Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.mft
File:                     DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.mft (raw, json)
Hash identifier:          I1IWRch1OOPB8xrhcXZkrmLNZ+LMVlCntFL1HZBspoQ=
Subject key identifier:   8E:EA:AA:35:99:F2:ED:D7:4E:A0:63:CC:C3:D5:3F:98:FF:13:57:DD
Authority key identifier: DE:95:13:BC:68:7E:5C:AA:64:D5:BF:AC:DC:1D:89:70:FF:D8:E6:4D
Certificate issuer:       /CN=DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D
Certificate serial:       644E9C8661A807B95A0CE0473753FD3AE190AD07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.mft
Manifest number:          0E
Signing time:             Fri 27 Sep 2024 15:14:07 +0000
Manifest this update:     Fri 27 Sep 2024 15:09:07 +0000
Manifest next update:     Sat 28 Sep 2024 16:24:07 +0000
Files and hashes:         1: DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.crl (hash: 0LvQ2jzyENx3gA8AXwPTMv/a/VYZaw8GjrtwrJQKRjY=)
                          2: 3137372e3230302e3133362e302f32332d3233203d3e20323730393137.roa (hash: EjX8zP5AsyUQ3AR35K+kamOk+YqGVoHXqYjY/ng4Iho=)
                          3: 323830343a373337383a3a2f33322d3332203d3e20323730393137.roa (hash: lg5/G5w1RkMxiLCT8zW7/FbOzmFnWgZ1yizksk9dMIM=)
                          4: 3137372e3230302e3133392e302f32342d3234203d3e20323730393137.roa (hash: 062X2Yr7odnr4WYUU5Yv9pX2TprC4XifhvLCswaQO3w=)
                          5: 3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa (hash: iEE05909kAxuFHjr2Afb7b8XGbuKpXMdK9bk3AbTBeQ=)
                          6: 3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa (hash: 4ODxVhK9v1el59EM7/KO1tc+7rhVoNBYgTu7WjfyYHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:9c:86:61:a8:07:b9:5a:0c:e0:47:37:53:fd:3a:e1:90:ad:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D
        Validity
            Not Before: Sep 27 15:09:07 2024 GMT
            Not After : Sep 28 16:24:07 2024 GMT
        Subject: CN=8EEAAA3599F2EDD74EA063CCC3D53F98FF1357DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:d6:70:c6:fe:d1:3f:4d:0f:5e:fc:e0:be:
                    02:de:9e:b9:fd:23:0c:46:23:30:f3:19:71:5e:ab:
                    1e:e1:21:3d:63:c9:42:e3:a2:07:db:dd:e3:5c:e1:
                    3d:c1:92:3e:b8:f9:96:5f:39:61:5e:7a:9e:aa:cc:
                    4a:ba:8d:51:14:ed:e4:2d:a9:d9:3e:2e:eb:9e:fa:
                    1b:b4:7a:ba:8e:e0:53:ee:74:74:06:30:7e:4d:e2:
                    f4:89:bd:9c:da:2e:ee:45:2e:35:cb:9a:ba:97:1f:
                    27:8f:77:fc:1e:a7:d6:ec:79:5f:6f:5b:eb:13:18:
                    0b:45:af:a7:3c:73:b0:89:bb:af:fe:ee:0e:d2:3b:
                    bf:59:e4:70:4a:bd:c3:26:ac:65:f5:a7:d4:2f:ef:
                    5e:22:6c:07:7a:f4:10:61:f6:20:b4:a6:a9:f3:2e:
                    99:97:1a:b4:fd:7d:88:fb:75:52:3d:18:de:54:37:
                    3a:12:a1:4a:5f:7f:83:42:8a:0f:8c:7d:be:1e:d1:
                    bd:81:1f:49:49:f0:a2:b3:19:ba:a3:dd:53:71:25:
                    e6:fc:d1:fd:a7:5a:9f:84:62:ed:65:f2:29:4e:15:
                    54:8b:ce:a6:90:50:ca:cc:45:06:39:95:8e:84:7f:
