Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.mft
File:                     6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.mft (raw, json)
Hash identifier:          oBwmgGfbGpge5dVzdguerZSTIRtaXXO5jaVwlhTPLaY=
Subject key identifier:   BB:B4:49:1D:CB:F6:7B:66:00:BF:BC:F0:6D:E3:85:04:F4:C2:3B:43
Authority key identifier: 64:58:F3:2F:B7:69:60:95:A9:C0:7C:F1:CC:A9:EF:BE:84:69:C1:9B
Certificate issuer:       /CN=6458F32FB7696095A9C07CF1CCA9EFBE8469C19B
Certificate serial:       529EF73220E1CD39BB6C86F4A1FF2F1026EE6219
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.mft
Manifest number:          5C
Signing time:             Sat 11 Feb 2023 00:25:04 +0000
Manifest this update:     Sat 11 Feb 2023 00:20:04 +0000
Manifest next update:     Sun 12 Feb 2023 03:07:04 +0000
Files and hashes:         1: 34352e3136352e3138302e302f32322d3234203d3e20323731353832.roa (hash: Gc8PScKWke/qzlxgnEVQFsvV0l8jk6LLUPZ9AYB79u8=)
                          2: 6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.crl (hash: Wb00nbJnlLUL6Hmmv0DUzmZAZ9wvSThFU9H+fFFhmoA=)
                          3: 323830343a376463383a3a2f33322d3438203d3e20323731353832.roa (hash: Y+6rrcm3RfVgyZj6njo7WBFolsMEY6CFLO+W10fcN9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9e:f7:32:20:e1:cd:39:bb:6c:86:f4:a1:ff:2f:10:26:ee:62:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458F32FB7696095A9C07CF1CCA9EFBE8469C19B
        Validity
            Not Before: Feb 11 00:20:04 2023 GMT
            Not After : Feb 12 03:07:04 2023 GMT
        Subject: CN=BBB4491DCBF67B6600BFBCF06DE38504F4C23B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:51:60:61:3c:8d:bc:53:22:83:cd:ed:b9:
                    39:8c:4e:d4:50:bc:81:b7:48:99:09:d0:6b:8c:68:
                    22:8c:d8:ef:72:0a:32:25:0d:57:c4:a5:21:ae:e8:
                    fb:85:33:0d:b7:8d:69:cf:55:34:d1:40:16:e7:4f:
                    23:b9:8b:71:b9:62:fd:7c:ec:40:50:9e:bc:b2:7a:
                    bd:56:0d:a6:b3:71:3e:ec:2e:4e:d3:15:17:ca:a7:
                    49:52:ad:d3:1e:f3:86:92:05:50:01:78:9b:41:9e:
                    45:65:4c:a2:15:2b:36:a4:89:90:67:41:47:f1:56:
                    ee:44:5b:a5:f1:ef:1c:e8:65:a1:77:f8:4c:87:a8:
                    76:a7:86:b8:56:e3:ee:8f:42:43:d5:df:84:5f:2f:
                    c9:42:0b:c5:35:8d:5f:9f:e5:02:79:9e:5d:6d:62:
                    a3:66:55:21:5c:d3:dd:c7:9d:e3:b4:32:b5:38:85:
                    e0:28:5e:62:9d:86:b5:c6:e7:8b:11:e3:d1:0a:a9:
                    fa:31:32:7a:91:ed:36:7b:d4:ff:95:86:ee:41:ed:
                    ab:5c:f7:a9:4e:a2:6e:8a:66:7e:87:25:dd:e0:d3:
                    6c:85:37:9c:44:a5:92:18:53:13:4a:17:f3:8b:fe:
                    1e:60:f2:89:89:4c:ec:f4:66:9c:ef:02:ea:f9:0b:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:49:1D:CB:F6:7B:66:00:BF:BC:F0:6D:E3:85:04:F4:C2:3B:43
