Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft
File:                     543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft (raw, json)
Hash identifier:          f5YOVOrzUzETEITJAZbrmbouDwX+KFFrL91XCI7iPqo=
Subject key identifier:   17:68:1C:FC:85:78:85:E0:7D:2F:9F:25:AE:BC:6D:6D:7F:C3:90:CE
Authority key identifier: 54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E
Certificate issuer:       /CN=543865163CDE60F40F98BB5AB4C5B0D1A3F7455E
Certificate serial:       533A3414E9531CF981003D45D52C2F0BB74592C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft
Manifest number:          B9
Signing time:             Wed 21 Aug 2024 17:53:20 +0000
Manifest this update:     Wed 21 Aug 2024 17:48:20 +0000
Manifest next update:     Thu 22 Aug 2024 18:51:20 +0000
Files and hashes:         1: 323830343a386634633a3a2f33322d313238203d3e20323733343832.roa (hash: nRgsH2A40Ks/xWrPH18bLa26k3W8ZvzP4XAhGCDgMLw=)
                          2: 543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.crl (hash: M3shQ2lmJbJwZttw7nt+e4ncU8EqGUgMWDwUFbGS1LQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3a:34:14:e9:53:1c:f9:81:00:3d:45:d5:2c:2f:0b:b7:45:92:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543865163CDE60F40F98BB5AB4C5B0D1A3F7455E
        Validity
            Not Before: Aug 21 17:48:20 2024 GMT
            Not After : Aug 22 18:51:20 2024 GMT
        Subject: CN=17681CFC857885E07D2F9F25AEBC6D6D7FC390CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:16:ea:78:61:34:f5:f1:fa:06:fe:23:f2:
                    65:7d:3c:20:f4:a9:81:31:3c:98:00:a4:6c:82:ce:
                    0c:0d:ff:fd:dc:64:f5:4f:fc:09:c8:7f:cc:cd:d0:
                    ea:3e:94:65:fb:30:ea:2b:cb:16:f3:fa:9b:0f:66:
                    c5:e9:e9:b0:1c:c0:ab:62:60:a6:c3:38:e7:bd:b4:
                    31:08:db:38:f1:4b:90:0b:37:d5:f1:4c:99:ac:c3:
                    ec:4b:99:d0:a5:60:ce:b9:f2:66:5e:a2:ae:92:b9:
                    31:4e:7b:41:c8:d7:b2:09:22:e3:51:68:00:fa:ed:
                    de:f8:ef:5d:27:fa:5b:a6:37:7f:10:f1:44:a7:86:
                    64:31:3a:82:df:47:08:c4:1a:20:07:76:9d:47:0d:
                    62:5f:0e:5c:5e:61:a8:ae:30:a0:1b:44:47:5e:d9:
                    10:d3:49:8c:25:50:ea:f8:c4:a4:5b:2f:5b:bc:e9:
                    93:dc:20:71:a2:a1:ae:e0:a4:00:33:2f:d2:d5:e8:
                    78:27:4f:62:7a:c9:08:d9:48:1f:35:13:07:41:22:
                    80:71:1c:8c:85:67:62:b1:22:b9:30:ea:94:9d:5b:
                    1c:82:12:97:1e:84:3b:fa:18:e0:cb:81:c9:7b:3e:
                    ed:7c:1e:8c:71:d1:7c:35:a4:fd:d5:15:e6:fb:a3:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:1C:FC:85:78:85:E0:7D:2F:9F:25:AE:BC:6D:6D:7F:C3:90:CE
            X509v3 Authority Key Identifier:
                keyid:54:38:65:16:3C:DE:60:F4:0F:98:BB:5A:B4:C5:B0:D1:A3:F7:45:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HD5SvVmUhcGUV9smnsZuVCRcokXivKfsxGZseW6UkEDh/1/543865163CDE60F40F98BB5AB4C5B0D1A3F7455E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:87:e3:74:23:79:b3:bb:6e:17:fa:e9:a5:4e:4a:29:96:
         e4:c8:20:eb:da:c5:e8:65:43:f2:72:df:ba:a8:93:99:eb:95:
         52:ec:f6:31:fc:2f:2b:b9:55:60:56:84:24:08:d3:92:04:52:
         97:88:b4:d7:8b:d5:71:ad:ce:f5:8d:3b:1e:d7:2d:0a:e7:8b:
         d9:62:bf:2e:1b:e5:55:55:80:8c:e1:fb:9b:ce:0b:e8:1b:73:
         0c:22:17:12:aa:1b:18:ca:5f:ea:65:95:a7:ec:e7:9e:8b:b5:
         f4:a1:f5:92:d1:0c:f9:65:ed:57:ec:86:66:be:bc:83:e6:81:
         c1:f9:5c:28:a0:87:e5:3f:97:14:7c:07:e4:0b:02:bf:0a:1b:
         21:51:20:64:2b:48:94:3e:73:6f:ed:0a:de:cb:56:de:de:12:
         65:2f:49:ce:1f:64:05:08:d1:8c:e8:09:3c:83:51:ff:a8:fe:
         05:c5:50:84:16:22:89:ed:da:8b:e5:ed:04:e6:de:6f:b8:b0:
         b0:d7:68:f0:80:27:2d:64:c4:93:ce:3d:33:a7:86:0c:bb:c4:
         c1:b3:f5:94:9d:58:19:e9:a5:ca:34:e2:e5:ed:12:60:65:ca:
         0e:3c:c4:fd:d9:90:26:24:cf:77:24:58:41:a5:f4:90:25:ef:
         f2:3c:e4:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUzo0FOlTHPmBAD1F1SwvC7dFksgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzODY1MTYzQ0RFNjBGNDBGOThCQjVBQjRDNUIwRDFB
M0Y3NDU1RTAeFw0yNDA4MjExNzQ4MjBaFw0yNDA4MjIxODUxMjBaMDMxMTAvBgNV
BAMTKDE3NjgxQ0ZDODU3ODg1RTA3RDJGOUYyNUFFQkM2RDZEN0ZDMzkwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefxbqeGE09fH6Bv4j8mV9PCD0
qYExPJgApGyCzgwN//3cZPVP/AnIf8zN0Oo+lGX7MOoryxbz+psPZsXp6bAcwKti
YKbDOOe9tDEI2zjxS5ALN9XxTJmsw+xLmdClYM658mZeoq6SuTFOe0HI17IJIuNR
aAD67d74710n+lumN38Q8USnhmQxOoLfRwjEGiAHdp1HDWJfDlxeYaiuMKAbREde
2RDTSYwlUOr4xKRbL1u86ZPcIHGioa7gpAAzL9LV6HgnT2J6yQjZSB81EwdBIoBx
HIyFZ2KxIrkw6pSdWxyCEpcehDv6GODLgcl7Pu18Hoxx0Xw1pP3VFeb7ozTbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF2gc/IV4heB9L58lrrxtbX/DkM4wHwYDVR0j
BBgwFoAUVDhlFjzeYPQPmLtatMWw0aP3RV4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEQ1U3ZWbVVoY0dVVjlzbW5zWnVWQ1Jjb2tYaXZLZnN4R1pzZVc2VWtF
RGgvMS81NDM4NjUxNjNDREU2MEY0MEY5OEJCNUFCNEM1QjBEMUEzRjc0NTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Mzg2NTE2M0NERTYwRjQw
Rjk4QkI1QUI0QzVCMEQxQTNGNzQ1NUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEQ1U3ZWbVVoY0dVVjlzbW5zWnVWQ1Jjb2tYaXZLZnN4R1pzZVc2VWtFRGgvMS81
NDM4NjUxNjNDREU2MEY0MEY5OEJCNUFCNEM1QjBEMUEzRjc0NTVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZPqH43QjebO7bhf66aVOSimW5Mgg69rF6GVD8nLfuqiTmeuVUuz2MfwvK7lV
YFaEJAjTkgRSl4i014vVca3O9Y07HtctCueL2WK/LhvlVVWAjOH7m84L6BtzDCIX
EqobGMpf6mWVp+znnou19KH1ktEM+WXtV+yGZr68g+aBwflcKKCH5T+XFHwH5AsC
vwobIVEgZCtIlD5zb+0K3stW3t4SZS9Jzh9kBQjRjOgJPINR/6j+BcVQhBYiie3a
i+XtBObeb7iwsNdo8IAnLWTEk849M6eGDLvEwbP1lJ1YGemlyjTi5e0SYGXKDjzE
/dmQJiTPdyRYQaX0kCXv8jzkRA==
-----END CERTIFICATE-----