Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/89EFCA9B22C8CA79F04E908E323769702650CF9C.mft
File:                     89EFCA9B22C8CA79F04E908E323769702650CF9C.mft (raw, json)
Hash identifier:          FpmsvEZ0E9TrOG/OlVbnxjL6IzWa7/BwxCMhod5NM0E=
Subject key identifier:   C9:81:86:A5:96:66:35:D5:3B:BD:99:75:C6:F1:2B:35:A8:59:19:28
Authority key identifier: 89:EF:CA:9B:22:C8:CA:79:F0:4E:90:8E:32:37:69:70:26:50:CF:9C
Certificate issuer:       /CN=89EFCA9B22C8CA79F04E908E323769702650CF9C
Certificate serial:       090A7D1727B1FC0A4983DA923E8B7CEBDD16C9EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EFCA9B22C8CA79F04E908E323769702650CF9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/89EFCA9B22C8CA79F04E908E323769702650CF9C.mft
Manifest number:          15
Signing time:             Fri 25 Oct 2024 13:59:59 +0000
Manifest this update:     Fri 25 Oct 2024 13:54:59 +0000
Manifest next update:     Sat 26 Oct 2024 14:45:59 +0000
Files and hashes:         1: 34352e3233342e342e302f32322d3332203d3e20323637333531.roa (hash: AGkOchvKBblfg3vUMMzW2B1KZpR4ZZUp0C7qhqjypP0=)
                          2: 89EFCA9B22C8CA79F04E908E323769702650CF9C.crl (hash: 8b+6dfQn0iq6Co4n2ZkBSGQvTQbspX7AfgrjO9jQxYg=)
                          3: 323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (hash: Q6Tr20y8ZeRS3E4s8kwIWWOAkJXuzTrhhCCRctL9s78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0a:7d:17:27:b1:fc:0a:49:83:da:92:3e:8b:7c:eb:dd:16:c9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EFCA9B22C8CA79F04E908E323769702650CF9C
        Validity
            Not Before: Oct 25 13:54:59 2024 GMT
            Not After : Oct 26 14:45:59 2024 GMT
        Subject: CN=C98186A5966635D53BBD9975C6F12B35A8591928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:34:5c:cd:39:da:94:17:da:9b:8b:53:1b:
                    f4:e4:39:ad:3c:e1:b4:b3:a4:38:36:5a:cf:4e:17:
                    a1:3b:11:f8:5d:31:d5:82:0c:b6:b2:78:34:be:53:
                    e2:ac:ed:18:0b:46:b6:12:27:9d:20:7a:e3:9b:64:
                    e1:f9:10:fc:03:ce:20:d1:f1:17:07:0a:83:39:42:
                    7c:24:e1:15:63:29:77:fe:ce:5d:3c:59:af:ae:4f:
                    c6:0b:55:e5:3a:53:02:5c:d9:1e:c8:b2:17:cc:bd:
                    e9:69:81:03:52:1d:09:1a:0e:76:3f:74:f0:a1:62:
                    cb:ca:a7:9c:92:74:0e:99:bd:67:f9:3d:76:bd:09:
                    27:86:5e:1f:3f:0f:68:da:88:2f:d3:72:ab:95:ea:
                    6c:51:fd:56:a7:45:73:df:ec:5a:a4:c3:69:b4:41:
                    cb:8a:af:d8:5b:ad:ac:e6:65:f6:60:01:0b:69:45:
                    ed:9b:67:9a:35:f1:e2:95:05:e2:3e:13:5b:4d:63:
                    95:04:d0:e4:9b:52:3e:7a:69:22:81:71:89:41:90:
                    e0:87:d8:8b:a1:3a:53:e4:a0:e4:b6:9f:81:01:92:
                    33:3a:96:f4:e1:e2:1f:3e:6d:92:77:e9:0b:8d:2c:
                    b8:65:16:0b:fe:b2:a8:33:ab:c0:85:d7:67:64:46:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:86:A5:96:66:35:D5:3B:BD:99:75:C6:F1:2B:35:A8:59:19:28
