Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft
File:                     C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft (raw, json)
Hash identifier:          hHf4Ds738WaFg+Cmg9qGz6sxOhHmCpVcCf/K/uHweVo=
Subject key identifier:   4E:71:5C:21:91:F7:98:4B:20:09:1F:09:C4:C7:29:3A:C5:18:48:33
Authority key identifier: C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9
Certificate issuer:       /CN=C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9
Certificate serial:       1A87B8890A4B743D268DF46B9E8145C643D59AE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft
Manifest number:          9E
Signing time:             Wed 10 Apr 2024 00:36:18 +0000
Manifest this update:     Wed 10 Apr 2024 00:31:18 +0000
Manifest next update:     Thu 11 Apr 2024 03:33:18 +0000
Files and hashes:         1: 3138312e3139312e33322e302f32322d3234203d3e20323635393836.roa (hash: iCqi7CQenyEADcbFsPvvLatA+AT9X61DnBRpRkIU/wI=)
                          2: 323830343a343064633a3a2f33322d3334203d3e20323635393836.roa (hash: m9gkhHGKKkI8a5arqhiVAFCu1IIaBZZ/Rrf4ymfj3fI=)
                          3: C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.crl (hash: ljPsq4qVHExHMUPnPBdjgRdyhvn1kEw/xz6tanU2Oj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:b8:89:0a:4b:74:3d:26:8d:f4:6b:9e:81:45:c6:43:d5:9a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9
        Validity
            Not Before: Apr 10 00:31:18 2024 GMT
            Not After : Apr 11 03:33:18 2024 GMT
        Subject: CN=4E715C2191F7984B20091F09C4C7293AC5184833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:3d:34:00:a2:00:ca:99:ad:55:56:f9:5d:
                    bf:9c:05:af:72:f7:0b:66:6f:0b:1b:81:e3:d4:59:
                    b3:52:64:4b:1c:0d:d1:6f:d5:d8:a8:d7:3c:cc:51:
                    e4:d2:e4:29:92:5f:6f:18:c3:92:8e:31:57:8b:67:
                    9a:26:31:47:33:07:bb:95:e6:bc:fd:33:1d:7a:ec:
                    27:1c:0c:2f:cf:c3:b9:f5:c6:ef:4c:44:29:43:f0:
                    1d:26:1a:20:9f:8f:a3:9e:47:f2:5f:48:ec:c4:c2:
                    ad:e3:f2:20:d4:3f:3c:3d:5e:52:14:ea:b9:0c:16:
                    38:b0:7f:4f:31:7f:39:90:f4:c0:13:16:5c:9d:67:
                    94:dd:36:3c:ff:ab:99:66:06:0e:b7:84:2b:96:84:
                    6c:4c:1d:5d:41:2f:67:c6:a7:22:c4:09:91:7c:7c:
                    19:9c:19:4a:c3:67:b6:16:1c:63:2c:53:6c:5b:6d:
                    bd:35:3f:19:6e:83:e5:81:84:20:92:4d:bb:82:70:
                    da:53:37:fa:e6:c5:47:e1:b4:83:4d:d6:82:2f:aa:
                    16:29:ce:4f:df:cd:3a:12:aa:18:bc:b3:10:23:6f:
                    2f:4d:0d:e4:24:89:b0:f5:e0:da:b4:d6:5a:16:2b:
                    bc:bb:ce:20:ba:33:ab:6c:4b:29:79:bf:7e:d8:51:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:5C:21:91:F7:98:4B:20:09:1F:09:C4:C7:29:3A:C5:18:48:33
