Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft
File:                     1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft (raw, json)
Hash identifier:          aRSVhgPUMDo8PzRWz48MqPdnnaHMz8Y1XqVWep2IboY=
Subject key identifier:   D4:14:C8:A8:65:F0:8C:E9:C0:BE:04:E2:D6:2B:C3:50:00:7D:8A:5A
Authority key identifier: 1E:11:B0:62:30:9C:19:EC:7D:C7:23:F0:54:F8:C8:DD:AF:3A:4B:52
Certificate issuer:       /CN=1E11B062309C19EC7DC723F054F8C8DDAF3A4B52
Certificate serial:       4B4F62509190F9386D04AE4D3ECBB9B01C402C81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft
Manifest number:          014D
Signing time:             Sat 12 Nov 2022 13:54:32 +0000
Manifest this update:     Sat 12 Nov 2022 13:49:32 +0000
Manifest next update:     Sun 13 Nov 2022 15:31:32 +0000
Files and hashes:         1: 323830343a326364343a3a2f33322d3434203d3e20323635323436.roa (hash: CgtIv7BZN9qJFn4Oa9ipOehDDSgNN+PLsrPWyMWV2I4=)
                          2: 3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (hash: XfisRxWZ3pYPYWNReB+SOma/LaXIl+nbkAFaMtWqKQw=)
                          3: 1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.crl (hash: 8Y1nbrDt14GVedX7dKdNAA3mozreXmKi6qq1SEx5OVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4f:62:50:91:90:f9:38:6d:04:ae:4d:3e:cb:b9:b0:1c:40:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E11B062309C19EC7DC723F054F8C8DDAF3A4B52
        Validity
            Not Before: Nov 12 13:49:32 2022 GMT
            Not After : Nov 13 15:31:32 2022 GMT
        Subject: CN=D414C8A865F08CE9C0BE04E2D62BC350007D8A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:36:ea:e6:93:f8:99:99:88:dd:dd:4d:f2:
                    59:e2:d8:c5:33:81:4d:f7:cf:6b:2f:0e:cc:ba:bb:
                    c8:cb:9c:58:af:1e:1b:e3:79:cb:2e:fc:01:f2:5b:
                    9b:d6:42:fc:d3:dc:b6:d6:4c:c2:6b:7f:3f:48:11:
                    14:60:1b:74:28:a6:b7:df:bc:b9:17:42:11:62:c3:
                    d8:44:be:d0:92:a1:35:f6:47:9b:1a:63:b5:80:27:
                    3f:ef:70:8d:c6:6a:a2:02:c9:96:1f:f6:e9:cd:3d:
                    28:38:78:61:3b:d7:b6:13:c1:35:aa:a9:58:bf:61:
                    54:9c:0a:ba:56:d7:43:e5:c9:dc:0a:b6:f7:b1:d9:
                    db:f1:18:52:45:a2:5e:59:7d:32:d9:f0:32:cf:0c:
                    5c:8d:75:33:69:36:8f:03:ae:b4:16:f3:ae:f6:90:
                    2f:7b:c4:14:b6:e6:14:63:64:76:dc:9c:0c:ed:a1:
                    44:7c:d1:02:91:b6:83:ed:2d:9c:87:77:04:70:91:
                    7d:d1:c3:cc:e6:77:60:1c:ec:e5:87:6d:24:31:18:
                    22:c3:94:41:5c:33:a7:b9:86:a0:e5:a5:f3:b7:bc:
                    10:a3:1d:97:e7:0d:8d:d4:d5:f9:70:5e:a4:e8:ff:
                    92:c2:34:ef:d2:c2:36:17:c4:e0:9c:6c:79:67:07:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:C8:A8:65:F0:8C:E9:C0:BE:04:E2:D6:2B:C3:50:00:7D:8A:5A
