Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.mft
File:                     1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.mft (raw, json)
Hash identifier:          nWgA2e/vMUjsiSFnfjkZCw3kv4wwZlGt8t9CvHohGH0=
Subject key identifier:   C1:C7:A4:FD:A9:97:CF:CA:B2:9B:49:43:F7:07:8C:FE:3E:B3:44:F4
Authority key identifier: 1A:8B:5B:CC:A3:C0:F6:CD:3F:8F:D2:30:D0:B5:AE:FF:24:AA:05:07
Certificate issuer:       /CN=1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507
Certificate serial:       5661467829586C8122A038E9F5B2366FECAAF286
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.mft
Manifest number:          E5
Signing time:             Sat 18 Jun 2022 09:40:00 +0000
Manifest this update:     Sat 18 Jun 2022 09:35:00 +0000
Manifest next update:     Sun 19 Jun 2022 09:43:00 +0000
Files and hashes:         1: 34352e3137322e3137322e302f32322d3234203d3e20323638383232.roa (hash: +AE9sebYntBQfubWcIvS0wZZULRQII0wac1Wjc3jwbE=)
                          2: 323830343a356232383a3a2f33322d3332203d3e20323638383232.roa (hash: 4IQlhAzIeXyPr0AvrtYdN87jNnOjpXnR6Bn4v5JQ6PI=)
                          3: 1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.crl (hash: LR27TNnCVHIUtNenwU896UxPh1iqStP4Pjomrpi3oHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:46:78:29:58:6c:81:22:a0:38:e9:f5:b2:36:6f:ec:aa:f2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507
        Validity
            Not Before: Jun 18 09:35:00 2022 GMT
            Not After : Jun 19 09:43:00 2022 GMT
        Subject: CN=C1C7A4FDA997CFCAB29B4943F7078CFE3EB344F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:8c:7b:eb:37:01:73:3a:9b:95:d3:73:e5:
                    ee:d8:31:2b:d8:96:af:07:7b:f7:3a:3d:b7:ea:7f:
                    e2:63:8f:18:6e:96:2e:d8:d6:fd:2f:33:6d:9b:00:
                    02:f0:8d:dc:d1:7c:21:b5:26:63:e0:28:67:94:da:
                    f0:57:3e:9d:7a:00:ca:66:9d:67:ec:ee:f7:24:8f:
                    4c:c3:73:aa:b0:79:16:36:e6:86:71:46:f8:a0:18:
                    03:06:f0:9d:87:43:51:0c:f6:73:40:5b:a8:0e:d3:
                    70:3d:b8:a6:ca:ca:2b:22:76:f7:e8:04:7c:23:97:
                    08:39:2d:fe:ee:7a:78:84:1d:f2:9e:68:ca:6f:69:
                    a1:68:8a:f2:0c:d0:c2:32:33:91:f4:cf:fa:31:e2:
                    20:94:dd:de:6f:1c:44:7c:24:fa:ae:b1:0d:cd:73:
                    ad:29:31:79:53:3a:6a:bb:61:c7:60:eb:5b:39:17:
                    d0:e0:29:eb:a4:f5:54:c1:15:f6:bc:da:ee:7e:5f:
                    6f:fc:af:50:9f:df:5f:c2:bd:40:fa:b1:2d:ec:80:
                    7f:db:b5:5b:1b:f1:2f:c9:7a:06:93:49:90:23:ad:
                    3e:23:36:6d:96:69:90:ed:ec:98:ce:ac:a5:07:60:
                    16:b7:d8:c0:f3:a0:fd:d7:b6:0c:1e:f2:9e:87:96:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C7:A4:FD:A9:97:CF:CA:B2:9B:49:43:F7:07:8C:FE:3E:B3:44:F4
