Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft
File:                     A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft (raw, json)
Hash identifier:          /WV+HoHEXaVm611ctKWCnS42ddpVfTi5D2z+8oIyHzs=
Subject key identifier:   F9:0C:FA:30:F9:B2:FC:6F:A1:FD:44:9B:07:E6:F5:CB:2F:F9:0E:A7
Authority key identifier: A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F
Certificate issuer:       /CN=A32238AE21BAC9DB953C83E0682468A89EC68D5F
Certificate serial:       0A5203830B544975CFC46A134D0F716C8BB305E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft
Manifest number:          87
Signing time:             Wed 10 May 2023 01:00:24 +0000
Manifest this update:     Wed 10 May 2023 00:55:24 +0000
Manifest next update:     Thu 11 May 2023 03:47:24 +0000
Files and hashes:         1: 3136382e3139352e3133362e302f32322d3332203d3e20323635343231.roa (hash: Y+wnAatagzsCML0MxGj/yEsORun8LAsdb6hq+VIlS7Q=)
                          2: 323830343a333364633a3a2f33322d313238203d3e20323635343231.roa (hash: UynviTONhHaPn2dEE98K7m24GGG5eOeegIi3s0GQGhs=)
                          3: A32238AE21BAC9DB953C83E0682468A89EC68D5F.crl (hash: y2AB6+mTDGa63v/T+227xUizx23fygOy5u5EyyBkYHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:52:03:83:0b:54:49:75:cf:c4:6a:13:4d:0f:71:6c:8b:b3:05:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A32238AE21BAC9DB953C83E0682468A89EC68D5F
        Validity
            Not Before: May 10 00:55:24 2023 GMT
            Not After : May 11 03:47:24 2023 GMT
        Subject: CN=F90CFA30F9B2FC6FA1FD449B07E6F5CB2FF90EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:1f:79:1a:9e:d8:ce:8d:61:05:0b:32:ca:
                    87:dd:2d:06:58:17:de:50:77:1c:6e:37:ef:d0:01:
                    b7:0c:86:a3:44:91:b3:47:34:d4:7f:b2:54:3c:aa:
                    40:38:c8:57:4c:77:0a:42:14:cb:c9:41:20:9e:54:
                    ec:91:16:de:3d:63:19:1b:da:8a:9f:b2:a4:24:aa:
                    6d:77:a5:8e:a4:c3:2b:49:4a:be:45:6b:60:45:53:
                    3e:93:09:fe:a3:11:41:c6:32:83:c0:17:c7:3d:aa:
                    6f:d2:4f:ed:cb:b2:bd:df:26:cb:ee:4d:df:0a:a9:
                    e3:23:8e:69:a8:94:c4:3f:d2:22:f1:2c:60:ca:b4:
                    1f:2c:e1:5d:cc:83:a6:a2:80:d9:c5:f4:23:15:ec:
                    f5:26:9d:2b:38:c3:e3:6b:80:3a:b3:f4:da:37:5e:
                    c1:8b:a8:1d:34:e4:ea:d4:56:7f:4c:1f:99:d9:1d:
                    95:98:26:b1:1f:1f:54:69:8b:fc:bb:dd:92:7a:f7:
                    f3:76:b3:3a:ee:62:c9:ce:5b:b2:98:e8:44:73:fe:
                    3c:55:d9:58:0b:9f:ed:99:47:af:fb:af:14:4c:ab:
                    28:3a:5c:41:64:8b:ff:bd:d9:39:88:d2:85:ed:b1:
                    57:e1:26:99:f5:7d:20:40:70:2f:76:ce:32:cc:9e:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:FA:30:F9:B2:FC:6F:A1:FD:44:9B:07:E6:F5:CB:2F:F9:0E:A7
