Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.mft
File:                     5979F5220DF4361B5BD86658747FA4BF7B93DA7A.mft (raw, json)
Hash identifier:          11RtQdhxsNBHHovYGuRZuQx8xzxqACMCcRk5ZJe6kWQ=
Subject key identifier:   75:AF:56:A8:0A:51:CE:10:D9:8A:AD:FA:60:B5:1F:CC:2D:75:B1:E3
Authority key identifier: 59:79:F5:22:0D:F4:36:1B:5B:D8:66:58:74:7F:A4:BF:7B:93:DA:7A
Certificate issuer:       /CN=5979F5220DF4361B5BD86658747FA4BF7B93DA7A
Certificate serial:       4988199D2569EA3AC0C07CB0C22801F690B38212
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.mft
Manifest number:          05
Signing time:             Fri 09 Feb 2024 11:45:25 +0000
Manifest this update:     Fri 09 Feb 2024 11:40:25 +0000
Manifest next update:     Sat 10 Feb 2024 13:29:25 +0000
Files and hashes:         1: 34352e362e3136302e302f32342d3234203d3e20323636313936.roa (hash: Uz63wki+Nl6ksdbUZqMlLSiUtcJ+SmTCKCHNcw+n00o=)
                          2: 34352e362e3136322e302f32342d3234203d3e20323636313936.roa (hash: Nt6r8iPYJls8qFttBrOW6wCKuQcY40WQ3upighryXEc=)
                          3: 323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (hash: lVH9ejd0csISjwo+wqhWeVafA+MIsIMJqO/xjeFybPE=)
                          4: 5979F5220DF4361B5BD86658747FA4BF7B93DA7A.crl (hash: lEZ0ITmyCcNGl77RZehAs8Hl7BVWlXIo0j08Qioac0Y=)
                          5: 34352e362e3136312e302f32342d3234203d3e20323636313936.roa (hash: Ctu3T1l2sH768u7+WxYILgrfPPaPobD2w4XSaRonYmc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:88:19:9d:25:69:ea:3a:c0:c0:7c:b0:c2:28:01:f6:90:b3:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5979F5220DF4361B5BD86658747FA4BF7B93DA7A
        Validity
            Not Before: Feb  9 11:40:25 2024 GMT
            Not After : Feb 10 13:29:25 2024 GMT
        Subject: CN=75AF56A80A51CE10D98AADFA60B51FCC2D75B1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:5b:eb:7c:b1:ca:c8:7b:20:48:e8:b1:9d:
                    20:7e:a8:89:9e:d0:c2:86:76:91:72:0f:df:5d:96:
                    64:06:2c:4d:f5:cf:bd:29:85:90:01:da:c9:57:00:
                    f8:6d:f5:4e:b9:58:ee:89:7f:b4:6e:ad:92:19:37:
                    d2:59:e6:c2:fc:fd:63:b6:62:ea:6c:ac:f5:99:71:
                    fc:e0:af:86:b0:a1:55:91:9b:0e:bc:34:02:b9:72:
                    0a:05:75:94:f9:dd:8e:68:56:09:bf:ee:31:39:58:
                    c4:32:72:5f:8b:28:f5:d8:2e:2a:3d:5b:1f:59:bb:
                    00:d4:d5:f0:c1:70:33:b5:6e:1c:a3:0e:e1:ea:cb:
                    f2:b5:3f:30:9b:9f:92:a0:58:74:1f:65:d0:fe:65:
                    93:b1:15:aa:6f:3d:ec:c7:38:ba:46:df:52:4d:6d:
                    97:32:ac:54:8d:8c:c1:d0:51:33:85:c6:19:78:f8:
                    5f:a7:8c:24:2b:4c:8d:46:de:56:4e:f5:46:65:07:
                    dd:f6:b2:37:bc:63:1f:b9:dc:9e:8a:b4:09:41:07:
                    d2:bd:48:23:b9:19:70:ad:31:91:0c:da:2a:93:0a:
                    69:20:5c:18:1c:9b:1e:ce:1a:56:63:75:fa:f3:6a:
