Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.mft
File:                     FA852750518CB837CC87518F9E27B0D2617AE845.mft (raw, json)
Hash identifier:          7AMVQYIi2bHH7q0wwaEEh4BrXk6nShqBzjhM4j83Qno=
Subject key identifier:   9C:C9:59:76:49:7B:04:33:A0:74:67:01:31:C9:BB:19:F9:08:D4:7C
Authority key identifier: FA:85:27:50:51:8C:B8:37:CC:87:51:8F:9E:27:B0:D2:61:7A:E8:45
Certificate issuer:       /CN=FA852750518CB837CC87518F9E27B0D2617AE845
Certificate serial:       6B27C41DE46CFEAB23E34ADF210B4634F9C90004
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA852750518CB837CC87518F9E27B0D2617AE845.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.mft
Manifest number:          2E
Signing time:             Sun 11 Feb 2024 10:35:55 +0000
Manifest this update:     Sun 11 Feb 2024 10:30:55 +0000
Manifest next update:     Mon 12 Feb 2024 12:22:55 +0000
Files and hashes:         1: 323830343a323530383a3a2f33322d313238203d3e20323634323534.roa (hash: TI0wNyqnH9Ql142QEebIYS6xGLKU4vCF9CzB3AJMwQk=)
                          2: 3133382e3131372e3231362e302f32322d3332203d3e20323634323534.roa (hash: 1oVi4bOMf6vpsL87QCpi/VlZcOY9egsyTWUYHJUCsl8=)
                          3: FA852750518CB837CC87518F9E27B0D2617AE845.crl (hash: sRWDgb8LCtdz8lA7LaKjXEGs7/+XsBDFSNrTZ8L5Arw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:27:c4:1d:e4:6c:fe:ab:23:e3:4a:df:21:0b:46:34:f9:c9:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA852750518CB837CC87518F9E27B0D2617AE845
        Validity
            Not Before: Feb 11 10:30:55 2024 GMT
            Not After : Feb 12 12:22:55 2024 GMT
        Subject: CN=9CC95976497B0433A074670131C9BB19F908D47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:b6:e1:3a:8e:62:ce:c1:24:19:a9:08:4d:
                    19:36:9e:12:c5:8f:a5:1a:89:6b:68:be:97:43:9c:
                    84:58:36:a8:9b:ad:d7:fb:8d:e6:c5:99:c9:48:8a:
                    7d:e9:1b:5c:63:3c:e5:a9:dc:a0:59:05:e5:3c:c9:
                    db:46:7c:9c:06:47:6f:ab:c8:41:d7:28:b2:5a:c1:
                    8b:b7:0d:a2:92:2c:99:21:71:92:19:68:10:a0:68:
                    7a:98:0b:e3:e7:7c:90:7b:59:03:80:eb:d2:4d:27:
                    b3:9b:43:29:0e:fb:0e:7e:26:cb:3b:e1:e1:92:b8:
                    68:ad:47:95:6c:9d:c6:cf:9a:31:5a:c9:d5:8a:2c:
                    c6:ce:90:60:b1:02:11:a2:09:eb:d5:c9:86:da:4e:
                    aa:05:0f:ea:e6:36:25:3c:de:4b:77:54:e7:16:06:
                    f4:a2:26:8f:3c:bc:a3:89:3b:1f:58:a1:be:e6:f8:
                    3e:0d:44:00:ed:2d:82:12:35:3f:76:7c:74:2e:59:
                    1b:0b:c9:73:bb:df:0c:37:09:f2:30:be:43:dd:a7:
                    06:47:8a:ce:d2:4f:3c:c6:92:df:30:d8:52:cb:44:
                    a2:aa:f6:bc:fc:8e:0d:b7:7e:46:c1:52:1b:f2:5c:
                    90:61:92:61:99:9f:60:81:3a:c6:57:8c:96:7c:55:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:59:76:49:7B:04:33:A0:74:67:01:31:C9:BB:19:F9:08:D4:7C
