Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft
File:                     7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft (raw, json)
Hash identifier:          UJ+Cm6EWV6HlQmvkP6q4G1QLFvBRlh29cs4TgIBbgoc=
Subject key identifier:   68:12:87:78:0B:F8:9E:15:44:28:D0:B8:52:1D:16:4D:FA:65:D7:6E
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       7002C31379CD5F37EA653B97889D08FB430BC48A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft
Manifest number:          02D8
Signing time:             Mon 15 Apr 2024 00:52:51 +0000
Manifest this update:     Mon 15 Apr 2024 00:47:51 +0000
Manifest next update:     Tue 16 Apr 2024 01:00:51 +0000
Files and hashes:         1: 34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa (hash: Y83ZpvjmoZEtnpT0HByHQ81TXiV5mpRQJCNhmQO4cFo=)
                          2: 34352e3139312e3235322e302f32342d3234203d3e20323639363939.roa (hash: Xer/OPuGuisltrFtMfhdsM6wCG9gDCm+w9Kxp9S++tY=)
                          3: 323830343a363838383a3a2f33322d3332203d3e20323639363939.roa (hash: Rtv/wGOhkdmzqO+uXtN7hEwLWzM+/95J9KW/Z5IqtEU=)
                          4: 34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa (hash: mS3iPbi33r6wwQOKVdvhAwizO1cQTFo4XBOzGzT1VjI=)
                          5: 34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa (hash: HPYvmFwEW/ZNQEOjUviByM0KncK3S3zCGlJtJAQJUXA=)
                          6: 34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa (hash: XWBLbYj9Iw/M3hRrniB1Q08wm0diLAuxLSDwf7MsPGE=)
                          7: 7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl (hash: MO0B7/yaDkaHMWeG1sFQ1ZWEEfkZ0jER7VnjHZscdgA=)
                          8: 34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa (hash: DE273K5d9PSaMXpnyqJk7dr1abYGF6JfTYPJB0yGyXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:02:c3:13:79:cd:5f:37:ea:65:3b:97:88:9d:08:fb:43:0b:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Apr 15 00:47:51 2024 GMT
            Not After : Apr 16 01:00:51 2024 GMT
        Subject: CN=681287780BF89E154428D0B8521D164DFA65D76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:a2:dc:02:3d:99:00:f4:0d:70:b2:b7:1a:
                    82:0b:18:cc:5a:74:07:0e:c3:83:af:4b:30:1e:b4:
                    22:10:ae:41:51:14:1f:3b:81:bd:6b:a1:c1:f7:36:
                    8d:65:c7:93:27:36:9f:ef:57:97:82:6d:47:02:33:
                    f0:f1:9b:c5:c6:d4:f7:ba:5b:4c:40:52:ea:d6:da:
                    d6:42:f3:1f:60:1e:8a:dd:b2:53:f9:ce:59:56:a9:
                    05:f8:95:b2:8a:33:68:76:62:d7:ac:49:76:64:ca:
                    de:ac:e0:fd:3f:e7:d9:87:f3:51:b8:73:e6:be:b8:
                    d2:92:25:bd:0b:5f:38:3e:39:62:f5:c2:48:86:40:
                    48:4f:18:11:40:fb:20:98:11:b7:0a:08:c4:d9:04:
                    0a:f9:4f:ed:54:33:7a:d3:b8:d8:c5:24:92:e7:4b:
                    7b:66:f5:df:6a:25:e3:fa:34:6c:88:fe:11:f7:28:
                    2b:91:e9:03:62:46:ac:46:79:fa:7d:e7:7c:6a:6e:
                    be:73:5f:8b:50:eb:83:ee:a0:65:98:41:cb:66:52:
                    85:61:63:60:31:19:c3:a5:f9:35:2a:3c:19:8d:5d:
                    72:b0:28:d1:22:de:5d:67:9c:94:fb:38:3c:fd:1b:
                    77:e8:7f:20:0f:ae:cb:cd:5a:79:08:b5:c9:a8:64:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:12:87:78:0B:F8:9E:15:44:28:D0:B8:52:1D:16:4D:FA:65:D7:6E
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:ed:0b:ce:8e:ab:63:d4:59:47:04:7e:78:70:f7:9d:45:
         99:a5:16:5c:f6:bb:6d:f4:c8:a7:7e:a3:24:cf:fc:4d:df:86:
         97:59:f7:66:12:c8:9e:9d:32:57:d5:d1:0a:44:08:70:ac:5a:
         eb:4a:ed:34:f7:55:18:62:5d:82:8e:10:c5:9e:da:cb:88:b3:
         fd:7a:31:de:51:4d:d1:9c:ea:d8:fa:f5:0b:e5:ee:a6:3a:12:
         d9:d3:32:8f:81:ca:ea:f6:57:f1:31:57:fd:01:5f:2e:c5:5f:
         d8:cd:db:f1:50:b7:a1:8f:a3:5f:a9:e7:fd:99:92:a7:cd:b0:
         4a:fe:71:3a:59:b5:0e:bf:69:46:36:ee:20:c8:fa:39:ba:24:
         db:ee:61:da:5d:4e:76:81:04:f1:0b:f8:de:37:50:91:0f:f0:
         df:37:a4:37:a5:d8:57:f4:58:f4:5b:31:cb:f3:fa:63:50:12:
         4a:c4:15:53:ce:18:1f:1d:10:45:c4:a5:c3:16:6d:ef:70:a6:
         13:d7:04:fd:d2:66:7b:8b:5b:3b:cf:95:89:c3:93:53:c2:79:
         47:13:2b:e8:66:e3:75:29:c8:ea:73:79:30:70:3e:d7:36:6c:
         31:bb:48:51:75:b9:d8:b0:64:53:eb:b8:6f:0f:37:29:b3:64:
         98:e1:6a:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcALDE3nNXzfqZTuXiJ0I+0MLxIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU4N0Y1OTdDOUMxRTIyMzI4NjdENkYxRjJDMkI1NzAz
RjcxNTBEMTAeFw0yNDA0MTUwMDQ3NTFaFw0yNDA0MTYwMTAwNTFaMDMxMTAvBgNV
BAMTKDY4MTI4Nzc4MEJGODlFMTU0NDI4RDBCODUyMUQxNjRERkE2NUQ3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxKLcAj2ZAPQNcLK3GoILGMxa
dAcOw4OvSzAetCIQrkFRFB87gb1rocH3No1lx5MnNp/vV5eCbUcCM/Dxm8XG1Pe6
W0xAUurW2tZC8x9gHordslP5zllWqQX4lbKKM2h2YtesSXZkyt6s4P0/59mH81G4
c+a+uNKSJb0LXzg+OWL1wkiGQEhPGBFA+yCYEbcKCMTZBAr5T+1UM3rTuNjFJJLn
S3tm9d9qJeP6NGyI/hH3KCuR6QNiRqxGefp953xqbr5zX4tQ64PuoGWYQctmUoVh
Y2AxGcOl+TUqPBmNXXKwKNEi3l1nnJT7ODz9G3fofyAPrsvNWnkItcmoZPFbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaBKHeAv4nhVEKNC4Uh0WTfpl124wHwYDVR0j
BBgwFoAUdYf1l8nB4iMoZ9bx8sK1cD9xUNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS
YnYvMC83NTg3RjU5N0M5QzFFMjIzMjg2N0Q2RjFGMkMyQjU3MDNGNzE1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1ODdGNTk3QzlDMUUyMjMy
ODY3RDZGMUYyQzJCNTcwM0Y3MTUwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC83
NTg3RjU5N0M5QzFFMjIzMjg2N0Q2RjFGMkMyQjU3MDNGNzE1MEQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANwztC86Oq2PUWUcEfnhw951FmaUWXPa7bfTIp36jJM/8Td+Gl1n3ZhLInp0y
V9XRCkQIcKxa60rtNPdVGGJdgo4QxZ7ay4iz/Xox3lFN0Zzq2Pr1C+XupjoS2dMy
j4HK6vZX8TFX/QFfLsVf2M3b8VC3oY+jX6nn/ZmSp82wSv5xOlm1Dr9pRjbuIMj6
Obok2+5h2l1OdoEE8Qv43jdQkQ/w3zekN6XYV/RY9Fsxy/P6Y1ASSsQVU84YHx0Q
RcSlwxZt73CmE9cE/dJme4tbO8+VicOTU8J5RxMr6GbjdSnI6nN5MHA+1zZsMbtI
UXW52LBkU+u4bw83KbNkmOFqtA==
-----END CERTIFICATE-----