Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
File:                     CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft (raw, json)
Hash identifier:          u+0uRtCKfO1GPZ0p9sgkJzRubw1wlcBznqJbfm9Jckk=
Subject key identifier:   8B:1B:01:75:0E:86:FD:A6:56:65:74:DE:C7:CA:05:EE:15:87:5B:1B
Authority key identifier: CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED
Certificate issuer:       /CN=CB6C6266A30903A3C0A747ABFDA7510F516400ED
Certificate serial:       3B2E8C56CF26998021465440C59856DACF5B02BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft
Manifest number:          F9
Signing time:             Wed 29 Nov 2023 17:06:14 +0000
Manifest this update:     Wed 29 Nov 2023 17:01:14 +0000
Manifest next update:     Thu 30 Nov 2023 17:59:14 +0000
Files and hashes:         1: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: W29Fnw5x92jtecdFeYmvLpWrkueoTkgOqcH/NWl5r88=)
                          2: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: R3hws6slLriCKZenZxBXIa19QtWtqtlrTnMlGDKPBAA=)
                          3: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: Z3APZd7Zhfvd0vODvAfpPg6g8qR4RqVEyt3wD16mAoc=)
                          4: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: qkBGzuiNR7RMDQKz83s6iQ+AE7p2qEx0xU9SL5TcKnA=)
                          5: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: +JAXDhCZZWOBBWbMjqoB/nVrhRsSIuPRWrKX+Dt/7YY=)
                          6: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: U0jzFsWfyhmAQ7BaGqPKQ6ZO3JpLBtp/TdY8Szp6ncQ=)
                          7: CB6C6266A30903A3C0A747ABFDA7510F516400ED.crl (hash: ZQaHYSzg8GNoGFosBEMO3eMVCjHEz7+TbLLv8bZXCxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2e:8c:56:cf:26:99:80:21:46:54:40:c5:98:56:da:cf:5b:02:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB6C6266A30903A3C0A747ABFDA7510F516400ED
        Validity
            Not Before: Nov 29 17:01:14 2023 GMT
            Not After : Nov 30 17:59:14 2023 GMT
        Subject: CN=8B1B01750E86FDA6566574DEC7CA05EE15875B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:ee:9b:06:2a:ca:ff:f6:42:93:7d:e3:58:
                    dd:ab:c7:93:c9:87:21:9b:02:ab:ad:37:bc:b9:04:
                    ae:9f:40:1b:ab:29:df:5f:e9:58:9f:3a:47:ee:4a:
                    a1:e3:0a:2c:9d:38:a4:b8:49:8d:9a:79:22:f0:c4:
                    5e:f4:df:2c:9e:83:d9:d5:39:71:a4:ed:8d:1b:56:
                    2f:06:9b:ba:9c:3f:88:98:19:c2:87:71:36:e6:1b:
                    ad:1a:88:3e:74:21:c6:b0:7a:8a:7b:39:5e:81:e7:
                    3a:01:64:d4:f8:a5:d7:bc:e9:6f:82:20:ce:a7:09:
                    1c:ba:ea:e1:23:88:24:d7:03:b2:c1:b3:72:82:1e:
                    cb:ef:52:a0:e8:df:b9:e8:ba:70:5e:35:cf:a6:e7:
                    72:ae:e8:03:19:39:ba:01:51:c5:c7:65:14:a7:b2:
                    00:c6:36:78:31:64:1c:84:77:85:92:da:0f:26:67:
                    c8:91:5b:cd:3b:d8:c2:68:8b:1b:2a:ba:3f:7d:a1:
                    d8:4f:9a:74:89:f9:14:5d:7d:cb:31:dc:a6:5b:ef:
