Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.mft
File:                     B18FEFC21128E1128D2A6C7E0081978BC8850FDC.mft (raw, json)
Hash identifier:          nYqreRJo1cKAwDCp7O91BgWLgDsqjl3wl+oVzNtmGDI=
Subject key identifier:   35:E6:23:9A:37:FA:53:0F:26:CE:95:AE:1E:9F:DD:A6:AD:D4:2A:8E
Authority key identifier: B1:8F:EF:C2:11:28:E1:12:8D:2A:6C:7E:00:81:97:8B:C8:85:0F:DC
Certificate issuer:       /CN=B18FEFC21128E1128D2A6C7E0081978BC8850FDC
Certificate serial:       094E3EC9E1FF6AD20ED2BFB00A79C62297F61333
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.mft
Manifest number:          25
Signing time:             Mon 15 Apr 2024 10:36:57 +0000
Manifest this update:     Mon 15 Apr 2024 10:31:57 +0000
Manifest next update:     Tue 16 Apr 2024 11:57:57 +0000
Files and hashes:         1: 3133382e302e3233362e302f32322d3234203d3e20323634353733.roa (hash: BC4/YRP/X0t+cwusMOaew2l8+ZDTdw7JIyZ96FYtwQk=)
                          2: 323830343a323163383a3a2f33322d3438203d3e20323634353733.roa (hash: GUgybYvnafqmay5SHKMb/0zAgd9RwBR5LOtiGJvYzeY=)
                          3: B18FEFC21128E1128D2A6C7E0081978BC8850FDC.crl (hash: DQNqUtFKpSSPZJyrwRONaVEyfVQyiwJfClOuHby3ACk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4e:3e:c9:e1:ff:6a:d2:0e:d2:bf:b0:0a:79:c6:22:97:f6:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B18FEFC21128E1128D2A6C7E0081978BC8850FDC
        Validity
            Not Before: Apr 15 10:31:57 2024 GMT
            Not After : Apr 16 11:57:57 2024 GMT
        Subject: CN=35E6239A37FA530F26CE95AE1E9FDDA6ADD42A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:9f:8f:67:9a:a6:c3:9f:4d:d5:d8:99:0f:
                    ba:62:af:a5:ba:3d:0c:67:cd:28:90:bf:48:0f:c2:
                    2b:71:6c:41:b0:46:18:b5:23:d0:37:f4:fe:12:a2:
                    1c:54:25:29:49:8a:88:57:a4:dc:ed:34:a6:e0:f1:
                    e0:d0:fd:df:39:d4:5c:e2:8a:e1:d3:68:d0:27:4a:
                    fb:36:e0:e4:dc:2f:ad:60:34:9c:b4:43:9a:5f:3d:
                    3f:00:a9:eb:30:72:cc:96:c8:e0:ca:70:3d:75:0d:
                    c3:ca:16:e2:33:91:2c:15:7c:37:2c:bf:c0:ec:dd:
                    a9:65:22:89:83:9d:10:a9:82:30:24:d3:ee:ae:2c:
                    4c:26:a3:d9:b0:7b:67:5a:72:6b:8a:24:1d:ea:29:
                    72:35:49:89:cd:0e:6c:74:b3:d3:0c:2e:19:c7:4f:
                    94:c0:bb:7d:fb:c0:4d:81:d1:47:12:11:50:ab:d4:
                    a6:47:71:06:43:4e:bd:55:63:73:cb:56:06:e0:17:
                    d8:6a:94:dc:22:0b:59:5f:7e:a7:e7:3f:2d:17:74:
                    92:01:03:f1:12:c7:5a:ef:a9:32:50:e4:af:9f:61:
                    f8:7c:b2:15:77:60:f9:fd:4c:f3:73:57:9f:ea:10:
                    03:12:b8:13:0c:6b:4c:13:ac:05:42:fc:da:a4:54:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:23:9A:37:FA:53:0F:26:CE:95:AE:1E:9F:DD:A6:AD:D4:2A:8E
