Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.mft
File:                     289EB5B704B64F1F861E662F643DAEBC6E61693C.mft (raw, json)
Hash identifier:          bTCiAtGYxfTDy2uaq0duMoGPiYGaBYuUIfDKYGEX5I8=
Subject key identifier:   42:C5:55:F2:DF:E8:24:A7:E4:0A:E2:23:D4:69:05:3A:4F:10:7D:14
Authority key identifier: 28:9E:B5:B7:04:B6:4F:1F:86:1E:66:2F:64:3D:AE:BC:6E:61:69:3C
Certificate issuer:       /CN=289EB5B704B64F1F861E662F643DAEBC6E61693C
Certificate serial:       110271DB28D36439FBDB7C6F33D6FA402A7C8C18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.mft
Manifest number:          16
Signing time:             Sat 10 Jun 2023 14:43:51 +0000
Manifest this update:     Sat 10 Jun 2023 14:38:51 +0000
Manifest next update:     Sun 11 Jun 2023 18:06:51 +0000
Files and hashes:         1: 289EB5B704B64F1F861E662F643DAEBC6E61693C.crl (hash: W4QP/uPvs3c/++5UCE62I/MqGpfecXXGfEXRog7Nv2w=)
                          2: 323830343a383531633a3a2f33322d3334203d3e20323732353538.roa (hash: a9M1lyll4nA8fbJjl/zUErKEk8hD6lSRGauJQ2acamQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:02:71:db:28:d3:64:39:fb:db:7c:6f:33:d6:fa:40:2a:7c:8c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289EB5B704B64F1F861E662F643DAEBC6E61693C
        Validity
            Not Before: Jun 10 14:38:51 2023 GMT
            Not After : Jun 11 18:06:51 2023 GMT
        Subject: CN=42C555F2DFE824A7E40AE223D469053A4F107D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:fc:00:1b:b2:67:72:64:d0:91:99:41:10:
                    f2:c6:dd:86:94:f6:22:17:43:e7:52:32:ca:8d:f8:
                    7b:9d:3a:c2:99:ba:78:bf:5b:fb:30:ec:66:7f:a5:
                    89:bd:6b:a5:3c:bb:66:5d:a9:b2:d2:a4:07:87:90:
                    4c:54:9b:a4:50:6d:70:17:88:a0:59:a8:02:c7:f0:
                    78:19:25:ad:e9:88:96:53:b2:04:07:8a:ce:55:f2:
                    4c:f9:16:9b:19:55:0d:57:ab:ed:a2:3e:ed:e8:ed:
                    02:5e:a7:12:0c:9c:d6:94:90:1f:0c:43:94:8c:3d:
                    e0:54:9c:37:ff:ee:2f:1e:a1:b4:ca:91:c1:d0:33:
                    2d:23:b1:1c:a4:2e:2b:c4:b4:a1:87:7e:07:40:b0:
                    ae:d8:92:25:ae:2d:fa:5d:b5:ee:df:3c:73:be:8f:
                    cb:a2:62:53:cf:71:be:fc:e8:fb:0a:72:c9:14:d9:
                    c2:e5:1f:4b:91:14:a2:23:58:90:a4:da:d0:aa:c4:
                    fd:82:82:aa:0d:cd:49:af:30:2f:02:68:6d:e8:40:
                    94:b0:ee:a9:6c:fd:02:44:72:c0:cf:c0:af:40:82:
                    ef:88:15:aa:dd:d2:c3:1f:30:e9:2f:0c:b1:c0:36:
                    24:e5:88:cf:b9:09:6c:87:a1:1e:40:3b:f8:ba:c3:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:55:F2:DF:E8:24:A7:E4:0A:E2:23:D4:69:05:3A:4F:10:7D:14
            X509v3 Authority Key Identifier:
