Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft
File:                     1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft (raw, json)
Hash identifier:          AROzrAFpkoKNId5+69oc5AZ0nW5XKLQqd0qSMJKiO30=
Subject key identifier:   44:67:A1:A6:00:BE:B7:24:69:64:CF:55:1B:A8:7E:EC:8B:7A:67:CA
Authority key identifier: 1C:2C:5A:C6:BD:AC:2A:E5:7E:EA:D0:A7:37:80:A0:FE:75:5B:5B:76
Certificate issuer:       /CN=1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76
Certificate serial:       318A1AAB62F84E0DECEACE69EA249750CAF5BE76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft
Manifest number:          C5
Signing time:             Mon 13 Jun 2022 13:10:00 +0000
Manifest this update:     Mon 13 Jun 2022 13:05:00 +0000
Manifest next update:     Tue 14 Jun 2022 13:27:00 +0000
Files and hashes:         1: 1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.crl (hash: m+5J+q1tm+fS2FUiI1NgYsQ5saeN1356gl/+mgkcD90=)
                          2: 323830343a346332303a3a2f33322d3334203d3e20323637333531.roa (hash: O5PSEH1Tc6X42fuZfF51xsO7YQ3WmQT8gp2EDBIoeuw=)
                          3: 34352e3233342e342e302f32322d3234203d3e20323637333531.roa (hash: YLUO5Ivsn6WZ7Pzn8LGCHNv9goA5YvvoriSSvkTcJnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:1a:ab:62:f8:4e:0d:ec:ea:ce:69:ea:24:97:50:ca:f5:be:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76
        Validity
            Not Before: Jun 13 13:05:00 2022 GMT
            Not After : Jun 14 13:27:00 2022 GMT
        Subject: CN=4467A1A600BEB7246964CF551BA87EEC8B7A67CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:67:8b:4e:de:ed:2c:c0:2f:3c:61:88:80:
                    04:5d:31:99:5b:ea:2e:1c:03:ca:c8:5e:7a:ca:44:
                    99:1a:57:cb:c3:8d:87:be:d5:1f:83:75:bd:3e:af:
                    ba:ff:a8:8f:6b:a3:3d:4e:14:b4:4f:f6:f6:3e:dd:
                    ab:b3:de:0a:10:15:c5:c9:1c:6d:39:8f:18:70:72:
                    6a:bb:5d:c6:08:ea:48:26:6d:32:2f:47:b5:de:e0:
                    d5:ee:8d:26:9b:36:d9:c5:51:02:fa:22:b2:68:83:
                    38:e7:49:6c:86:1c:4f:55:09:26:44:0d:f8:b2:8a:
                    d7:31:bf:9b:6c:57:70:1c:eb:2a:23:c0:a4:bb:2c:
                    15:85:c1:39:d6:fa:17:9d:24:d7:f0:45:92:8d:28:
                    46:8c:45:4a:13:f6:84:a6:4d:3d:f8:6f:e9:e8:37:
                    f7:79:6b:f7:a2:76:6a:93:b6:ff:f0:6e:5f:d0:9d:
                    e7:2d:ba:a9:02:da:74:73:a2:40:8d:67:4c:25:e3:
                    5f:0b:64:07:72:84:be:33:6e:fd:49:5b:fe:19:2c:
                    fd:f2:c2:40:a7:b1:2c:b3:31:24:48:c4:54:2c:93:
                    57:f1:40:6c:c8:6e:5e:88:83:69:d5:e1:44:76:5b:
                    87:3f:29:1d:c4:d7:1c:d4:e2:13:29:ef:3b:9f:ef:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:A1:A6:00:BE:B7:24:69:64:CF:55:1B:A8:7E:EC:8B:7A:67:CA