            X509v3 Authority Key Identifier:
                keyid:C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:33:b7:05:2d:f9:70:33:82:d8:56:6f:6d:0a:03:2b:0c:f5:
         e0:7d:00:c4:b6:58:a0:b3:a8:5f:ad:47:27:3a:09:df:39:9c:
         87:00:d8:4d:0d:71:df:99:24:b0:05:d5:32:f3:69:91:91:27:
         06:dd:0b:b0:17:90:50:25:4f:c8:2e:47:75:0f:d8:cf:c5:e4:
         2b:b4:b9:c4:11:c2:e3:26:39:4e:fa:a3:0a:1a:d3:13:ab:0f:
         d3:e7:4e:32:f9:cc:87:1c:e6:3a:da:22:d1:59:68:8c:84:ab:
         59:ad:4d:cd:22:f3:e2:6c:49:29:b7:28:bc:bc:a9:fc:2d:6f:
         d8:ac:89:01:e9:86:98:5b:a8:7f:6b:f8:cf:9d:25:9f:20:d0:
         9b:61:c8:19:c4:f4:61:fe:96:96:63:f6:4d:e3:fa:b4:fe:71:
         09:19:74:b9:df:4d:62:7c:13:9a:a8:d2:c8:bc:b8:bf:27:22:
         11:78:13:a8:ff:25:d2:a8:ab:5e:17:94:e4:b5:11:e2:64:c6:
         40:a8:2f:1d:7d:86:b3:94:2d:1b:13:83:6f:83:34:05:01:5b:
         0e:ec:30:c5:2d:f4:bb:79:7c:9f:62:9c:bb:63:a6:58:b8:a5:
         db:f1:12:8a:f3:28:ee:ff:e0:73:db:37:75:d0:b4:32:ed:f8:
         76:09:70:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGoe4iQpLdD0mjfRrnoFFxkPVmuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGOUFCRDZEOEYzOURDRkU1OTY5QjQyOERFQTM2MTVD
QUQ0RTVGOTAeFw0yNDA0MTAwMDMxMThaFw0yNDA0MTEwMzMzMThaMDMxMTAvBgNV
BAMTKDRFNzE1QzIxOTFGNzk4NEIyMDA5MUYwOUM0QzcyOTNBQzUxODQ4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+T00AKIAypmtVVb5Xb+cBa9y
9wtmbwsbgePUWbNSZEscDdFv1dio1zzMUeTS5CmSX28Yw5KOMVeLZ5omMUczB7uV
5rz9Mx167CccDC/Pw7n1xu9MRClD8B0mGiCfj6OeR/JfSOzEwq3j8iDUPzw9XlIU
6rkMFjiwf08xfzmQ9MATFlydZ5TdNjz/q5lmBg63hCuWhGxMHV1BL2fGpyLECZF8
fBmcGUrDZ7YWHGMsU2xbbb01Pxlug+WBhCCSTbuCcNpTN/rmxUfhtINN1oIvqhYp
zk/fzToSqhi8sxAjby9NDeQkibD14Nq01loWK7y7ziC6M6tsSyl5v37YUTkRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTnFcIZH3mEsgCR8JxMcpOsUYSDMwHwYDVR0j
BBgwFoAUwvmr1tjznc/llptCjeo2FcrU5fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWk0VFVoNnlmcTV3cFpCYURxRWhTZHg5TWtkbkhIYXZtVjhUeHdSNzU5
blIvMC9DMkY5QUJENkQ4RjM5RENGRTU5NjlCNDI4REVBMzYxNUNBRDRFNUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyRjlBQkQ2RDhGMzlEQ0ZF
NTk2OUI0MjhERUEzNjE1Q0FENEU1RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWk0VFVoNnlmcTV3cFpCYURxRWhTZHg5TWtkbkhIYXZtVjhUeHdSNzU5blIvMC9D
MkY5QUJENkQ4RjM5RENGRTU5NjlCNDI4REVBMzYxNUNBRDRFNUY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeTO3BS35cDOC2FZvbQoDKwz14H0AxLZYoLOoX61HJzoJ3zmchwDYTQ1x35kk
sAXVMvNpkZEnBt0LsBeQUCVPyC5HdQ/Yz8XkK7S5xBHC4yY5TvqjChrTE6sP0+dO
MvnMhxzmOtoi0VlojISrWa1NzSLz4mxJKbcovLyp/C1v2KyJAemGmFuof2v4z50l
nyDQm2HIGcT0Yf6WlmP2TeP6tP5xCRl0ud9NYnwTmqjSyLy4vyciEXgTqP8l0qir
XheU5LUR4mTGQKgvHX2Gs5QtGxODb4M0BQFbDuwwxS30u3l8n2Kcu2OmWLil2/ES
ivMo7v/gc9s3ddC0Mu34dglwNQ==
-----END CERTIFICATE-----