Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.mft
File:                     AD8E1F7797F4E554168A283BE90393A99FAB0CC1.mft (raw, json)
Hash identifier:          3zU7/g1M/YHPmvH/tEN6grLH7wWKvaumaUhKsCXnFvI=
Subject key identifier:   26:EF:67:AC:CE:B7:5A:58:CD:60:7E:36:11:D5:08:DB:EE:5A:7A:8D
Authority key identifier: AD:8E:1F:77:97:F4:E5:54:16:8A:28:3B:E9:03:93:A9:9F:AB:0C:C1
Certificate issuer:       /CN=AD8E1F7797F4E554168A283BE90393A99FAB0CC1
Certificate serial:       3BC62E879660B1B1F0958126498346C017535125
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.mft
Manifest number:          D7
Signing time:             Wed 12 Jul 2023 02:36:20 +0000
Manifest this update:     Wed 12 Jul 2023 02:31:20 +0000
Manifest next update:     Thu 13 Jul 2023 04:20:20 +0000
Files and hashes:         1: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: WjkWoq5cGK1phOc244cuOCG9n9xuWqQgKzMCLEOdRZw=)
                          2: AD8E1F7797F4E554168A283BE90393A99FAB0CC1.crl (hash: c1DAN+iPXlBbeOPkounTMP1QQxyxMFXsKv0JkwKbIEc=)
                          3: 3137392e3130372e34382e302f32312d3234203d3e20323633323834.roa (hash: exd2fGeKztMCHxbT2jUKZ0Mw0Oj7J3TTicdDyNZbBew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c6:2e:87:96:60:b1:b1:f0:95:81:26:49:83:46:c0:17:53:51:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD8E1F7797F4E554168A283BE90393A99FAB0CC1
        Validity
            Not Before: Jul 12 02:31:20 2023 GMT
            Not After : Jul 13 04:20:20 2023 GMT
        Subject: CN=26EF67ACCEB75A58CD607E3611D508DBEE5A7A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:93:06:31:e2:ed:ff:6f:42:09:94:32:56:
                    e4:1e:85:69:b9:0a:d9:67:5c:5e:ee:99:d3:d4:41:
                    1d:61:df:30:8e:53:65:94:36:e3:9b:00:84:e2:e9:
                    fd:a5:e5:cf:4a:2e:09:7c:6a:79:c1:52:c2:01:53:
                    b9:39:e9:10:ac:1c:63:44:94:24:c7:d2:7d:4e:28:
                    ae:a2:a4:83:9e:4f:a5:d8:09:f8:d6:5c:a7:c1:41:
                    51:70:d6:7a:a6:37:9e:1a:98:c7:47:bf:66:02:c8:
                    b1:43:27:45:a5:75:ae:04:86:0c:4d:3f:a4:7d:ac:
                    c1:73:5b:dd:e2:13:43:e5:1b:27:04:0b:7d:78:3d:
                    95:48:a3:3d:ad:c0:96:0c:d2:a9:35:09:f8:22:04:
                    31:15:d3:50:d9:8c:01:c4:82:48:b6:ea:7a:4f:81:
                    f4:83:86:a1:27:da:5a:41:06:2e:2b:7c:69:b1:b1:
                    b4:b6:7a:aa:8f:4a:5c:01:5b:4a:bf:e2:78:7e:e8:
                    53:da:3e:7f:95:5f:95:2b:3e:da:ce:5e:d5:70:4d:
                    56:df:10:06:33:30:b0:1b:ec:b2:b3:f3:0d:ab:b6:
                    f7:1b:10:31:5c:ea:fd:9a:f1:3b:42:80:fc:82:c7:
                    28:ce:b3:30:0f:27:39:0f:29:f2:d5:83:2a:16:ec:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EF:67:AC:CE:B7:5A:58:CD:60:7E:36:11:D5:08:DB:EE:5A:7A:8D
            X509v3 Authority Key Identifier:
