Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.mft
File:                     507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.mft (raw, json)
Hash identifier:          zD4r0ie85zvKXSSAFYR4g4Djb60sAQchISwaNZBZpl0=
Subject key identifier:   E7:77:64:D2:B6:FF:FF:E9:F2:2D:CE:78:D6:0A:5A:25:B5:95:64:E1
Authority key identifier: 50:7A:4C:EF:91:9A:D4:8A:4F:6B:0A:96:66:BE:66:AB:AE:CB:87:8C
Certificate issuer:       /CN=507A4CEF919AD48A4F6B0A9666BE66ABAECB878C
Certificate serial:       1F8635472AA349A0C2E42BF938F376A2E2C89F18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.mft
Manifest number:          21
Signing time:             Tue 19 Sep 2023 23:00:57 +0000
Manifest this update:     Tue 19 Sep 2023 22:55:57 +0000
Manifest next update:     Thu 21 Sep 2023 02:41:57 +0000
Files and hashes:         1: 3230312e3138322e3132342e302f32322d3234203d3e20323637353138.roa (hash: qP5Yr2ZW0jl1nHTw3XW/j17PfW/4MCB6j9pGnFhVh4k=)
                          2: 507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.crl (hash: GdetKDU/UYy03Pio3MSL3H69KB4Y10JPOY5dfYLnX1I=)
                          3: 323830343a343261633a3a2f33322d3438203d3e20323637353138.roa (hash: 28X24G74Ce+oEdlaqikdK3pt/xfE32ZcECk/T2gLrLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:86:35:47:2a:a3:49:a0:c2:e4:2b:f9:38:f3:76:a2:e2:c8:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507A4CEF919AD48A4F6B0A9666BE66ABAECB878C
        Validity
            Not Before: Sep 19 22:55:57 2023 GMT
            Not After : Sep 21 02:41:57 2023 GMT
        Subject: CN=E77764D2B6FFFFE9F22DCE78D60A5A25B59564E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:ee:64:b6:f7:88:0f:e9:0a:fd:5b:3f:a6:
                    f3:fb:59:da:1a:95:28:08:d1:fc:9f:6e:8f:94:f8:
                    05:c9:af:2d:8a:b6:6a:6e:ee:0b:98:29:bb:80:87:
                    46:99:e5:53:ed:81:68:37:b5:c3:15:42:63:0a:c0:
                    58:bb:95:cf:2e:2a:33:cb:e9:84:82:a5:77:9f:35:
                    7f:30:d9:14:e7:49:06:8d:3a:d2:b6:8a:cc:01:6f:
                    8d:9a:12:4c:4b:85:bd:e9:7a:86:c4:2c:c5:84:51:
                    bf:21:5d:c3:f9:a3:f8:83:be:37:a2:e7:a0:72:5f:
                    87:87:c4:4b:8b:48:d2:42:e9:86:e0:2f:4f:2e:29:
                    05:76:2f:db:49:e9:0b:ec:19:9f:e3:c8:ea:4b:07:
                    03:37:f5:b0:f6:f7:f4:7e:de:3f:5f:ee:bd:ef:9e:
                    11:18:61:a3:97:38:89:8b:c2:40:71:e4:e9:c0:42:
                    7f:68:32:24:42:e7:77:79:35:ef:a4:cc:ee:69:c5:
                    3d:9e:bc:c5:44:2d:68:c4:03:c5:af:1f:ba:c7:c4:
                    ce:7d:c0:3c:c1:91:0f:a7:0c:ae:89:42:3a:4a:6c:
                    ae:f5:9b:f7:cf:f2:f2:78:74:c0:0b:89:40:09:fa:
                    02:f0:56:5b:49:e8:c7:7a:ce:45:1b:37:40:b2:18:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:64:D2:B6:FF:FF:E9:F2:2D:CE:78:D6:0A:5A:25:B5:95:64:E1
