Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.mft
File:                     8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.mft (raw, json)
Hash identifier:          DOE+vWHV6YN0A88uwq4Yuj8D6g988cXZq4UcGVCZqDU=
Subject key identifier:   90:A3:CA:24:08:10:4F:7E:86:CF:7A:F3:D8:B8:85:17:27:17:21:B6
Authority key identifier: 8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53
Certificate issuer:       /CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
Certificate serial:       611F0ED280DA0A7B591EFEA30E000B969B9D2163
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.mft
Manifest number:          07
Signing time:             Sat 08 Apr 2023 17:05:52 +0000
Manifest this update:     Sat 08 Apr 2023 17:00:52 +0000
Manifest next update:     Sun 09 Apr 2023 19:14:52 +0000
Files and hashes:         1: 8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.crl (hash: YrgZOjFpAj/DcFwCjf6GV2mX9DHWppaJBY095TBGdnc=)
                          2: 3136382e3232382e302e302f32322d3332203d3e20323634383934.roa (hash: 54BprZyhMoVfafNdxQic59ZaDyYjpmZr1zpp+xEURGg=)
                          3: 323830343a326637633a3a2f33322d313238203d3e20323634383934.roa (hash: KzeN5PRVQ15T9WV+EjoxwiHzVuzTxb21lXsmTXuPPSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:0e:d2:80:da:0a:7b:59:1e:fe:a3:0e:00:0b:96:9b:9d:21:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53
        Validity
            Not Before: Apr  8 17:00:52 2023 GMT
            Not After : Apr  9 19:14:52 2023 GMT
        Subject: CN=90A3CA2408104F7E86CF7AF3D8B88517271721B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:a0:dd:85:33:02:94:3c:0f:7b:d1:f5:68:
                    74:3e:19:fc:96:a1:ae:32:61:0c:3a:8f:5a:06:09:
                    23:f6:57:f7:6a:b1:9d:25:13:71:75:3e:38:e0:8d:
                    e6:4c:fe:e3:f9:48:23:b3:80:9f:ff:7b:b2:d6:50:
                    7b:5e:b6:87:27:e7:dd:2f:15:28:10:35:91:87:e1:
                    79:09:bf:e6:57:80:2e:02:1b:c6:ca:93:c2:e3:9f:
                    3c:26:31:f0:fc:d0:16:51:1b:01:3b:8b:8a:7c:f4:
                    42:fb:72:a8:fe:7e:e4:93:7b:75:98:78:03:39:5f:
                    3f:eb:9a:3a:c3:4c:bf:1f:67:c7:72:24:61:24:a4:
                    9c:38:b4:de:71:36:6e:00:57:a4:42:26:39:b2:62:
                    cd:98:bf:25:7f:be:ee:07:49:c8:6a:4a:61:11:11:
                    37:c6:a8:6d:20:54:9a:8a:ab:fa:16:0d:1d:b1:5f:
                    36:7b:b2:0b:b5:55:29:42:01:80:2b:66:a1:c9:b7:
                    68:37:77:25:c6:e4:fd:14:ec:67:79:1a:48:8a:e2:
                    14:9f:1a:47:ab:08:66:97:73:81:09:e5:3c:9a:c3:
                    6b:24:a8:b4:c2:16:dc:96:ae:09:e2:34:82:94:5f:
                    d7:e7:1a:3a:6a:39:87:30:0a:60:ff:c4:00:89:5c:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A3:CA:24:08:10:4F:7E:86:CF:7A:F3:D8:B8:85:17:27:17:21:B6