            X509v3 Authority Key Identifier:
                keyid:1A:8B:5B:CC:A3:C0:F6:CD:3F:8F:D2:30:D0:B5:AE:FF:24:AA:05:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/1A8B5BCCA3C0F6CD3F8FD230D0B5AEFF24AA0507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:3e:65:a0:fb:49:59:ca:24:5f:3a:26:92:be:07:6c:2c:
         47:d3:0e:4f:0b:be:e8:88:b4:95:db:bd:6e:32:69:1d:89:24:
         61:fe:b6:42:ff:07:68:92:62:7c:64:71:b4:29:c1:43:fe:23:
         2e:34:3c:a6:84:ab:a1:77:c9:c7:e2:b1:c9:18:1e:fb:7e:38:
         d0:d6:d3:03:26:bb:1b:46:30:36:a8:2c:b8:15:62:c9:d0:44:
         f0:e6:cb:72:62:3f:f1:be:e9:a8:52:e6:06:b4:c9:c3:08:86:
         2b:e0:36:0b:a7:5c:fd:62:49:8f:56:2a:2c:d8:c4:8b:eb:92:
         12:56:21:34:e0:da:db:8e:d5:34:d0:27:d5:53:97:23:43:1b:
         35:ba:20:64:f9:ef:16:00:e4:98:2c:1b:7d:db:cc:9e:e4:ff:
         e3:4a:af:31:2a:ff:44:fd:70:15:8a:01:a7:7a:9b:83:37:83:
         eb:47:a6:69:3c:51:e9:a6:36:71:b7:7c:00:33:06:95:cf:23:
         c1:82:95:20:fb:10:3e:1f:86:7d:14:c6:60:90:e7:b7:7b:7f:
         52:15:59:3e:1d:58:6c:72:84:81:99:79:3d:93:a1:08:f5:f9:
         a7:54:fa:e9:05:87:99:2d:8d:77:3b:e1:0e:2d:23:02:b2:38:
         d7:8d:d3:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVmFGeClYbIEioDjp9bI2b+yq8oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE4QjVCQ0NBM0MwRjZDRDNGOEZEMjMwRDBCNUFFRkYy
NEFBMDUwNzAeFw0yMjA2MTgwOTM1MDBaFw0yMjA2MTkwOTQzMDBaMDMxMTAvBgNV
BAMTKEMxQzdBNEZEQTk5N0NGQ0FCMjlCNDk0M0Y3MDc4Q0ZFM0VCMzQ0RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3Yx76zcBczqbldNz5e7YMSvY
lq8He/c6Pbfqf+Jjjxhuli7Y1v0vM22bAALwjdzRfCG1JmPgKGeU2vBXPp16AMpm
nWfs7vckj0zDc6qweRY25oZxRvigGAMG8J2HQ1EM9nNAW6gO03A9uKbKyisidvfo
BHwjlwg5Lf7ueniEHfKeaMpvaaFoivIM0MIyM5H0z/ox4iCU3d5vHER8JPqusQ3N
c60pMXlTOmq7Ycdg61s5F9DgKeuk9VTBFfa82u5+X2/8r1Cf31/CvUD6sS3sgH/b
tVsb8S/JegaTSZAjrT4jNm2WaZDt7JjOrKUHYBa32MDzoP3Xtgwe8p6Hlj2DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwcek/amXz8qym0lD9weM/j6zRPQwHwYDVR0j
BBgwFoAUGotbzKPA9s0/j9Iw0LWu/ySqBQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjFZUUY4bXBFaXIyNXBDTGtVOG5mR3BxWTFmZGtybzVzTll2NHU3R0hE
WnYvMC8xQThCNUJDQ0EzQzBGNkNEM0Y4RkQyMzBEMEI1QUVGRjI0QUEwNTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBOEI1QkNDQTNDMEY2Q0Qz
RjhGRDIzMEQwQjVBRUZGMjRBQTA1MDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjFZUUY4bXBFaXIyNXBDTGtVOG5mR3BxWTFmZGtybzVzTll2NHU3R0hEWnYvMC8x
QThCNUJDQ0EzQzBGNkNEM0Y4RkQyMzBEMEI1QUVGRjI0QUEwNTA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAadY+ZaD7SVnKJF86JpK+B2wsR9MOTwu+6Ii0ldu9bjJpHYkkYf62Qv8HaJJi
fGRxtCnBQ/4jLjQ8poSroXfJx+KxyRge+3440NbTAya7G0YwNqgsuBViydBE8ObL
cmI/8b7pqFLmBrTJwwiGK+A2C6dc/WJJj1YqLNjEi+uSElYhNODa247VNNAn1VOX
I0MbNbogZPnvFgDkmCwbfdvMnuT/40qvMSr/RP1wFYoBp3qbgzeD60emaTxR6aY2
cbd8ADMGlc8jwYKVIPsQPh+GfRTGYJDnt3t/UhVZPh1YbHKEgZl5PZOhCPX5p1T6
6QWHmS2NdzvhDi0jArI4143T1w==
-----END CERTIFICATE-----