Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft
File:                     E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft (raw, json)
Hash identifier:          BfHoTjPSM0WocNJF5Y67KLNFnxGPP29ii8HiCIJ1hm4=
Subject key identifier:   41:B9:3E:97:D6:43:C5:39:4E:49:10:9E:4A:50:7E:64:06:B5:05:65
Authority key identifier: E9:EA:EC:4D:89:AA:64:07:33:62:88:01:7C:2F:CC:BF:BF:BB:CB:C4
Certificate issuer:       /CN=E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4
Certificate serial:       748715A8A6841A04FA6EB1FEF70C4519582B5E97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft
Manifest number:          FE
Signing time:             Sat 13 Jan 2024 21:34:44 +0000
Manifest this update:     Sat 13 Jan 2024 21:29:44 +0000
Manifest next update:     Sun 14 Jan 2024 22:39:44 +0000
Files and hashes:         1: E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.crl (hash: o5Qt5qRM6qkEIOqdq4Leeul5gZC42quPtNYw9Cpe0sM=)
                          2: 3139312e33372e37322e302f32312d3234203d3e20323633333536.roa (hash: U8Ks0FGhhJQfBO1AIhgPTgdQui3HZ2m3IM5F4jfmHzs=)
                          3: 323830343a313465303a3a2f33322d3334203d3e20323633333536.roa (hash: +dQF/5/sDEa4PeWpj5Pp3KBBJxBsUWkWcnAB4HF/enk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:87:15:a8:a6:84:1a:04:fa:6e:b1:fe:f7:0c:45:19:58:2b:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4
        Validity
            Not Before: Jan 13 21:29:44 2024 GMT
            Not After : Jan 14 22:39:44 2024 GMT
        Subject: CN=41B93E97D643C5394E49109E4A507E6406B50565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:16:68:fd:9c:af:24:b5:3c:5d:59:8c:a1:
                    c6:d5:1b:33:99:5c:a9:87:1d:06:9c:88:63:84:56:
                    95:58:23:d7:b4:15:e0:7e:cd:f3:05:f7:85:89:5f:
                    fe:f0:39:cf:dd:7f:d1:bb:1e:49:21:ee:94:11:5f:
                    56:b3:66:21:5e:47:d9:52:53:9a:e1:1b:0f:73:d7:
                    fb:0f:f3:2b:f9:0d:a5:eb:11:cd:99:21:0d:1c:78:
                    6c:98:56:c6:43:46:dc:fd:a4:04:9a:a7:42:0b:58:
                    3e:1b:1b:18:c3:ca:56:05:37:78:1f:a6:73:52:a4:
                    ea:ab:b9:fb:18:3d:a8:35:e2:7b:42:4e:f0:44:a7:
                    29:cb:01:54:a0:b2:ad:74:1d:e9:c7:36:c5:b0:6a:
                    51:40:b4:5e:e3:ff:d2:76:fa:3d:1d:53:98:d4:45:
                    e7:97:8e:b4:e2:80:59:65:42:dd:29:d0:41:68:d1:
                    72:19:bd:f7:b0:2d:2d:94:6f:d2:c0:a8:ff:a1:fd:
                    85:cc:b8:cf:c7:58:8c:f3:88:04:b9:57:49:a2:df:
                    bd:81:06:e5:2f:4a:67:dd:01:c7:5e:90:33:79:67:
                    f1:8d:c9:9a:5a:b0:7c:91:53:ff:20:bd:1f:27:37:
                    b0:a6:97:43:10:10:d6:9f:4b:fd:f6:2b:52:5f:bd:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:3E:97:D6:43:C5:39:4E:49:10:9E:4A:50:7E:64:06:B5:05:65
