Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
File:                     165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft (raw, json)
Hash identifier:          RWeasYFcF4i14MGzsKk8FvaAvBnoPYpMxvS8lFcbLWY=
Subject key identifier:   2E:60:59:D6:A0:F6:E7:61:43:BA:5B:11:53:64:75:8F:52:53:E7:C1
Authority key identifier: 16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA
Certificate issuer:       /CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
Certificate serial:       3DE17F05E495412B73CC3CF30F316B375E2103A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft
Manifest number:          52
Signing time:             Fri 26 Jul 2024 20:54:45 +0000
Manifest this update:     Fri 26 Jul 2024 20:49:45 +0000
Manifest next update:     Sat 27 Jul 2024 21:40:45 +0000
Files and hashes:         1: 165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl (hash: Qoob7EMd78rzJqNyxgGheTjH8F9zR1cXgYbdLHFzfEg=)
                          2: 323830343a333664383a3a2f33322d313238203d3e20323636333736.roa (hash: TLrKnf3cwii0T8eIRiIxn3ypJsOs/sU2VRa/br/mizo=)
                          3: 3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (hash: 0+LCXk7CnxHPqo/sKL5mAYwUdLlTCGQkamOfdYb3boE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e1:7f:05:e4:95:41:2b:73:cc:3c:f3:0f:31:6b:37:5e:21:03:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA
        Validity
            Not Before: Jul 26 20:49:45 2024 GMT
            Not After : Jul 27 21:40:45 2024 GMT
        Subject: CN=2E6059D6A0F6E76143BA5B115364758F5253E7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:34:7a:50:08:66:44:3f:40:8f:20:fb:5f:
                    11:a2:e6:11:12:67:d4:e7:96:a9:85:4b:60:7f:18:
                    c3:dd:a5:11:e0:0f:cf:a1:bf:b4:85:e2:d7:a1:78:
                    82:26:da:cc:16:a1:c6:94:88:92:81:61:ff:f4:1f:
                    52:0c:04:62:77:8d:14:9a:06:39:7b:b3:a6:bf:db:
                    7b:d0:f3:77:f4:9b:2e:bd:98:13:eb:f1:e5:5c:f8:
                    49:b2:90:f1:88:9c:aa:20:e1:40:f8:ae:3f:95:e5:
                    cc:0c:79:5f:81:90:1b:ca:54:7f:30:97:80:97:20:
                    63:39:dc:da:e2:be:fc:92:cb:2b:e8:f4:7c:fa:dc:
                    4e:bf:a1:21:bb:9d:7b:29:dd:ce:89:f3:04:5c:12:
                    4a:20:bb:89:27:6e:4a:9c:e3:1f:dd:fd:82:95:50:
                    53:bd:5c:9f:8f:1c:0f:0e:67:c9:c1:45:5d:d1:75:
                    da:d6:c7:6c:e9:f0:d2:26:44:b9:e1:d2:d1:b5:b0:
                    62:b4:a0:24:6d:b3:e2:e8:04:be:c0:cd:f2:f0:40:
                    0f:d8:2f:87:bb:d6:1d:c6:fb:3d:d3:2f:44:4f:6f:
                    61:ee:da:f9:39:a6:e9:04:12:d1:e4:1e:72:1f:6a:
                    e6:4a:21:26:ff:b1:68:67:15:02:2a:c1:a4:15:da:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:59:D6:A0:F6:E7:61:43:BA:5B:11:53:64:75:8F:52:53:E7:C1
