Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft
File:                     28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft (raw, json)
Hash identifier:          heYp6obzcOSfziZQvLlJ0P7HvrRNSkrRvQ3ko2s8gqs=
Subject key identifier:   B9:CA:3F:0E:F6:E4:BD:9A:9F:C0:74:B2:C1:0F:13:D5:C0:5A:38:A0
Authority key identifier: 28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F
Certificate issuer:       /CN=28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F
Certificate serial:       4D0A5B5A701DB7249ED092BF2FE2218FC20CBC5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft
Manifest number:          4D
Signing time:             Mon 15 Apr 2024 06:45:08 +0000
Manifest this update:     Mon 15 Apr 2024 06:40:08 +0000
Manifest next update:     Tue 16 Apr 2024 10:20:08 +0000
Files and hashes:         1: 34352e3137362e34302e302f32322d3234203d3e20323638393239.roa (hash: jFHiK77ctJbErn91XW/oYYO/StluxG+NyHemerYNGSA=)
                          2: 28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.crl (hash: tILKjtOBsKueNsDg2advd2Ih373gkONZ2XuZwM5uJAM=)
                          3: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (hash: IZrVy3TM14oIPpr6W0GepQenh++w0rSjilI9ja3GaAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0a:5b:5a:70:1d:b7:24:9e:d0:92:bf:2f:e2:21:8f:c2:0c:bc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F
        Validity
            Not Before: Apr 15 06:40:08 2024 GMT
            Not After : Apr 16 10:20:08 2024 GMT
        Subject: CN=B9CA3F0EF6E4BD9A9FC074B2C10F13D5C05A38A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:4b:ff:d7:00:5b:43:a3:4e:52:ad:26:5a:
                    f3:9c:95:22:79:c2:4e:47:9d:5a:2f:ee:4b:48:91:
                    fd:ae:c1:65:6b:47:ad:67:2b:7e:8e:2d:53:5c:b8:
                    78:c9:17:9d:da:ec:21:be:1a:17:82:80:af:8b:c6:
                    88:16:af:90:8b:00:c0:b8:4a:e9:b6:8a:93:e8:ad:
                    5f:57:20:26:39:d5:6d:ef:af:01:79:53:f3:30:3f:
                    85:e0:a6:f1:ef:da:c1:2b:74:a2:5b:a5:5e:49:38:
                    26:39:9f:51:f7:32:e1:1b:d8:d1:cf:84:99:9b:0f:
                    4d:eb:b4:05:03:9e:ca:26:6d:0e:c9:d6:6d:fd:92:
                    90:81:7e:9f:b2:dc:bd:c1:47:8a:5d:5b:61:5d:24:
                    df:70:48:4b:05:34:41:ce:2c:1c:5e:06:79:de:86:
                    6f:79:6a:be:52:44:6e:e4:73:c8:5a:cd:99:cc:bb:
                    9b:9d:de:90:70:7c:b0:aa:70:02:04:64:ff:d1:ab:
                    bb:a4:3a:b0:55:1b:7d:3e:76:ae:1c:ea:c6:a2:7d:
                    fe:10:97:6b:30:75:7c:c8:cf:7e:98:49:f9:a1:d5:
                    37:0f:07:af:fc:f4:e5:ec:d0:d6:ee:fb:8c:83:00:
                    81:5e:ab:70:34:48:63:34:cf:65:0b:ff:c8:bd:f1:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:3F:0E:F6:E4:BD:9A:9F:C0:74:B2:C1:0F:13:D5:C0:5A:38:A0
