Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft
File:                     971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft (raw, json)
Hash identifier:          4l3uajQflxMz5e98FSoJIJ9CI4b5Lxe9OGllrBfG1rU=
Subject key identifier:   CD:17:DE:1A:81:A6:89:54:6F:BF:87:04:D1:62:CE:86:DB:E7:18:5D
Authority key identifier: 97:1C:A7:9E:35:12:08:1B:73:9C:C0:A5:6B:10:F3:47:ED:F9:FF:E9
Certificate issuer:       /CN=971CA79E3512081B739CC0A56B10F347EDF9FFE9
Certificate serial:       7E1B8AD2DA9FA63752C81C535073497E336B8D0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft
Manifest number:          01F8
Signing time:             Mon 15 Apr 2024 09:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:41 +0000
Manifest next update:     Tue 16 Apr 2024 11:00:41 +0000
Files and hashes:         1: 323830343a376561633a3a2f33322d313238203d3e20323731363339.roa (hash: WplwB1k7DeEQFarvNUJJhTRDw59qBqmFslcgY/R/234=)
                          2: 3137372e38362e3135322e302f32322d3332203d3e20323731363339.roa (hash: s0vZDV79kgwr6QHx1gvo3Kyda2ByLslvkUUOdgX6XeY=)
                          3: 971CA79E3512081B739CC0A56B10F347EDF9FFE9.crl (hash: 2lRvn/bEqURLsjaSpHBAU11n63K8uDTreHQDFcdqf+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1b:8a:d2:da:9f:a6:37:52:c8:1c:53:50:73:49:7e:33:6b:8d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971CA79E3512081B739CC0A56B10F347EDF9FFE9
        Validity
            Not Before: Apr 15 09:16:41 2024 GMT
            Not After : Apr 16 11:00:41 2024 GMT
        Subject: CN=CD17DE1A81A689546FBF8704D162CE86DBE7185D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:57:09:f8:e7:f4:e5:5f:5b:9d:26:73:68:
                    73:28:cb:fc:78:8b:3d:ef:6b:e1:ff:b5:65:f3:89:
                    48:ff:4e:04:f8:be:16:e9:c8:12:06:51:c9:d1:94:
                    ae:9e:e3:58:8a:9a:e1:74:3f:36:c6:4b:4f:58:d6:
                    02:9c:e6:43:66:65:12:ba:a5:f4:c3:55:9b:74:e3:
                    81:29:7b:37:d8:68:97:07:82:d8:13:b5:b4:a0:8d:
                    8f:bb:87:57:c8:e5:d1:8f:95:0d:60:b8:d1:04:e6:
                    46:dc:52:ef:76:e4:0c:22:0b:cc:85:d9:27:72:4e:
                    ae:20:81:c8:7c:2a:25:86:7e:c1:66:13:56:a5:36:
                    fe:8a:b8:36:1f:58:f0:50:cc:23:e9:23:29:10:dd:
                    a8:7d:d2:d7:85:bf:a7:fe:2b:17:3d:6b:42:5e:d4:
                    05:37:3c:c7:51:51:11:af:2b:5b:c7:7f:a4:9b:dd:
                    84:35:1d:ca:2b:a5:ee:9e:1a:76:b5:5c:fe:cf:3e:
                    05:f1:a7:ab:50:e8:2a:1d:1f:cf:10:bc:a9:29:f9:
                    48:df:67:fb:f1:a7:e0:50:d3:69:38:55:21:be:2a:
                    20:be:dc:55:68:e3:e5:89:ec:61:c9:6c:b9:c9:fc:
                    17:2f:81:67:2d:b6:e6:aa:e2:32:38:b1:0a:63:04:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:DE:1A:81:A6:89:54:6F:BF:87:04:D1:62:CE:86:DB:E7:18:5D
