Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.mft
File:                     5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.mft (raw, json)
Hash identifier:          XfBqZuszk50tcI+0LpOA0pgo7uVKkhob7+bjaeTaPlg=
Subject key identifier:   1D:F0:6C:EE:DD:15:8F:25:CD:3B:C0:FB:B9:D9:6C:0F:1A:5B:B4:97
Authority key identifier: 5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43
Certificate issuer:       /CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
Certificate serial:       3982373B3532FC134C9844E53EC568029C52394E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.mft
Manifest number:          020C
Signing time:             Sun 14 Apr 2024 21:14:04 +0000
Manifest this update:     Sun 14 Apr 2024 21:09:04 +0000
Manifest next update:     Mon 15 Apr 2024 22:13:04 +0000
Files and hashes:         1: 3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (hash: rv5Hj3KDMTbqbxK+7yXWqSdyzEe5o7+cso4gHutYS8M=)
                          2: 323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (hash: r2u59MNEjCC+ZO/eBkKyohy0ZxamReD7GdMhG8xx8Y0=)
                          3: 5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.crl (hash: rx4rgVGCl7FR63h7pvl+79jg2pXHxcXaz/G7SFBKWgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:37:3b:35:32:fc:13:4c:98:44:e5:3e:c5:68:02:9c:52:39:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
        Validity
            Not Before: Apr 14 21:09:04 2024 GMT
            Not After : Apr 15 22:13:04 2024 GMT
        Subject: CN=1DF06CEEDD158F25CD3BC0FBB9D96C0F1A5BB497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:57:ec:66:ac:78:84:f9:24:d9:9d:96:99:
                    a7:e3:fc:f8:a5:d7:7a:21:74:23:95:c7:98:5a:e2:
                    46:4b:44:77:e1:2c:bc:dd:cb:73:4b:33:3e:b6:b1:
                    c9:84:a0:7c:c7:69:69:f6:c3:52:a2:38:b3:2d:7f:
                    90:31:02:29:a8:ec:82:42:f4:4f:7f:8e:5e:e8:0a:
                    14:ab:fc:9c:5d:17:47:12:7a:2d:a6:bd:bc:83:07:
                    25:06:e2:4c:70:ff:f4:85:35:fa:0e:84:88:bc:0b:
                    48:4c:aa:bc:63:70:91:07:81:e3:d2:51:df:2d:1a:
                    f2:38:75:01:7c:b2:3b:b3:88:d1:fe:1d:e4:c3:6d:
                    a7:1e:5e:86:9d:7a:31:2c:18:b1:9f:52:57:19:a3:
                    a7:7d:cd:71:5e:ee:73:e1:84:2c:8a:3a:0e:9f:47:
                    3a:2b:5d:0b:fd:60:72:18:f2:a9:55:1a:13:96:74:
                    1c:2e:30:e4:f0:bf:2a:ae:38:8d:ae:13:03:eb:02:
                    60:ca:27:e8:bb:16:aa:26:3c:bf:8b:8f:f8:98:a6:
                    88:ad:12:6d:a5:03:2a:8c:fc:e1:a8:f7:ed:81:40:
                    5c:86:53:99:b0:09:dc:fe:7d:13:93:a2:d0:72:35:
                    b7:cb:ca:03:98:14:8c:39:4e:b0:3f:92:d5:51:08:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F0:6C:EE:DD:15:8F:25:CD:3B:C0:FB:B9:D9:6C:0F:1A:5B:B4:97