            X509v3 Authority Key Identifier:
                keyid:50:7A:4C:EF:91:9A:D4:8A:4F:6B:0A:96:66:BE:66:AB:AE:CB:87:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/507A4CEF919AD48A4F6B0A9666BE66ABAECB878C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:23:22:02:b0:cb:97:e5:3c:1f:23:4c:fe:65:4b:84:2f:73:
         78:d2:8a:e3:df:46:16:5f:09:ac:8c:8e:16:de:91:ac:62:2e:
         14:08:5c:15:24:cd:7c:ae:28:5e:85:b1:86:cc:d9:56:08:6a:
         3a:61:a3:b4:8e:17:c0:29:16:47:30:98:96:c9:7b:9c:be:f1:
         32:d2:bf:ba:b1:9d:ba:85:cd:3e:e0:4e:c4:59:29:83:0b:52:
         fb:2b:54:9d:9d:47:cc:a9:05:a0:5c:72:88:4a:94:10:97:6b:
         21:fc:22:54:92:5f:11:87:a9:03:fe:19:44:aa:c2:d2:8d:5b:
         e9:41:84:14:a1:aa:8c:2f:3c:97:13:81:c3:cf:22:ec:4d:95:
         27:c2:a9:b3:47:b0:63:05:8a:0c:3c:3d:d1:98:b7:93:73:0e:
         5c:bb:fc:4c:bc:43:5c:be:30:fc:92:4f:e7:55:3a:dd:79:aa:
         f5:7c:da:5e:da:6b:ef:f2:44:b1:e3:48:9c:2a:5a:59:bd:c3:
         44:1a:7b:57:de:6d:59:bc:0e:fe:20:5e:ce:05:18:ab:8a:b8:
         a7:fc:a9:69:4d:15:b4:12:ad:c6:43:09:c9:87:ac:9a:26:59:
         55:8f:06:94:35:ad:0f:cc:40:7a:a2:8a:10:be:ca:30:07:75:
         fe:e9:c8:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH4Y1RyqjSaDC5Cv5OPN2ouLInxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA3QTRDRUY5MTlBRDQ4QTRGNkIwQTk2NjZCRTY2QUJB
RUNCODc4QzAeFw0yMzA5MTkyMjU1NTdaFw0yMzA5MjEwMjQxNTdaMDMxMTAvBgNV
BAMTKEU3Nzc2NEQyQjZGRkZGRTlGMjJEQ0U3OEQ2MEE1QTI1QjU5NTY0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdu5ktveID+kK/Vs/pvP7Wdoa
lSgI0fyfbo+U+AXJry2Ktmpu7guYKbuAh0aZ5VPtgWg3tcMVQmMKwFi7lc8uKjPL
6YSCpXefNX8w2RTnSQaNOtK2iswBb42aEkxLhb3peobELMWEUb8hXcP5o/iDvjei
56ByX4eHxEuLSNJC6YbgL08uKQV2L9tJ6QvsGZ/jyOpLBwM39bD29/R+3j9f7r3v
nhEYYaOXOImLwkBx5OnAQn9oMiRC53d5Ne+kzO5pxT2evMVELWjEA8WvH7rHxM59
wDzBkQ+nDK6JQjpKbK71m/fP8vJ4dMALiUAJ+gLwVltJ6Md6zkUbN0CyGIxZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU53dk0rb//+nyLc541gpaJbWVZOEwHwYDVR0j
BBgwFoAUUHpM75Ga1IpPawqWZr5mq67Lh4wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRFeVdMTGtVYWlScXZ6R1lpZERQOHRZbnRQSEZzUEZGaU0yWkJvNWky
RGcvMC81MDdBNENFRjkxOUFENDhBNEY2QjBBOTY2NkJFNjZBQkFFQ0I4NzhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUwN0E0Q0VGOTE5QUQ0OEE0
RjZCMEE5NjY2QkU2NkFCQUVDQjg3OEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjRFeVdMTGtVYWlScXZ6R1lpZERQOHRZbnRQSEZzUEZGaU0yWkJvNWkyRGcvMC81
MDdBNENFRjkxOUFENDhBNEY2QjBBOTY2NkJFNjZBQkFFQ0I4NzhDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQyMiArDLl+U8HyNM/mVLhC9zeNKK499GFl8JrIyOFt6RrGIuFAhcFSTNfK4o
XoWxhszZVghqOmGjtI4XwCkWRzCYlsl7nL7xMtK/urGduoXNPuBOxFkpgwtS+ytU
nZ1HzKkFoFxyiEqUEJdrIfwiVJJfEYepA/4ZRKrC0o1b6UGEFKGqjC88lxOBw88i
7E2VJ8Kps0ewYwWKDDw90Zi3k3MOXLv8TLxDXL4w/JJP51U63Xmq9XzaXtpr7/JE
seNInCpaWb3DRBp7V95tWbwO/iBezgUYq4q4p/ypaU0VtBKtxkMJyYesmiZZVY8G
lDWtD8xAeqKKEL7KMAd1/unIpw==
-----END CERTIFICATE-----