            X509v3 Authority Key Identifier:
                keyid:89:EF:CA:9B:22:C8:CA:79:F0:4E:90:8E:32:37:69:70:26:50:CF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/89EFCA9B22C8CA79F04E908E323769702650CF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EFCA9B22C8CA79F04E908E323769702650CF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/89EFCA9B22C8CA79F04E908E323769702650CF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:14:2d:46:c6:7e:b1:48:71:a0:24:d1:6b:a2:63:fd:cb:54:
         7f:c7:7a:07:d1:3c:37:41:20:b7:cd:e3:f2:d8:b1:ea:47:16:
         8e:a6:93:f7:c6:6f:1b:29:fe:43:8b:85:fc:b6:3d:7d:57:2c:
         12:96:b2:69:b0:9a:39:ba:43:7d:f0:53:eb:2b:85:ce:5a:3e:
         fc:d8:02:fd:34:c3:df:9b:9c:20:7f:f7:d0:9c:de:fd:ab:62:
         ce:33:ea:e7:fc:8e:10:df:62:ee:34:b8:54:40:e5:91:1f:c6:
         62:2c:55:74:81:bf:b6:95:82:3a:ee:50:a9:e1:c8:6a:02:92:
         ae:09:43:30:7c:c7:a4:75:39:fd:2d:30:8c:58:90:00:23:94:
         0d:8c:31:6e:79:f3:63:9e:23:cf:dc:0b:dd:9c:e9:a1:b5:70:
         f8:2a:0f:72:7e:f0:96:b8:95:68:52:de:f2:b4:88:01:d0:9a:
         68:8d:1d:e6:3a:e7:0a:78:7d:3a:1a:85:5c:21:80:bf:03:57:
         23:a8:4f:d0:02:49:57:3e:8d:44:30:96:c0:ab:3e:b7:08:35:
         bf:24:05:02:4f:91:a8:4a:85:9c:d8:35:6e:4c:a0:aa:c4:ac:
         d8:6b:a6:f2:7f:68:6f:b5:7d:fb:bc:80:7a:87:aa:1c:3f:9e:
         77:77:96:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCQp9Fyex/ApJg9qSPot8690WyeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRkNBOUIyMkM4Q0E3OUYwNEU5MDhFMzIzNzY5NzAy
NjUwQ0Y5QzAeFw0yNDEwMjUxMzU0NTlaFw0yNDEwMjYxNDQ1NTlaMDMxMTAvBgNV
BAMTKEM5ODE4NkE1OTY2NjM1RDUzQkJEOTk3NUM2RjEyQjM1QTg1OTE5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSdzRczTnalBfam4tTG/TkOa08
4bSzpDg2Ws9OF6E7EfhdMdWCDLayeDS+U+Ks7RgLRrYSJ50geuObZOH5EPwDziDR
8RcHCoM5Qnwk4RVjKXf+zl08Wa+uT8YLVeU6UwJc2R7IshfMvelpgQNSHQkaDnY/
dPChYsvKp5ySdA6ZvWf5PXa9CSeGXh8/D2jaiC/TcquV6mxR/VanRXPf7Fqkw2m0
QcuKr9hbrazmZfZgAQtpRe2bZ5o18eKVBeI+E1tNY5UE0OSbUj56aSKBcYlBkOCH
2IuhOlPkoOS2n4EBkjM6lvTh4h8+bZJ36QuNLLhlFgv+sqgzq8CF12dkRjqlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyYGGpZZmNdU7vZl1xvErNahZGSgwHwYDVR0j
BBgwFoAUie/KmyLIynnwTpCOMjdpcCZQz5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC84OUVGQ0E5QjIyQzhDQTc5RjA0RTkwOEUzMjM3Njk3MDI2NTBDRjlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUZDQTlCMjJDOENBNzlG
MDRFOTA4RTMyMzc2OTcwMjY1MENGOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhFdUQvMC84
OUVGQ0E5QjIyQzhDQTc5RjA0RTkwOEUzMjM3Njk3MDI2NTBDRjlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJBQtRsZ+sUhxoCTRa6Jj/ctUf8d6B9E8N0Egt83j8tix6kcWjqaT98ZvGyn+
Q4uF/LY9fVcsEpayabCaObpDffBT6yuFzlo+/NgC/TTD35ucIH/30Jze/atizjPq
5/yOEN9i7jS4VEDlkR/GYixVdIG/tpWCOu5QqeHIagKSrglDMHzHpHU5/S0wjFiQ
ACOUDYwxbnnzY54jz9wL3ZzpobVw+CoPcn7wlriVaFLe8rSIAdCaaI0d5jrnCnh9
OhqFXCGAvwNXI6hP0AJJVz6NRDCWwKs+twg1vyQFAk+RqEqFnNg1bkygqsSs2Gum
8n9ob7V9+7yAeoeqHD+ed3eWzA==
-----END CERTIFICATE-----