                    16:ee:f7:ac:c9:43:7a:37:bf:1e:fd:12:33:c2:c8:
                    be:69:24:83:b7:4e:23:cc:62:0a:8f:e6:70:f0:51:
                    73:4a:2a:b9:dd:dc:e2:f4:18:e7:14:fa:93:d3:47:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:01:75:0E:86:FD:A6:56:65:74:DE:C7:CA:05:EE:15:87:5B:1B
            X509v3 Authority Key Identifier:
                keyid:CB:6C:62:66:A3:09:03:A3:C0:A7:47:AB:FD:A7:51:0F:51:64:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/CB6C6266A30903A3C0A747ABFDA7510F516400ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:5b:6b:bc:50:e3:0b:63:43:f2:46:cf:8d:eb:b3:01:27:
         a8:bc:3b:b4:01:1a:f3:05:52:34:31:a7:ff:1e:0f:3a:65:cb:
         f5:ac:cd:e2:5e:5f:84:53:8a:0e:28:d7:88:39:e8:5b:08:69:
         a0:b5:b4:9d:54:66:31:b6:91:c0:63:47:bc:b4:52:98:e9:1a:
         d7:78:11:60:53:06:ea:48:90:85:7a:25:d8:6a:ff:bb:74:a2:
         3b:34:b2:70:a5:45:39:cc:ec:15:ab:89:86:07:53:9f:b8:8b:
         d6:86:a9:64:ea:fb:a0:83:c2:5f:69:39:0b:71:12:33:b9:a2:
         3d:60:36:c6:22:ee:fd:48:b8:4c:94:f7:d4:45:89:c8:c1:ea:
         aa:a9:32:98:e2:0e:3f:5b:ff:5e:bf:2d:be:95:6b:3e:d3:3e:
         90:6c:22:1a:27:28:eb:6a:96:d3:aa:31:63:d8:39:4c:d4:fd:
         30:e4:da:e2:1f:db:41:be:a1:2c:bb:17:db:df:79:c3:1b:3f:
         fc:2b:9f:bd:57:99:e6:94:7f:13:4b:d5:80:6c:e1:0c:2b:79:
         aa:2f:28:3c:62:17:de:82:dd:9f:78:11:f0:ef:7e:9f:33:0f:
         41:c1:b9:f0:5c:89:e3:2d:78:e2:54:ff:4a:a2:0f:6d:7b:d5:
         20:52:46:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOy6MVs8mmYAhRlRAxZhW2s9bArwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I2QzYyNjZBMzA5MDNBM0MwQTc0N0FCRkRBNzUxMEY1
MTY0MDBFRDAeFw0yMzExMjkxNzAxMTRaFw0yMzExMzAxNzU5MTRaMDMxMTAvBgNV
BAMTKDhCMUIwMTc1MEU4NkZEQTY1NjY1NzRERUM3Q0EwNUVFMTU4NzVCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0+6bBirK//ZCk33jWN2rx5PJ
hyGbAqutN7y5BK6fQBurKd9f6VifOkfuSqHjCiydOKS4SY2aeSLwxF703yyeg9nV
OXGk7Y0bVi8Gm7qcP4iYGcKHcTbmG60aiD50Icaweop7OV6B5zoBZNT4pde86W+C
IM6nCRy66uEjiCTXA7LBs3KCHsvvUqDo37nounBeNc+m53Ku6AMZOboBUcXHZRSn
sgDGNngxZByEd4WS2g8mZ8iRW8072MJoixsquj99odhPmnSJ+RRdfcsx3KZb7xbu
96zJQ3o3vx79EjPCyL5pJIO3TiPMYgqP5nDwUXNKKrnd3OL0GOcU+pPTRzZLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUixsBdQ6G/aZWZXTex8oF7hWHWxswHwYDVR0j
BBgwFoAUy2xiZqMJA6PAp0er/adRD1FkAO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9DQjZDNjI2NkEzMDkwM0EzQzBBNzQ3QUJGREE3NTEwRjUxNjQwMEVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCNkM2MjY2QTMwOTAzQTND
MEE3NDdBQkZEQTc1MTBGNTE2NDAwRUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMC9D
QjZDNjI2NkEzMDkwM0EzQzBBNzQ3QUJGREE3NTEwRjUxNjQwMEVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVtVba7xQ4wtjQ/JGz43rswEnqLw7tAEa8wVSNDGn/x4POmXL9azN4l5fhFOK
DijXiDnoWwhpoLW0nVRmMbaRwGNHvLRSmOka13gRYFMG6kiQhXol2Gr/u3SiOzSy
cKVFOczsFauJhgdTn7iL1oapZOr7oIPCX2k5C3ESM7miPWA2xiLu/Ui4TJT31EWJ
yMHqqqkymOIOP1v/Xr8tvpVrPtM+kGwiGico62qW06oxY9g5TNT9MOTa4h/bQb6h
LLsX2995wxs//CufvVeZ5pR/E0vVgGzhDCt5qi8oPGIX3oLdn3gR8O9+nzMPQcG5
8FyJ4y144lT/SqIPbXvVIFJG6Q==
-----END CERTIFICATE-----