Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft
File:                     D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft (raw, json)
Hash identifier:          5TZf1T2uW6eKBsGAXRIi5g8rXvjFjCU07XeWgTGcpkk=
Subject key identifier:   D9:F8:16:EE:D3:D3:EF:B5:A7:7A:00:3D:2E:74:22:C5:B1:CC:64:A3
Authority key identifier: D3:30:22:82:E3:76:7C:06:D5:D1:D3:EB:16:D4:FB:89:A3:DA:9D:5C
Certificate issuer:       /CN=D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C
Certificate serial:       5626F61F7AE58514E6B3D0300425AB6EA32B638B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft
Manifest number:          0F
Signing time:             Sun 06 Aug 2023 19:45:24 +0000
Manifest this update:     Sun 06 Aug 2023 19:40:24 +0000
Manifest next update:     Mon 07 Aug 2023 22:02:24 +0000
Files and hashes:         1: 323830343a326532383a3a2f33322d3332203d3e20323635333238.roa (hash: yeHj43ZekQnQcmPxLdFkE25ifJi8T4c4/uaq3L8Xtzc=)
                          2: 3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa (hash: 6buIfUNJhFZFZRiXzjtqURLGCkiU6ef2G+8lOWosBiw=)
                          3: 323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa (hash: +O+c28Jmx9q5zxBHwuYlLY0y4uAxLxPK4MZCX4pNR+c=)
                          4: 3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa (hash: Lx8TZU8JLmrNR3GYgl4nKTqEjvTFbQBbQXlLmZWgqJA=)
                          5: D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.crl (hash: 8FDl2rlg27WgHzeRCSAlqyos9nx7AaOiFzflRpsU0lw=)
                          6: 3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa (hash: 50vaXXyebbdsMQCLglzLQefpfoOdl+HVI7bAqNe9Y/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:f6:1f:7a:e5:85:14:e6:b3:d0:30:04:25:ab:6e:a3:2b:63:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C
        Validity
            Not Before: Aug  6 19:40:24 2023 GMT
            Not After : Aug  7 22:02:24 2023 GMT
        Subject: CN=D9F816EED3D3EFB5A77A003D2E7422C5B1CC64A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:ea:a8:7d:01:6d:07:ea:6c:c6:90:cd:33:
                    9f:d6:15:0f:9d:da:5d:5d:b3:cc:f3:2f:01:6b:d7:
                    fc:e9:09:e4:c7:68:14:52:f7:2c:e5:54:d7:e6:71:
                    1e:ff:cd:a7:d7:a2:1d:0f:1c:17:67:77:3e:6a:8f:
                    12:71:41:bb:25:08:fb:bd:98:a9:66:96:14:10:68:
                    f8:9e:b0:f8:71:bc:99:d3:0b:b2:2e:da:8a:0d:d1:
                    6d:e0:ec:f8:1a:68:a4:2c:3f:d1:ae:e1:d2:6b:e1:
                    3a:b2:59:6c:8c:76:a2:b2:60:11:15:75:9b:66:d7:
                    32:e1:a4:fa:05:3f:fe:9d:be:81:4e:55:a7:ad:e2:
                    08:86:5f:a7:43:5a:e6:42:d5:83:fd:0b:2d:94:8f:
                    44:6b:2d:2d:86:e8:86:c2:7f:d4:54:5b:75:51:7f:
                    54:b6:ca:92:87:c5:85:1b:1d:58:9c:c0:9b:6b:39:
                    e3:cc:65:0d:53:b7:bc:11:06:b2:b5:66:de:62:0e:
                    4f:19:14:8f:4d:d1:86:62:64:31:72:e3:55:06:e6:
                    42:23:9f:c3:f5:9b:d2:78:3b:03:d7:17:d3:52:6f:
                    af:4a:e2:cb:44:ad:82:42:99:f2:23:86:f5:95:47:
                    9a:9a:15:c7:c7:d3:d0:a5:42:79:18:8b:0d:ad:bf:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:16:EE:D3:D3:EF:B5:A7:7A:00:3D:2E:74:22:C5:B1:CC:64:A3
            X509v3 Authority Key Identifier:
                keyid:D3:30:22:82:E3:76:7C:06:D5:D1:D3:EB:16:D4:FB:89:A3:DA:9D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/D3302282E3767C06D5D1D3EB16D4FB89A3DA9D5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:a7:f9:f9:85:68:4f:ed:66:1f:fb:b4:59:7c:6f:d4:2e:
         ff:17:66:28:ba:65:2d:08:3c:a7:bd:69:33:d6:3d:b2:10:87:
         4a:69:85:fb:06:83:a2:92:f3:33:13:37:78:c4:03:c7:4d:5e:
         f1:56:63:ee:85:a6:1e:3a:5c:da:fd:8e:d1:69:77:76:58:54:
         8c:ae:a7:7e:d4:7d:2d:94:b0:18:3e:16:48:49:46:9c:71:6c:
         fc:18:ab:f0:c8:1d:af:eb:e4:a5:4a:bf:dc:f5:44:5f:20:7f:
         34:87:89:e2:fa:8b:c8:cd:ca:20:ec:ec:49:2e:6e:f9:39:d6:
         5d:99:54:b0:02:37:a9:03:c5:49:81:ed:7f:76:7f:b3:1f:a5:
         dd:c1:fd:24:e2:3a:92:aa:0d:df:74:50:39:13:32:64:be:5f:
         50:f4:80:8c:79:d3:75:d5:b7:f1:fe:29:e0:e2:2a:7f:94:60:
         17:d5:60:35:a5:88:87:7d:0d:46:a9:3a:c4:d8:18:da:58:8b:
         c0:0c:01:ec:67:f9:52:39:e2:57:a8:a3:4e:2d:cc:56:a6:50:
         71:4e:f7:ed:df:06:ba:bf:db:38:88:e0:64:a8:c2:d6:a7:12:
         e3:66:df:f6:4b:ee:bb:de:b2:46:bd:7d:18:cd:a6:2c:a8:da:
         89:b9:f5:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVib2H3rlhRTms9AwBCWrbqMrY4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMzMDIyODJFMzc2N0MwNkQ1RDFEM0VCMTZENEZCODlB
M0RBOUQ1QzAeFw0yMzA4MDYxOTQwMjRaFw0yMzA4MDcyMjAyMjRaMDMxMTAvBgNV
BAMTKEQ5RjgxNkVFRDNEM0VGQjVBNzdBMDAzRDJFNzQyMkM1QjFDQzY0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0+qofQFtB+psxpDNM5/WFQ+d
2l1ds8zzLwFr1/zpCeTHaBRS9yzlVNfmcR7/zafXoh0PHBdndz5qjxJxQbslCPu9
mKlmlhQQaPiesPhxvJnTC7Iu2ooN0W3g7PgaaKQsP9Gu4dJr4TqyWWyMdqKyYBEV
dZtm1zLhpPoFP/6dvoFOVaet4giGX6dDWuZC1YP9Cy2Uj0RrLS2G6IbCf9RUW3VR
f1S2ypKHxYUbHVicwJtrOePMZQ1Tt7wRBrK1Zt5iDk8ZFI9N0YZiZDFy41UG5kIj
n8P1m9J4OwPXF9NSb69K4stErYJCmfIjhvWVR5qaFcfH09ClQnkYiw2tv5eZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2fgW7tPT77WnegA9LnQixbHMZKMwHwYDVR0j
BBgwFoAU0zAiguN2fAbV0dPrFtT7iaPanVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVRZNkc5a0tTWVZicVBzUmtrYnhuZEdldjVDbUFvZXRIZThoODNLVFFF
elUvMC9EMzMwMjI4MkUzNzY3QzA2RDVEMUQzRUIxNkQ0RkI4OUEzREE5RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzMzAyMjgyRTM3NjdDMDZE
NUQxRDNFQjE2RDRGQjg5QTNEQTlENUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVRZNkc5a0tTWVZicVBzUmtrYnhuZEdldjVDbUFvZXRIZThoODNLVFFFelUvMC9E
MzMwMjI4MkUzNzY3QzA2RDVEMUQzRUIxNkQ0RkI4OUEzREE5RDVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF7in+fmFaE/tZh/7tFl8b9Qu/xdmKLplLQg8p71pM9Y9shCHSmmF+waDopLz
MxM3eMQDx01e8VZj7oWmHjpc2v2O0Wl3dlhUjK6nftR9LZSwGD4WSElGnHFs/Bir
8Mgdr+vkpUq/3PVEXyB/NIeJ4vqLyM3KIOzsSS5u+TnWXZlUsAI3qQPFSYHtf3Z/
sx+l3cH9JOI6kqoN33RQORMyZL5fUPSAjHnTddW38f4p4OIqf5RgF9VgNaWIh30N
Rqk6xNgY2liLwAwB7Gf5UjniV6ijTi3MVqZQcU737d8Gur/bOIjgZKjC1qcS42bf
9kvuu96yRr19GM2mLKjaibn1/Q==
-----END CERTIFICATE-----