            X509v3 Authority Key Identifier:
                keyid:B1:8F:EF:C2:11:28:E1:12:8D:2A:6C:7E:00:81:97:8B:C8:85:0F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:47:ad:f6:06:0d:c4:1e:0e:4f:8f:4d:bd:13:00:7d:c8:45:
         b9:1d:45:96:c1:fd:32:89:f9:81:81:56:67:9e:9a:33:8e:a1:
         be:ee:97:5a:2b:92:5f:7d:11:8a:a9:df:3d:15:5a:20:89:b8:
         0b:6a:72:d3:fe:ae:7e:4f:67:cc:8f:1b:2f:f4:66:53:2e:ae:
         63:8b:86:af:40:06:32:5a:cd:85:fb:a5:ed:f9:70:6f:85:88:
         59:56:4c:cd:61:89:8f:ca:a1:95:f0:5d:c0:e4:96:7c:d0:9c:
         85:b9:73:84:cc:cd:88:93:56:2a:ec:ef:01:03:f8:5e:31:3c:
         88:38:f6:a7:12:70:ea:7f:38:92:1a:d4:01:f2:e8:24:d4:d6:
         cb:a9:82:f8:9e:f9:6e:46:5b:06:e2:6c:f2:b8:1c:5e:67:74:
         af:04:d2:a1:de:ad:93:eb:d8:5f:5d:dd:a1:d8:19:d1:f2:83:
         e8:26:e6:23:af:83:e7:3a:f0:b3:59:9d:c4:d2:aa:14:6f:42:
         6f:66:9f:3a:bf:de:af:63:2f:74:12:82:75:f4:3f:7d:34:39:
         c8:b2:9d:3a:48:b9:a8:06:3b:08:96:68:88:30:79:29:8f:80:
         e1:01:6a:00:c4:6c:44:17:b1:e8:c6:54:9a:e3:eb:23:0e:29:
         96:a8:c3:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCU4+yeH/atIO0r+wCnnGIpf2EzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE4RkVGQzIxMTI4RTExMjhEMkE2QzdFMDA4MTk3OEJD
ODg1MEZEQzAeFw0yNDA0MTUxMDMxNTdaFw0yNDA0MTYxMTU3NTdaMDMxMTAvBgNV
BAMTKDM1RTYyMzlBMzdGQTUzMEYyNkNFOTVBRTFFOUZEREE2QURENDJBOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi75+PZ5qmw59N1diZD7pir6W6
PQxnzSiQv0gPwitxbEGwRhi1I9A39P4SohxUJSlJiohXpNztNKbg8eDQ/d851Fzi
iuHTaNAnSvs24OTcL61gNJy0Q5pfPT8AqeswcsyWyODKcD11DcPKFuIzkSwVfDcs
v8Ds3allIomDnRCpgjAk0+6uLEwmo9mwe2dacmuKJB3qKXI1SYnNDmx0s9MMLhnH
T5TAu337wE2B0UcSEVCr1KZHcQZDTr1VY3PLVgbgF9hqlNwiC1lffqfnPy0XdJIB
A/ESx1rvqTJQ5K+fYfh8shV3YPn9TPNzV5/qEAMSuBMMa0wTrAVC/NqkVGlLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNeYjmjf6Uw8mzpWuHp/dpq3UKo4wHwYDVR0j
BBgwFoAUsY/vwhEo4RKNKmx+AIGXi8iFD9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVozMWkyaVZ6UVBDRGpZdTg5Qng3OG1WYUxMOWI2alp0eVNVUzN0NHZH
a0UvMC9CMThGRUZDMjExMjhFMTEyOEQyQTZDN0UwMDgxOTc4QkM4ODUwRkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxOEZFRkMyMTEyOEUxMTI4
RDJBNkM3RTAwODE5NzhCQzg4NTBGREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVozMWkyaVZ6UVBDRGpZdTg5Qng3OG1WYUxMOWI2alp0eVNVUzN0NHZHa0UvMC9C
MThGRUZDMjExMjhFMTEyOEQyQTZDN0UwMDgxOTc4QkM4ODUwRkRDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEet9gYNxB4OT49NvRMAfchFuR1FlsH9Mon5gYFWZ56aM46hvu6XWiuSX30R
iqnfPRVaIIm4C2py0/6ufk9nzI8bL/RmUy6uY4uGr0AGMlrNhful7flwb4WIWVZM
zWGJj8qhlfBdwOSWfNCchblzhMzNiJNWKuzvAQP4XjE8iDj2pxJw6n84khrUAfLo
JNTWy6mC+J75bkZbBuJs8rgcXmd0rwTSod6tk+vYX13dodgZ0fKD6CbmI6+D5zrw
s1mdxNKqFG9Cb2afOr/er2MvdBKCdfQ/fTQ5yLKdOki5qAY7CJZoiDB5KY+A4QFq
AMRsRBex6MZUmuPrIw4plqjDbA==
-----END CERTIFICATE-----