Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft
File:                     0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft (raw, json)
Hash identifier:          BbnHaYe0I1qaH8Vc006wn1zpC1LxLcm4UbgtTK6Qzfs=
Subject key identifier:   D4:47:4D:DC:F6:9B:67:51:CC:2A:81:20:1F:FD:23:32:9D:08:BF:3B
Authority key identifier: 04:90:D4:85:3D:AD:6E:AA:D5:AF:EB:92:65:E9:29:CB:49:94:DF:C9
Certificate issuer:       /CN=0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9
Certificate serial:       430F4385F89F9434E564A73280D8C4F12E1CE6A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft
Manifest number:          C7
Signing time:             Thu 15 Dec 2022 22:51:33 +0000
Manifest this update:     Thu 15 Dec 2022 22:46:33 +0000
Manifest next update:     Fri 16 Dec 2022 23:07:33 +0000
Files and hashes:         1: 323830343a363636383a3a2f33322d3438203d3e20323639353536.roa (hash: dKbqLcGguZxyERGxviTxgzbs9S7GGykJde3MoR1jjpw=)
                          2: 34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa (hash: NYiB9YydnJ4zqG6bdYzrJ8g0nvApkoqNi9b7lKZO8Yc=)
                          3: 0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.crl (hash: bV9yJuB2GTqJpkzm7ZPrX2hJcNvV6vuGy3B1V81PUUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0f:43:85:f8:9f:94:34:e5:64:a7:32:80:d8:c4:f1:2e:1c:e6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9
        Validity
            Not Before: Dec 15 22:46:33 2022 GMT
            Not After : Dec 16 23:07:33 2022 GMT
        Subject: CN=D4474DDCF69B6751CC2A81201FFD23329D08BF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:4c:fa:65:ea:06:f2:73:d6:42:d4:c0:df:
                    7a:43:fe:ea:7e:eb:e1:8d:e2:8b:97:4b:75:45:42:
                    75:4c:d4:ce:25:36:58:37:29:3b:da:d1:85:e9:d1:
                    09:a3:7f:8d:77:35:ff:e5:a6:62:6f:00:b4:a8:23:
                    43:8b:68:ea:20:16:83:d8:fc:6f:be:d1:05:07:cb:
                    f0:a6:b2:9e:99:5d:bc:4b:b0:9f:ef:c8:6b:5a:c7:
                    48:c5:25:b6:54:64:b8:89:cd:de:55:95:3e:ef:44:
                    14:91:d8:2a:03:18:8b:52:0a:9c:87:fd:c2:d2:10:
                    ae:de:f0:b9:89:9b:c1:b0:16:95:8f:b8:0f:21:a7:
                    91:4d:da:5a:5b:02:d3:f0:26:08:ae:99:93:fe:61:
                    52:d7:1c:43:e6:c4:65:67:2a:a5:ed:f4:7e:52:19:
                    6c:d8:e0:21:3c:bb:8a:e1:f7:92:9e:b5:17:ca:51:
                    00:85:a1:1a:9c:64:5b:0e:92:7e:c2:b8:b1:19:70:
                    0d:18:1a:19:7c:6f:a2:d5:89:b9:fd:bc:b7:a0:fd:
                    e3:dc:df:22:fa:54:3b:e3:6c:0a:5d:c9:27:c7:71:
                    fa:e1:be:22:02:56:32:19:96:34:df:27:b4:5f:8d:
                    9e:99:84:b6:58:a0:de:f5:bf:c0:71:f1:f4:b6:5f:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:4D:DC:F6:9B:67:51:CC:2A:81:20:1F:FD:23:32:9D:08:BF:3B
