Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft
File:                     0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft (raw, json)
Hash identifier:          3wJ9LjlSYMRBSbYCyg7/Tw2JHQdFPK+rtWb3LGRQ+yQ=
Subject key identifier:   5D:F1:2E:F2:A2:5F:91:D6:6A:07:2C:AF:BF:3D:97:AC:BE:BB:19:08
Authority key identifier: 02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9
Certificate issuer:       /CN=0257CBD843A248AFF657DA292BC180FA6D42C4D9
Certificate serial:       2ECC3D412E80C5E001F4956EEAD9A2D50B63CBE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft
Manifest number:          77
Signing time:             Fri 02 Dec 2022 11:19:52 +0000
Manifest this update:     Fri 02 Dec 2022 11:14:52 +0000
Manifest next update:     Sat 03 Dec 2022 11:37:52 +0000
Files and hashes:         1: 3137302e3235342e35322e302f32322d3234203d3e203631393031.roa (hash: mS1+jHWaXJV/T5AO+hMLI4SQtUmaJlhLY/tvwUkRgDc=)
                          2: 3139312e352e36342e302f32312d3234203d3e203631393031.roa (hash: oTSFhqOexSc3w1QNssMBd5JLCDkwtB5eU/J0DFy+yt8=)
                          3: 0257CBD843A248AFF657DA292BC180FA6D42C4D9.crl (hash: EwwqgqKPr5X5fmAMBTK60jtqwVLsnBmBAbSHDSWeJdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:3d:41:2e:80:c5:e0:01:f4:95:6e:ea:d9:a2:d5:0b:63:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257CBD843A248AFF657DA292BC180FA6D42C4D9
        Validity
            Not Before: Dec  2 11:14:52 2022 GMT
            Not After : Dec  3 11:37:52 2022 GMT
        Subject: CN=5DF12EF2A25F91D66A072CAFBF3D97ACBEBB1908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:ab:61:75:c9:87:62:34:bd:74:8e:4d:fe:
                    ab:43:07:af:fb:0b:65:77:ea:98:d5:c9:45:9e:f6:
                    cf:95:6b:3a:84:1d:cf:92:93:ec:db:1a:82:52:64:
                    03:e9:4c:b1:2a:ed:a1:40:a7:ff:3c:19:6c:84:bf:
                    4f:9c:4c:3e:43:98:7e:a5:be:8d:59:e2:68:22:bd:
                    a0:d6:76:d7:77:4d:9f:49:dc:56:13:92:c1:be:8e:
                    9b:93:ee:68:2d:e0:4b:f1:a0:27:ac:78:0b:8a:ca:
                    6e:26:55:e3:f8:18:88:99:a9:31:e2:cb:c7:03:9f:
                    50:b0:3a:6c:6f:20:6d:a6:ac:9e:6e:60:45:e2:d2:
                    12:cf:71:a7:bd:5d:7f:ec:ab:86:db:ff:25:39:f5:
                    fe:f1:1e:c4:aa:43:f1:f0:85:20:97:16:9a:36:88:
                    b2:bb:17:31:33:4f:79:54:57:1b:dd:6a:3e:c9:df:
                    95:b8:08:c5:c1:96:2f:0c:54:b7:e1:5f:5a:49:d5:
                    2c:68:dd:8e:e2:f7:b5:5c:e9:77:32:f6:63:7d:b3:
                    e4:19:71:22:ea:9e:a8:a5:38:aa:b7:49:3c:33:bd:
                    92:ec:2b:b1:ff:9a:28:76:b4:78:7f:1e:1c:38:17:
                    e0:ca:11:80:10:7e:e9:71:5c:e2:df:25:69:07:1d:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F1:2E:F2:A2:5F:91:D6:6A:07:2C:AF:BF:3D:97:AC:BE:BB:19:08
            X509v3 Authority Key Identifier:
                keyid:02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:e9:8e:98:b4:f5:68:06:5d:31:84:3b:b7:65:5c:21:12:
         59:e1:ee:d1:3f:cf:9d:ed:dd:a0:8b:e3:20:22:c6:ef:03:69:
         77:da:ab:2e:bb:e8:93:d3:85:03:cd:c9:3b:f4:35:6e:b0:39:
         16:b3:82:2e:de:6a:8a:6f:db:d9:db:90:ee:a1:72:f6:51:8f:
         88:fc:99:96:c0:40:5c:0f:45:03:e1:e7:91:d0:42:29:3f:98:
         bb:b4:d6:39:0a:e5:07:27:2f:b0:e7:df:69:d8:b0:8f:3a:ed:
         92:21:c8:5b:dd:01:a4:40:28:42:e5:c2:7d:82:48:fb:87:4e:
         de:31:2d:00:d2:a1:05:ce:5a:ec:25:ea:1c:36:bb:f8:04:2e:
         e7:79:c8:d6:99:1b:d9:b0:41:b8:2f:84:38:8b:e9:33:3a:ae:
         e7:ed:0c:77:7d:80:3f:94:79:0d:86:88:8c:57:46:2d:a8:1a:
         80:40:1a:5d:bb:95:cd:a0:85:ff:40:22:0f:b3:2d:2a:77:9a:
         80:f4:be:4d:86:ab:fa:20:e7:7c:7b:51:3b:86:db:86:02:80:
         33:7a:20:35:81:67:5f:9c:4b:f8:25:0b:76:41:be:3b:4c:2c:
         e4:a3:bf:4e:bb:13:61:94:6f:18:fd:5f:cc:20:55:d3:7c:e0:
         53:83:6e:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULsw9QS6AxeAB9JVu6tmi1Qtjy+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI1N0NCRDg0M0EyNDhBRkY2NTdEQTI5MkJDMTgwRkE2
RDQyQzREOTAeFw0yMjEyMDIxMTE0NTJaFw0yMjEyMDMxMTM3NTJaMDMxMTAvBgNV
BAMTKDVERjEyRUYyQTI1RjkxRDY2QTA3MkNBRkJGM0Q5N0FDQkVCQjE5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgqthdcmHYjS9dI5N/qtDB6/7
C2V36pjVyUWe9s+VazqEHc+Sk+zbGoJSZAPpTLEq7aFAp/88GWyEv0+cTD5DmH6l
vo1Z4mgivaDWdtd3TZ9J3FYTksG+jpuT7mgt4EvxoCeseAuKym4mVeP4GIiZqTHi
y8cDn1CwOmxvIG2mrJ5uYEXi0hLPcae9XX/sq4bb/yU59f7xHsSqQ/HwhSCXFpo2
iLK7FzEzT3lUVxvdaj7J35W4CMXBli8MVLfhX1pJ1Sxo3Y7i97Vc6Xcy9mN9s+QZ
cSLqnqilOKq3STwzvZLsK7H/mih2tHh/Hhw4F+DKEYAQfulxXOLfJWkHHa5BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXfEu8qJfkdZqByyvvz2XrL67GQgwHwYDVR0j
BBgwFoAUAlfL2EOiSK/2V9opK8GA+m1CxNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC8wMjU3Q0JEODQzQTI0OEFGRjY1N0RBMjkyQkMxODBGQTZENDJDNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyNTdDQkQ4NDNBMjQ4QUZG
NjU3REEyOTJCQzE4MEZBNkQ0MkM0RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5dkMvMC8w
MjU3Q0JEODQzQTI0OEFGRjY1N0RBMjkyQkMxODBGQTZENDJDNEQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsNXpjpi09WgGXTGEO7dlXCESWeHu0T/Pne3doIvjICLG7wNpd9qrLrvok9OF
A83JO/Q1brA5FrOCLt5qim/b2duQ7qFy9lGPiPyZlsBAXA9FA+HnkdBCKT+Yu7TW
OQrlBycvsOffadiwjzrtkiHIW90BpEAoQuXCfYJI+4dO3jEtANKhBc5a7CXqHDa7
+AQu53nI1pkb2bBBuC+EOIvpMzqu5+0Md32AP5R5DYaIjFdGLagagEAaXbuVzaCF
/0AiD7MtKneagPS+TYar+iDnfHtRO4bbhgKAM3ogNYFnX5xL+CULdkG+O0ws5KO/
TrsTYZRvGP1fzCBV03zgU4Nu3Q==
-----END CERTIFICATE-----