            X509v3 Authority Key Identifier:
                keyid:16:59:16:CF:70:A1:EB:A2:C4:0C:06:21:FA:C8:30:CA:F9:E2:AC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/165916CF70A1EBA2C40C0621FAC830CAF9E2ACEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:25:70:d0:5d:d4:9d:e0:0d:63:34:d5:8c:cb:c0:91:94:07:
         5d:f4:a8:12:60:59:3b:f6:a3:ca:55:bc:c8:2d:78:ee:b1:40:
         4b:72:7a:bc:6b:05:39:40:1c:bc:e7:c9:aa:d1:20:f3:9a:27:
         19:58:74:6f:07:63:b8:3f:76:90:55:39:51:a5:48:a1:05:b5:
         df:6a:f4:23:a4:e4:b6:27:10:89:84:ce:c3:79:55:5e:19:c8:
         b5:b7:08:74:65:2c:fd:2b:3a:70:35:ca:3e:10:1e:00:57:5e:
         33:17:0b:d1:44:d4:cc:73:59:7e:81:60:a2:ce:a4:a6:1f:5f:
         a5:b0:4b:68:65:75:72:65:59:7a:f2:1b:1d:fd:00:e3:33:13:
         e2:df:f0:20:c6:11:95:75:ef:83:70:88:eb:6a:b0:cd:59:0c:
         5c:7f:b5:e1:01:f4:fb:4e:b1:61:fc:49:d3:52:5b:af:7c:52:
         c9:b8:4f:59:4b:fb:9b:ec:0e:a0:8f:2d:8a:98:9c:e7:6b:dd:
         43:00:70:28:f8:24:cd:62:06:35:bf:de:80:01:8c:69:0e:21:
         e0:19:d5:3d:24:a9:e9:2f:c6:05:c4:5f:6b:4e:80:20:81:18:
         7c:71:b2:09:91:9f:2c:22:9d:df:95:a4:46:ac:5c:56:4d:76:
         8e:f7:06:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPeF/BeSVQStzzDzzDzFrN14hA6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1OTE2Q0Y3MEExRUJBMkM0MEMwNjIxRkFDODMwQ0FG
OUUyQUNFQTAeFw0yNDA3MjYyMDQ5NDVaFw0yNDA3MjcyMTQwNDVaMDMxMTAvBgNV
BAMTKDJFNjA1OUQ2QTBGNkU3NjE0M0JBNUIxMTUzNjQ3NThGNTI1M0U3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4jR6UAhmRD9AjyD7XxGi5hES
Z9TnlqmFS2B/GMPdpRHgD8+hv7SF4teheIIm2swWocaUiJKBYf/0H1IMBGJ3jRSa
Bjl7s6a/23vQ83f0my69mBPr8eVc+EmykPGInKog4UD4rj+V5cwMeV+BkBvKVH8w
l4CXIGM53NrivvySyyvo9Hz63E6/oSG7nXsp3c6J8wRcEkogu4knbkqc4x/d/YKV
UFO9XJ+PHA8OZ8nBRV3RddrWx2zp8NImRLnh0tG1sGK0oCRts+LoBL7AzfLwQA/Y
L4e71h3G+z3TL0RPb2Hu2vk5pukEEtHkHnIfauZKISb/sWhnFQIqwaQV2kE5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULmBZ1qD252FDulsRU2R1j1JT58EwHwYDVR0j
BBgwFoAUFlkWz3Ch66LEDAYh+sgwyvnirOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5RTFBRFgxallQ
ajgvMC8xNjU5MTZDRjcwQTFFQkEyQzQwQzA2MjFGQUM4MzBDQUY5RTJBQ0VBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NTkxNkNGNzBBMUVCQTJD
NDBDMDYyMUZBQzgzMENBRjlFMkFDRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5RTFBRFgxallQajgvMC8x
NjU5MTZDRjcwQTFFQkEyQzQwQzA2MjFGQUM4MzBDQUY5RTJBQ0VBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARCVw0F3UneANYzTVjMvAkZQHXfSoEmBZO/ajylW8yC147rFAS3J6vGsFOUAc
vOfJqtEg85onGVh0bwdjuD92kFU5UaVIoQW132r0I6TkticQiYTOw3lVXhnItbcI
dGUs/Ss6cDXKPhAeAFdeMxcL0UTUzHNZfoFgos6kph9fpbBLaGV1cmVZevIbHf0A
4zMT4t/wIMYRlXXvg3CI62qwzVkMXH+14QH0+06xYfxJ01Jbr3xSybhPWUv7m+wO
oI8tipic52vdQwBwKPgkzWIGNb/egAGMaQ4h4BnVPSSp6S/GBcRfa06AIIEYfHGy
CZGfLCKd35WkRqxcVk12jvcGLQ==
-----END CERTIFICATE-----