Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.mft
File:                     5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.mft (raw, json)
Hash identifier:          vi/sBnkE6A2pwbVPMD1A/Tr+va20EcvORY3EfTDtaJo=
Subject key identifier:   57:FF:34:B7:59:1B:4C:52:64:2F:F3:AD:05:12:19:16:19:E5:3F:73
Authority key identifier: 5C:CE:71:C8:07:51:C7:4F:F3:3D:97:5D:63:D8:E4:E5:C3:7E:76:F1
Certificate issuer:       /CN=5CCE71C80751C74FF33D975D63D8E4E5C37E76F1
Certificate serial:       681F466BB41A73A60694C0EC11778C2BF02D348F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.mft
Manifest number:          CA
Signing time:             Fri 16 Dec 2022 01:28:44 +0000
Manifest this update:     Fri 16 Dec 2022 01:23:44 +0000
Manifest next update:     Sat 17 Dec 2022 01:58:44 +0000
Files and hashes:         1: 3137302e302e38382e302f32322d3234203d3e20323634393634.roa (hash: DsP+W925JS9/Xh6Mz5YqUAIbyJXHN8QffyH37IzZhKs=)
                          2: 323830343a333039633a3a2f33322d3438203d3e20323634393634.roa (hash: OExmeUlL7ctpCvXh/1cPp2ZPtyijwSKEDtPEhgJi9Jc=)
                          3: 5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.crl (hash: PGM17Y6Q9wk1I3N4XGue6pCH23GxBnbSu6h4smBmsmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:46:6b:b4:1a:73:a6:06:94:c0:ec:11:77:8c:2b:f0:2d:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CCE71C80751C74FF33D975D63D8E4E5C37E76F1
        Validity
            Not Before: Dec 16 01:23:44 2022 GMT
            Not After : Dec 17 01:58:44 2022 GMT
        Subject: CN=57FF34B7591B4C52642FF3AD0512191619E53F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:57:15:5d:32:d2:a7:3f:20:a1:d2:6d:c1:
                    89:f5:fa:7f:44:9b:19:e9:8f:e3:9c:c8:34:e2:b9:
                    44:55:fd:e5:00:8d:52:c4:55:43:5f:12:53:39:4a:
                    61:d7:37:65:17:4c:b5:0f:85:e4:33:f9:38:59:bc:
                    1b:6f:4c:fe:ce:aa:45:3b:3f:e7:64:3e:cf:93:31:
                    89:74:8e:c6:b2:56:23:cf:58:8c:8f:71:49:e2:f6:
                    65:6d:e0:09:a4:4e:bd:fe:b6:8f:a7:5a:f0:53:1a:
                    b8:1f:39:cb:fd:46:e1:2e:9d:9d:91:74:cc:75:cf:
                    c3:bb:25:ff:ee:0d:0b:97:50:4d:20:3f:ee:bd:5e:
                    03:de:25:4e:c9:b6:83:cc:2b:83:9f:c5:d4:d2:c5:
                    16:37:11:97:38:e6:9d:c5:dc:5b:18:af:ce:55:ed:
                    45:c5:ad:3e:4b:f3:38:6d:93:27:fd:62:19:23:e6:
                    e2:b1:f1:33:40:41:97:7b:6e:23:29:f3:62:07:04:
                    f5:01:35:c8:c4:75:4d:3e:6e:85:be:00:df:4b:80:
                    3d:af:d9:16:b2:14:8c:32:a3:36:f8:d8:12:03:2d:
                    c9:f4:1c:d8:43:49:94:3e:8d:fb:bc:58:00:4c:5f:
                    ec:5e:43:1e:2d:90:ba:6e:6e:6b:2b:a0:fd:c4:7d:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:34:B7:59:1B:4C:52:64:2F:F3:AD:05:12:19:16:19:E5:3F:73
