Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.mft
File:                     1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.mft (raw, json)
Hash identifier:          aDd+sv41SnD3YzdYZujP/0++ZkTnudcZEqIXz43QR5g=
Subject key identifier:   AA:4F:D7:2B:64:22:FB:B5:78:AC:9D:69:82:48:D4:CE:73:66:26:50
Authority key identifier: 1C:4E:B9:E5:30:B2:37:5F:EA:90:6D:23:69:AB:52:C4:0C:DB:3D:9A
Certificate issuer:       /CN=1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A
Certificate serial:       6823C13AE8B696CF7563EBAB526536625CFE7F6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.mft
Manifest number:          10
Signing time:             Thu 01 Feb 2024 10:23:26 +0000
Manifest this update:     Thu 01 Feb 2024 10:18:26 +0000
Manifest next update:     Fri 02 Feb 2024 10:42:26 +0000
Files and hashes:         1: 323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (hash: 9II3CMQM/d+bdhkD9i84cMC0q7SeNa+LKX5Tm3t4DOY=)
                          2: 1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.crl (hash: WQH22VxhXYOiqPsLOfz18yBsun+AIiNTwacF+H3N2lU=)
                          3: 34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (hash: JoplLum245ZByRCUuA33eocOy4yA8h3/q/qAVNXxQGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:c1:3a:e8:b6:96:cf:75:63:eb:ab:52:65:36:62:5c:fe:7f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A
        Validity
            Not Before: Feb  1 10:18:26 2024 GMT
            Not After : Feb  2 10:42:26 2024 GMT
        Subject: CN=AA4FD72B6422FBB578AC9D698248D4CE73662650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:1e:b2:82:9e:f4:41:9f:03:fb:39:da:ff:
                    2a:a9:ed:8b:ce:43:c1:8b:0a:b4:db:41:c0:29:1a:
                    9b:a9:63:08:61:19:8a:1d:d6:44:fb:3c:af:61:32:
                    e5:1f:f3:97:0f:a8:17:e3:6f:97:d2:a8:99:a1:65:
                    75:29:7b:3d:0a:f8:d0:03:58:ab:95:13:02:21:5d:
                    c5:09:50:00:9f:8c:5e:61:a3:05:84:8b:b0:b9:17:
                    48:be:af:19:de:d1:ae:3e:79:64:a7:f5:c9:1f:8d:
                    2e:31:c3:94:7e:8a:d8:44:c3:5a:51:d1:9b:e2:34:
                    3a:e1:fd:6c:00:89:c7:da:83:cc:a9:15:3f:5d:69:
                    d7:11:09:59:44:5c:c5:6e:2d:4d:77:7c:0e:65:10:
                    68:a2:2e:a1:52:31:65:aa:91:f9:e8:f2:5e:eb:9e:
                    22:2d:c2:ff:ca:ce:93:97:af:84:75:5a:56:9f:0d:
                    31:b3:ff:1c:8d:f8:98:1f:46:72:f9:a0:86:c4:5d:
                    7b:86:de:1f:31:27:27:88:64:26:d5:bf:7f:d7:28:
                    3e:1f:96:a6:61:31:3e:8a:55:07:0a:cb:03:db:0d:
                    00:cf:41:85:fa:b5:43:35:d9:4c:7f:87:14:c0:80:
                    dc:2b:b7:a2:05:57:c0:14:7a:67:c8:f1:51:72:b1:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:D7:2B:64:22:FB:B5:78:AC:9D:69:82:48:D4:CE:73:66:26:50
