Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.mft
File:                     27D022D8AE2F59929545906088E0AD52D9AF7062.mft (raw, json)
Hash identifier:          aPjGWtgEYGT+oBOVc73uUn0DXwJwJbPyeP9YIgen81c=
Subject key identifier:   A4:62:85:13:06:B8:60:B0:30:DA:D0:BE:2D:D8:38:28:16:EE:B6:1D
Authority key identifier: 27:D0:22:D8:AE:2F:59:92:95:45:90:60:88:E0:AD:52:D9:AF:70:62
Certificate issuer:       /CN=27D022D8AE2F59929545906088E0AD52D9AF7062
Certificate serial:       4269DEB9995027828B3D501FF9AE2CE646A83F21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27D022D8AE2F59929545906088E0AD52D9AF7062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.mft
Manifest number:          03C5
Signing time:             Tue 21 Jun 2022 15:45:19 +0000
Manifest this update:     Tue 21 Jun 2022 15:40:19 +0000
Manifest next update:     Wed 22 Jun 2022 18:05:19 +0000
Files and hashes:         1: 323830343a313361633a3a2f33322d3334203d3e20323633353435.roa (hash: uRR/GWRLFobi/67QmMQWbNY2HetFRPrdtutC+lIMTjU=)
                          2: 3139312e362e302e302f32322d3234203d3e20323633353435.roa (hash: IOlZ+6oQ6FXFU6//lYrsmzGMhTKhwWoBpTv+WeL5/Ek=)
                          3: 27D022D8AE2F59929545906088E0AD52D9AF7062.crl (hash: PT1iEbu+enARC0SLVDyhPMkzjkClkx5QUudrwErxtBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:69:de:b9:99:50:27:82:8b:3d:50:1f:f9:ae:2c:e6:46:a8:3f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27D022D8AE2F59929545906088E0AD52D9AF7062
        Validity
            Not Before: Jun 21 15:40:19 2022 GMT
            Not After : Jun 22 18:05:19 2022 GMT
        Subject: CN=A462851306B860B030DAD0BE2DD8382816EEB61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:d2:ce:40:f0:cb:21:0c:aa:14:36:20:ff:
                    99:17:fd:41:5f:00:62:7d:4d:94:59:2a:b3:d8:a5:
                    6e:7b:1c:b6:f9:ef:21:85:11:cc:4c:9b:95:f1:1f:
                    58:53:fe:ff:ba:97:5c:d4:bf:f4:17:55:9a:2c:75:
                    ba:33:48:41:3d:0a:c7:f3:87:50:44:0d:1a:9d:89:
                    45:69:27:8b:aa:1b:f1:06:80:d9:06:8e:94:23:e2:
                    1f:41:73:13:3c:2f:74:a1:85:12:ca:79:25:f8:73:
                    14:e4:86:23:b7:28:b2:e8:06:da:40:42:13:9d:02:
                    57:60:50:3f:a7:55:91:1e:30:6c:90:df:f1:13:42:
                    3a:72:29:92:61:3b:07:91:39:45:06:29:b6:28:dd:
                    f5:cd:b5:bb:c1:9e:e3:2c:1a:50:b0:02:f3:bb:77:
                    ee:db:84:01:6b:b0:8c:a0:d1:4d:fa:02:f7:6e:50:
                    1b:f0:0b:3b:fd:8d:11:fc:4b:df:a3:16:ab:4e:8a:
                    48:d9:cf:ce:e3:14:a0:e8:e1:1a:61:09:fb:83:df:
                    d2:77:d9:d6:5d:74:63:e7:cb:86:35:b9:79:3e:1f:
                    ee:50:cd:78:65:e8:70:62:bf:c0:16:d6:27:56:90:
                    c0:01:13:99:f6:d2:25:8b:87:0c:11:36:53:4d:8c:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:62:85:13:06:B8:60:B0:30:DA:D0:BE:2D:D8:38:28:16:EE:B6:1D
