Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft
File:                     D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft (raw, json)
Hash identifier:          vyvjCsiYRK00GSb815NhGyeaKejTVzokdwo1U/CNpEw=
Subject key identifier:   24:EC:C8:7B:30:DD:04:B1:F5:9B:92:88:68:DB:89:20:14:3B:74:EA
Authority key identifier: D4:FA:96:83:E2:EF:8D:56:51:76:DA:24:7E:4F:72:61:52:BA:FF:F1
Certificate issuer:       /CN=D4FA9683E2EF8D565176DA247E4F726152BAFFF1
Certificate serial:       353C9C8261F2E2A84B777C152C6099CB98B2E0D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft
Manifest number:          13
Signing time:             Sat 23 Nov 2024 19:23:34 +0000
Manifest this update:     Sat 23 Nov 2024 19:18:34 +0000
Manifest next update:     Sun 24 Nov 2024 22:43:34 +0000
Files and hashes:         1: D4FA9683E2EF8D565176DA247E4F726152BAFFF1.crl (hash: 8f+GeImhE3mKt/pQx10vhIlkTehCxqwbe6U0JPiLPq0=)
                          2: 3137302e38342e37362e302f32322d3234203d3e20323634393939.roa (hash: NM8bvMPeGcZXiAAYw3Rm7Ku55Uhm/w4uWRsb5MEIag8=)
                          3: 323830343a333133303a3a2f33322d3334203d3e20323634393939.roa (hash: qBhIjsI0yxLZToOujyN4kflqPdrnWSsfViDKlyBDa5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3c:9c:82:61:f2:e2:a8:4b:77:7c:15:2c:60:99:cb:98:b2:e0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4FA9683E2EF8D565176DA247E4F726152BAFFF1
        Validity
            Not Before: Nov 23 19:18:34 2024 GMT
            Not After : Nov 24 22:43:34 2024 GMT
        Subject: CN=24ECC87B30DD04B1F59B928868DB8920143B74EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:74:7d:ae:17:fe:d6:bd:bf:87:23:b2:61:
                    6c:50:e6:be:94:12:55:86:3b:cf:17:a7:9d:dc:51:
                    92:63:74:1e:91:9a:07:ce:b2:70:a5:82:cf:b0:59:
                    f8:41:65:d1:bd:40:82:4f:d7:26:69:32:10:cd:28:
                    8a:51:44:1b:20:c5:c3:cf:09:8b:4f:b9:6a:cc:c9:
                    46:61:86:57:9e:e5:09:59:15:c2:ad:a8:6a:40:d8:
                    5a:34:0c:c4:20:5c:8e:07:88:52:56:9e:ae:03:46:
                    2f:e4:65:20:38:3e:65:02:cf:10:dd:e5:59:3e:40:
                    d4:c9:7c:9a:c6:e5:4f:c7:23:58:59:a2:63:da:0d:
                    9b:1d:cf:77:7e:f5:b9:18:ec:b6:9e:db:21:5a:18:
                    9a:eb:49:63:3e:a3:ee:c8:ec:ab:6f:b9:3a:73:26:
                    82:96:6e:60:ef:bb:eb:89:e3:f8:4b:69:a1:38:b2:
                    46:62:76:46:b2:2f:37:17:cb:6e:c4:1b:92:8d:1a:
                    ff:51:d1:e4:f6:66:19:98:ea:1e:d2:34:da:36:c4:
                    1d:11:33:09:11:fd:8d:96:96:d4:55:13:a0:f2:6a:
                    7a:e4:a3:49:c9:aa:0c:df:6c:ea:e3:9a:10:93:ca:
                    3b:0c:2c:cd:0f:7e:24:00:92:97:e7:3d:d1:0f:d2:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:C8:7B:30:DD:04:B1:F5:9B:92:88:68:DB:89:20:14:3B:74:EA
