Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EDHqihpyxgLdq9RGYhpxSCZnh8Nq6mYu56bkkTz9Gkto/0/751569D435FC417D2F99E9B7225907A5027FE79D.mft
File:                     751569D435FC417D2F99E9B7225907A5027FE79D.mft (raw, json)
Hash identifier:          ulI8NyyTB997q87TZwekeh0jzMJGwYETKTD4H1WIMOA=
Subject key identifier:   97:DC:C8:14:2A:67:6F:F3:70:48:0D:86:82:91:F3:A1:28:5E:9A:D1
Authority key identifier: 75:15:69:D4:35:FC:41:7D:2F:99:E9:B7:22:59:07:A5:02:7F:E7:9D
Certificate issuer:       /CN=751569D435FC417D2F99E9B7225907A5027FE79D
Certificate serial:       0B099D45C387F62E9A62E5A0D772E13122D4F19E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/751569D435FC417D2F99E9B7225907A5027FE79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDHqihpyxgLdq9RGYhpxSCZnh8Nq6mYu56bkkTz9Gkto/0/751569D435FC417D2F99E9B7225907A5027FE79D.mft
Manifest number:          0220
Signing time:             Tue 29 Aug 2023 04:55:09 +0000
Manifest this update:     Tue 29 Aug 2023 04:50:09 +0000
Manifest next update:     Wed 30 Aug 2023 06:20:09 +0000
Files and hashes:         1: 751569D435FC417D2F99E9B7225907A5027FE79D.crl (hash: VvRrB4loi1k9YOcF/8HTLs02Q2rjyQeHfuldzeVjLBs=)
                          2: 34352e3136352e35342e302f32342d3234203d3e20323638363636.roa (hash: lcYbjVQvZ9rPe7ToehwXQjgQvXx5Zgzk6tRjxXSoxH8=)
                          3: 34352e3136352e35352e302f32342d3234203d3e20323638363636.roa (hash: 1+sAg2KDurvM/ukABZS2BBNmkloJa9WBninVVSM9lt8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:09:9d:45:c3:87:f6:2e:9a:62:e5:a0:d7:72:e1:31:22:d4:f1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751569D435FC417D2F99E9B7225907A5027FE79D
        Validity
            Not Before: Aug 29 04:50:09 2023 GMT
            Not After : Aug 30 06:20:09 2023 GMT
        Subject: CN=97DCC8142A676FF370480D868291F3A1285E9AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:a7:b6:f4:83:4e:d7:7b:07:d4:18:56:f7:
                    11:2b:7e:27:fd:f1:e7:bc:32:a0:fe:56:8c:cf:2b:
                    a0:34:f9:64:e9:dd:a4:1a:ae:f2:4e:a4:ff:bd:2f:
                    07:f5:96:f6:1c:cc:7c:c7:cb:cd:43:76:12:54:06:
                    eb:24:fc:62:82:3d:3a:22:d6:7b:81:cd:fa:d2:02:
                    5c:77:38:5c:83:27:b5:38:79:b2:55:f3:94:86:f7:
                    2b:df:99:28:37:d1:26:14:02:9e:eb:5a:d8:4c:1b:
                    52:a5:9d:d5:4a:9d:92:63:7a:b0:aa:c6:b8:c2:95:
                    46:77:3a:83:25:23:3f:95:24:a0:2d:08:f3:d0:b8:
                    bb:7b:b4:37:4d:52:df:5f:a2:7f:e8:5b:da:30:7a:
                    f5:71:7b:13:cd:96:8f:c6:23:ed:2b:85:41:ab:a0:
                    3e:f2:94:ab:b3:16:a0:d0:01:a1:9e:a8:94:56:93:
                    ec:04:30:16:a9:ff:93:ae:92:74:ab:d0:44:bf:4b:
                    a8:12:89:88:86:91:62:1f:f2:2d:80:0e:7c:62:31:
                    9d:cf:99:55:7e:54:bf:2a:73:4d:e2:7a:7e:e5:37:
                    ad:96:5a:47:f5:4e:b4:4e:19:6b:88:70:e2:fb:46:
                    8e:d9:44:13:14:a0:39:18:b1:e4:46:01:c8:fa:93:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DC:C8:14:2A:67:6F:F3:70:48:0D:86:82:91:F3:A1:28:5E:9A:D1
            X509v3 Authority Key Identifier:
                keyid:75:15:69:D4:35:FC:41:7D:2F:99:E9:B7:22:59:07:A5:02:7F:E7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDHqihpyxgLdq9RGYhpxSCZnh8Nq6mYu56bkkTz9Gkto/0/751569D435FC417D2F99E9B7225907A5027FE79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/751569D435FC417D2F99E9B7225907A5027FE79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDHqihpyxgLdq9RGYhpxSCZnh8Nq6mYu56bkkTz9Gkto/0/751569D435FC417D2F99E9B7225907A5027FE79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:29:d2:1d:54:42:f9:00:c4:fd:a4:93:e1:c1:bb:80:c6:
         c1:ee:a5:f5:1a:01:47:b9:f5:84:ee:76:73:e6:16:46:6d:27:
         dd:d7:44:c5:d5:19:7e:ae:0c:a4:8d:89:fb:ff:9b:88:9e:96:
         45:d0:9d:b2:ac:2d:b5:09:7e:6b:3e:1b:bf:dd:9c:08:70:80:
         ed:0f:9a:b0:cb:07:ed:72:8b:88:4f:36:92:9d:b7:87:0c:fa:
         3c:c9:51:50:d4:dd:f6:14:76:c6:95:53:88:8e:fa:dc:59:f3:
         c2:19:b3:85:16:00:a7:fe:7a:6f:20:27:b5:77:74:77:5a:64:
         a0:53:8d:c2:78:33:f6:85:04:42:d7:12:f1:ab:b8:4f:c6:9b:
         26:d9:26:f9:44:6f:4e:14:e3:1d:34:14:1e:51:25:4f:7e:06:
         3d:5c:8b:29:19:e1:1c:71:b6:a9:3d:75:14:3a:14:ac:88:e5:
         4a:bf:21:a6:97:0e:4c:e1:b3:5d:59:dd:36:5b:59:65:c5:aa:
         40:1c:33:a9:e7:40:55:6f:06:2b:ac:91:be:98:2d:73:51:91:
         35:31:00:f4:ed:90:0f:47:a5:20:bf:ec:20:65:0d:89:c7:e3:
         c5:22:e7:81:b6:a7:aa:af:a9:a8:0c:a5:d3:e5:f0:08:5b:38:
         5a:cb:8f:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCwmdRcOH9i6aYuWg13LhMSLU8Z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUxNTY5RDQzNUZDNDE3RDJGOTlFOUI3MjI1OTA3QTUw
MjdGRTc5RDAeFw0yMzA4MjkwNDUwMDlaFw0yMzA4MzAwNjIwMDlaMDMxMTAvBgNV
BAMTKDk3RENDODE0MkE2NzZGRjM3MDQ4MEQ4NjgyOTFGM0ExMjg1RTlBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColae29INO13sH1BhW9xErfif9
8ee8MqD+VozPK6A0+WTp3aQarvJOpP+9Lwf1lvYczHzHy81DdhJUBusk/GKCPToi
1nuBzfrSAlx3OFyDJ7U4ebJV85SG9yvfmSg30SYUAp7rWthMG1KlndVKnZJjerCq
xrjClUZ3OoMlIz+VJKAtCPPQuLt7tDdNUt9fon/oW9owevVxexPNlo/GI+0rhUGr
oD7ylKuzFqDQAaGeqJRWk+wEMBap/5OuknSr0ES/S6gSiYiGkWIf8i2ADnxiMZ3P
mVV+VL8qc03ien7lN62WWkf1TrROGWuIcOL7Ro7ZRBMUoDkYseRGAcj6k/5rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUl9zIFCpnb/NwSA2GgpHzoShemtEwHwYDVR0j
BBgwFoAUdRVp1DX8QX0vmem3IlkHpQJ/550wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURIcWlocHl4Z0xkcTlSR1locHhTQ1puaDhOcTZtWXU1NmJra1R6OUdr
dG8vMC83NTE1NjlENDM1RkM0MTdEMkY5OUU5QjcyMjU5MDdBNTAyN0ZFNzlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1MTU2OUQ0MzVGQzQxN0Qy
Rjk5RTlCNzIyNTkwN0E1MDI3RkU3OUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RURIcWlocHl4Z0xkcTlSR1locHhTQ1puaDhOcTZtWXU1NmJra1R6OUdrdG8vMC83
NTE1NjlENDM1RkM0MTdEMkY5OUU5QjcyMjU5MDdBNTAyN0ZFNzlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVi0p0h1UQvkAxP2kk+HBu4DGwe6l9RoBR7n1hO52c+YWRm0n3ddExdUZfq4M
pI2J+/+biJ6WRdCdsqwttQl+az4bv92cCHCA7Q+asMsH7XKLiE82kp23hwz6PMlR
UNTd9hR2xpVTiI763FnzwhmzhRYAp/56byAntXd0d1pkoFONwngz9oUEQtcS8au4
T8abJtkm+URvThTjHTQUHlElT34GPVyLKRnhHHG2qT11FDoUrIjlSr8hppcOTOGz
XVndNltZZcWqQBwzqedAVW8GK6yRvpgtc1GRNTEA9O2QD0elIL/sIGUNicfjxSLn
gbanqq+pqAyl0+XwCFs4WsuP+A==
-----END CERTIFICATE-----