            X509v3 Authority Key Identifier:
                keyid:97:1C:A7:9E:35:12:08:1B:73:9C:C0:A5:6B:10:F3:47:ED:F9:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:c7:a7:dd:b2:9f:52:ec:0b:46:9d:a8:bd:21:60:61:ce:b4:
         80:86:1a:01:01:7d:95:db:46:e5:4a:66:c9:5b:2e:a8:f8:1a:
         bc:fc:58:7a:48:42:c0:f7:29:36:a1:0a:d2:fc:3d:6c:87:04:
         34:c5:60:5b:b1:ac:2b:2a:e4:2b:32:19:d3:52:5f:ff:b6:17:
         1d:ca:b5:f9:ca:41:19:cf:0e:67:69:34:56:f2:0c:8a:86:04:
         d7:82:65:e7:40:c7:8c:db:16:b9:a1:37:17:64:02:a0:ae:78:
         65:07:ab:fc:c6:76:c0:46:6b:26:44:2d:0c:93:c5:66:20:71:
         56:47:f0:2e:6c:44:77:7f:43:ad:5c:80:62:30:f1:bf:01:5f:
         43:08:72:87:79:5a:c9:57:a2:4e:24:f7:9e:23:39:cc:c2:74:
         29:35:3c:6f:7e:23:20:40:5b:47:88:bc:b7:c5:fb:d1:55:7a:
         45:95:63:f9:4c:b1:81:95:49:95:a4:ed:84:bf:fa:28:3c:b7:
         71:58:1f:9c:96:ce:80:4a:13:9d:8e:ad:e8:8b:34:b8:0c:f5:
         a8:9c:a7:24:e2:2b:8d:84:6e:61:29:7b:55:3e:f5:ae:37:f6:
         f4:67:fe:83:4f:01:71:e4:ea:49:a9:a8:77:14:34:4d:ab:d9:
         b9:d7:e0:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfhuK0tqfpjdSyBxTUHNJfjNrjQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcxQ0E3OUUzNTEyMDgxQjczOUNDMEE1NkIxMEYzNDdF
REY5RkZFOTAeFw0yNDA0MTUwOTE2NDFaFw0yNDA0MTYxMTAwNDFaMDMxMTAvBgNV
BAMTKENEMTdERTFBODFBNjg5NTQ2RkJGODcwNEQxNjJDRTg2REJFNzE4NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGlcJ+Of05V9bnSZzaHMoy/x4
iz3va+H/tWXziUj/TgT4vhbpyBIGUcnRlK6e41iKmuF0PzbGS09Y1gKc5kNmZRK6
pfTDVZt044EpezfYaJcHgtgTtbSgjY+7h1fI5dGPlQ1guNEE5kbcUu925AwiC8yF
2SdyTq4ggch8KiWGfsFmE1alNv6KuDYfWPBQzCPpIykQ3ah90teFv6f+Kxc9a0Je
1AU3PMdRURGvK1vHf6Sb3YQ1Hcorpe6eGna1XP7PPgXxp6tQ6CodH88QvKkp+Ujf
Z/vxp+BQ02k4VSG+KiC+3FVo4+WJ7GHJbLnJ/BcvgWcttuaq4jI4sQpjBGJRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzRfeGoGmiVRvv4cE0WLOhtvnGF0wHwYDVR0j
BBgwFoAUlxynnjUSCBtznMClaxDzR+35/+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnh0Q2V3eUVFUnk4Y1RCQXgyM0JWSlFia0ZLU1FreVloWTRKcXFlUUFE
alAvMC85NzFDQTc5RTM1MTIwODFCNzM5Q0MwQTU2QjEwRjM0N0VERjlGRkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MUNBNzlFMzUxMjA4MUI3
MzlDQzBBNTZCMTBGMzQ3RURGOUZGRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mnh0Q2V3eUVFUnk4Y1RCQXgyM0JWSlFia0ZLU1FreVloWTRKcXFlUUFEalAvMC85
NzFDQTc5RTM1MTIwODFCNzM5Q0MwQTU2QjEwRjM0N0VERjlGRkU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA78en3bKfUuwLRp2ovSFgYc60gIYaAQF9ldtG5UpmyVsuqPgavPxYekhCwPcp
NqEK0vw9bIcENMVgW7GsKyrkKzIZ01Jf/7YXHcq1+cpBGc8OZ2k0VvIMioYE14Jl
50DHjNsWuaE3F2QCoK54ZQer/MZ2wEZrJkQtDJPFZiBxVkfwLmxEd39DrVyAYjDx
vwFfQwhyh3layVeiTiT3niM5zMJ0KTU8b34jIEBbR4i8t8X70VV6RZVj+UyxgZVJ
laTthL/6KDy3cVgfnJbOgEoTnY6t6Is0uAz1qJynJOIrjYRuYSl7VT71rjf29Gf+
g08BceTqSamodxQ0TavZudfgLQ==
-----END CERTIFICATE-----