            X509v3 Authority Key Identifier:
                keyid:1C:4E:B9:E5:30:B2:37:5F:EA:90:6D:23:69:AB:52:C4:0C:DB:3D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/1C4EB9E530B2375FEA906D2369AB52C40CDB3D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:07:ba:9d:3c:18:12:70:e2:fd:ee:c4:1d:3f:d9:96:9c:4d:
         20:90:e4:bf:69:5d:d2:b0:b0:5c:c3:88:1c:ab:f0:89:75:84:
         17:0d:19:0b:56:8d:79:fe:64:b3:b7:11:a5:1c:62:29:ac:54:
         a5:8e:a4:f2:f6:21:b5:fe:44:6e:b7:f8:43:b2:84:57:8b:d4:
         8f:a8:83:5d:56:dc:16:8c:86:48:f5:f0:27:6b:de:ba:9b:41:
         65:83:52:dd:79:41:aa:50:c4:83:c6:f8:48:ee:5a:d0:af:bb:
         98:96:06:f5:ee:13:cf:84:40:a3:0f:b6:4c:8e:1d:36:16:08:
         af:24:f6:68:0a:d6:f0:e1:25:be:41:13:ec:96:6d:81:fd:92:
         5b:71:de:6f:6c:fe:ad:1d:99:eb:84:3e:ae:cb:c8:c1:86:8a:
         0c:ee:b0:b6:aa:b0:13:2c:24:59:06:72:30:4c:a9:e5:d8:b3:
         fc:e9:ff:ac:e3:91:ba:00:50:c9:70:ca:a8:bc:74:86:a7:c2:
         50:0a:ac:71:68:ef:f3:19:c2:fe:d8:b9:a2:38:a4:cc:1a:85:
         38:f5:c7:8f:11:b0:9d:81:32:26:7f:be:73:16:c7:4e:4b:30:
         41:d1:9a:6d:64:b5:37:33:bd:b8:86:24:bf:8d:1b:6b:2d:dc:
         e9:ec:85:59
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUaCPBOui2ls91Y+urUmU2Ylz+f20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0RUI5RTUzMEIyMzc1RkVBOTA2RDIzNjlBQjUyQzQw
Q0RCM0Q5QTAeFw0yNDAyMDExMDE4MjZaFw0yNDAyMDIxMDQyMjZaMDMxMTAvBgNV
BAMTKEFBNEZENzJCNjQyMkZCQjU3OEFDOUQ2OTgyNDhENENFNzM2NjI2NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+R6ygp70QZ8D+zna/yqp7YvO
Q8GLCrTbQcApGpupYwhhGYod1kT7PK9hMuUf85cPqBfjb5fSqJmhZXUpez0K+NAD
WKuVEwIhXcUJUACfjF5howWEi7C5F0i+rxne0a4+eWSn9ckfjS4xw5R+ithEw1pR
0ZviNDrh/WwAicfag8ypFT9dadcRCVlEXMVuLU13fA5lEGiiLqFSMWWqkfno8l7r
niItwv/KzpOXr4R1WlafDTGz/xyN+JgfRnL5oIbEXXuG3h8xJyeIZCbVv3/XKD4f
lqZhMT6KVQcKywPbDQDPQYX6tUM12Ux/hxTAgNwrt6IFV8AUemfI8VFysTKXAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUqk/XK2Qi+7V4rJ1pgkjUznNmJlAwHwYDVR0j
BBgwFoAUHE655TCyN1/qkG0jaatSxAzbPZowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5bXdDM0N5TTNo
LzAvMUM0RUI5RTUzMEIyMzc1RkVBOTA2RDIzNjlBQjUyQzQwQ0RCM0Q5QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xQzRFQjlFNTMwQjIzNzVGRUE5
MDZEMjM2OUFCNTJDNDBDREIzRDlBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3V4
UHFzSHg1WnJKN01IVDFKNGhiSFpNclhCV0paSzR6U3ltd0MzQ3lNM2gvMC8xQzRF
QjlFNTMwQjIzNzVGRUE5MDZEMjM2OUFCNTJDNDBDREIzRDlBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
pAe6nTwYEnDi/e7EHT/ZlpxNIJDkv2ld0rCwXMOIHKvwiXWEFw0ZC1aNef5ks7cR
pRxiKaxUpY6k8vYhtf5Ebrf4Q7KEV4vUj6iDXVbcFoyGSPXwJ2veuptBZYNS3XlB
qlDEg8b4SO5a0K+7mJYG9e4Tz4RAow+2TI4dNhYIryT2aArW8OElvkET7JZtgf2S
W3Heb2z+rR2Z64Q+rsvIwYaKDO6wtqqwEywkWQZyMEyp5diz/On/rOORugBQyXDK
qLx0hqfCUAqscWjv8xnC/ti5ojikzBqFOPXHjxGwnYEyJn++cxbHTkswQdGabWS1
NzO9uIYkv40bay3c6eyFWQ==
-----END CERTIFICATE-----