                    a7:f3:b7:85:36:d2:c5:fd:aa:2b:3c:a8:b4:81:18:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:AA:35:99:F2:ED:D7:4E:A0:63:CC:C3:D5:3F:98:FF:13:57:DD
            X509v3 Authority Key Identifier:
                keyid:DE:95:13:BC:68:7E:5C:AA:64:D5:BF:AC:DC:1D:89:70:FF:D8:E6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/DE9513BC687E5CAA64D5BFACDC1D8970FFD8E64D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:93:61:df:16:d3:e0:da:e2:af:f0:3c:57:72:15:39:34:
         d7:47:fd:a0:be:ad:d8:34:e2:e0:05:06:d5:8a:7e:55:75:91:
         ce:72:30:3b:be:ae:1e:66:95:f6:30:6d:84:60:77:b1:16:ca:
         b7:8a:a5:33:59:50:39:47:89:00:83:71:76:29:71:6b:d1:fc:
         20:1f:6c:5e:70:aa:ca:87:25:01:41:0d:d9:04:dd:b5:19:01:
         86:75:e3:bf:c2:fb:0d:75:36:29:da:60:28:00:28:ba:d0:5a:
         2a:4c:42:6b:d1:b8:39:e0:f1:0a:9e:e0:4b:14:5a:17:99:3c:
         a3:5b:aa:a3:64:b6:b0:67:3d:de:cb:f9:e1:5a:d1:85:f4:4d:
         68:2e:49:07:31:1c:1c:1f:9f:5b:60:da:af:1f:c0:3c:d5:ee:
         94:f9:b5:d5:82:e3:b4:cb:2a:3b:f5:c0:68:6b:38:9d:fb:ee:
         d9:6c:01:47:80:b2:36:ec:3b:11:c1:4a:9d:e8:82:aa:d3:b4:
         d2:4d:43:a6:ef:d8:73:74:42:d6:13:8f:2f:fb:22:de:58:0f:
         5c:2b:12:11:8c:32:cf:8b:be:33:8f:bb:65:63:d7:81:12:26:
         f8:e4:94:9c:8a:91:45:f9:bb:53:e0:fa:d8:f2:56:6f:b8:45:
         ea:2c:d5:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZE6chmGoB7laDOBHN1P9OuGQrQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU5NTEzQkM2ODdFNUNBQTY0RDVCRkFDREMxRDg5NzBG
RkQ4RTY0RDAeFw0yNDA5MjcxNTA5MDdaFw0yNDA5MjgxNjI0MDdaMDMxMTAvBgNV
BAMTKDhFRUFBQTM1OTlGMkVERDc0RUEwNjNDQ0MzRDUzRjk4RkYxMzU3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xtZwxv7RP00PXvzgvgLenrn9
IwxGIzDzGXFeqx7hIT1jyULjogfb3eNc4T3Bkj64+ZZfOWFeep6qzEq6jVEU7eQt
qdk+Luue+hu0erqO4FPudHQGMH5N4vSJvZzaLu5FLjXLmrqXHyePd/wep9bseV9v
W+sTGAtFr6c8c7CJu6/+7g7SO79Z5HBKvcMmrGX1p9Qv714ibAd69BBh9iC0pqnz
LpmXGrT9fYj7dVI9GN5UNzoSoUpff4NCig+Mfb4e0b2BH0lJ8KKzGbqj3VNxJeb8
0f2nWp+EYu1l8ilOFVSLzqaQUMrMRQY5lY6Ef6fzt4U20sX9qis8qLSBGBA1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjuqqNZny7ddOoGPMw9U/mP8TV90wHwYDVR0j
BBgwFoAU3pUTvGh+XKpk1b+s3B2JcP/Y5k0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW10dldwVGluVlVvR3paY0Nud2dpMUp2aHBoeDRMdDJSanV6Wmg2SlNX
QlkvMC9ERTk1MTNCQzY4N0U1Q0FBNjRENUJGQUNEQzFEODk3MEZGRDhFNjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFOTUxM0JDNjg3RTVDQUE2
NEQ1QkZBQ0RDMUQ4OTcwRkZEOEU2NEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RW10dldwVGluVlVvR3paY0Nud2dpMUp2aHBoeDRMdDJSanV6Wmg2SlNXQlkvMC9E
RTk1MTNCQzY4N0U1Q0FBNjRENUJGQUNEQzFEODk3MEZGRDhFNjRELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcxuTYd8W0+Da4q/wPFdyFTk010f9oL6t2DTi4AUG1Yp+VXWRznIwO76uHmaV
9jBthGB3sRbKt4qlM1lQOUeJAINxdilxa9H8IB9sXnCqyoclAUEN2QTdtRkBhnXj
v8L7DXU2KdpgKAAoutBaKkxCa9G4OeDxCp7gSxRaF5k8o1uqo2S2sGc93sv54VrR
hfRNaC5JBzEcHB+fW2Darx/APNXulPm11YLjtMsqO/XAaGs4nfvu2WwBR4CyNuw7
EcFKneiCqtO00k1Dpu/Yc3RC1hOPL/si3lgPXCsSEYwyz4u+M4+7ZWPXgRIm+OSU
nIqRRfm7U+D62PJWb7hF6izVTQ==
-----END CERTIFICATE-----