            X509v3 Authority Key Identifier:
                keyid:1E:11:B0:62:30:9C:19:EC:7D:C7:23:F0:54:F8:C8:DD:AF:3A:4B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/1E11B062309C19EC7DC723F054F8C8DDAF3A4B52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:01:58:81:d3:97:34:9f:86:90:93:0b:44:79:dd:64:cf:
         78:46:23:d6:6d:31:0a:38:b7:c2:e6:25:36:e2:e3:13:75:2d:
         60:c1:46:dd:67:b0:34:3f:e4:46:38:24:e2:0f:f5:2c:e1:b4:
         f6:a7:53:41:94:37:08:1e:79:0d:64:bd:46:52:f8:47:66:8f:
         1b:d3:e6:04:64:41:8b:0e:79:bc:ae:52:8d:35:ad:87:f8:4c:
         4c:f3:d4:83:7a:b5:56:f1:7c:c7:c8:31:8a:f6:2c:01:c3:f4:
         b6:f3:f1:72:25:f3:59:d6:8a:78:e7:db:07:93:cc:b5:06:63:
         08:70:0f:36:af:c8:da:82:ee:d3:6c:5e:24:bc:a1:25:0c:05:
         a5:87:33:60:d4:7c:83:a2:41:05:af:a4:53:d5:95:03:7e:5d:
         87:e7:d7:3f:61:93:2a:1d:c9:c5:01:81:4e:95:65:f2:52:85:
         28:f2:be:4a:19:db:b2:fa:a0:c7:9a:1c:7b:12:6e:63:94:a9:
         36:36:03:4b:8c:77:aa:d1:25:d1:51:cd:50:7e:34:50:65:2f:
         40:e2:21:6f:bd:1e:b3:7c:1a:e3:f0:fe:1e:b1:fd:d2:4d:70:
         cc:ff:94:9f:09:45:f8:7a:2e:68:e8:d5:41:3e:ad:68:83:9e:
         79:bc:16:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS09iUJGQ+ThtBK5NPsu5sBxALIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUxMUIwNjIzMDlDMTlFQzdEQzcyM0YwNTRGOEM4RERB
RjNBNEI1MjAeFw0yMjExMTIxMzQ5MzJaFw0yMjExMTMxNTMxMzJaMDMxMTAvBgNV
BAMTKEQ0MTRDOEE4NjVGMDhDRTlDMEJFMDRFMkQ2MkJDMzUwMDA3RDhBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Dbq5pP4mZmI3d1N8lni2MUz
gU33z2svDsy6u8jLnFivHhvjecsu/AHyW5vWQvzT3LbWTMJrfz9IERRgG3Qoprff
vLkXQhFiw9hEvtCSoTX2R5saY7WAJz/vcI3GaqICyZYf9unNPSg4eGE717YTwTWq
qVi/YVScCrpW10PlydwKtvex2dvxGFJFol5ZfTLZ8DLPDFyNdTNpNo8DrrQW8672
kC97xBS25hRjZHbcnAztoUR80QKRtoPtLZyHdwRwkX3Rw8zmd2Ac7OWHbSQxGCLD
lEFcM6e5hqDlpfO3vBCjHZfnDY3U1flwXqTo/5LCNO/SwjYXxOCcbHlnB7FDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1BTIqGXwjOnAvgTi1ivDUAB9ilowHwYDVR0j
BBgwFoAUHhGwYjCcGex9xyPwVPjI3a86S1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1hxVVMyRW56M0ZDaDlUM2ZKVEw2VmRvdlVxWGRXelBxMndITDNZZHJp
UFQvMC8xRTExQjA2MjMwOUMxOUVDN0RDNzIzRjA1NEY4QzhEREFGM0E0QjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFMTFCMDYyMzA5QzE5RUM3
REM3MjNGMDU0RjhDOEREQUYzQTRCNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1hxVVMyRW56M0ZDaDlUM2ZKVEw2VmRvdlVxWGRXelBxMndITDNZZHJpUFQvMC8x
RTExQjA2MjMwOUMxOUVDN0RDNzIzRjA1NEY4QzhEREFGM0E0QjUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAacYBWIHTlzSfhpCTC0R53WTPeEYj1m0xCji3wuYlNuLjE3UtYMFG3WewND/k
Rjgk4g/1LOG09qdTQZQ3CB55DWS9RlL4R2aPG9PmBGRBiw55vK5SjTWth/hMTPPU
g3q1VvF8x8gxivYsAcP0tvPxciXzWdaKeOfbB5PMtQZjCHAPNq/I2oLu02xeJLyh
JQwFpYczYNR8g6JBBa+kU9WVA35dh+fXP2GTKh3JxQGBTpVl8lKFKPK+Shnbsvqg
x5ocexJuY5SpNjYDS4x3qtEl0VHNUH40UGUvQOIhb70es3wa4/D+HrH90k1wzP+U
nwlF+HouaOjVQT6taIOeebwWFQ==
-----END CERTIFICATE-----