Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft
File:                     42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft (raw, json)
Hash identifier:          GlE7l41kmN9PJ9ejEM858aSKBaj912cJwWHalgnNDJw=
Subject key identifier:   8F:99:B5:58:87:11:11:73:8F:F2:CC:23:84:B9:50:B8:B1:BF:53:09
Authority key identifier: 42:25:6C:AB:31:D7:AC:E6:89:6E:4C:40:67:54:51:BA:B7:B8:2C:B8
Certificate issuer:       /CN=42256CAB31D7ACE6896E4C40675451BAB7B82CB8
Certificate serial:       2F355A9F75BCCBB76F6E4B7CECD360EA2205257D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft
Manifest number:          10
Signing time:             Thu 16 Mar 2023 10:46:31 +0000
Manifest this update:     Thu 16 Mar 2023 10:41:31 +0000
Manifest next update:     Fri 17 Mar 2023 12:17:31 +0000
Files and hashes:         1: 42256CAB31D7ACE6896E4C40675451BAB7B82CB8.crl (hash: 21dz0PrHSTxUO4+EX8tH088ZHrTIkY/3tIjO5JLvc8M=)
                          2: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (hash: hmpFjl8M/C/75T/s8kOVn0zWwoYw42kRhrMYjp9RKuk=)
                          3: 323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (hash: 80uFCNUG++H3U8rIYoCYQhGnEeTZa30KiZ+S2r5AjCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:5a:9f:75:bc:cb:b7:6f:6e:4b:7c:ec:d3:60:ea:22:05:25:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42256CAB31D7ACE6896E4C40675451BAB7B82CB8
        Validity
            Not Before: Mar 16 10:41:31 2023 GMT
            Not After : Mar 17 12:17:31 2023 GMT
        Subject: CN=8F99B558871111738FF2CC2384B950B8B1BF5309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:3f:26:69:ef:fc:c6:38:f4:e8:e4:4d:33:
                    e1:28:f8:4b:94:f5:82:3f:80:7c:2c:1d:8f:26:b2:
                    bb:af:dc:eb:79:66:3e:06:cf:6a:3d:6b:40:77:37:
                    10:19:1c:be:22:e2:a6:9c:ed:56:6f:32:cf:64:9a:
                    34:85:f8:d5:d4:5f:fe:05:07:8e:89:14:de:61:b2:
                    78:ce:04:7c:24:e6:c0:51:e3:eb:62:fe:3e:a4:73:
                    93:26:16:5f:48:d9:fe:a8:7e:f8:0f:42:fd:40:cd:
                    e6:4b:d3:4f:17:e2:cd:67:fe:cd:0c:c8:d6:da:42:
                    80:bb:63:f9:e0:a1:c8:ce:86:b1:a8:8a:e1:64:a5:
                    a4:03:e9:a9:49:b6:55:ed:ac:25:1d:8b:fc:aa:11:
                    44:59:f7:cb:46:2e:da:63:a1:43:da:ec:aa:a1:62:
                    ef:f8:ac:06:6c:5d:2b:a5:1a:cb:f3:cb:4d:b1:1f:
                    6c:cc:ec:c9:b1:25:b3:0d:79:c3:9e:03:61:0d:6a:
                    62:db:bd:97:ec:c1:07:cb:e2:1b:00:39:b2:f8:6f:
                    62:4e:a2:0e:72:33:b6:3e:9b:75:95:e6:fd:24:37:
                    76:cd:d7:d8:d9:97:ad:cb:74:7e:dc:40:16:77:a1:
                    db:a2:c3:65:3a:d8:f5:40:c4:9f:06:d1:57:e2:08:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:B5:58:87:11:11:73:8F:F2:CC:23:84:B9:50:B8:B1:BF:53:09