                keyid:AD:8E:1F:77:97:F4:E5:54:16:8A:28:3B:E9:03:93:A9:9F:AB:0C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/AD8E1F7797F4E554168A283BE90393A99FAB0CC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:07:3d:2c:0e:d1:f0:08:de:5a:d6:db:d8:bd:f8:88:86:
         fa:75:ba:6a:b0:db:0d:98:4f:3d:37:ea:74:d1:c5:a1:38:91:
         d0:a0:49:e8:98:c3:e3:f5:ed:a3:5d:65:cc:62:bf:ad:d0:f0:
         5d:af:c6:b7:0f:5a:46:90:29:4a:5c:7e:c1:42:8f:00:5e:a3:
         0c:7a:41:f6:6f:df:67:92:4c:5a:9a:c9:00:6f:57:a5:cd:85:
         88:75:9d:8a:d3:9c:ac:bd:e6:d9:65:7c:06:1c:db:ae:a8:59:
         6e:bf:4c:d7:da:3c:e2:2c:38:39:5a:71:cc:fb:58:2c:99:00:
         9d:35:3f:f5:3d:ad:23:5d:c8:1c:89:f8:29:7d:67:fa:24:30:
         13:26:af:83:a8:ae:8b:1a:6c:79:47:75:d1:59:bc:da:dd:b4:
         c0:8a:1a:c2:af:7d:b4:d8:ce:16:c2:22:dd:1d:16:a7:df:89:
         18:b4:99:81:8c:fa:72:65:44:57:e8:d2:a5:f4:4f:93:75:36:
         bd:2b:6c:6a:6f:80:f0:4a:87:6e:26:d3:cb:f3:2f:57:bf:9d:
         93:b4:bb:c8:04:ee:2d:92:f8:89:45:8d:38:79:04:16:8f:0e:
         d8:2a:29:a1:b1:e0:de:3c:d0:3c:51:a1:d8:69:1b:f1:6e:4e:
         c3:37:47:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO8Yuh5ZgsbHwlYEmSYNGwBdTUSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4RTFGNzc5N0Y0RTU1NDE2OEEyODNCRTkwMzkzQTk5
RkFCMENDMTAeFw0yMzA3MTIwMjMxMjBaFw0yMzA3MTMwNDIwMjBaMDMxMTAvBgNV
BAMTKDI2RUY2N0FDQ0VCNzVBNThDRDYwN0UzNjExRDUwOERCRUU1QTdBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41ZMGMeLt/29CCZQyVuQehWm5
CtlnXF7umdPUQR1h3zCOU2WUNuObAITi6f2l5c9KLgl8annBUsIBU7k56RCsHGNE
lCTH0n1OKK6ipIOeT6XYCfjWXKfBQVFw1nqmN54amMdHv2YCyLFDJ0Wlda4EhgxN
P6R9rMFzW93iE0PlGycEC314PZVIoz2twJYM0qk1CfgiBDEV01DZjAHEgki26npP
gfSDhqEn2lpBBi4rfGmxsbS2eqqPSlwBW0q/4nh+6FPaPn+VX5UrPtrOXtVwTVbf
EAYzMLAb7LKz8w2rtvcbEDFc6v2a8TtCgPyCxyjOszAPJzkPKfLVgyoW7OcdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJu9nrM63WljNYH42EdUI2+5aeo0wHwYDVR0j
BBgwFoAUrY4fd5f05VQWiig76QOTqZ+rDMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkVIR2lvNldFNndNQnNuMnpmN0Q0TDF3dGh5SFdLSDc5QnpURjMzdnJx
UWgvMC9BRDhFMUY3Nzk3RjRFNTU0MTY4QTI4M0JFOTAzOTNBOTlGQUIwQ0MxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEOEUxRjc3OTdGNEU1NTQx
NjhBMjgzQkU5MDM5M0E5OUZBQjBDQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkVIR2lvNldFNndNQnNuMnpmN0Q0TDF3dGh5SFdLSDc5QnpURjMzdnJxUWgvMC9B
RDhFMUY3Nzk3RjRFNTU0MTY4QTI4M0JFOTAzOTNBOTlGQUIwQ0MxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACLIHPSwO0fAI3lrW29i9+IiG+nW6arDbDZhPPTfqdNHFoTiR0KBJ6JjD4/Xt
o11lzGK/rdDwXa/Gtw9aRpApSlx+wUKPAF6jDHpB9m/fZ5JMWprJAG9Xpc2FiHWd
itOcrL3m2WV8BhzbrqhZbr9M19o84iw4OVpxzPtYLJkAnTU/9T2tI13IHIn4KX1n
+iQwEyavg6iuixpseUd10Vm82t20wIoawq99tNjOFsIi3R0Wp9+JGLSZgYz6cmVE
V+jSpfRPk3U2vStsam+A8EqHbibTy/MvV7+dk7S7yATuLZL4iUWNOHkEFo8O2Cop
obHg3jzQPFGh2Gkb8W5OwzdHAw==
-----END CERTIFICATE-----