Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft
File:                     0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft (raw, json)
Hash identifier:          4Q0gXj2p2+b3KIxkXigx7iv9EW93Ygsw/ZaI7+lVIdw=
Subject key identifier:   5E:EF:BF:EB:59:3B:62:54:EB:2A:68:17:7C:11:08:14:74:87:62:E2
Authority key identifier: 0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26
Certificate issuer:       /CN=0C0961EF01266C16C5F1B9EDA9E4F9407BD16426
Certificate serial:       4ACEBAEA5F3EBDC0E4B44A1207CD5AC0D509D6A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft
Manifest number:          14
Signing time:             Thu 18 Apr 2024 11:25:09 +0000
Manifest this update:     Thu 18 Apr 2024 11:20:09 +0000
Manifest next update:     Fri 19 Apr 2024 13:03:09 +0000
Files and hashes:         1: 323830343a343965383a3a2f33322d3336203d3e20323637323038.roa (hash: nhdzDMGYxTI2PDdPnUvRcGPUL5Zl47tpWRjnJYZc/VE=)
                          2: 34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa (hash: 69A1zvJAizNOE/+EXdyhBCYhnAXbPmb6a5ZvyVbBIDA=)
                          3: 0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.crl (hash: scg1py+sg8inpRCToX/aiOzTA0m3TXQik4uMVRS0EzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ce:ba:ea:5f:3e:bd:c0:e4:b4:4a:12:07:cd:5a:c0:d5:09:d6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C0961EF01266C16C5F1B9EDA9E4F9407BD16426
        Validity
            Not Before: Apr 18 11:20:09 2024 GMT
            Not After : Apr 19 13:03:09 2024 GMT
        Subject: CN=5EEFBFEB593B6254EB2A68177C110814748762E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:ea:50:57:3f:73:9e:06:a1:ec:79:7c:c9:
                    17:4d:ff:a4:07:4c:df:3a:d2:82:66:8d:1c:3a:49:
                    5c:b8:88:bd:47:2e:67:5b:e9:ac:7e:6d:e2:9e:a0:
                    01:a5:80:1e:ac:22:9c:b5:47:b3:9a:e1:1c:9e:2d:
                    c9:38:c3:be:bf:1c:64:d6:ea:e1:d2:68:04:73:3b:
                    2f:8f:07:7a:d3:70:c5:b2:a2:7f:c5:25:dc:e8:5b:
                    b3:be:37:fb:49:d9:77:31:01:3a:ba:3c:2e:9d:08:
                    62:1e:3d:69:fe:0e:34:34:ce:84:4c:fc:0c:c2:c7:
                    73:27:7c:75:e0:c2:98:9c:8d:75:57:49:54:7d:79:
                    82:64:9b:7d:ec:17:91:69:d3:4a:ff:73:0c:b3:75:
                    24:23:0a:7a:63:e2:52:53:00:f8:2a:e2:19:62:e7:
                    1b:b8:2e:d5:35:14:6a:2a:5c:58:23:4b:91:67:e2:
                    7f:a8:3b:ce:40:61:e5:2e:cb:bc:d6:fa:3c:cb:59:
                    9e:e9:cd:fa:47:2d:21:1e:38:04:63:f3:8b:41:b5:
                    86:79:e4:b6:72:c3:63:b2:89:cd:a5:9e:99:df:a0:
                    84:de:00:33:62:79:84:12:a0:68:99:b9:e5:fc:a5:
                    dc:11:a2:c5:34:d9:9e:23:0a:77:03:0a:3d:a4:40:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EF:BF:EB:59:3B:62:54:EB:2A:68:17:7C:11:08:14:74:87:62:E2
