Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.mft
File:                     F56A6439E006E61777F7E122C62E7B680CB8B66F.mft (raw, json)
Hash identifier:          ISKTnVJoDcmA+pdH4q+S6o1dWexhDqNedtJ7am3GNTA=
Subject key identifier:   04:87:10:19:FC:5D:85:C2:2D:8A:00:DB:C1:82:FB:2A:AC:13:4D:50
Authority key identifier: F5:6A:64:39:E0:06:E6:17:77:F7:E1:22:C6:2E:7B:68:0C:B8:B6:6F
Certificate issuer:       /CN=F56A6439E006E61777F7E122C62E7B680CB8B66F
Certificate serial:       3464A360975DB7AB64069CF80D231A62D2493B26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.mft
Manifest number:          99
Signing time:             Sun 10 Jul 2022 07:11:23 +0000
Manifest this update:     Sun 10 Jul 2022 07:06:23 +0000
Manifest next update:     Mon 11 Jul 2022 10:01:23 +0000
Files and hashes:         1: 323830343a373735343a3a2f33322d3335203d3e203631363034.roa (hash: tOXxuY2Pq6Jz/OotVWn0rvOKQj37SYWfQG1Gfd2J3WY=)
                          2: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: HWUnyjXdkZiFA0P+qFrBc6uv1k08KH+YFHa2XjsdcrY=)
                          3: F56A6439E006E61777F7E122C62E7B680CB8B66F.crl (hash: sgXPvHQVmJG2zikkJWe/gqbPjj+1VaHqXr/oJVhNKH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:a3:60:97:5d:b7:ab:64:06:9c:f8:0d:23:1a:62:d2:49:3b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F56A6439E006E61777F7E122C62E7B680CB8B66F
        Validity
            Not Before: Jul 10 07:06:23 2022 GMT
            Not After : Jul 11 10:01:23 2022 GMT
        Subject: CN=04871019FC5D85C22D8A00DBC182FB2AAC134D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:6c:77:d9:44:02:c4:4a:65:87:f7:43:c9:
                    8c:4e:36:cc:0e:96:df:d2:c8:2e:57:ad:57:4c:6a:
                    cb:fa:d1:04:98:e5:75:43:aa:03:8c:ab:02:e1:4a:
                    26:fc:81:0d:77:fb:11:dc:d6:7c:7b:7d:5f:01:8e:
                    ab:ef:3e:a7:71:32:59:ad:c1:1a:80:79:b9:03:21:
                    3a:ea:84:55:e2:d3:c5:03:16:6e:9b:78:b3:12:a8:
                    1b:3f:02:5d:92:a4:88:c8:bd:1f:44:ee:f2:2f:ed:
                    6d:40:88:6d:36:be:90:6a:e5:44:05:e7:2e:93:c5:
                    de:59:57:13:3d:4c:a7:3a:61:78:de:9f:41:71:1d:
                    25:79:8f:49:4a:8e:f3:a9:be:d4:b3:52:3d:27:d1:
                    a7:25:0f:cd:d9:45:79:43:ee:d8:ac:f7:8a:8a:7c:
                    8a:d1:2d:33:02:7f:e7:1f:2c:b6:a4:62:4b:2b:1c:
                    c6:cb:41:5a:d9:5a:3e:9e:04:2b:8f:8e:1b:aa:22:
                    c8:95:95:9c:c8:d7:b7:81:73:6f:5d:06:85:b0:b5:
                    a8:b9:1a:3f:28:49:2e:92:d3:07:5d:99:21:22:2a:
                    b6:23:7c:b9:8b:b0:25:3e:f6:91:a5:0b:fe:bd:3a:
                    c3:13:20:34:a3:f2:c2:fd:05:78:44:78:c2:80:f2:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:87:10:19:FC:5D:85:C2:2D:8A:00:DB:C1:82:FB:2A:AC:13:4D:50
