Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.mft
File:                     43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.mft (raw, json)
Hash identifier:          Ey40p/ijrAPUbOYV5G0BtjgB0Or1/ETdL4e/BSrQy60=
Subject key identifier:   CD:9E:C8:DC:40:AF:68:D7:FA:68:E7:A7:C2:41:2D:95:03:8E:54:79
Authority key identifier: 43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2
Certificate issuer:       /CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
Certificate serial:       76A0ACF58E9A87E7298944ED8972C6762820E528
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.mft
Manifest number:          68
Signing time:             Sun 14 Apr 2024 22:59:48 +0000
Manifest this update:     Sun 14 Apr 2024 22:54:48 +0000
Manifest next update:     Tue 16 Apr 2024 00:36:48 +0000
Files and hashes:         1: 3137392e3130382e38382e302f32312d3234203d3e20323633323639.roa (hash: d4mFVrkJ+/7Oq/YrIttBIk6Jj35I5dExc7n/wtvXmVo=)
                          2: 43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.crl (hash: MTlAfCz/rHE0KImCIeWRku5187hCBSMNmN9G9MK9Xxc=)
                          3: 323830343a313632303a3a2f33322d3438203d3e20323633323639.roa (hash: CnboxWpnLjOvdTmztSpPE8pxslKv5ds22b1S5mBMDJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a0:ac:f5:8e:9a:87:e7:29:89:44:ed:89:72:c6:76:28:20:e5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
        Validity
            Not Before: Apr 14 22:54:48 2024 GMT
            Not After : Apr 16 00:36:48 2024 GMT
        Subject: CN=CD9EC8DC40AF68D7FA68E7A7C2412D95038E5479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:d2:96:9a:ef:4a:55:3b:78:32:4c:fa:21:
                    1c:8e:a3:04:94:fc:e7:9a:ff:3f:bf:e5:03:fb:64:
                    28:08:1a:c1:86:2b:15:34:11:0b:7e:3b:71:5e:c2:
                    e2:e7:1c:91:8a:ec:ef:f7:fc:00:9a:eb:f2:86:50:
                    15:e3:23:10:f7:0b:ea:ed:f3:db:0b:00:4e:ee:89:
                    e8:86:f2:fc:bc:54:13:08:48:5c:8f:8c:b4:0c:bf:
                    96:b0:15:22:96:9e:74:1e:d6:f0:c7:f4:b3:b5:23:
                    4b:3a:99:e8:b9:ca:5e:ce:9b:e6:54:9e:e9:8f:a4:
                    d2:55:a4:27:84:1a:89:8e:96:4a:42:2d:dd:e5:7a:
                    8e:46:ef:84:48:49:3b:f4:37:11:12:db:c6:87:16:
                    72:fd:a0:df:2b:57:f4:aa:02:ba:b8:82:61:2f:bd:
                    dd:f7:0d:c7:f6:f5:f6:b6:03:d6:2c:e8:3c:07:c7:
                    7e:f8:1a:f6:a2:a2:2b:fc:4a:5b:71:64:50:ed:41:
                    8c:fd:b4:13:95:cc:1c:29:ce:b8:6c:e5:c9:65:f6:
                    fd:e8:ca:48:88:b4:9c:a9:bb:96:61:cd:08:5a:02:
                    74:a8:50:d9:3f:9a:03:bf:ea:f5:84:c3:85:58:d0:
                    f0:72:75:d0:73:28:46:a6:d9:9a:0b:ff:22:f8:82:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9E:C8:DC:40:AF:68:D7:FA:68:E7:A7:C2:41:2D:95:03:8E:54:79