            X509v3 Authority Key Identifier:
                keyid:D4:FA:96:83:E2:EF:8D:56:51:76:DA:24:7E:4F:72:61:52:BA:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D4FA9683E2EF8D565176DA247E4F726152BAFFF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:69:20:b1:4a:58:d9:bc:7c:41:dc:3b:77:f2:61:a0:ab:fb:
         6f:6e:b7:bd:60:34:3f:81:25:40:a1:7e:2b:b0:ad:4b:e7:b0:
         2d:cd:91:a4:8d:97:0c:23:b8:14:93:cd:04:3d:60:d4:68:4f:
         8f:26:cf:14:c8:28:a3:de:5f:d3:51:b5:e5:3b:52:89:f9:f9:
         e6:c1:87:51:9f:c8:5f:da:a9:25:1f:be:0d:20:8f:1b:08:18:
         3a:0e:1c:1a:97:d9:58:1d:5d:57:77:5e:43:d8:89:e0:db:bf:
         ef:69:fb:90:19:ce:85:20:27:eb:eb:9b:25:06:7e:3c:77:4e:
         83:2b:63:ee:0f:ec:1c:d8:3e:c1:d5:e3:fa:54:49:0c:e5:b3:
         6c:49:fc:67:6a:b4:4b:ff:06:49:cb:80:bc:c8:d0:4c:06:55:
         52:29:d0:96:4a:81:47:fe:53:e9:a8:57:d8:8c:5b:00:ca:d4:
         62:77:24:56:76:ab:fe:1e:68:92:a1:d6:3e:db:da:de:f0:5e:
         0b:07:fc:93:b6:b4:6b:04:54:55:f8:8f:d8:f9:56:a1:71:b1:
         bd:57:61:7a:c9:c8:e3:d5:c6:43:c3:95:7d:be:0f:6a:65:91:
         27:ba:3f:f4:06:0d:6e:cc:ae:e9:5c:6b:0d:5e:11:3d:91:85:
         5e:eb:73:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNTycgmHy4qhLd3wVLGCZy5iy4NkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRGQTk2ODNFMkVGOEQ1NjUxNzZEQTI0N0U0RjcyNjE1
MkJBRkZGMTAeFw0yNDExMjMxOTE4MzRaFw0yNDExMjQyMjQzMzRaMDMxMTAvBgNV
BAMTKDI0RUNDODdCMzBERDA0QjFGNTlCOTI4ODY4REI4OTIwMTQzQjc0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6HR9rhf+1r2/hyOyYWxQ5r6U
ElWGO88Xp53cUZJjdB6RmgfOsnClgs+wWfhBZdG9QIJP1yZpMhDNKIpRRBsgxcPP
CYtPuWrMyUZhhlee5QlZFcKtqGpA2Fo0DMQgXI4HiFJWnq4DRi/kZSA4PmUCzxDd
5Vk+QNTJfJrG5U/HI1hZomPaDZsdz3d+9bkY7Lae2yFaGJrrSWM+o+7I7KtvuTpz
JoKWbmDvu+uJ4/hLaaE4skZidkayLzcXy27EG5KNGv9R0eT2ZhmY6h7SNNo2xB0R
MwkR/Y2WltRVE6Dyanrko0nJqgzfbOrjmhCTyjsMLM0PfiQAkpfnPdEP0rEjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJOzIezDdBLH1m5KIaNuJIBQ7dOowHwYDVR0j
BBgwFoAU1PqWg+LvjVZRdtokfk9yYVK6//EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC9ENEZBOTY4M0UyRUY4RDU2NTE3NkRBMjQ3RTRGNzI2MTUyQkFGRkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RkE5NjgzRTJFRjhENTY1
MTc2REEyNDdFNEY3MjYxNTJCQUZGRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZNeE4vMC9E
NEZBOTY4M0UyRUY4RDU2NTE3NkRBMjQ3RTRGNzI2MTUyQkFGRkYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1GkgsUpY2bx8Qdw7d/JhoKv7b263vWA0P4ElQKF+K7CtS+ewLc2RpI2XDCO4
FJPNBD1g1GhPjybPFMgoo95f01G15TtSifn55sGHUZ/IX9qpJR++DSCPGwgYOg4c
GpfZWB1dV3deQ9iJ4Nu/72n7kBnOhSAn6+ubJQZ+PHdOgytj7g/sHNg+wdXj+lRJ
DOWzbEn8Z2q0S/8GScuAvMjQTAZVUinQlkqBR/5T6ahX2IxbAMrUYnckVnar/h5o
kqHWPtva3vBeCwf8k7a0awRUVfiP2PlWoXGxvVdhesnI49XGQ8OVfb4PamWRJ7o/
9AYNbsyu6VxrDV4RPZGFXutz4A==
-----END CERTIFICATE-----