Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.mft
File:                     560E09E3344D3043DA46A24A78542DE5E249544A.mft (raw, json)
Hash identifier:          ZZPnAC1ZqBnpd4HrrjwF1eX91RKSlAeZs2jULxA65AQ=
Subject key identifier:   BD:0E:4F:C3:5A:49:C2:2B:1E:AB:E8:8E:16:0E:01:64:77:04:72:D7
Authority key identifier: 56:0E:09:E3:34:4D:30:43:DA:46:A2:4A:78:54:2D:E5:E2:49:54:4A
Certificate issuer:       /CN=560E09E3344D3043DA46A24A78542DE5E249544A
Certificate serial:       2DDFBAC6F345C772C24FFD9AF23C0589264382D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560E09E3344D3043DA46A24A78542DE5E249544A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.mft
Manifest number:          1E
Signing time:             Tue 28 Feb 2023 14:42:46 +0000
Manifest this update:     Tue 28 Feb 2023 14:37:46 +0000
Manifest next update:     Wed 01 Mar 2023 15:16:46 +0000
Files and hashes:         1: 560E09E3344D3043DA46A24A78542DE5E249544A.crl (hash: pUZoEbinEdNeRgFDscGgAhwIF3sjW1PZccGnmKlWuJM=)
                          2: 323830343a3138343a3a2f33322d313238203d3e20323632373439.roa (hash: RmUXrie04/VoWm3lC1fDQusc9a8RdwWcx/po3ortC+0=)
                          3: 3138392e38392e38302e302f32302d3332203d3e20323632373439.roa (hash: 4lX2sM78buNco/7wTzZBSOeUeo/I8IVpMME8U7tYYEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:df:ba:c6:f3:45:c7:72:c2:4f:fd:9a:f2:3c:05:89:26:43:82:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560E09E3344D3043DA46A24A78542DE5E249544A
        Validity
            Not Before: Feb 28 14:37:46 2023 GMT
            Not After : Mar  1 15:16:46 2023 GMT
        Subject: CN=BD0E4FC35A49C22B1EABE88E160E0164770472D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:92:d3:98:5e:f8:49:f5:47:f9:81:5c:11:
                    98:03:7b:fc:14:21:52:69:d6:3b:41:16:90:24:b7:
                    3a:d3:49:a0:7a:fb:cd:71:4f:1f:2c:86:78:6a:f9:
                    51:a8:46:ec:6c:89:39:c1:7e:70:68:af:43:0a:0b:
                    57:31:a3:2e:e5:17:24:35:62:05:dd:93:43:0e:e8:
                    92:9a:4b:b4:7f:4d:7a:70:5b:27:d1:56:07:dd:96:
                    0e:66:2b:1b:cc:b7:b9:55:b3:9c:61:30:d2:5a:c3:
                    44:4b:cd:ee:8d:d4:27:53:ae:d5:79:a1:f7:32:13:
                    48:2d:3c:c6:2d:fa:56:28:95:e4:67:1a:78:ef:6f:
                    9d:ce:2f:0f:2d:f1:c5:d6:fd:f4:ce:39:c6:00:4e:
                    07:06:f1:42:47:19:1a:85:25:26:62:0a:8e:d0:e5:
                    08:ac:48:37:d3:63:d8:f7:4f:4b:fa:25:51:37:93:
                    6a:8f:3e:90:c9:4b:17:aa:da:72:dc:f4:d3:60:6b:
                    f3:02:f1:ca:5f:8f:0d:27:28:91:69:ea:ab:51:7d:
                    68:73:60:bc:3c:3c:ad:df:7c:3a:10:18:1c:8a:b2:
                    04:4f:84:ad:47:4f:6a:df:93:1c:bf:62:8d:62:70:
                    72:82:a7:35:9c:0f:81:ff:0e:8d:f2:54:c6:4a:26:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:4F:C3:5A:49:C2:2B:1E:AB:E8:8E:16:0E:01:64:77:04:72:D7