            X509v3 Authority Key Identifier:
                keyid:28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:ed:fc:9c:7b:18:b1:cb:1c:fc:51:76:7d:c9:f9:84:61:
         f6:73:39:99:c9:f6:1c:5d:44:33:98:65:da:b7:bb:9f:6b:69:
         eb:39:8a:a0:0d:50:28:4b:f1:65:84:35:a7:e5:96:33:55:ec:
         d4:00:9b:8f:c8:54:18:1d:68:ef:74:79:df:ae:34:55:17:30:
         74:e2:0b:e0:72:e1:42:84:43:31:98:c5:c7:b7:6d:0f:1e:f6:
         dd:ab:32:84:ec:65:73:db:5d:3d:99:ee:00:bf:6a:89:ae:b3:
         9b:52:18:e5:9a:dd:a4:43:18:7e:47:8b:17:44:79:fc:89:7d:
         f7:fc:fa:67:c3:32:f6:51:5c:0a:5c:ad:2f:93:e4:36:3e:1e:
         61:58:1a:38:46:14:a4:35:2d:fa:81:be:32:35:a1:57:d0:9c:
         91:d2:74:6e:af:2e:ea:cc:1c:97:a1:3a:32:29:1f:a8:cb:2e:
         9d:21:93:e6:21:46:b3:97:21:da:e1:11:10:98:5b:f4:4e:2e:
         ae:4e:e7:b2:62:81:cc:51:aa:81:a8:be:bf:5e:38:c7:68:30:
         e8:cc:e1:24:3c:db:2e:21:3e:00:61:cd:e7:d5:44:c1:b1:e2:
         5f:e0:44:8b:7b:e0:84:bf:dd:bd:80:bc:1e:b6:e0:84:3d:31:
         36:22:c4:8a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTQpbWnAdtySe0JK/L+Ihj8IMvF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGRjhFQzdBRjIyMjIwM0VFN0Y5RDZDNjJBRUExNEM0
NDdGQkMyRjAeFw0yNDA0MTUwNjQwMDhaFw0yNDA0MTYxMDIwMDhaMDMxMTAvBgNV
BAMTKEI5Q0EzRjBFRjZFNEJEOUE5RkMwNzRCMkMxMEYxM0Q1QzA1QTM4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoUv/1wBbQ6NOUq0mWvOclSJ5
wk5HnVov7ktIkf2uwWVrR61nK36OLVNcuHjJF53a7CG+GheCgK+LxogWr5CLAMC4
Sum2ipPorV9XICY51W3vrwF5U/MwP4XgpvHv2sErdKJbpV5JOCY5n1H3MuEb2NHP
hJmbD03rtAUDnsombQ7J1m39kpCBfp+y3L3BR4pdW2FdJN9wSEsFNEHOLBxeBnne
hm95ar5SRG7kc8hazZnMu5ud3pBwfLCqcAIEZP/Rq7ukOrBVG30+dq4c6saiff4Q
l2swdXzIz36YSfmh1TcPB6/89OXs0Nbu+4yDAIFeq3A0SGM0z2UL/8i98Y0NAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUuco/DvbkvZqfwHSywQ8T1cBaOKAwHwYDVR0j
BBgwFoAUKP+Ox68iIgPuf51sYq6hTER/vC8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LSzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZrb1M5bm9aTWRo
LzAvMjhGRjhFQzdBRjIyMjIwM0VFN0Y5RDZDNjJBRUExNEM0NDdGQkMyRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yOEZGOEVDN0FGMjIyMjAzRUU3
RjlENkM2MkFFQTE0QzQ0N0ZCQzJGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tL
NVhrbldvV3NkclZlaXdDWkd6aW5GcTZCTlcxdktORmtvUzlub1pNZGgvMC8yOEZG
OEVDN0FGMjIyMjAzRUU3RjlENkM2MkFFQTE0QzQ0N0ZCQzJGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ZA/t/Jx7GLHLHPxRdn3J+YRh9nM5mcn2HF1EM5hl2re7n2tp6zmKoA1QKEvxZYQ1
p+WWM1Xs1ACbj8hUGB1o73R53640VRcwdOIL4HLhQoRDMZjFx7dtDx723asyhOxl
c9tdPZnuAL9qia6zm1IY5ZrdpEMYfkeLF0R5/Il99/z6Z8My9lFcClytL5PkNj4e
YVgaOEYUpDUt+oG+MjWhV9CckdJ0bq8u6swcl6E6MikfqMsunSGT5iFGs5ch2uER
EJhb9E4urk7nsmKBzFGqgai+v144x2gw6MzhJDzbLiE+AGHN59VEwbHiX+BEi3vg
hL/dvYC8HrbghD0xNiLEig==
-----END CERTIFICATE-----