Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft
File:                     454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft (raw, json)
Hash identifier:          uSmmM0GMbiEQzCxv9vgrtvy73qlbSdbXsmjCVr+ftyk=
Subject key identifier:   D9:84:44:6D:A0:7D:EE:25:84:1A:98:EB:D1:F5:76:3C:2B:E9:1A:0D
Authority key identifier: 45:4B:F1:C9:C5:D9:61:31:64:7A:B2:C7:43:04:0F:2B:D6:6C:FC:D4
Certificate issuer:       /CN=454BF1C9C5D96131647AB2C743040F2BD66CFCD4
Certificate serial:       2B8BA47EBF06426EEC827BD89BA8209172C43393
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft
Manifest number:          BE
Signing time:             Thu 14 Nov 2024 02:46:58 +0000
Manifest this update:     Thu 14 Nov 2024 02:41:58 +0000
Manifest next update:     Fri 15 Nov 2024 03:51:58 +0000
Files and hashes:         1: 454BF1C9C5D96131647AB2C743040F2BD66CFCD4.crl (hash: Bnv6Op0EpgJw0hrOuFDsMo09sqvpv1iDJCWHEvo1XiU=)
                          2: 3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (hash: NfpZzQn7tx7/WmprVhOZ4F8EZ/UsMdVq+j58B5CtwKA=)
                          3: 323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (hash: 7WpnM+KjHR7QBF8xSb5m459phYMPQ0c+P+0Oee5woDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8b:a4:7e:bf:06:42:6e:ec:82:7b:d8:9b:a8:20:91:72:c4:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454BF1C9C5D96131647AB2C743040F2BD66CFCD4
        Validity
            Not Before: Nov 14 02:41:58 2024 GMT
            Not After : Nov 15 03:51:58 2024 GMT
        Subject: CN=D984446DA07DEE25841A98EBD1F5763C2BE91A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:99:8a:22:48:7d:a2:6e:a1:cf:07:97:dc:
                    b8:6a:db:60:0b:bf:ff:f7:0b:19:ce:f7:b8:6c:3f:
                    fe:41:56:5e:7c:15:d4:13:f2:c1:ae:f0:a7:79:e2:
                    ff:23:d4:46:55:9d:17:0c:29:20:b4:87:d7:2b:03:
                    9c:f3:3e:d4:f2:e4:ba:6c:d5:06:a0:fe:7a:58:05:
                    81:f6:60:6f:12:a1:20:0b:eb:17:c6:46:64:13:6e:
                    9b:38:77:39:e7:7f:80:75:9c:29:b2:3e:b3:57:ec:
                    85:6e:e6:59:3a:fc:a7:db:a0:aa:a5:64:62:d2:c2:
                    f2:52:be:dc:57:d5:55:32:5c:81:a3:86:4c:36:ec:
                    f5:65:e9:52:74:3f:24:dd:78:ae:c1:7f:10:ac:aa:
                    fa:1d:1a:05:60:53:7e:55:50:f7:54:cf:01:c9:6c:
                    78:bc:7e:9b:da:b7:3a:05:e7:86:22:0b:dc:78:28:
                    18:95:a5:3a:81:90:a2:e2:d5:72:29:11:f1:6d:a9:
                    40:bc:2f:79:15:67:e0:c5:01:1e:5e:e5:13:8f:fa:
                    dd:0f:be:ed:15:a9:48:cb:7a:22:94:ba:e0:70:76:
                    1d:d5:d1:54:03:69:b6:87:07:ef:9b:bd:50:83:a6:
                    8a:5b:ca:29:e1:1d:85:d3:5a:10:a9:cc:28:5f:e2:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:44:6D:A0:7D:EE:25:84:1A:98:EB:D1:F5:76:3C:2B:E9:1A:0D
