Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
File:                     DBA87B52C08D64387CF846B996B53360B65F2B90.mft (raw, json)
Hash identifier:          JIQYPkOfFxJdpa0akWD0dgo8YUfAjsPEojtjPeY2pQk=
Subject key identifier:   7D:13:06:B6:16:88:D4:84:41:B6:A0:AE:10:A4:8B:FE:EF:9A:B1:16
Authority key identifier: DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90
Certificate issuer:       /CN=DBA87B52C08D64387CF846B996B53360B65F2B90
Certificate serial:       18DA85A8B4F2D1472947239060AF3A2BFB5E9B1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
Manifest number:          01F9
Signing time:             Wed 17 Jan 2024 18:24:58 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:58 +0000
Manifest next update:     Thu 18 Jan 2024 21:15:58 +0000
Files and hashes:         1: DBA87B52C08D64387CF846B996B53360B65F2B90.crl (hash: v+kVslV1nKop8e0XClHb0QMpxfU8S+oI/xndotKgwOQ=)
                          2: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (hash: myyavwzl5m9NizSjgcyzEoGAqvIM5HsG4SPQdX5y84k=)
                          3: 323830343a353839383a3a2f33322d3335203d3e20323638313338.roa (hash: bxZaCPDQG7DvTjm8LJwhwpWOYar/qZyzUZ+CdZF5w7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:85:a8:b4:f2:d1:47:29:47:23:90:60:af:3a:2b:fb:5e:9b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA87B52C08D64387CF846B996B53360B65F2B90
        Validity
            Not Before: Jan 17 18:19:58 2024 GMT
            Not After : Jan 18 21:15:58 2024 GMT
        Subject: CN=7D1306B61688D48441B6A0AE10A48BFEEF9AB116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:53:62:d1:c8:86:43:43:e3:7b:4d:81:44:
                    79:07:ea:1d:4c:2c:35:f8:30:fa:eb:b6:5d:6a:06:
                    4c:39:c4:1f:1c:9e:5b:ba:bf:88:e9:5e:6e:9d:d9:
                    3b:d8:e7:b7:7b:ee:f7:70:ab:83:15:14:4f:bf:f4:
                    7f:f6:a2:8c:9d:45:fe:1a:64:3e:51:6b:41:25:a1:
                    23:3d:58:65:73:06:59:81:ec:78:c6:8c:57:bc:df:
                    91:67:8b:c0:9b:12:db:82:71:c6:7f:0a:54:83:31:
                    26:97:83:07:07:c7:32:2f:8c:24:04:75:39:18:23:
                    4d:2d:e8:43:0b:b8:9b:c0:18:42:25:f3:7c:19:2f:
                    8c:03:16:8c:d0:a8:92:76:0b:d5:78:47:02:0d:1f:
                    a9:f4:6c:3f:e3:97:04:a6:d6:20:7b:f5:2f:74:b2:
                    87:b8:66:fd:df:81:a2:09:27:6c:cb:46:47:f2:11:
                    20:ea:aa:61:b0:d2:92:2b:a9:cc:bc:1b:68:11:b4:
                    a0:c6:2c:33:8e:bf:69:c6:48:46:3d:0c:d1:71:f7:
                    fe:be:20:90:de:68:2b:3f:7b:4d:3b:84:8f:b1:27:
                    a1:23:98:45:45:4c:d6:b3:f6:87:d1:c3:2f:7c:79:
                    f2:45:ea:c8:91:16:61:16:07:72:98:58:37:63:c2:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:13:06:B6:16:88:D4:84:41:B6:A0:AE:10:A4:8B:FE:EF:9A:B1:16
            X509v3 Authority Key Identifier:
                keyid:DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:82:2f:e2:24:04:eb:a6:b7:30:82:b0:75:1d:88:68:ac:e9:
         42:0b:36:9f:6b:e9:b1:f0:06:18:da:ad:5b:27:27:97:73:ee:
         37:a6:9d:85:87:2b:a1:ec:48:4d:fe:f4:7f:39:0e:41:a7:db:
         4f:d5:26:73:ac:97:6c:49:3b:c2:6b:4a:a1:15:79:dc:8f:4e:
         4b:0d:44:15:a3:d4:1c:fa:4a:a7:ad:3c:11:a3:18:19:88:f7:
         51:3d:cd:b0:73:74:8b:21:a1:cc:1e:e3:33:6f:5a:03:64:64:
         f3:04:f4:33:1a:49:21:52:c8:f3:9c:59:7f:21:d0:ec:bc:95:
         92:d6:6b:47:17:46:94:bc:82:4f:e1:16:39:a4:37:e1:a6:d3:
         a1:20:40:4c:c3:21:2a:0d:dd:6c:33:a7:f6:d9:4f:9b:bb:d5:
         62:45:7c:f1:e1:1b:50:b8:09:6d:97:a2:59:9f:c0:2a:9c:2c:
         ee:e2:30:31:0a:e0:36:f7:9c:5f:b8:bf:b3:0f:09:6b:82:53:
         0c:1c:c2:23:f9:55:90:c0:aa:56:fd:02:61:91:17:a1:c4:85:
         16:7a:3b:26:e8:39:97:82:d1:c6:b2:37:a7:17:9f:66:3b:1a:
         17:2d:d7:4a:a0:a7:35:13:c7:29:e8:99:6a:5a:40:e7:91:dd:
         23:1b:d0:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGNqFqLTy0UcpRyOQYK86K/temxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBODdCNTJDMDhENjQzODdDRjg0NkI5OTZCNTMzNjBC
NjVGMkI5MDAeFw0yNDAxMTcxODE5NThaFw0yNDAxMTgyMTE1NThaMDMxMTAvBgNV
BAMTKDdEMTMwNkI2MTY4OEQ0ODQ0MUI2QTBBRTEwQTQ4QkZFRUY5QUIxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTylNi0ciGQ0Pje02BRHkH6h1M
LDX4MPrrtl1qBkw5xB8cnlu6v4jpXm6d2TvY57d77vdwq4MVFE+/9H/2ooydRf4a
ZD5Ra0EloSM9WGVzBlmB7HjGjFe835Fni8CbEtuCccZ/ClSDMSaXgwcHxzIvjCQE
dTkYI00t6EMLuJvAGEIl83wZL4wDFozQqJJ2C9V4RwINH6n0bD/jlwSm1iB79S90
soe4Zv3fgaIJJ2zLRkfyESDqqmGw0pIrqcy8G2gRtKDGLDOOv2nGSEY9DNFx9/6+
IJDeaCs/e007hI+xJ6EjmEVFTNaz9ofRwy98efJF6siRFmEWB3KYWDdjwlKBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfRMGthaI1IRBtqCuEKSL/u+asRYwHwYDVR0j
BBgwFoAU26h7UsCNZDh8+Ea5lrUzYLZfK5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oy
aFMvMC9EQkE4N0I1MkMwOEQ2NDM4N0NGODQ2Qjk5NkI1MzM2MEI2NUYyQjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQTg3QjUyQzA4RDY0Mzg3
Q0Y4NDZCOTk2QjUzMzYwQjY1RjJCOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oyaFMvMC9E
QkE4N0I1MkMwOEQ2NDM4N0NGODQ2Qjk5NkI1MzM2MEI2NUYyQjkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALIIv4iQE66a3MIKwdR2IaKzpQgs2n2vpsfAGGNqtWycnl3PuN6adhYcroexI
Tf70fzkOQafbT9Umc6yXbEk7wmtKoRV53I9OSw1EFaPUHPpKp608EaMYGYj3UT3N
sHN0iyGhzB7jM29aA2Rk8wT0MxpJIVLI85xZfyHQ7LyVktZrRxdGlLyCT+EWOaQ3
4abToSBATMMhKg3dbDOn9tlPm7vVYkV88eEbULgJbZeiWZ/AKpws7uIwMQrgNvec
X7i/sw8Ja4JTDBzCI/lVkMCqVv0CYZEXocSFFno7Jug5l4LRxrI3pxefZjsaFy3X
SqCnNRPHKeiZalpA55HdIxvQRA==
-----END CERTIFICATE-----