Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft
File:                     1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft (raw, json)
Hash identifier:          v56hljvbNf7I8bd5OzxZoiwratxMVJqvwkZ6nJiVM9s=
Subject key identifier:   F8:7E:1C:A7:12:26:7D:DB:5D:3D:F9:DD:41:26:B2:0A:6C:41:61:84
Authority key identifier: 14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7
Certificate issuer:       /CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
Certificate serial:       35CD01C307C44AE9E0D66AC0207DCE53586FAC28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft
Manifest number:          15
Signing time:             Mon 31 Mar 2025 03:51:01 +0000
Manifest this update:     Mon 31 Mar 2025 03:46:01 +0000
Manifest next update:     Tue 01 Apr 2025 05:30:01 +0000
Files and hashes:         1: 34352e3136372e36382e302f32322d3234203d3e20323637393932.roa (hash: NgTXG4rvMoBk3BfyU8kYzgc6WlFWQyeaewh72K0JPPc=)
                          2: 1410B18CCA337433B73CA0533F1F503FDBB64BA7.crl (hash: RE1l8+0Nsw37KxES7TXK2GqXqgoLDsZAgl4fsNJJ6Rc=)
                          3: 323830343a353635383a3a2f33322d3438203d3e20323637393932.roa (hash: WizAb1mdKH1MLb3wgSn/eU+W4iqWsglrClMjfBre2kM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:01:c3:07:c4:4a:e9:e0:d6:6a:c0:20:7d:ce:53:58:6f:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
        Validity
            Not Before: Mar 31 03:46:01 2025 GMT
            Not After : Apr  1 05:30:01 2025 GMT
        Subject: CN=F87E1CA712267DDB5D3DF9DD4126B20A6C416184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:cd:c6:22:e0:d0:55:d5:33:20:c0:a1:3b:
                    c4:46:cd:db:35:8d:06:58:86:dd:ab:d7:38:81:30:
                    07:0d:ee:68:94:b9:6a:d5:b6:c9:ba:e9:c3:93:a2:
                    7b:6c:4b:9b:aa:ab:be:c9:6b:d1:d0:9e:7b:74:9a:
                    06:b4:38:96:9d:52:b7:1f:15:48:d9:16:de:47:8f:
                    2f:1f:54:15:0d:d6:2d:af:ca:93:28:0c:f8:73:9f:
                    bc:0f:e2:65:e8:59:79:2c:d3:76:88:fc:f7:19:20:
                    a7:44:6c:5a:97:81:1a:b4:62:39:55:1a:90:a7:6c:
                    ec:dc:7f:4d:b4:2e:48:d0:c0:5b:13:78:26:f9:a4:
                    4d:de:25:b9:c4:3e:7c:2c:07:96:aa:49:0d:33:97:
                    0b:5c:f9:87:ca:a1:bc:98:7c:ee:c0:b1:06:8a:a5:
                    96:15:b6:08:9e:34:8f:92:b8:5f:b5:6f:ba:a9:b6:
                    0c:8e:5c:03:ec:ea:3f:1a:c9:5b:71:9a:4c:6c:6a:
                    22:e4:39:a2:e0:bc:fd:57:c7:50:e6:80:58:e0:cb:
                    0e:6c:90:7b:8b:3e:53:64:a4:31:5b:a3:6e:3c:08:
                    9d:3e:36:55:ce:6c:a7:6d:b4:9d:4b:a9:1e:a0:8f:
                    6e:2c:98:75:2c:1f:ca:56:6b:0f:ce:ba:bf:11:85:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:1C:A7:12:26:7D:DB:5D:3D:F9:DD:41:26:B2:0A:6C:41:61:84
            X509v3 Authority Key Identifier:
                keyid:14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:85:e6:a9:b9:d6:17:2a:8d:c1:07:6d:58:c2:01:67:f5:a2:
         06:c0:4d:e2:3a:d8:6d:c4:20:e2:24:b9:ee:83:be:83:51:c2:
         2b:d8:2d:eb:db:47:59:85:6f:b8:9c:41:55:6d:e5:a3:46:8d:
         47:4e:5a:29:7e:39:f5:65:4b:cc:5b:78:5c:b4:19:51:b6:37:
         c1:1f:68:a3:97:3d:22:d6:0c:81:74:d4:9e:3c:94:1b:0e:65:
         b2:84:73:8e:84:4d:27:7a:04:53:6b:b9:26:e5:79:3e:82:90:
         73:6a:be:df:fd:fb:ad:01:f2:8c:89:b4:55:fc:21:8e:65:ce:
         63:7c:9e:a8:4d:2d:87:1e:f6:15:14:04:db:2e:b7:fe:13:3a:
         d9:04:94:03:a3:73:7c:1c:e1:f0:87:d0:68:e7:16:d5:a9:49:
         4c:04:b9:00:a4:8a:d0:3e:29:6b:5e:e1:f1:a3:5d:b4:d8:9c:
         e0:f3:b1:6f:dd:ec:2e:bf:4e:87:f0:eb:75:26:d6:19:a7:00:
         99:44:61:cb:60:4b:d5:16:2c:5f:2f:d4:d0:c5:24:3f:0a:09:
         8e:19:47:00:e6:34:7a:49:2c:8b:e4:b3:4a:5a:b3:6b:94:8e:
         1a:6c:9f:66:c0:a1:f2:61:49:0e:9a:16:71:a4:ea:13:d9:64:
         49:c2:02:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNc0BwwfESung1mrAIH3OU1hvrCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxMEIxOENDQTMzNzQzM0I3M0NBMDUzM0YxRjUwM0ZE
QkI2NEJBNzAeFw0yNTAzMzEwMzQ2MDFaFw0yNTA0MDEwNTMwMDFaMDMxMTAvBgNV
BAMTKEY4N0UxQ0E3MTIyNjdEREI1RDNERjlERDQxMjZCMjBBNkM0MTYxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvc3GIuDQVdUzIMChO8RGzds1
jQZYht2r1ziBMAcN7miUuWrVtsm66cOTontsS5uqq77Ja9HQnnt0mga0OJadUrcf
FUjZFt5Hjy8fVBUN1i2vypMoDPhzn7wP4mXoWXks03aI/PcZIKdEbFqXgRq0YjlV
GpCnbOzcf020LkjQwFsTeCb5pE3eJbnEPnwsB5aqSQ0zlwtc+YfKobyYfO7AsQaK
pZYVtgieNI+SuF+1b7qptgyOXAPs6j8ayVtxmkxsaiLkOaLgvP1Xx1DmgFjgyw5s
kHuLPlNkpDFbo248CJ0+NlXObKdttJ1LqR6gj24smHUsH8pWaw/Our8RhfdRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+H4cpxImfdtdPfndQSayCmxBYYQwHwYDVR0j
BBgwFoAUFBCxjMozdDO3PKBTPx9QP9u2S6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC8xNDEwQjE4Q0NBMzM3NDMzQjczQ0EwNTMzRjFGNTAzRkRCQjY0QkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTBCMThDQ0EzMzc0MzNC
NzNDQTA1MzNGMUY1MDNGREJCNjRCQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1bmEvMC8x
NDEwQjE4Q0NBMzM3NDMzQjczQ0EwNTMzRjFGNTAzRkRCQjY0QkE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB4XmqbnWFyqNwQdtWMIBZ/WiBsBN4jrYbcQg4iS57oO+g1HCK9gt69tHWYVv
uJxBVW3lo0aNR05aKX459WVLzFt4XLQZUbY3wR9oo5c9ItYMgXTUnjyUGw5lsoRz
joRNJ3oEU2u5JuV5PoKQc2q+3/37rQHyjIm0VfwhjmXOY3yeqE0thx72FRQE2y63
/hM62QSUA6NzfBzh8IfQaOcW1alJTAS5AKSK0D4pa17h8aNdtNic4POxb93sLr9O
h/DrdSbWGacAmURhy2BL1RYsXy/U0MUkPwoJjhlHAOY0ekksi+SzSlqza5SOGmyf
ZsCh8mFJDpoWcaTqE9lkScICDQ==
-----END CERTIFICATE-----