            X509v3 Authority Key Identifier:
                keyid:F5:6A:64:39:E0:06:E6:17:77:F7:E1:22:C6:2E:7B:68:0C:B8:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/F56A6439E006E61777F7E122C62E7B680CB8B66F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:85:99:a5:a2:f7:a2:69:0a:ff:2f:b2:81:1b:cc:a0:46:
         98:2f:2a:c8:a8:2b:f0:ca:be:5a:cf:d0:0a:1e:7a:e9:f8:3e:
         e0:08:42:79:66:a0:6a:46:9b:74:ae:8d:1a:4a:f6:71:69:c9:
         65:b4:e4:de:86:36:8a:89:92:fa:cd:a5:a0:98:04:28:cd:d0:
         cd:24:54:09:f5:16:94:ab:e9:0a:81:e1:cd:33:30:71:60:c1:
         cb:c8:97:7c:36:1b:3e:20:03:d0:08:06:eb:3f:65:86:86:53:
         c5:10:01:81:2c:a4:b6:3c:8b:4b:a1:af:7d:5b:3a:17:3f:71:
         95:01:11:1a:4d:1e:9f:59:b8:ba:f3:e4:1c:3c:4e:a1:07:01:
         26:68:55:0b:39:76:35:c0:f2:7c:06:c0:6e:9c:c8:ef:1d:3b:
         47:9a:3d:0f:4f:6b:13:27:44:f5:63:ac:b7:3f:5d:bd:47:21:
         5f:15:ac:ab:5c:41:0f:5d:2a:b8:9a:a3:25:f7:52:b9:af:23:
         78:71:18:5e:e7:bd:85:bc:74:25:a9:2e:fd:06:a7:a5:2e:f1:
         7e:b5:7c:2d:21:52:24:43:21:2c:1b:ff:01:fb:b7:e2:ca:5f:
         4d:6f:7c:00:4a:50:a7:36:dc:d9:5b:10:67:79:f4:90:25:14:
         02:df:00:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNGSjYJddt6tkBpz4DSMaYtJJOyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU2QTY0MzlFMDA2RTYxNzc3RjdFMTIyQzYyRTdCNjgw
Q0I4QjY2RjAeFw0yMjA3MTAwNzA2MjNaFw0yMjA3MTExMDAxMjNaMDMxMTAvBgNV
BAMTKDA0ODcxMDE5RkM1RDg1QzIyRDhBMDBEQkMxODJGQjJBQUMxMzRENTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVmx32UQCxEplh/dDyYxONswO
lt/SyC5XrVdMasv60QSY5XVDqgOMqwLhSib8gQ13+xHc1nx7fV8BjqvvPqdxMlmt
wRqAebkDITrqhFXi08UDFm6beLMSqBs/Al2SpIjIvR9E7vIv7W1AiG02vpBq5UQF
5y6Txd5ZVxM9TKc6YXjen0FxHSV5j0lKjvOpvtSzUj0n0aclD83ZRXlD7tis94qK
fIrRLTMCf+cfLLakYksrHMbLQVrZWj6eBCuPjhuqIsiVlZzI17eBc29dBoWwtai5
Gj8oSS6S0wddmSEiKrYjfLmLsCU+9pGlC/69OsMTIDSj8sL9BXhEeMKA8qw3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBIcQGfxdhcItigDbwYL7KqwTTVAwHwYDVR0j
BBgwFoAU9WpkOeAG5hd39+Eixi57aAy4tm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZS
TGcvMC9GNTZBNjQzOUUwMDZFNjE3NzdGN0UxMjJDNjJFN0I2ODBDQjhCNjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1NkE2NDM5RTAwNkU2MTc3
N0Y3RTEyMkM2MkU3QjY4MENCOEI2NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZSTGcvMC9G
NTZBNjQzOUUwMDZFNjE3NzdGN0UxMjJDNjJFN0I2ODBDQjhCNjZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg+6FmaWi96JpCv8vsoEbzKBGmC8qyKgr8Mq+Ws/QCh566fg+4AhCeWagakab
dK6NGkr2cWnJZbTk3oY2iomS+s2loJgEKM3QzSRUCfUWlKvpCoHhzTMwcWDBy8iX
fDYbPiAD0AgG6z9lhoZTxRABgSyktjyLS6GvfVs6Fz9xlQERGk0en1m4uvPkHDxO
oQcBJmhVCzl2NcDyfAbAbpzI7x07R5o9D09rEydE9WOstz9dvUchXxWsq1xBD10q
uJqjJfdSua8jeHEYXue9hbx0Jaku/QanpS7xfrV8LSFSJEMhLBv/Afu34spfTW98
AEpQpzbc2VsQZ3n0kCUUAt8Akw==
-----END CERTIFICATE-----