            X509v3 Authority Key Identifier:
                keyid:5C:CE:71:C8:07:51:C7:4F:F3:3D:97:5D:63:D8:E4:E5:C3:7E:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/5CCE71C80751C74FF33D975D63D8E4E5C37E76F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8e:52:f6:4c:1f:4f:40:83:ae:68:39:0b:fb:c3:d7:c2:a7:
         d5:be:60:7f:a4:39:ab:b8:1a:35:8d:4e:d2:4c:5c:f3:f1:41:
         53:14:a0:5a:b2:3e:e6:4b:b7:7f:9c:e9:7e:a5:24:66:2d:20:
         75:00:02:e9:0d:69:63:69:8b:36:44:bf:48:c4:31:87:7d:42:
         28:89:4c:1b:7b:d0:74:db:0f:a3:9d:3f:c1:0d:d3:e0:f6:5c:
         d2:0d:bc:e9:fc:6c:f7:68:4f:e9:2e:d1:5a:6b:85:8b:42:f0:
         4b:7c:8b:2c:ea:84:96:a4:45:e1:80:80:95:cb:d3:82:43:66:
         d5:0c:ec:28:35:59:c7:50:3e:76:fa:99:2b:1a:ae:fa:31:5c:
         4b:e5:15:3f:2d:04:c5:44:1f:74:88:e1:07:02:4e:a5:38:33:
         65:79:e6:b3:7f:b6:b9:b6:cc:d7:46:19:02:6c:f0:e1:bd:7f:
         f7:7b:b5:ff:db:2a:73:b7:3b:ec:34:93:af:3f:b3:3a:0b:9d:
         7b:78:27:12:85:f4:07:34:24:53:e2:d4:3b:78:6a:b2:5c:df:
         f4:e1:7a:2f:b0:4a:cd:28:51:22:69:2e:4b:70:93:08:97:9a:
         ea:cc:b3:95:e4:a0:5d:af:38:e4:88:55:07:07:e7:71:5c:a0:
         b3:95:47:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaB9Ga7Qac6YGlMDsEXeMK/AtNI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDRTcxQzgwNzUxQzc0RkYzM0Q5NzVENjNEOEU0RTVD
MzdFNzZGMTAeFw0yMjEyMTYwMTIzNDRaFw0yMjEyMTcwMTU4NDRaMDMxMTAvBgNV
BAMTKDU3RkYzNEI3NTkxQjRDNTI2NDJGRjNBRDA1MTIxOTE2MTlFNTNGNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwVcVXTLSpz8godJtwYn1+n9E
mxnpj+OcyDTiuURV/eUAjVLEVUNfElM5SmHXN2UXTLUPheQz+ThZvBtvTP7OqkU7
P+dkPs+TMYl0jsayViPPWIyPcUni9mVt4AmkTr3+to+nWvBTGrgfOcv9RuEunZ2R
dMx1z8O7Jf/uDQuXUE0gP+69XgPeJU7JtoPMK4OfxdTSxRY3EZc45p3F3FsYr85V
7UXFrT5L8zhtkyf9Yhkj5uKx8TNAQZd7biMp82IHBPUBNcjEdU0+boW+AN9LgD2v
2RayFIwyozb42BIDLcn0HNhDSZQ+jfu8WABMX+xeQx4tkLpubmsroP3EfQ9/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUV/80t1kbTFJkL/OtBRIZFhnlP3MwHwYDVR0j
BBgwFoAUXM5xyAdRx0/zPZddY9jk5cN+dvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllwUmtWdGh5VDFNZmRwN21Ga3FVcjhEOWYzcVpINHIyZGRnZmU1R2ZZ
M3ovMC81Q0NFNzFDODA3NTFDNzRGRjMzRDk3NUQ2M0Q4RTRFNUMzN0U3NkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDQ0U3MUM4MDc1MUM3NEZG
MzNEOTc1RDYzRDhFNEU1QzM3RTc2RjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RllwUmtWdGh5VDFNZmRwN21Ga3FVcjhEOWYzcVpINHIyZGRnZmU1R2ZZM3ovMC81
Q0NFNzFDODA3NTFDNzRGRjMzRDk3NUQ2M0Q4RTRFNUMzN0U3NkYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF45S9kwfT0CDrmg5C/vD18Kn1b5gf6Q5q7gaNY1O0kxc8/FBUxSgWrI+5ku3
f5zpfqUkZi0gdQAC6Q1pY2mLNkS/SMQxh31CKIlMG3vQdNsPo50/wQ3T4PZc0g28
6fxs92hP6S7RWmuFi0LwS3yLLOqElqRF4YCAlcvTgkNm1QzsKDVZx1A+dvqZKxqu
+jFcS+UVPy0ExUQfdIjhBwJOpTgzZXnms3+2ubbM10YZAmzw4b1/93u1/9sqc7c7
7DSTrz+zOgude3gnEoX0BzQkU+LUO3hqslzf9OF6L7BKzShRImkuS3CTCJea6syz
leSgXa845IhVBwfncVygs5VHtg==
-----END CERTIFICATE-----