            X509v3 Authority Key Identifier:
                keyid:E9:EA:EC:4D:89:AA:64:07:33:62:88:01:7C:2F:CC:BF:BF:BB:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:1d:45:ff:b4:b8:54:1c:cc:e0:55:80:4f:75:a7:64:26:
         0c:72:a2:6d:ec:3f:b7:3e:84:be:5f:d0:99:1a:97:b6:8b:2c:
         71:9c:0d:6d:80:df:75:6c:0e:d6:be:cb:fc:b0:93:0c:46:3e:
         da:b6:4e:a7:43:65:f5:a7:a6:63:07:99:01:d5:66:fa:b3:96:
         56:fc:5d:18:1b:e4:88:44:3d:cb:ba:b6:7b:70:87:68:d6:4d:
         a3:55:d5:48:bf:10:24:f3:32:fb:74:5b:d9:d1:af:da:06:7e:
         44:f4:70:6f:66:34:18:1e:07:ef:15:a7:0b:82:82:3a:fa:dc:
         3f:f8:b2:1b:5b:6a:6a:9a:49:8a:49:7d:97:41:3e:99:b4:39:
         f6:8c:ae:ec:e3:09:b0:ef:1d:ea:e9:bd:40:63:f8:41:9e:c8:
         f8:c7:eb:03:52:3a:82:2b:21:c7:8e:0b:b5:94:5e:f1:24:a7:
         96:d5:46:39:c6:a3:7a:e6:5b:15:0e:ac:1f:6b:32:a9:1c:c4:
         af:49:e0:72:07:6b:2e:f0:2e:26:66:b6:98:63:7d:f8:bb:b7:
         3d:12:1f:f9:af:67:ce:22:5a:3d:06:b0:99:9c:d0:6e:2b:a2:
         db:c2:79:a3:19:65:f6:64:b5:29:6c:66:96:74:ea:0a:a2:ce:
         00:d5:a9:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdIcVqKaEGgT6brH+9wxFGVgrXpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFQUVDNEQ4OUFBNjQwNzMzNjI4ODAxN0MyRkNDQkZC
RkJCQ0JDNDAeFw0yNDAxMTMyMTI5NDRaFw0yNDAxMTQyMjM5NDRaMDMxMTAvBgNV
BAMTKDQxQjkzRTk3RDY0M0M1Mzk0RTQ5MTA5RTRBNTA3RTY0MDZCNTA1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+BZo/ZyvJLU8XVmMocbVGzOZ
XKmHHQaciGOEVpVYI9e0FeB+zfMF94WJX/7wOc/df9G7Hkkh7pQRX1azZiFeR9lS
U5rhGw9z1/sP8yv5DaXrEc2ZIQ0ceGyYVsZDRtz9pASap0ILWD4bGxjDylYFN3gf
pnNSpOqrufsYPag14ntCTvBEpynLAVSgsq10HenHNsWwalFAtF7j/9J2+j0dU5jU
ReeXjrTigFllQt0p0EFo0XIZvfewLS2Ub9LAqP+h/YXMuM/HWIzziAS5V0mi372B
BuUvSmfdAcdekDN5Z/GNyZpasHyRU/8gvR8nN7Cml0MQENafS/32K1JfveojAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQbk+l9ZDxTlOSRCeSlB+ZAa1BWUwHwYDVR0j
BBgwFoAU6ersTYmqZAczYogBfC/Mv7+7y8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm5iTlVibktubzRieEU3bnNWZ2Iyd3puY0RIQkROQzUxa1FmQXVXS1h1
U3UvMC9FOUVBRUM0RDg5QUE2NDA3MzM2Mjg4MDE3QzJGQ0NCRkJGQkJDQkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5RUFFQzREODlBQTY0MDcz
MzYyODgwMTdDMkZDQ0JGQkZCQkNCQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rm5iTlVibktubzRieEU3bnNWZ2Iyd3puY0RIQkROQzUxa1FmQXVXS1h1U3UvMC9F
OUVBRUM0RDg5QUE2NDA3MzM2Mjg4MDE3QzJGQ0NCRkJGQkJDQkM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHu8dRf+0uFQczOBVgE91p2QmDHKibew/tz6Evl/QmRqXtosscZwNbYDfdWwO
1r7L/LCTDEY+2rZOp0Nl9aemYweZAdVm+rOWVvxdGBvkiEQ9y7q2e3CHaNZNo1XV
SL8QJPMy+3Rb2dGv2gZ+RPRwb2Y0GB4H7xWnC4KCOvrcP/iyG1tqappJikl9l0E+
mbQ59oyu7OMJsO8d6um9QGP4QZ7I+MfrA1I6gishx44LtZRe8SSnltVGOcajeuZb
FQ6sH2syqRzEr0ngcgdrLvAuJma2mGN9+Lu3PRIf+a9nziJaPQawmZzQbiui28J5
oxll9mS1KWxmlnTqCqLOANWp1g==
-----END CERTIFICATE-----