            X509v3 Authority Key Identifier:
                keyid:0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:d1:ec:e8:3a:bd:f1:e0:3a:b6:83:ac:76:f4:be:8f:5e:
         9a:fb:fd:45:5e:90:c4:92:af:1d:01:ba:5f:44:62:31:8e:eb:
         3f:03:a2:52:43:da:b8:cc:a4:07:b5:5e:50:78:6f:91:53:ee:
         aa:f9:0d:fc:f1:1b:70:e0:c5:fc:d2:28:a8:39:51:65:91:84:
         86:7e:fe:0e:d4:27:bf:a1:df:50:6b:3b:7d:6a:eb:3b:43:68:
         d9:45:6e:c9:e7:be:1d:e1:28:55:ab:e7:ea:5a:e9:9d:c7:2d:
         9e:01:3e:cd:93:76:0d:92:7a:62:d6:d5:b1:33:b0:8d:4a:0e:
         05:0e:c9:49:4f:0f:b3:ca:fd:fa:c5:8c:b1:5b:7a:87:ac:f0:
         e8:5d:1d:36:ff:71:0e:0b:c8:a5:6e:e1:66:a2:dc:5c:be:7f:
         45:65:f7:07:ac:aa:e2:bf:0b:f3:42:a3:52:54:7f:8a:06:43:
         04:27:12:b2:55:36:58:ee:1c:9e:91:52:21:2a:b3:fd:11:fe:
         44:7d:5f:db:24:6c:68:25:99:aa:e2:52:a0:8f:56:c3:7f:6e:
         fe:59:62:f1:ef:e0:cb:0a:c5:ea:11:ed:ba:53:44:ec:59:48:
         46:a9:8b:b7:c5:3f:35:27:10:40:8b:04:a8:d9:32:e4:08:c1:
         22:9a:e1:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSs666l8+vcDktEoSB81awNUJ1qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwOTYxRUYwMTI2NkMxNkM1RjFCOUVEQTlFNEY5NDA3
QkQxNjQyNjAeFw0yNDA0MTgxMTIwMDlaFw0yNDA0MTkxMzAzMDlaMDMxMTAvBgNV
BAMTKDVFRUZCRkVCNTkzQjYyNTRFQjJBNjgxNzdDMTEwODE0NzQ4NzYyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW+pQVz9zngah7Hl8yRdN/6QH
TN860oJmjRw6SVy4iL1HLmdb6ax+beKeoAGlgB6sIpy1R7Oa4RyeLck4w76/HGTW
6uHSaARzOy+PB3rTcMWyon/FJdzoW7O+N/tJ2XcxATq6PC6dCGIePWn+DjQ0zoRM
/AzCx3MnfHXgwpicjXVXSVR9eYJkm33sF5Fp00r/cwyzdSQjCnpj4lJTAPgq4hli
5xu4LtU1FGoqXFgjS5Fn4n+oO85AYeUuy7zW+jzLWZ7pzfpHLSEeOARj84tBtYZ5
5LZyw2Oyic2lnpnfoITeADNieYQSoGiZueX8pdwRosU02Z4jCncDCj2kQCNPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXu+/61k7YlTrKmgXfBEIFHSHYuIwHwYDVR0j
BBgwFoAUDAlh7wEmbBbF8bntqeT5QHvRZCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlDeHB2UFltNE5iaDNjcHh1VUhyNnpkQU1TYWZQN25oUUs4VG0zRFVn
TXMvMS8wQzA5NjFFRjAxMjY2QzE2QzVGMUI5RURBOUU0Rjk0MDdCRDE2NDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMDk2MUVGMDEyNjZDMTZD
NUYxQjlFREE5RTRGOTQwN0JEMTY0MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmlDeHB2UFltNE5iaDNjcHh1VUhyNnpkQU1TYWZQN25oUUs4VG0zRFVnTXMvMS8w
QzA5NjFFRjAxMjY2QzE2QzVGMUI5RURBOUU0Rjk0MDdCRDE2NDI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAjDR7Og6vfHgOraDrHb0vo9emvv9RV6QxJKvHQG6X0RiMY7rPwOiUkPauMyk
B7VeUHhvkVPuqvkN/PEbcODF/NIoqDlRZZGEhn7+DtQnv6HfUGs7fWrrO0No2UVu
yee+HeEoVavn6lrpncctngE+zZN2DZJ6YtbVsTOwjUoOBQ7JSU8Ps8r9+sWMsVt6
h6zw6F0dNv9xDgvIpW7hZqLcXL5/RWX3B6yq4r8L80KjUlR/igZDBCcSslU2WO4c
npFSISqz/RH+RH1f2yRsaCWZquJSoI9Ww39u/lli8e/gywrF6hHtulNE7FlIRqmL
t8U/NScQQIsEqNky5AjBIprh5A==
-----END CERTIFICATE-----