            X509v3 Authority Key Identifier:
                keyid:8B:36:FE:55:A9:D7:FA:60:24:3F:74:A2:0F:15:ED:B4:DC:E0:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/0/8B36FE55A9D7FA60243F74A20F15EDB4DCE04B53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:ae:73:73:3e:93:25:cd:df:4f:ba:4b:65:e3:d0:15:35:
         01:7a:21:0b:5e:96:c1:db:83:79:f4:5a:2a:55:fa:05:a4:f3:
         d0:18:08:64:1b:8b:90:bd:35:fb:bf:c5:97:9c:7f:98:4a:51:
         f5:07:09:53:86:8e:d8:c8:a8:05:7b:f5:61:d1:88:e6:06:f6:
         e3:9c:3c:27:33:20:ef:56:ec:44:88:7f:76:1a:3e:06:bf:0f:
         12:ec:b6:f5:0b:81:da:1e:9b:b6:a2:c9:4c:2c:51:dd:8c:ca:
         43:6e:65:d8:c9:c2:bd:ae:fa:47:4a:44:ca:2d:8c:61:82:27:
         3f:6e:4b:22:90:f9:89:a6:df:81:2f:05:e3:58:58:1b:b3:51:
         43:21:90:08:cd:d3:0c:be:b2:a3:bf:91:72:c4:11:f4:2e:6e:
         22:4b:fe:cd:14:65:f4:13:0d:05:eb:ec:df:94:9a:47:71:a4:
         02:04:39:c9:63:fb:e5:75:40:66:1c:31:bc:65:a3:64:5f:d9:
         77:b3:7e:cb:e2:42:02:f3:e9:91:1d:11:c3:55:3e:a0:14:e5:
         1a:05:a1:8f:93:b7:62:65:d8:ba:3a:04:68:8b:c1:7d:1b:fe:
         a5:8a:af:69:b7:57:9c:2a:b7:c1:10:72:a4:40:db:f5:c8:d4:
         c4:28:1a:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYR8O0oDaCntZHv6jDgALlpudIWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzNkZFNTVBOUQ3RkE2MDI0M0Y3NEEyMEYxNUVEQjRE
Q0UwNEI1MzAeFw0yMzA0MDgxNzAwNTJaFw0yMzA0MDkxOTE0NTJaMDMxMTAvBgNV
BAMTKDkwQTNDQTI0MDgxMDRGN0U4NkNGN0FGM0Q4Qjg4NTE3MjcxNzIxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nKDdhTMClDwPe9H1aHQ+GfyW
oa4yYQw6j1oGCSP2V/dqsZ0lE3F1PjjgjeZM/uP5SCOzgJ//e7LWUHtetocn590v
FSgQNZGH4XkJv+ZXgC4CG8bKk8LjnzwmMfD80BZRGwE7i4p89EL7cqj+fuSTe3WY
eAM5Xz/rmjrDTL8fZ8dyJGEkpJw4tN5xNm4AV6RCJjmyYs2YvyV/vu4HSchqSmER
ETfGqG0gVJqKq/oWDR2xXzZ7sgu1VSlCAYArZqHJt2g3dyXG5P0U7Gd5GkiK4hSf
GkerCGaXc4EJ5Tyaw2skqLTCFtyWrgniNIKUX9fnGjpqOYcwCmD/xACJXLv9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkKPKJAgQT36Gz3rz2LiFFycXIbYwHwYDVR0j
BBgwFoAUizb+VanX+mAkP3SiDxXttNzgS1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlpHN2Zab054ZWFhcGVHWWdpVVQzV01iMTRGRG9xUm54d3VKektuN2Q0
MkgvMC84QjM2RkU1NUE5RDdGQTYwMjQzRjc0QTIwRjE1RURCNERDRTA0QjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCMzZGRTU1QTlEN0ZBNjAy
NDNGNzRBMjBGMTVFREI0RENFMDRCNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NlpHN2Zab054ZWFhcGVHWWdpVVQzV01iMTRGRG9xUm54d3VKektuN2Q0MkgvMC84
QjM2RkU1NUE5RDdGQTYwMjQzRjc0QTIwRjE1RURCNERDRTA0QjUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbTyuc3M+kyXN30+6S2Xj0BU1AXohC16WwduDefRaKlX6BaTz0BgIZBuLkL01
+7/Fl5x/mEpR9QcJU4aO2MioBXv1YdGI5gb245w8JzMg71bsRIh/dho+Br8PEuy2
9QuB2h6btqLJTCxR3YzKQ25l2MnCva76R0pEyi2MYYInP25LIpD5iabfgS8F41hY
G7NRQyGQCM3TDL6yo7+RcsQR9C5uIkv+zRRl9BMNBevs35SaR3GkAgQ5yWP75XVA
ZhwxvGWjZF/Zd7N+y+JCAvPpkR0Rw1U+oBTlGgWhj5O3YmXYujoEaIvBfRv+pYqv
abdXnCq3wRBypEDb9cjUxCgaBA==
-----END CERTIFICATE-----