            X509v3 Authority Key Identifier:
                keyid:FA:85:27:50:51:8C:B8:37:CC:87:51:8F:9E:27:B0:D2:61:7A:E8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA852750518CB837CC87518F9E27B0D2617AE845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/FA852750518CB837CC87518F9E27B0D2617AE845.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:fd:02:16:00:df:90:33:0d:85:86:52:6b:92:ad:dc:5f:
         b3:80:fd:e5:31:f4:c5:18:bd:8f:e1:71:b2:b3:0f:cb:8d:ec:
         75:69:02:e4:31:e8:32:77:e5:70:e9:ba:c5:75:a1:60:6c:73:
         cd:b8:92:8e:1b:b9:0f:13:0c:b6:5a:22:05:bf:aa:5a:0d:09:
         66:57:49:da:2d:e3:06:68:f4:27:25:1b:c2:fa:bf:ee:a9:18:
         90:c0:5a:6f:f1:e5:c9:1b:02:0d:a7:b8:77:31:2b:42:e3:8e:
         c4:61:8a:77:49:2b:1b:20:00:3f:19:4b:d5:49:06:03:57:06:
         ec:c6:9c:66:1a:97:dc:c5:36:22:35:c5:4d:ea:fb:45:87:3a:
         2c:ad:11:4b:fa:b3:4b:e6:dd:84:0d:0f:30:f7:3f:ed:72:62:
         82:e4:9e:d6:76:55:40:13:f4:3b:ad:70:ef:2f:f5:6f:14:d7:
         9c:bb:17:1d:00:0f:c6:1e:67:c0:7c:c9:a8:a2:15:2e:a7:b8:
         81:a0:17:97:ba:00:7f:ef:e6:99:dc:8d:79:57:9f:69:40:f6:
         aa:71:52:4c:40:19:f9:96:91:a1:c7:0a:4a:f2:1b:f3:b5:4b:
         b6:d2:c5:95:dc:ac:fb:05:61:83:a3:18:5a:dd:a0:50:f8:0a:
         5c:49:76:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUayfEHeRs/qsj40rfIQtGNPnJAAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4NTI3NTA1MThDQjgzN0NDODc1MThGOUUyN0IwRDI2
MTdBRTg0NTAeFw0yNDAyMTExMDMwNTVaFw0yNDAyMTIxMjIyNTVaMDMxMTAvBgNV
BAMTKDlDQzk1OTc2NDk3QjA0MzNBMDc0NjcwMTMxQzlCQjE5RjkwOEQ0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKLbhOo5izsEkGakITRk2nhLF
j6UaiWtovpdDnIRYNqibrdf7jebFmclIin3pG1xjPOWp3KBZBeU8ydtGfJwGR2+r
yEHXKLJawYu3DaKSLJkhcZIZaBCgaHqYC+PnfJB7WQOA69JNJ7ObQykO+w5+Jss7
4eGSuGitR5VsncbPmjFaydWKLMbOkGCxAhGiCevVyYbaTqoFD+rmNiU83kt3VOcW
BvSiJo88vKOJOx9Yob7m+D4NRADtLYISNT92fHQuWRsLyXO73ww3CfIwvkPdpwZH
is7STzzGkt8w2FLLRKKq9rz8jg23fkbBUhvyXJBhkmGZn2CBOsZXjJZ8VWtxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnMlZdkl7BDOgdGcBMcm7GfkI1HwwHwYDVR0j
BBgwFoAU+oUnUFGMuDfMh1GPniew0mF66EUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3oxOUFScGYxdThj
b1kvMC9GQTg1Mjc1MDUxOENCODM3Q0M4NzUxOEY5RTI3QjBEMjYxN0FFODQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBODUyNzUwNTE4Q0I4MzdD
Qzg3NTE4RjlFMjdCMEQyNjE3QUU4NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3oxOUFScGYxdThjb1kvMC9G
QTg1Mjc1MDUxOENCODM3Q0M4NzUxOEY5RTI3QjBEMjYxN0FFODQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIsb9AhYA35AzDYWGUmuSrdxfs4D95TH0xRi9j+FxsrMPy43sdWkC5DHoMnfl
cOm6xXWhYGxzzbiSjhu5DxMMtloiBb+qWg0JZldJ2i3jBmj0JyUbwvq/7qkYkMBa
b/HlyRsCDae4dzErQuOOxGGKd0krGyAAPxlL1UkGA1cG7MacZhqX3MU2IjXFTer7
RYc6LK0RS/qzS+bdhA0PMPc/7XJiguSe1nZVQBP0O61w7y/1bxTXnLsXHQAPxh5n
wHzJqKIVLqe4gaAXl7oAf+/mmdyNeVefaUD2qnFSTEAZ+ZaRoccKSvIb87VLttLF
ldys+wVhg6MYWt2gUPgKXEl23w==
-----END CERTIFICATE-----