            X509v3 Authority Key Identifier:
                keyid:45:4B:F1:C9:C5:D9:61:31:64:7A:B2:C7:43:04:0F:2B:D6:6C:FC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/454BF1C9C5D96131647AB2C743040F2BD66CFCD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:d1:c5:8d:80:92:85:8f:7a:67:b4:c6:4e:cf:e2:8f:fa:
         f9:fa:c6:5f:d2:e8:5b:04:8e:a2:a8:31:8b:37:82:2b:c8:a9:
         47:e9:7f:1e:2c:bf:8a:58:94:81:ee:44:55:f9:06:13:b5:3a:
         7c:62:06:dd:83:8d:73:9d:cf:96:af:60:25:01:be:e4:9b:77:
         d4:9d:de:75:a6:ed:24:ed:57:91:50:fa:23:2b:d9:d6:2f:aa:
         85:c7:81:73:80:5f:37:12:9d:64:89:f1:1a:42:65:ec:1b:16:
         8a:fe:8d:d0:b6:a1:23:f0:34:64:01:b9:97:fe:56:0c:e2:43:
         c1:78:fb:43:24:17:5e:6f:ca:9d:a4:aa:8e:ba:29:49:c8:e4:
         a3:83:c7:8b:16:a9:97:ff:b4:71:e8:d1:4a:1e:72:51:00:96:
         c3:00:f8:74:44:19:63:82:44:b7:f5:c1:08:76:4a:00:f4:db:
         fe:62:38:c2:77:96:19:2d:61:d1:cf:9f:01:40:b3:d6:f0:e0:
         14:1c:e6:45:34:a5:77:36:dc:28:27:cc:e7:c5:e0:05:ac:83:
         00:05:cd:fc:1e:7d:bf:c3:a8:b4:d3:c9:c8:08:0f:55:05:8c:
         92:07:be:30:c8:ca:dd:cc:24:a2:b8:2a:b2:96:31:fe:f5:8c:
         0c:7c:be:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK4ukfr8GQm7sgnvYm6ggkXLEM5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU0QkYxQzlDNUQ5NjEzMTY0N0FCMkM3NDMwNDBGMkJE
NjZDRkNENDAeFw0yNDExMTQwMjQxNThaFw0yNDExMTUwMzUxNThaMDMxMTAvBgNV
BAMTKEQ5ODQ0NDZEQTA3REVFMjU4NDFBOThFQkQxRjU3NjNDMkJFOTFBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdJmKIkh9om6hzweX3Lhq22AL
v//3CxnO97hsP/5BVl58FdQT8sGu8Kd54v8j1EZVnRcMKSC0h9crA5zzPtTy5Lps
1Qag/npYBYH2YG8SoSAL6xfGRmQTbps4dznnf4B1nCmyPrNX7IVu5lk6/KfboKql
ZGLSwvJSvtxX1VUyXIGjhkw27PVl6VJ0PyTdeK7BfxCsqvodGgVgU35VUPdUzwHJ
bHi8fpvatzoF54YiC9x4KBiVpTqBkKLi1XIpEfFtqUC8L3kVZ+DFAR5e5ROP+t0P
vu0VqUjLeiKUuuBwdh3V0VQDabaHB++bvVCDpopbyinhHYXTWhCpzChf4s5NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2YREbaB97iWEGpjr0fV2PCvpGg0wHwYDVR0j
BBgwFoAURUvxycXZYTFkerLHQwQPK9Zs/NQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5
Q2YvMC80NTRCRjFDOUM1RDk2MTMxNjQ3QUIyQzc0MzA0MEYyQkQ2NkNGQ0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NEJGMUM5QzVEOTYxMzE2
NDdBQjJDNzQzMDQwRjJCRDY2Q0ZDRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5Q2YvMC80
NTRCRjFDOUM1RDk2MTMxNjQ3QUIyQzc0MzA0MEYyQkQ2NkNGQ0Q0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABIrRxY2AkoWPeme0xk7P4o/6+frGX9LoWwSOoqgxizeCK8ipR+l/Hiy/iliU
ge5EVfkGE7U6fGIG3YONc53Plq9gJQG+5Jt31J3edabtJO1XkVD6IyvZ1i+qhceB
c4BfNxKdZInxGkJl7BsWiv6N0LahI/A0ZAG5l/5WDOJDwXj7QyQXXm/KnaSqjrop
Scjko4PHixapl/+0cejRSh5yUQCWwwD4dEQZY4JEt/XBCHZKAPTb/mI4wneWGS1h
0c+fAUCz1vDgFBzmRTSldzbcKCfM58XgBayDAAXN/B59v8OotNPJyAgPVQWMkge+
MMjK3cwkorgqspYx/vWMDHy+Kg==
-----END CERTIFICATE-----