                    88:a5:b0:92:bd:ab:69:0e:c1:c1:78:af:67:42:1a:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:56:A8:0A:51:CE:10:D9:8A:AD:FA:60:B5:1F:CC:2D:75:B1:E3
            X509v3 Authority Key Identifier:
                keyid:59:79:F5:22:0D:F4:36:1B:5B:D8:66:58:74:7F:A4:BF:7B:93:DA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/5979F5220DF4361B5BD86658747FA4BF7B93DA7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:d0:08:63:28:1a:0c:ed:43:e8:1a:44:2f:2d:a8:67:81:
         6e:20:18:41:b4:ff:d8:a3:1e:88:73:6d:ed:18:16:c0:ee:bd:
         87:cc:c1:bd:40:1e:e7:4d:09:fa:3c:f8:4e:ab:90:2f:2f:bc:
         0e:3d:73:81:0f:25:c7:bd:69:e1:dc:5e:ed:1d:02:b0:a9:1b:
         bf:b6:47:ca:70:a9:a9:d1:89:91:34:b5:58:71:26:1a:7f:d5:
         32:45:96:32:77:f1:ef:18:6b:e4:b4:99:91:a0:5c:f7:a5:84:
         0b:fb:85:12:cd:67:50:09:6d:53:59:e9:ab:1c:e4:34:9c:be:
         5c:ba:87:c1:3e:05:a6:4e:8e:7f:dd:5f:e5:25:16:57:fc:1d:
         1b:03:c0:23:89:a6:21:0b:a6:ed:ec:1d:52:f1:77:bb:89:54:
         a5:fe:d3:3f:8c:33:52:9a:27:ee:6d:31:b4:94:d3:11:95:1b:
         92:b1:0b:2b:5f:72:1f:8c:cc:47:3f:10:6d:24:c3:aa:69:cf:
         33:93:c4:1b:83:34:89:d3:03:c4:69:bb:c2:85:93:5a:bd:7a:
         81:58:7d:aa:bc:56:3f:8c:01:2a:75:30:b0:32:a1:58:41:9d:
         3f:48:49:b5:37:b5:b7:8a:cf:5e:09:6d:7e:b1:5a:b7:ff:21:
         91:cc:c2:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSYgZnSVp6jrAwHywwigB9pCzghIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3OUY1MjIwREY0MzYxQjVCRDg2NjU4NzQ3RkE0QkY3
QjkzREE3QTAeFw0yNDAyMDkxMTQwMjVaFw0yNDAyMTAxMzI5MjVaMDMxMTAvBgNV
BAMTKDc1QUY1NkE4MEE1MUNFMTBEOThBQURGQTYwQjUxRkNDMkQ3NUIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay1vrfLHKyHsgSOixnSB+qIme
0MKGdpFyD99dlmQGLE31z70phZAB2slXAPht9U65WO6Jf7RurZIZN9JZ5sL8/WO2
YupsrPWZcfzgr4awoVWRmw68NAK5cgoFdZT53Y5oVgm/7jE5WMQycl+LKPXYLio9
Wx9ZuwDU1fDBcDO1bhyjDuHqy/K1PzCbn5KgWHQfZdD+ZZOxFapvPezHOLpG31JN
bZcyrFSNjMHQUTOFxhl4+F+njCQrTI1G3lZO9UZlB932sje8Yx+53J6KtAlBB9K9
SCO5GXCtMZEM2iqTCmkgXBgcmx7OGlZjdfrzaoilsJK9q2kOwcF4r2dCGkB9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUda9WqApRzhDZiq36YLUfzC11seMwHwYDVR0j
BBgwFoAUWXn1Ig30Nhtb2GZYdH+kv3uT2nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC81OTc5RjUyMjBERjQzNjFCNUJEODY2NTg3NDdGQTRCRjdCOTNEQTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NzlGNTIyMERGNDM2MUI1
QkQ4NjY1ODc0N0ZBNEJGN0I5M0RBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRBZFEvMC81
OTc5RjUyMjBERjQzNjFCNUJEODY2NTg3NDdGQTRCRjdCOTNEQTdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfmXQCGMoGgztQ+gaRC8tqGeBbiAYQbT/2KMeiHNt7RgWwO69h8zBvUAe500J
+jz4TquQLy+8Dj1zgQ8lx71p4dxe7R0CsKkbv7ZHynCpqdGJkTS1WHEmGn/VMkWW
Mnfx7xhr5LSZkaBc96WEC/uFEs1nUAltU1npqxzkNJy+XLqHwT4Fpk6Of91f5SUW
V/wdGwPAI4mmIQum7ewdUvF3u4lUpf7TP4wzUpon7m0xtJTTEZUbkrELK19yH4zM
Rz8QbSTDqmnPM5PEG4M0idMDxGm7woWTWr16gVh9qrxWP4wBKnUwsDKhWEGdP0hJ
tTe1t4rPXgltfrFat/8hkczCYA==
-----END CERTIFICATE-----