Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/B532A37324008D3704302290E34AC9467BF42EF7.mft
File:                     B532A37324008D3704302290E34AC9467BF42EF7.mft (raw, json)
Hash identifier:          Q8glYXnh1nGjbgwh4bhP06gLUIaiDI1hrlbe5QdTafU=
Subject key identifier:   07:6A:04:B7:F0:D8:63:5D:2F:C5:9F:61:54:2D:B4:B4:64:E8:67:98
Authority key identifier: B5:32:A3:73:24:00:8D:37:04:30:22:90:E3:4A:C9:46:7B:F4:2E:F7
Certificate issuer:       /CN=B532A37324008D3704302290E34AC9467BF42EF7
Certificate serial:       42AEC3DA1A050DA56BEA5457ABE7AB97E45706E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B532A37324008D3704302290E34AC9467BF42EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/B532A37324008D3704302290E34AC9467BF42EF7.mft
Manifest number:          8E
Signing time:             Tue 26 Jul 2022 03:50:00 +0000
Manifest this update:     Tue 26 Jul 2022 03:45:00 +0000
Manifest next update:     Wed 27 Jul 2022 03:59:00 +0000
Files and hashes:         1: B532A37324008D3704302290E34AC9467BF42EF7.crl (hash: +dTg4CVvMnUH20qwgpAqf0BxXURvDIRfKFinHbOLe3E=)
                          2: 3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (hash: xg9AlORvIJ/cYbEpez4fz4A1suJReyKh9edc/qdjDMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ae:c3:da:1a:05:0d:a5:6b:ea:54:57:ab:e7:ab:97:e4:57:06:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B532A37324008D3704302290E34AC9467BF42EF7
        Validity
            Not Before: Jul 26 03:45:00 2022 GMT
            Not After : Jul 27 03:59:00 2022 GMT
        Subject: CN=076A04B7F0D8635D2FC59F61542DB4B464E86798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:02:68:04:6c:f2:8e:80:ef:c0:7d:19:38:
                    0a:f5:54:4a:b4:7d:7a:c0:7c:58:e8:9b:70:3e:3f:
                    fd:a2:19:7d:55:c2:e4:a8:84:df:72:ab:2a:46:1a:
                    0d:c4:b6:00:92:54:d3:b4:a7:61:c5:49:bf:09:89:
                    ca:b9:56:20:a4:14:8f:ba:52:e2:a1:cf:8c:d8:8a:
                    54:2e:ed:8d:ba:80:9e:65:e3:b4:53:59:41:a6:ab:
                    2d:8f:0d:7c:db:ff:1b:f6:75:15:93:7b:db:61:d1:
                    6b:9a:0e:2e:d3:55:21:74:ac:2b:66:a2:5a:72:4b:
                    74:03:7f:05:82:25:f5:67:4c:7c:83:30:62:29:4c:
                    7b:62:b9:10:a1:70:5d:bb:be:dd:97:3b:33:d9:ac:
                    b5:13:b1:bc:b9:b2:49:65:aa:b7:c5:06:2e:de:7e:
                    ee:c0:b5:64:35:ee:7f:c5:ee:6c:6d:6b:cf:e1:b8:
                    ef:22:5b:ed:2d:0c:81:24:34:e3:82:d9:9f:79:a3:
                    c4:d9:d7:30:8a:5b:a8:39:ee:f7:42:bf:b9:53:c2:
                    5f:d7:01:79:bb:91:59:4b:ad:3b:fd:16:3c:93:48:
                    87:e1:a3:b1:7c:2f:8b:5a:bb:59:89:c1:23:24:00:
                    f0:d7:de:99:17:b3:fe:7b:60:e2:a5:eb:d6:1a:51:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:04:B7:F0:D8:63:5D:2F:C5:9F:61:54:2D:B4:B4:64:E8:67:98
            X509v3 Authority Key Identifier:
                keyid:B5:32:A3:73:24:00:8D:37:04:30:22:90:E3:4A:C9:46:7B:F4:2E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/B532A37324008D3704302290E34AC9467BF42EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B532A37324008D3704302290E34AC9467BF42EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/B532A37324008D3704302290E34AC9467BF42EF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:ad:ec:41:fd:55:6b:75:00:db:6a:00:7f:7b:d8:62:11:
         83:ee:d4:52:87:4e:64:35:1c:8d:a9:60:8d:fe:90:3f:64:c6:
         b0:37:1c:7e:3c:7d:1f:57:dd:8e:90:3b:97:37:e2:45:66:a4:
         e0:4e:46:37:1c:43:74:ec:df:16:09:40:3f:fe:15:c7:ca:44:
         14:57:aa:70:35:84:72:5a:c9:e2:f4:82:f3:8a:a7:11:29:19:
         97:8a:13:c7:d3:23:01:38:87:dc:d7:58:1e:bf:50:0b:02:5e:
         00:4f:8c:c3:49:15:df:34:0a:af:e0:b7:d0:d5:b1:23:8d:64:
         51:89:58:62:a9:06:8f:fa:27:c5:3b:62:09:ce:66:8b:78:01:
         82:7d:dc:31:15:52:82:5d:a1:5f:e9:2b:bd:42:16:67:4f:eb:
         75:24:f1:f2:10:05:e2:e8:da:27:af:e5:8b:42:6a:4d:e1:2b:
         d5:55:ef:32:26:25:9c:a5:1c:3e:74:a1:5d:43:cb:9f:46:ae:
         df:2a:f0:63:d7:cd:90:f4:48:29:19:53:88:78:29:33:c1:a0:
         e0:35:4d:e4:fc:c1:99:bf:a0:c0:a2:c2:d9:72:82:5c:5e:72:
         0c:7b:40:1c:62:ea:54:12:34:c3:f8:46:a2:e4:cd:19:bf:2a:
         a2:4b:a5:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQq7D2hoFDaVr6lRXq+erl+RXBuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUzMkEzNzMyNDAwOEQzNzA0MzAyMjkwRTM0QUM5NDY3
QkY0MkVGNzAeFw0yMjA3MjYwMzQ1MDBaFw0yMjA3MjcwMzU5MDBaMDMxMTAvBgNV
BAMTKDA3NkEwNEI3RjBEODYzNUQyRkM1OUY2MTU0MkRCNEI0NjRFODY3OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62AJoBGzyjoDvwH0ZOAr1VEq0
fXrAfFjom3A+P/2iGX1VwuSohN9yqypGGg3EtgCSVNO0p2HFSb8Jicq5ViCkFI+6
UuKhz4zYilQu7Y26gJ5l47RTWUGmqy2PDXzb/xv2dRWTe9th0WuaDi7TVSF0rCtm
olpyS3QDfwWCJfVnTHyDMGIpTHtiuRChcF27vt2XOzPZrLUTsby5skllqrfFBi7e
fu7AtWQ17n/F7mxta8/huO8iW+0tDIEkNOOC2Z95o8TZ1zCKW6g57vdCv7lTwl/X
AXm7kVlLrTv9FjyTSIfho7F8L4tau1mJwSMkAPDX3pkXs/57YOKl69YaUSe/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB2oEt/DYY10vxZ9hVC20tGToZ5gwHwYDVR0j
BBgwFoAUtTKjcyQAjTcEMCKQ40rJRnv0LvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3
V2YvMC9CNTMyQTM3MzI0MDA4RDM3MDQzMDIyOTBFMzRBQzk0NjdCRjQyRUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1MzJBMzczMjQwMDhEMzcw
NDMwMjI5MEUzNEFDOTQ2N0JGNDJFRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3V2YvMC9C
NTMyQTM3MzI0MDA4RDM3MDQzMDIyOTBFMzRBQzk0NjdCRjQyRUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAagCt7EH9VWt1ANtqAH972GIRg+7UUodOZDUcjalgjf6QP2TGsDccfjx9H1fd
jpA7lzfiRWak4E5GNxxDdOzfFglAP/4Vx8pEFFeqcDWEclrJ4vSC84qnESkZl4oT
x9MjATiH3NdYHr9QCwJeAE+Mw0kV3zQKr+C30NWxI41kUYlYYqkGj/onxTtiCc5m
i3gBgn3cMRVSgl2hX+krvUIWZ0/rdSTx8hAF4ujaJ6/li0JqTeEr1VXvMiYlnKUc
PnShXUPLn0au3yrwY9fNkPRIKRlTiHgpM8Gg4DVN5PzBmb+gwKLC2XKCXF5yDHtA
HGLqVBI0w/hGouTNGb8qokulnQ==
-----END CERTIFICATE-----