            X509v3 Authority Key Identifier:
                keyid:1C:2C:5A:C6:BD:AC:2A:E5:7E:EA:D0:A7:37:80:A0:FE:75:5B:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:e4:07:a3:69:b4:4f:4f:2c:86:60:70:76:17:af:17:6c:
         5c:45:b5:f5:73:1c:52:08:c3:58:79:c6:2a:ea:98:35:46:29:
         34:c3:71:e1:24:48:dc:da:6c:50:1d:53:a6:2d:fb:e2:38:24:
         9a:29:6e:9d:8c:d2:f8:c2:8b:a4:39:2c:3a:9b:28:1d:2c:f2:
         5d:1c:65:42:e3:ea:9e:da:83:c3:9f:23:1a:00:6a:f5:af:04:
         56:bf:27:d2:33:8d:87:a4:c9:11:95:2b:b4:c8:b8:1b:d6:e0:
         c3:87:ec:6f:41:73:c4:23:f8:bc:67:34:c3:6f:c5:ed:71:6e:
         da:8b:81:94:2b:cb:6f:12:62:ad:40:a6:e9:2a:08:84:46:c2:
         c3:e0:2e:f5:c3:42:5a:3d:2d:41:20:61:ba:53:c9:69:41:2a:
         63:34:28:23:3d:7c:89:2b:65:d4:6d:22:be:fa:bd:43:23:30:
         72:a4:e3:10:5c:94:49:89:6f:fa:cb:5e:71:91:d1:14:93:6f:
         45:21:1e:6a:f9:fb:d0:dd:7b:18:9c:61:95:3d:8b:f2:c1:30:
         f7:39:17:50:12:44:e7:5d:e7:ac:9b:7c:92:f7:04:a1:67:f6:
         62:7c:c0:77:ee:5e:f3:e0:3f:6a:86:07:48:ab:b5:4c:ea:1c:
         07:96:1e:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMYoaq2L4Tg3s6s5p6iSXUMr1vnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMyQzVBQzZCREFDMkFFNTdFRUFEMEE3Mzc4MEEwRkU3
NTVCNUI3NjAeFw0yMjA2MTMxMzA1MDBaFw0yMjA2MTQxMzI3MDBaMDMxMTAvBgNV
BAMTKDQ0NjdBMUE2MDBCRUI3MjQ2OTY0Q0Y1NTFCQTg3RUVDOEI3QTY3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2meLTt7tLMAvPGGIgARdMZlb
6i4cA8rIXnrKRJkaV8vDjYe+1R+Ddb0+r7r/qI9roz1OFLRP9vY+3auz3goQFcXJ
HG05jxhwcmq7XcYI6kgmbTIvR7Xe4NXujSabNtnFUQL6IrJogzjnSWyGHE9VCSZE
Dfiyitcxv5tsV3Ac6yojwKS7LBWFwTnW+hedJNfwRZKNKEaMRUoT9oSmTT34b+no
N/d5a/eidmqTtv/wbl/QnectuqkC2nRzokCNZ0wl418LZAdyhL4zbv1JW/4ZLP3y
wkCnsSyzMSRIxFQsk1fxQGzIbl6Ig2nV4UR2W4c/KR3E1xzU4hMp7zuf7+IrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURGehpgC+tyRpZM9VG6h+7It6Z8owHwYDVR0j
BBgwFoAUHCxaxr2sKuV+6tCnN4Cg/nVbW3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC8xQzJDNUFDNkJEQUMyQUU1N0VFQUQwQTczNzgwQTBGRTc1NUI1Qjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDMkM1QUM2QkRBQzJBRTU3
RUVBRDBBNzM3ODBBMEZFNzU1QjVCNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhFdUQvMC8x
QzJDNUFDNkJEQUMyQUU1N0VFQUQwQTczNzgwQTBGRTc1NUI1Qjc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASwvkB6NptE9PLIZgcHYXrxdsXEW19XMcUgjDWHnGKuqYNUYpNMNx4SRI3Nps
UB1Tpi374jgkmilunYzS+MKLpDksOpsoHSzyXRxlQuPqntqDw58jGgBq9a8EVr8n
0jONh6TJEZUrtMi4G9bgw4fsb0FzxCP4vGc0w2/F7XFu2ouBlCvLbxJirUCm6SoI
hEbCw+Au9cNCWj0tQSBhulPJaUEqYzQoIz18iStl1G0ivvq9QyMwcqTjEFyUSYlv
+stecZHRFJNvRSEeavn70N17GJxhlT2L8sEw9zkXUBJE513nrJt8kvcEoWf2YnzA
d+5e8+A/aoYHSKu1TOocB5Yevw==
-----END CERTIFICATE-----