                keyid:28:9E:B5:B7:04:B6:4F:1F:86:1E:66:2F:64:3D:AE:BC:6E:61:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/289EB5B704B64F1F861E662F643DAEBC6E61693C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7c:8d:96:96:29:c1:d8:34:8f:e2:72:42:af:fe:8c:fb:d0:
         48:42:0a:00:99:de:40:89:9d:84:8a:ef:52:49:9d:3a:69:bb:
         50:b2:34:fc:35:86:b2:2a:04:b7:33:0e:e4:bb:37:75:40:fc:
         17:bc:1b:5a:a9:cc:55:44:0c:88:fe:cc:c6:b1:42:f6:70:ce:
         dd:a1:a9:69:ff:f8:de:b5:86:8b:74:c4:eb:53:99:90:b1:bf:
         2a:f3:ea:0c:1b:06:32:5e:43:59:af:30:62:e2:1c:06:73:59:
         d8:e2:c4:a6:04:5e:60:29:5f:b4:d0:51:27:5b:6b:7f:7d:d9:
         50:bc:cd:eb:e5:f9:fb:2b:7f:db:4d:8a:23:61:f0:a3:80:7d:
         46:12:64:a4:89:25:56:ee:a5:cb:14:40:fb:d8:a0:d4:1b:af:
         00:8a:b3:f6:cb:d3:1b:a7:84:f6:25:10:43:35:57:da:20:0b:
         bb:4e:ac:6f:b6:f9:3d:28:cd:7d:22:a5:38:80:92:d9:a0:62:
         1e:b8:06:84:bd:49:29:86:87:b3:23:bc:e2:58:02:db:5a:62:
         74:78:29:9e:1c:19:e4:46:77:82:e0:13:30:2c:75:96:85:78:
         88:ac:11:b3:77:a4:d7:c4:fe:3c:43:10:be:09:f6:e5:be:9a:
         cf:94:7c:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEQJx2yjTZDn723xvM9b6QCp8jBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg5RUI1QjcwNEI2NEYxRjg2MUU2NjJGNjQzREFFQkM2
RTYxNjkzQzAeFw0yMzA2MTAxNDM4NTFaFw0yMzA2MTExODA2NTFaMDMxMTAvBgNV
BAMTKDQyQzU1NUYyREZFODI0QTdFNDBBRTIyM0Q0NjkwNTNBNEYxMDdEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1a/wAG7JncmTQkZlBEPLG3YaU
9iIXQ+dSMsqN+HudOsKZuni/W/sw7GZ/pYm9a6U8u2ZdqbLSpAeHkExUm6RQbXAX
iKBZqALH8HgZJa3piJZTsgQHis5V8kz5FpsZVQ1Xq+2iPu3o7QJepxIMnNaUkB8M
Q5SMPeBUnDf/7i8eobTKkcHQMy0jsRykLivEtKGHfgdAsK7YkiWuLfpdte7fPHO+
j8uiYlPPcb786PsKcskU2cLlH0uRFKIjWJCk2tCqxP2CgqoNzUmvMC8CaG3oQJSw
7qls/QJEcsDPwK9Agu+IFard0sMfMOkvDLHANiTliM+5CWyHoR5AO/i6w06VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQsVV8t/oJKfkCuIj1GkFOk8QfRQwHwYDVR0j
BBgwFoAUKJ61twS2Tx+GHmYvZD2uvG5haTwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGc4YjRMVXF3ZEJMYXNMUDcyTnF2a0ZtdUhGQWZVUTJla1ZXRU1SMkR6
Z2YvMC8yODlFQjVCNzA0QjY0RjFGODYxRTY2MkY2NDNEQUVCQzZFNjE2OTNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4OUVCNUI3MDRCNjRGMUY4
NjFFNjYyRjY0M0RBRUJDNkU2MTY5M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGc4YjRMVXF3ZEJMYXNMUDcyTnF2a0ZtdUhGQWZVUTJla1ZXRU1SMkR6Z2YvMC8y
ODlFQjVCNzA0QjY0RjFGODYxRTY2MkY2NDNEQUVCQzZFNjE2OTNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg3yNlpYpwdg0j+JyQq/+jPvQSEIKAJneQImdhIrvUkmdOmm7ULI0/DWGsioE
tzMO5Ls3dUD8F7wbWqnMVUQMiP7MxrFC9nDO3aGpaf/43rWGi3TE61OZkLG/KvPq
DBsGMl5DWa8wYuIcBnNZ2OLEpgReYClftNBRJ1trf33ZULzN6+X5+yt/202KI2Hw
o4B9RhJkpIklVu6lyxRA+9ig1BuvAIqz9svTG6eE9iUQQzVX2iALu06sb7b5PSjN
fSKlOICS2aBiHrgGhL1JKYaHsyO84lgC21pidHgpnhwZ5EZ3guATMCx1loV4iKwR
s3ek18T+PEMQvgn25b6az5R85g==
-----END CERTIFICATE-----