Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft
File:                     1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft (raw, json)
Hash identifier:          UwMnmcHaw/XZeNbAZLPK2EBvE/BGQz7XwnuekgSIJa4=
Subject key identifier:   47:E6:CD:75:7E:86:CD:B5:84:10:54:34:F2:35:5B:D2:89:38:FB:64
Authority key identifier: 1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37
Certificate issuer:       /CN=1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437
Certificate serial:       24D0FB01655D84DD811A22FCE38E8A149C047636
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft
Manifest number:          03F9
Signing time:             Mon 15 Apr 2024 11:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 11:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 13:31:00 +0000
Files and hashes:         1: 3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (hash: 3ARM03ujc+THUoA3mLvbPyfyeK5KhRvZ8StNwMJ3NNY=)
                          2: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (hash: XCzU9BtPIOgwpvqAU3Wi9tfnKwhdSVi44TTREr0JMjg=)
                          3: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (hash: oxik5KcKFcRkfXOGEMpSdxJmtl29stNdemIWSKB1xNc=)
                          4: 1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.crl (hash: 6a3PrdUwed92xYEFb3BgrGLR5Wg0SGJP1oxHWa72vp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d0:fb:01:65:5d:84:dd:81:1a:22:fc:e3:8e:8a:14:9c:04:76:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437
        Validity
            Not Before: Apr 15 11:45:00 2024 GMT
            Not After : Apr 16 13:31:00 2024 GMT
        Subject: CN=47E6CD757E86CDB584105434F2355BD28938FB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:ec:fd:4a:8a:78:23:6b:17:50:1e:3a:fe:
                    13:a4:28:8d:79:11:7b:40:a9:29:7e:65:97:23:d8:
                    9e:ed:eb:ce:63:92:fa:bd:e6:43:20:c5:6f:a4:29:
                    e5:fe:e0:11:78:a1:3e:bf:49:be:85:7b:7a:91:4d:
                    18:09:c5:cd:3a:39:29:b3:d9:bc:00:bd:35:48:58:
                    45:01:cc:08:c2:37:e4:63:ca:57:8f:cd:6b:85:c7:
                    0f:e8:f7:7b:fa:54:57:26:d1:14:25:98:3c:01:52:
                    dd:58:c0:fe:a1:03:0e:79:f7:7b:5b:70:f6:8c:65:
                    8a:82:f3:65:72:83:28:cf:a4:57:2b:07:7d:e1:0d:
                    59:26:5d:fa:0a:73:08:44:70:bb:1f:8c:27:66:0e:
                    07:29:0e:41:1d:e5:a2:f6:ae:7f:be:24:5d:53:8c:
                    12:08:e4:48:c8:cb:7c:6c:c4:09:92:31:a5:aa:97:
                    14:ff:99:e3:45:e9:97:52:4f:a8:b0:26:f3:57:6d:
                    4b:00:23:0e:5f:93:aa:00:eb:6a:fc:88:13:d7:8c:
                    de:42:42:99:45:be:0e:07:b7:95:73:a8:e3:6c:86:
                    6e:1f:1e:b5:29:cc:39:13:96:a1:fb:de:bb:48:2a:
                    cf:7c:ad:09:f2:0e:af:f5:9e:2f:6f:f8:67:2c:58:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E6:CD:75:7E:86:CD:B5:84:10:54:34:F2:35:5B:D2:89:38:FB:64
            X509v3 Authority Key Identifier:
                keyid:1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:7f:73:22:34:f9:5a:66:ef:69:84:6a:2f:b9:28:68:f9:
         e1:d4:12:75:9c:2a:80:c3:8c:b2:5e:c2:44:6d:69:e8:b7:1b:
         00:7a:93:a5:46:6e:42:1d:8d:03:34:fa:08:d2:aa:dd:5d:d7:
         52:ad:a6:e9:43:86:05:e0:46:5c:22:59:69:0f:77:71:6e:4e:
         03:37:af:d8:b4:e8:77:e3:68:95:e3:1a:e4:8e:fd:99:15:a7:
         03:f9:49:c5:4c:39:f5:fa:11:3b:8e:f7:bd:a0:56:58:22:98:
         e3:9a:a4:9e:35:6f:19:66:43:09:d6:13:5b:3c:f4:2f:e7:9f:
         8f:40:7a:1f:d4:00:d3:96:a9:e7:ae:91:01:b9:6d:09:b1:ec:
         c3:e9:f9:c0:28:ac:b2:bb:43:34:82:96:2e:76:25:93:e3:36:
         bf:e0:7c:2c:bf:13:bd:e9:5f:d3:0a:d2:05:ab:68:88:e0:ef:
         b5:f3:7a:c1:ab:12:32:0c:d4:5a:04:b9:c4:c0:0a:bf:28:b2:
         9a:e8:d3:af:d3:3f:14:26:d8:9e:13:a9:81:3d:6f:db:38:1a:
         0a:34:78:33:74:8d:89:bb:b0:e2:88:c3:74:a4:c2:eb:f2:f1:
         23:1c:db:21:2e:39:9a:0c:59:07:fb:2d:76:33:e3:1c:15:23:
         53:b9:a0:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJND7AWVdhN2BGiL8446KFJwEdjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJFQzc2MjlDN0ZBQUZCNEM4Rjc4NzREMUE2QkJDMEEy
ODJENDQzNzAeFw0yNDA0MTUxMTQ1MDBaFw0yNDA0MTYxMzMxMDBaMDMxMTAvBgNV
BAMTKDQ3RTZDRDc1N0U4NkNEQjU4NDEwNTQzNEYyMzU1QkQyODkzOEZCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Sez9Sop4I2sXUB46/hOkKI15
EXtAqSl+ZZcj2J7t685jkvq95kMgxW+kKeX+4BF4oT6/Sb6Fe3qRTRgJxc06OSmz
2bwAvTVIWEUBzAjCN+RjylePzWuFxw/o93v6VFcm0RQlmDwBUt1YwP6hAw5593tb
cPaMZYqC82VygyjPpFcrB33hDVkmXfoKcwhEcLsfjCdmDgcpDkEd5aL2rn++JF1T
jBII5EjIy3xsxAmSMaWqlxT/meNF6ZdST6iwJvNXbUsAIw5fk6oA62r8iBPXjN5C
QplFvg4Ht5VzqONshm4fHrUpzDkTlqH73rtIKs98rQnyDq/1ni9v+GcsWFJNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR+bNdX6GzbWEEFQ08jVb0ok4+2QwHwYDVR0j
BBgwFoAUG+x2Kcf6r7TI94dNGmu8CigtRDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1
RkovMC8xQkVDNzYyOUM3RkFBRkI0QzhGNzg3NEQxQTZCQkMwQTI4MkQ0NDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCRUM3NjI5QzdGQUFGQjRD
OEY3ODc0RDFBNkJCQzBBMjgyRDQ0MzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1RkovMC8x
QkVDNzYyOUM3RkFBRkI0QzhGNzg3NEQxQTZCQkMwQTI4MkQ0NDM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFM9/cyI0+Vpm72mEai+5KGj54dQSdZwqgMOMsl7CRG1p6LcbAHqTpUZuQh2N
AzT6CNKq3V3XUq2m6UOGBeBGXCJZaQ93cW5OAzev2LTod+NoleMa5I79mRWnA/lJ
xUw59foRO473vaBWWCKY45qknjVvGWZDCdYTWzz0L+efj0B6H9QA05ap566RAblt
CbHsw+n5wCissrtDNIKWLnYlk+M2v+B8LL8Tvelf0wrSBatoiODvtfN6wasSMgzU
WgS5xMAKvyiymujTr9M/FCbYnhOpgT1v2zgaCjR4M3SNibuw4ojDdKTC6/LxIxzb
IS45mgxZB/stdjPjHBUjU7mgFA==
-----END CERTIFICATE-----