            X509v3 Authority Key Identifier:
                keyid:04:90:D4:85:3D:AD:6E:AA:D5:AF:EB:92:65:E9:29:CB:49:94:DF:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:97:7c:99:25:4a:5d:9c:9f:77:94:fa:c4:54:ef:05:35:3d:
         9c:cf:c1:86:07:24:9a:8f:21:9d:ea:76:88:43:56:ee:34:2b:
         ad:e6:57:ca:6b:1f:5c:b4:d5:ef:de:4f:08:c9:ac:8c:6a:b6:
         64:5d:eb:0e:0d:16:82:db:42:20:a3:d3:04:8e:80:7b:0b:c9:
         73:d1:68:21:27:aa:ad:4d:74:86:df:9d:1e:c9:bd:3c:79:66:
         ce:5a:41:75:6e:3e:47:3e:ff:63:7e:7c:c6:cf:2c:99:b1:44:
         17:83:a8:e3:d1:ae:da:22:74:d4:31:13:5d:36:28:1a:44:bb:
         d7:ea:61:03:4a:dd:7a:60:5e:80:c8:24:c1:13:14:a2:b3:cf:
         1c:0b:a6:24:48:67:df:26:ab:dd:9a:dc:28:c1:0f:b1:59:17:
         57:b4:b5:94:ac:57:c0:4d:81:47:94:77:cf:f2:27:c3:f8:5e:
         b0:0a:da:25:2f:dc:ee:53:fb:c9:cd:b7:e4:12:d7:c8:22:72:
         30:dd:bb:fd:3b:9b:41:66:1c:1d:ad:2a:a4:f9:6a:20:1b:49:
         72:10:15:02:ed:5f:b9:99:fd:3e:20:30:19:5a:a2:99:51:b9:
         8c:88:8b:e4:5b:7d:94:85:32:ef:cf:52:cf:0f:b9:fe:20:57:
         10:cf:df:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQw9DhfiflDTlZKcygNjE8S4c5qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5MEQ0ODUzREFENkVBQUQ1QUZFQjkyNjVFOTI5Q0I0
OTk0REZDOTAeFw0yMjEyMTUyMjQ2MzNaFw0yMjEyMTYyMzA3MzNaMDMxMTAvBgNV
BAMTKEQ0NDc0RERDRjY5QjY3NTFDQzJBODEyMDFGRkQyMzMyOUQwOEJGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEkz6ZeoG8nPWQtTA33pD/up+
6+GN4ouXS3VFQnVM1M4lNlg3KTva0YXp0Qmjf413Nf/lpmJvALSoI0OLaOogFoPY
/G++0QUHy/Cmsp6ZXbxLsJ/vyGtax0jFJbZUZLiJzd5VlT7vRBSR2CoDGItSCpyH
/cLSEK7e8LmJm8GwFpWPuA8hp5FN2lpbAtPwJgiumZP+YVLXHEPmxGVnKqXt9H5S
GWzY4CE8u4rh95KetRfKUQCFoRqcZFsOkn7CuLEZcA0YGhl8b6LVibn9vLeg/ePc
3yL6VDvjbApdySfHcfrhviICVjIZljTfJ7RfjZ6ZhLZYoN71v8Bx8fS2X0pRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1EdN3PabZ1HMKoEgH/0jMp0IvzswHwYDVR0j
BBgwFoAUBJDUhT2tbqrVr+uSZekpy0mU38kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJIVXRpREwyejJvVEduZVNKMTVONzdiN1llUWV2NkFLcnZ5eGpZZHZM
d3AvMC8wNDkwRDQ4NTNEQUQ2RUFBRDVBRkVCOTI2NUU5MjlDQjQ5OTRERkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OTBENDg1M0RBRDZFQUFE
NUFGRUI5MjY1RTkyOUNCNDk5NERGQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDJIVXRpREwyejJvVEduZVNKMTVONzdiN1llUWV2NkFLcnZ5eGpZZHZMd3AvMC8w
NDkwRDQ4NTNEQUQ2RUFBRDVBRkVCOTI2NUU5MjlDQjQ5OTRERkM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAApd8mSVKXZyfd5T6xFTvBTU9nM/Bhgckmo8hnep2iENW7jQrreZXymsfXLTV
795PCMmsjGq2ZF3rDg0WgttCIKPTBI6AewvJc9FoISeqrU10ht+dHsm9PHlmzlpB
dW4+Rz7/Y358xs8smbFEF4Oo49Gu2iJ01DETXTYoGkS71+phA0rdemBegMgkwRMU
orPPHAumJEhn3yar3ZrcKMEPsVkXV7S1lKxXwE2BR5R3z/Inw/hesAraJS/c7lP7
yc235BLXyCJyMN27/TubQWYcHa0qpPlqIBtJchAVAu1fuZn9PiAwGVqimVG5jIiL
5Ft9lIUy789Szw+5/iBXEM/f9A==
-----END CERTIFICATE-----