            X509v3 Authority Key Identifier:
                keyid:42:25:6C:AB:31:D7:AC:E6:89:6E:4C:40:67:54:51:BA:B7:B8:2C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/42256CAB31D7ACE6896E4C40675451BAB7B82CB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d6:fb:08:7b:89:1b:76:c2:29:b9:79:a2:7c:dd:77:c9:84:
         b9:e0:cb:49:1a:a4:7d:04:20:7d:59:72:d0:71:01:99:5d:ee:
         07:0f:d9:0f:1d:1f:53:2d:c4:ef:16:55:64:a3:ce:4a:8e:32:
         15:c8:21:c7:16:f0:ea:0f:93:70:c6:3a:56:52:97:bb:5f:1f:
         85:b2:7a:dc:d6:24:fc:37:0d:ac:06:04:f0:d1:3f:33:48:66:
         73:78:0e:9d:63:c3:6e:4c:83:57:23:9c:d9:e6:c4:69:df:ab:
         7a:ed:65:47:a8:21:ca:5a:41:1f:fa:d0:3d:98:4a:0e:15:8a:
         de:66:a1:67:1d:35:60:89:0e:0d:fb:e3:b2:53:ca:06:1c:e1:
         15:8e:ff:34:40:77:45:cd:a8:91:26:76:7e:03:2c:b2:3e:01:
         ef:ae:89:fa:fa:0a:15:b5:f7:af:97:4b:0b:16:85:a0:72:ee:
         fe:0e:3c:b9:a0:82:43:25:59:3e:ec:fa:c3:3c:1e:6b:d0:c5:
         d4:ac:df:14:1d:09:8e:ef:de:e3:b6:79:0e:1a:79:92:38:3c:
         70:71:81:50:8b:a4:17:7e:ab:55:be:0e:2e:00:ee:63:42:3d:
         73:e9:9f:94:18:6b:49:ce:14:1e:1e:96:a2:af:56:00:aa:f8:
         8b:56:1d:de
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIULzVan3W8y7dvbkt87NNg6iIFJX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIyNTZDQUIzMUQ3QUNFNjg5NkU0QzQwNjc1NDUxQkFC
N0I4MkNCODAeFw0yMzAzMTYxMDQxMzFaFw0yMzAzMTcxMjE3MzFaMDMxMTAvBgNV
BAMTKDhGOTlCNTU4ODcxMTExNzM4RkYyQ0MyMzg0Qjk1MEI4QjFCRjUzMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uz8mae/8xjj06ORNM+Eo+EuU
9YI/gHwsHY8msruv3Ot5Zj4Gz2o9a0B3NxAZHL4i4qac7VZvMs9kmjSF+NXUX/4F
B46JFN5hsnjOBHwk5sBR4+ti/j6kc5MmFl9I2f6ofvgPQv1AzeZL008X4s1n/s0M
yNbaQoC7Y/ngocjOhrGoiuFkpaQD6alJtlXtrCUdi/yqEURZ98tGLtpjoUPa7Kqh
Yu/4rAZsXSulGsvzy02xH2zM7MmxJbMNecOeA2ENamLbvZfswQfL4hsAObL4b2JO
og5yM7Y+m3WV5v0kN3bN19jZl63LdH7cQBZ3oduiw2U62PVAxJ8G0VfiCCmVAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUj5m1WIcREXOP8swjhLlQuLG/UwkwHwYDVR0j
BBgwFoAUQiVsqzHXrOaJbkxAZ1RRure4LLgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI
LzEvNDIyNTZDQUIzMUQ3QUNFNjg5NkU0QzQwNjc1NDUxQkFCN0I4MkNCOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80MjI1NkNBQjMxRDdBQ0U2ODk2
RTRDNDA2NzU0NTFCQUI3QjgyQ0I4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hl
SFlXaFFHSjVNUGpFWnVadHBYQXVZdDRTMWJrSk5Mb2laeTNrb1htc0gvMS80MjI1
NkNBQjMxRDdBQ0U2ODk2RTRDNDA2NzU0NTFCQUI3QjgyQ0I4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ydb7CHuJG3bCKbl5onzdd8mEueDLSRqkfQQgfVly0HEBmV3uBw/ZDx0fUy3E7xZV
ZKPOSo4yFcghxxbw6g+TcMY6VlKXu18fhbJ63NYk/DcNrAYE8NE/M0hmc3gOnWPD
bkyDVyOc2ebEad+reu1lR6ghylpBH/rQPZhKDhWK3mahZx01YIkODfvjslPKBhzh
FY7/NEB3Rc2okSZ2fgMssj4B766J+voKFbX3r5dLCxaFoHLu/g48uaCCQyVZPuz6
wzwea9DF1KzfFB0Jju/e47Z5Dhp5kjg8cHGBUIukF36rVb4OLgDuY0I9c+mflBhr
Sc4UHh6Woq9WAKr4i1Yd3g==
-----END CERTIFICATE-----