            X509v3 Authority Key Identifier:
                keyid:27:D0:22:D8:AE:2F:59:92:95:45:90:60:88:E0:AD:52:D9:AF:70:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27D022D8AE2F59929545906088E0AD52D9AF7062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:4f:80:2b:cc:95:c7:82:bb:11:3f:0a:63:82:4b:7c:c0:
         42:2f:c0:87:6b:5f:54:8b:be:25:e9:94:05:ce:f1:d8:bd:27:
         16:60:83:dc:dc:a3:15:76:21:71:fe:59:86:26:9d:fe:0e:af:
         7a:b8:c0:52:b9:ba:6e:e5:43:ba:7c:b2:59:25:db:40:50:f1:
         f3:8e:cc:2f:b8:b3:fb:2c:75:7a:a2:83:f2:c9:7e:e2:98:94:
         e3:45:89:db:ea:d5:35:4c:06:19:a5:25:d3:ff:b5:45:e3:c6:
         af:f7:db:dd:28:6b:fb:cf:8c:28:b6:d9:18:0d:0d:bd:57:b7:
         12:c9:ff:e8:ae:34:de:36:5b:82:f5:3a:30:16:f6:da:0d:6d:
         b6:6d:47:55:f2:54:a4:ba:2c:7a:0d:42:4f:0b:46:41:35:15:
         6a:0d:5b:93:70:ff:90:c7:53:e8:52:17:7e:8c:ba:6a:e1:56:
         cf:d1:14:4a:e6:9a:e9:fc:c6:67:06:45:8d:92:61:48:93:41:
         97:d8:d3:6f:d9:13:2d:7d:10:61:22:52:f2:08:4f:1d:c6:f4:
         7c:f1:37:d8:49:26:a6:53:aa:1d:13:2b:2e:7f:3b:05:e9:46:
         d0:e3:7a:a8:fa:66:5c:a7:1c:d4:04:5d:28:96:74:e5:ea:c2:
         34:3a:a2:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQmneuZlQJ4KLPVAf+a4s5kaoPyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdEMDIyRDhBRTJGNTk5Mjk1NDU5MDYwODhFMEFENTJE
OUFGNzA2MjAeFw0yMjA2MjExNTQwMTlaFw0yMjA2MjIxODA1MTlaMDMxMTAvBgNV
BAMTKEE0NjI4NTEzMDZCODYwQjAzMERBRDBCRTJERDgzODI4MTZFRUI2MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EtLOQPDLIQyqFDYg/5kX/UFf
AGJ9TZRZKrPYpW57HLb57yGFEcxMm5XxH1hT/v+6l1zUv/QXVZosdbozSEE9Csfz
h1BEDRqdiUVpJ4uqG/EGgNkGjpQj4h9BcxM8L3ShhRLKeSX4cxTkhiO3KLLoBtpA
QhOdAldgUD+nVZEeMGyQ3/ETQjpyKZJhOweROUUGKbYo3fXNtbvBnuMsGlCwAvO7
d+7bhAFrsIyg0U36AvduUBvwCzv9jRH8S9+jFqtOikjZz87jFKDo4RphCfuD39J3
2dZddGPny4Y1uXk+H+5QzXhl6HBiv8AW1idWkMABE5n20iWLhwwRNlNNjOpJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpGKFEwa4YLAw2tC+Ldg4KBbuth0wHwYDVR0j
BBgwFoAUJ9Ai2K4vWZKVRZBgiOCtUtmvcGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZDRnhwWGI0dFBqWXJHQkFYRFJxWXJ4QW9zY29aTGY4aWg5bVV4R0ZX
Y3QvMC8yN0QwMjJEOEFFMkY1OTkyOTU0NTkwNjA4OEUwQUQ1MkQ5QUY3MDYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3RDAyMkQ4QUUyRjU5OTI5
NTQ1OTA2MDg4RTBBRDUyRDlBRjcwNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RjZDRnhwWGI0dFBqWXJHQkFYRFJxWXJ4QW9zY29aTGY4aWg5bVV4R0ZXY3QvMC8y
N0QwMjJEOEFFMkY1OTkyOTU0NTkwNjA4OEUwQUQ1MkQ5QUY3MDYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM6pPgCvMlceCuxE/CmOCS3zAQi/Ah2tfVIu+JemUBc7x2L0nFmCD3NyjFXYh
cf5Zhiad/g6verjAUrm6buVDunyyWSXbQFDx847ML7iz+yx1eqKD8sl+4piU40WJ
2+rVNUwGGaUl0/+1RePGr/fb3Shr+8+MKLbZGA0NvVe3Esn/6K403jZbgvU6MBb2
2g1ttm1HVfJUpLoseg1CTwtGQTUVag1bk3D/kMdT6FIXfoy6auFWz9EUSuaa6fzG
ZwZFjZJhSJNBl9jTb9kTLX0QYSJS8ghPHcb0fPE32EkmplOqHRMrLn87BelG0ON6
qPpmXKcc1ARdKJZ05erCNDqi8g==
-----END CERTIFICATE-----