            X509v3 Authority Key Identifier:
                keyid:A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:96:7a:62:57:44:f8:0f:62:d3:b0:58:91:7c:78:7f:47:6e:
         81:aa:48:3d:a9:f9:38:56:6f:d4:14:99:af:d7:a2:e4:0f:35:
         9e:d0:10:b2:68:2d:7f:90:b9:04:37:13:72:21:02:08:e2:1e:
         33:1a:ac:96:48:55:76:54:5d:3d:e3:2d:f1:08:13:ba:1f:9d:
         83:80:5d:f2:b7:1e:23:14:b8:46:37:10:ab:82:2c:67:e6:fc:
         26:99:72:8a:e3:e3:d0:3b:1b:39:44:f1:e0:70:13:8c:9b:44:
         11:88:b1:56:75:f1:a9:54:eb:93:77:18:4a:7c:bb:3b:d2:3e:
         a4:d1:9d:e9:25:9c:b8:d2:de:47:06:fa:be:a9:56:a6:2c:43:
         fd:73:46:e0:f4:6f:1d:47:83:ed:b5:41:57:31:0c:04:57:d0:
         71:ce:de:7b:5d:16:04:c8:63:91:e4:a1:88:59:c3:0f:f8:8d:
         8a:87:97:63:ea:e6:c3:d9:6a:7a:e8:ce:e2:f7:fc:ce:0c:36:
         b2:fd:96:8a:62:2b:aa:d2:57:37:99:eb:f9:ec:43:97:33:c0:
         c6:bf:85:a7:a0:19:36:1c:6f:7d:cd:76:97:12:d7:e7:48:75:
         ae:d6:89:f8:2b:7c:45:22:14:f5:be:b5:a8:d9:96:e4:e3:c2:
         b7:c7:98:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUClIDgwtUSXXPxGoTTQ9xbIuzBeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTMyMjM4QUUyMUJBQzlEQjk1M0M4M0UwNjgyNDY4QTg5
RUM2OEQ1RjAeFw0yMzA1MTAwMDU1MjRaFw0yMzA1MTEwMzQ3MjRaMDMxMTAvBgNV
BAMTKEY5MENGQTMwRjlCMkZDNkZBMUZENDQ5QjA3RTZGNUNCMkZGOTBFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8R95Gp7Yzo1hBQsyyofdLQZY
F95QdxxuN+/QAbcMhqNEkbNHNNR/slQ8qkA4yFdMdwpCFMvJQSCeVOyRFt49Yxkb
2oqfsqQkqm13pY6kwytJSr5Fa2BFUz6TCf6jEUHGMoPAF8c9qm/ST+3Lsr3fJsvu
Td8KqeMjjmmolMQ/0iLxLGDKtB8s4V3Mg6aigNnF9CMV7PUmnSs4w+NrgDqz9No3
XsGLqB005OrUVn9MH5nZHZWYJrEfH1Rpi/y73ZJ69/N2szruYsnOW7KY6ERz/jxV
2VgLn+2ZR6/7rxRMqyg6XEFki/+92TmI0oXtsVfhJpn1fSBAcC92zjLMnjqZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+Qz6MPmy/G+h/USbB+b1yy/5DqcwHwYDVR0j
BBgwFoAUoyI4riG6yduVPIPgaCRoqJ7GjV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEZWNGpHR0N6amg2dlU1OTNTWWVxM2RWandGRG9zZVdZaFRpQWczaHdG
ZE4vMS9BMzIyMzhBRTIxQkFDOURCOTUzQzgzRTA2ODI0NjhBODlFQzY4RDVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EzMjIzOEFFMjFCQUM5REI5
NTNDODNFMDY4MjQ2OEE4OUVDNjhENUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEZWNGpHR0N6amg2dlU1OTNTWWVxM2RWandGRG9zZVdZaFRpQWczaHdGZE4vMS9B
MzIyMzhBRTIxQkFDOURCOTUzQzgzRTA2ODI0NjhBODlFQzY4RDVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUJZ6YldE+A9i07BYkXx4f0dugapIPan5OFZv1BSZr9ei5A81ntAQsmgtf5C5
BDcTciECCOIeMxqslkhVdlRdPeMt8QgTuh+dg4Bd8rceIxS4RjcQq4IsZ+b8Jply
iuPj0DsbOUTx4HATjJtEEYixVnXxqVTrk3cYSny7O9I+pNGd6SWcuNLeRwb6vqlW
pixD/XNG4PRvHUeD7bVBVzEMBFfQcc7ee10WBMhjkeShiFnDD/iNioeXY+rmw9lq
eujO4vf8zgw2sv2WimIrqtJXN5nr+exDlzPAxr+Fp6AZNhxvfc12lxLX50h1rtaJ
+Ct8RSIU9b61qNmW5OPCt8eYYg==
-----END CERTIFICATE-----