            X509v3 Authority Key Identifier:
                keyid:5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:37:43:f8:c0:3f:f9:b4:81:bb:71:49:43:98:45:15:60:
         74:5f:df:c9:66:03:6a:5e:1d:96:0c:64:fd:5d:94:ef:2d:91:
         76:b2:01:b0:10:da:07:fd:8e:a7:ab:af:03:34:7e:83:0b:bc:
         29:82:65:9e:0d:91:50:37:f9:7c:66:17:ad:83:a7:80:f1:b4:
         8f:ea:89:cf:24:29:af:7b:25:91:7f:f1:18:2f:50:77:51:ea:
         e2:9a:37:b2:8c:cc:52:10:7d:1e:86:11:4a:b5:22:f0:da:da:
         45:ca:93:0e:df:a2:66:26:3b:95:5b:b7:c3:dd:bd:ac:71:20:
         a0:ea:87:a9:4d:48:92:e4:76:35:4a:3e:f8:ab:aa:cf:7f:a7:
         74:a9:a0:09:60:2c:36:ee:28:ac:26:a8:bc:7b:da:18:81:98:
         91:bf:48:ee:28:a4:82:e1:03:43:35:bc:84:6f:7f:95:24:d9:
         5e:fc:1b:c5:5e:7d:0f:cf:e8:c5:d2:83:2f:3a:25:8f:3c:56:
         7e:c4:ad:6f:e1:0a:b5:fa:b8:0b:6f:cc:77:d9:fd:5e:07:be:
         50:ee:39:39:38:ef:d4:4b:3e:a3:a8:c7:c6:7d:40:93:f0:bd:
         dd:d1:40:b2:30:24:b3:ae:e6:54:dd:31:6d:f5:63:06:8a:48:
         69:73:32:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOYI3OzUy/BNMmETlPsVoApxSOU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU2N0FBMEJCNkE0NEMwQkIyMzlGRUM1MEM5NzFDRDU2
Q0E0NTM0MzAeFw0yNDA0MTQyMTA5MDRaFw0yNDA0MTUyMjEzMDRaMDMxMTAvBgNV
BAMTKDFERjA2Q0VFREQxNThGMjVDRDNCQzBGQkI5RDk2QzBGMUE1QkI0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jlfsZqx4hPkk2Z2Wmafj/Pil
13ohdCOVx5ha4kZLRHfhLLzdy3NLMz62scmEoHzHaWn2w1KiOLMtf5AxAimo7IJC
9E9/jl7oChSr/JxdF0cSei2mvbyDByUG4kxw//SFNfoOhIi8C0hMqrxjcJEHgePS
Ud8tGvI4dQF8sjuziNH+HeTDbaceXoadejEsGLGfUlcZo6d9zXFe7nPhhCyKOg6f
RzorXQv9YHIY8qlVGhOWdBwuMOTwvyquOI2uEwPrAmDKJ+i7FqomPL+Lj/iYpoit
Em2lAyqM/OGo9+2BQFyGU5mwCdz+fROTotByNbfLygOYFIw5TrA/ktVRCDx9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHfBs7t0VjyXNO8D7udlsDxpbtJcwHwYDVR0j
BBgwFoAUXmeqC7akTAuyOf7FDJcc1WykU0MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEM1TkZFeHpOM2dxN1ZZNzNQOVRKVVFodVp0Y254eHBGS2dqZFRNa2pL
N3MvMC81RTY3QUEwQkI2QTQ0QzBCQjIzOUZFQzUwQzk3MUNENTZDQTQ1MzQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFNjdBQTBCQjZBNDRDMEJC
MjM5RkVDNTBDOTcxQ0Q1NkNBNDUzNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEM1TkZFeHpOM2dxN1ZZNzNQOVRKVVFodVp0Y254eHBGS2dqZFRNa2pLN3MvMC81
RTY3QUEwQkI2QTQ0QzBCQjIzOUZFQzUwQzk3MUNENTZDQTQ1MzQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANa43Q/jAP/m0gbtxSUOYRRVgdF/fyWYDal4dlgxk/V2U7y2RdrIBsBDaB/2O
p6uvAzR+gwu8KYJlng2RUDf5fGYXrYOngPG0j+qJzyQpr3slkX/xGC9Qd1Hq4po3
sozMUhB9HoYRSrUi8NraRcqTDt+iZiY7lVu3w929rHEgoOqHqU1IkuR2NUo++Kuq
z3+ndKmgCWAsNu4orCaovHvaGIGYkb9I7iikguEDQzW8hG9/lSTZXvwbxV59D8/o
xdKDLzoljzxWfsStb+EKtfq4C2/Md9n9Xge+UO45OTjv1Es+o6jHxn1Ak/C93dFA
sjAks67mVN0xbfVjBopIaXMy8g==
-----END CERTIFICATE-----