            X509v3 Authority Key Identifier:
                keyid:56:0E:09:E3:34:4D:30:43:DA:46:A2:4A:78:54:2D:E5:E2:49:54:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/560E09E3344D3043DA46A24A78542DE5E249544A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:32:7a:23:44:eb:5c:64:29:92:da:02:36:7b:4c:f0:f9:
         be:5a:c6:35:7c:1e:d4:a9:bf:3c:50:68:4a:1c:20:69:3d:1b:
         e2:5f:ab:a0:b3:6b:f9:af:4a:7a:bf:15:c1:16:1e:68:b5:35:
         1d:eb:44:b7:51:76:52:a9:71:bc:47:ee:5a:6e:b3:96:96:95:
         3e:85:f3:7d:a3:d5:7e:4f:47:0e:8c:1d:69:8e:68:aa:a1:5f:
         c7:11:11:81:b1:d0:a2:04:b9:c8:93:36:e8:7b:3a:c4:6b:f4:
         3d:32:9c:7f:52:0a:59:84:4e:8b:91:ac:37:fb:88:43:1e:cf:
         32:ff:7c:3c:3c:27:86:15:d9:e5:da:b7:f4:7c:6f:e5:76:ff:
         66:4c:38:df:74:9a:6f:6b:fd:08:a8:18:a5:71:d7:7c:ef:e9:
         02:27:a2:f2:fb:d3:75:52:49:38:35:04:a5:75:80:a4:df:da:
         e1:72:8d:fe:e0:7a:c9:f1:42:a0:d7:1e:60:ee:f4:88:2d:af:
         19:28:8e:86:06:ee:35:7f:08:06:e8:b3:8a:0c:b3:32:b9:dd:
         60:f8:67:80:8e:6f:af:b0:5b:b0:49:a1:58:81:06:7a:6f:c6:
         42:20:95:14:8e:1a:20:aa:42:00:78:ab:c9:5a:e8:35:1b:7d:
         ec:9a:2d:e1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIULd+6xvNFx3LCT/2a8jwFiSZDgtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwRTA5RTMzNDREMzA0M0RBNDZBMjRBNzg1NDJERTVF
MjQ5NTQ0QTAeFw0yMzAyMjgxNDM3NDZaFw0yMzAzMDExNTE2NDZaMDMxMTAvBgNV
BAMTKEJEMEU0RkMzNUE0OUMyMkIxRUFCRTg4RTE2MEUwMTY0NzcwNDcyRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtV5LTmF74SfVH+YFcEZgDe/wU
IVJp1jtBFpAktzrTSaB6+81xTx8shnhq+VGoRuxsiTnBfnBor0MKC1cxoy7lFyQ1
YgXdk0MO6JKaS7R/TXpwWyfRVgfdlg5mKxvMt7lVs5xhMNJaw0RLze6N1CdTrtV5
ofcyE0gtPMYt+lYoleRnGnjvb53OLw8t8cXW/fTOOcYATgcG8UJHGRqFJSZiCo7Q
5QisSDfTY9j3T0v6JVE3k2qPPpDJSxeq2nLc9NNga/MC8cpfjw0nKJFp6qtRfWhz
YLw8PK3ffDoQGByKsgRPhK1HT2rfkxy/Yo1icHKCpzWcD4H/Do3yVMZKJs4xAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUvQ5Pw1pJwiseq+iOFg4BZHcEctcwHwYDVR0j
BBgwFoAUVg4J4zRNMEPaRqJKeFQt5eJJVEowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GdHE4SnBGSnF0S3c4TnNid2hXUFdvam9mWHFjVGpidHBUd0JOUEVNYzNp
LzAvNTYwRTA5RTMzNDREMzA0M0RBNDZBMjRBNzg1NDJERTVFMjQ5NTQ0QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81NjBFMDlFMzM0NEQzMDQzREE0
NkEyNEE3ODU0MkRFNUUyNDk1NDRBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z0
cThKcEZKcXRLdzhOc2J3aFdQV29qb2ZYcWNUamJ0cFR3Qk5QRU1jM2kvMC81NjBF
MDlFMzM0NEQzMDQzREE0NkEyNEE3ODU0MkRFNUUyNDk1NDRBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
UfwyeiNE61xkKZLaAjZ7TPD5vlrGNXwe1Km/PFBoShwgaT0b4l+roLNr+a9Ker8V
wRYeaLU1HetEt1F2UqlxvEfuWm6zlpaVPoXzfaPVfk9HDowdaY5oqqFfxxERgbHQ
ogS5yJM26Hs6xGv0PTKcf1IKWYROi5GsN/uIQx7PMv98PDwnhhXZ5dq39Hxv5Xb/
Zkw433Sab2v9CKgYpXHXfO/pAiei8vvTdVJJODUEpXWApN/a4XKN/uB6yfFCoNce
YO70iC2vGSiOhgbuNX8IBuizigyzMrndYPhngI5vr7BbsEmhWIEGem/GQiCVFI4a
IKpCAHiryVroNRt97Jot4Q==
-----END CERTIFICATE-----