            X509v3 Authority Key Identifier:
                keyid:64:58:F3:2F:B7:69:60:95:A9:C0:7C:F1:CC:A9:EF:BE:84:69:C1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/6458F32FB7696095A9C07CF1CCA9EFBE8469C19B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:df:16:5e:88:b1:31:99:e6:31:cf:01:29:79:45:49:f5:
         20:50:cf:ac:8c:21:26:73:97:8a:dd:b1:78:6d:36:94:a5:bf:
         1c:8a:a1:48:39:e9:6e:28:7f:bd:86:b8:22:19:2c:93:51:31:
         a1:68:76:6b:87:c3:7e:e0:eb:ad:ab:2e:8c:a0:b9:e1:da:7b:
         ef:85:d8:22:a3:57:84:6c:c2:62:79:17:37:10:ec:b0:c7:f0:
         24:09:e6:7f:3c:4a:4d:1f:23:9f:d4:50:5d:d0:08:fd:22:b7:
         64:61:42:23:06:b5:65:6e:d9:1b:84:96:c7:4e:9b:17:2c:d3:
         05:a9:4c:e5:11:49:ab:0e:1e:3c:1e:57:76:31:89:4f:ab:07:
         d6:e4:94:30:79:23:c6:ff:c6:ac:96:8d:05:a8:16:f8:9e:68:
         e7:5c:dc:3e:ae:93:19:35:04:d3:95:8a:ec:2f:df:fc:c5:66:
         43:0d:c2:65:3c:d1:25:43:90:f5:30:31:34:b4:73:7d:c0:ce:
         42:41:b1:c5:15:d0:df:40:4d:a9:45:cc:08:e3:2a:c2:66:92:
         83:11:de:c0:54:05:49:6e:ac:aa:17:ec:f1:a6:62:0a:57:db:
         75:67:4c:7b:a7:81:41:2a:dc:fc:97:24:1c:1d:25:38:f1:4d:
         a8:3c:14:d9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUUp73MiDhzTm7bIb0of8vECbuYhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ1OEYzMkZCNzY5NjA5NUE5QzA3Q0YxQ0NBOUVGQkU4
NDY5QzE5QjAeFw0yMzAyMTEwMDIwMDRaFw0yMzAyMTIwMzA3MDRaMDMxMTAvBgNV
BAMTKEJCQjQ0OTFEQ0JGNjdCNjYwMEJGQkNGMDZERTM4NTA0RjRDMjNCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHA1FgYTyNvFMig83tuTmMTtRQ
vIG3SJkJ0GuMaCKM2O9yCjIlDVfEpSGu6PuFMw23jWnPVTTRQBbnTyO5i3G5Yv18
7EBQnryyer1WDaazcT7sLk7TFRfKp0lSrdMe84aSBVABeJtBnkVlTKIVKzakiZBn
QUfxVu5EW6Xx7xzoZaF3+EyHqHanhrhW4+6PQkPV34RfL8lCC8U1jV+f5QJ5nl1t
YqNmVSFc093HneO0MrU4heAoXmKdhrXG54sR49EKqfoxMnqR7TZ71P+Vhu5B7atc
96lOom6KZn6HJd3g02yFN5xEpZIYUxNKF/OL/h5g8omJTOz0ZpzvAur5C8PfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUu7RJHcv2e2YAv7zwbeOFBPTCO0MwHwYDVR0j
BBgwFoAUZFjzL7dpYJWpwHzxzKnvvoRpwZswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XOGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdB
LzAvNjQ1OEYzMkZCNzY5NjA5NUE5QzA3Q0YxQ0NBOUVGQkU4NDY5QzE5Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NDU4RjMyRkI3Njk2MDk1QTlD
MDdDRjFDQ0E5RUZCRTg0NjlDMTlCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1c4
Yjc4Rlh2a1FXQXVoMTVnaWhwcjlYUnJtM0pBRTdiakhNaVpMMURZd0EvMC82NDU4
RjMyRkI3Njk2MDk1QTlDMDdDRjFDQ0E5RUZCRTg0NjlDMTlCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
QEjfFl6IsTGZ5jHPASl5RUn1IFDPrIwhJnOXit2xeG02lKW/HIqhSDnpbih/vYa4
Ihksk1ExoWh2a4fDfuDrrasujKC54dp774XYIqNXhGzCYnkXNxDssMfwJAnmfzxK
TR8jn9RQXdAI/SK3ZGFCIwa1ZW7ZG4SWx06bFyzTBalM5RFJqw4ePB5XdjGJT6sH
1uSUMHkjxv/GrJaNBagW+J5o51zcPq6TGTUE05WK7C/f/MVmQw3CZTzRJUOQ9TAx
NLRzfcDOQkGxxRXQ30BNqUXMCOMqwmaSgxHewFQFSW6sqhfs8aZiClfbdWdMe6eB
QSrc/JckHB0lOPFNqDwU2Q==
-----END CERTIFICATE-----