            X509v3 Authority Key Identifier:
                keyid:43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:ee:3f:ab:90:fd:25:68:78:2a:8b:02:36:1e:c3:c3:87:
         8e:28:91:10:35:63:6a:52:91:9b:87:11:56:13:3f:f1:89:ac:
         a3:98:15:ac:fd:d2:63:7d:2a:df:41:7f:6b:14:0d:6b:2a:e3:
         6f:95:64:19:42:c1:5c:f9:e8:9c:25:8a:f1:74:58:23:eb:4e:
         79:a6:3e:21:53:f4:4a:49:78:c3:50:6b:6e:8f:72:2d:8c:d6:
         4c:d0:aa:d7:42:93:76:a2:6f:6d:d3:83:97:d4:9e:a6:70:46:
         ce:7b:e0:30:52:90:93:8e:bd:35:05:29:dc:3b:b1:59:27:91:
         38:6f:a6:2d:d0:cc:92:5c:04:81:8a:c3:8e:08:d4:d0:88:5f:
         d3:10:40:cc:25:2a:6a:36:e1:46:d5:2b:55:73:35:d1:0b:64:
         d3:6e:8b:ed:67:74:6b:3a:09:65:77:d5:cc:4f:3e:52:29:cf:
         67:84:ee:aa:80:47:4b:46:56:1a:60:d4:da:12:a6:07:45:ee:
         a2:de:52:d4:50:96:71:6e:dc:21:35:e9:27:dc:06:4f:fd:67:
         15:a6:23:2d:cb:73:b1:1f:c7:5e:c7:40:a7:f3:36:e9:e7:54:
         ca:e5:3c:80:27:2a:bf:30:3d:8a:4a:cc:f0:38:9c:bd:67:c4:
         90:07:4b:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdqCs9Y6ah+cpiUTtiXLGdigg5SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCMUY4NzE0NkUyMTZGQjFFNDlDQjY2QUJEM0Y5NERE
RkM1RkFEMjAeFw0yNDA0MTQyMjU0NDhaFw0yNDA0MTYwMDM2NDhaMDMxMTAvBgNV
BAMTKENEOUVDOERDNDBBRjY4RDdGQTY4RTdBN0MyNDEyRDk1MDM4RTU0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n9KWmu9KVTt4Mkz6IRyOowSU
/Oea/z+/5QP7ZCgIGsGGKxU0EQt+O3FewuLnHJGK7O/3/ACa6/KGUBXjIxD3C+rt
89sLAE7uieiG8vy8VBMISFyPjLQMv5awFSKWnnQe1vDH9LO1I0s6mei5yl7Om+ZU
numPpNJVpCeEGomOlkpCLd3leo5G74RISTv0NxES28aHFnL9oN8rV/SqArq4gmEv
vd33Dcf29fa2A9Ys6DwHx374Gvaioiv8SltxZFDtQYz9tBOVzBwpzrhs5cll9v3o
ykiItJypu5ZhzQhaAnSoUNk/mgO/6vWEw4VY0PByddBzKEam2ZoL/yL4glhfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzZ7I3ECvaNf6aOenwkEtlQOOVHkwHwYDVR0j
BBgwFoAUQ7H4cUbiFvseSctmq9P5Td/F+tIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBBeTZkdjdlaWVaZzdCWGRaTUdCWlZtekFxemhkVWFHNldXdmtoVW54
dU4vMC80M0IxRjg3MTQ2RTIxNkZCMUU0OUNCNjZBQkQzRjk0RERGQzVGQUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQjFGODcxNDZFMjE2RkIx
RTQ5Q0I2NkFCRDNGOTREREZDNUZBRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVBBeTZkdjdlaWVaZzdCWGRaTUdCWlZtekFxemhkVWFHNldXdmtoVW54dU4vMC80
M0IxRjg3MTQ2RTIxNkZCMUU0OUNCNjZBQkQzRjk0RERGQzVGQUQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAerXuP6uQ/SVoeCqLAjYew8OHjiiREDVjalKRm4cRVhM/8Ymso5gVrP3SY30q
30F/axQNayrjb5VkGULBXPnonCWK8XRYI+tOeaY+IVP0Skl4w1Brbo9yLYzWTNCq
10KTdqJvbdODl9SepnBGznvgMFKQk469NQUp3DuxWSeROG+mLdDMklwEgYrDjgjU
0Ihf0xBAzCUqajbhRtUrVXM10Qtk026L7Wd0azoJZXfVzE8+UinPZ4TuqoBHS0ZW
GmDU2hKmB0Xuot5S1FCWcW7cITXpJ9wGT/1nFaYjLctzsR/HXsdAp/M26edUyuU8
gCcqvzA9ikrM8DicvWfEkAdLLA==
-----END CERTIFICATE-----