:8f:b3:7a:a3:83:23:f4:
         aa:24:7b:32:76:dc:6a:6d:b8:69:31:ea:70:ca:84:e0:8d:66:
         5c:b2:70:4e:0c:dd:e1:3f:e7:ea:66:87:9c:b0:17:d9:ca:79:
         42:24:78:2b:81:82:ac:c3:b7:26:51:f1:95:01:bb:57:b7:c0:
         a7:09:5b:a0:1a:5b:57:c5:d5:15:e5:a4:63:49:74:6b:69:9c:
         a0:41:5f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBWYxTNeUoDaRDLxzWb5mTxIGwRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZBNEE1Q0FERUU3QTc0RjkxOTVEOUEwMEUwOUFEOENE
ODgzRjVDRjAeFw0yMjEyMTYxNzU4MzRaFw0yMjEyMTcxODE4MzRaMDMxMTAvBgNV
BAMTKDNGOTRGQjg5QUVERUQyRTU2MDZDNDc3REM4Q0JFRDE2QjExQjZBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvmKrtLqATKeIIWY5MMF9LCe5
8u44L1DbT0ie/4XQC8YFU4rQoIMwECUp/6YYHmiczaTr6r1AxcRL03RNWgWtJESx
bg8kexGUYIz3Vtp1rE9wVPAI4ndIa6sRnMj1SLaoWgXKgIvIx871BPSSEXO3na7a
W6R1FJtSE1nUhXTB7qNa5HzU5hjwRlxL0gv7950u7aBWA6aYHYOHKSOiHFwKUyM7
JEZ0/k9LtVn3RZwJ2hcgJnY8ABn0UItX+iDYeDleZDIE3vBo4Mc+4oxhPeeOAxgs
W4/t5T9KJVePrxA1ojGxM4Q1RLUFywbyhuRY9TbprvF57+y+N6tgz6vtWOyvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUP5T7ia7e0uVgbEd9yMvtFrEbatAwHwYDVR0j
BBgwFoAUb6Slyt7np0+RldmgDgmtjNiD9c8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNEb0VLS0V3MmthTkptUHpIc0w0aEZIUEtWTXd1OXcyRzYyQ0tQOTNh
MlYvMC82RkE0QTVDQURFRTdBNzRGOTE5NUQ5QTAwRTA5QUQ4Q0Q4ODNGNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGQTRBNUNBREVFN0E3NEY5
MTk1RDlBMDBFMDlBRDhDRDg4M0Y1Q0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUNEb0VLS0V3MmthTkptUHpIc0w0aEZIUEtWTXd1OXcyRzYyQ0tQOTNhMlYvMC82
RkE0QTVDQURFRTdBNzRGOTE5NUQ5QTAwRTA5QUQ4Q0Q4ODNGNUNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVzeRykyUPTrDXuHLaS1KnM/dBlQXFmt1R9t5Izd8j6sNCQAmQgA3i3iUoe5w
Tms2CjgRu3V5l+JavhGembbja/KiBdu2tDns6SvJ72qY7MHJnsv7LnJ0twxGMrXm
WJLJ29MgaGYLeQpE2B2naJkKYxYl8byYsHO+eeDkYjPODNcvjcWy6ZbWk5Td6OOy
yxLFVxefX78KHAOSIuuFr070+PGl7v/h3axo9kdwx7qPs3qjgyP0qiR7Mnbcam24
aTHqcMqE4I1mXLJwTgzd4T/n6maHnLAX2cp5QiR4K4GCrMO3JlHxlQG7V7fApwlb
oBpbV8XVFeWkY0l0a2mcoEFfrQ==
-----END CERTIFICATE-----