Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.mft
File:                     B2AB7B9474736437E1E25156FDE9BADA1613D9B4.mft (raw, json)
Hash identifier:          zPSY1w7E19zorIs8/e6at9LKJkKp6hduKQBRbUH85GY=
Subject key identifier:   C4:C4:25:ED:F1:78:E5:67:1F:49:C3:C8:68:58:8F:40:B8:82:53:D7
Authority key identifier: B2:AB:7B:94:74:73:64:37:E1:E2:51:56:FD:E9:BA:DA:16:13:D9:B4
Certificate issuer:       /CN=B2AB7B9474736437E1E25156FDE9BADA1613D9B4
Certificate serial:       0C947798E1553C282591EF8C5C763D42BE3894AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.mft
Manifest number:          018B
Signing time:             Tue 27 Dec 2022 21:36:02 +0000
Manifest this update:     Tue 27 Dec 2022 21:31:02 +0000
Manifest next update:     Wed 28 Dec 2022 23:13:02 +0000
Files and hashes:         1: B2AB7B9474736437E1E25156FDE9BADA1613D9B4.crl (hash: Hc2Ug3EAlafTx2x8KBilourg3diS8BXPdwJSHQkkXcM=)
                          2: 323830343a363066343a3a2f33322d3438203d3e20323639323032.roa (hash: K7NLSgxugmL9bIVf6bNyNZJwNiqeOAiE9UHAdPvghgw=)
                          3: 34352e3138312e3231322e302f32322d3234203d3e20323639323032.roa (hash: SYcvC99VolUOHi5GknlRuppn55XS6NzWkuSXiWaG/vE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:94:77:98:e1:55:3c:28:25:91:ef:8c:5c:76:3d:42:be:38:94:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB7B9474736437E1E25156FDE9BADA1613D9B4
        Validity
            Not Before: Dec 27 21:31:02 2022 GMT
            Not After : Dec 28 23:13:02 2022 GMT
        Subject: CN=C4C425EDF178E5671F49C3C868588F40B88253D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:68:03:05:18:96:ec:17:c0:ff:eb:43:41:
                    da:2a:ed:d3:19:a5:ec:be:3b:23:50:e2:f2:50:21:
                    5b:08:1a:2a:ac:64:08:a6:cf:3e:5d:14:bf:d3:ad:
                    83:a1:1e:be:d2:7a:83:68:7a:08:b5:9c:1c:e3:41:
                    d0:69:3e:dd:78:1a:98:46:cd:cf:f5:2f:79:2a:73:
                    21:74:ee:9c:c5:c1:e6:9e:f7:28:cd:72:ff:68:fa:
                    ca:10:bb:5f:f8:98:2c:46:75:0f:2b:cd:2c:b7:fa:
                    87:2f:55:bd:97:3c:cd:1b:18:2a:0f:c0:0f:a5:85:
                    da:7a:2c:f7:1e:1e:2c:f7:3f:f2:1b:b3:74:58:5c:
                    60:f1:50:cf:69:80:f8:74:4a:03:8c:f8:5e:eb:f6:
                    04:19:a5:8d:c8:49:be:62:9a:54:45:aa:79:1c:10:
                    92:41:c1:ce:b1:55:9a:f8:3a:18:b6:6a:9d:f5:a3:
                    de:6a:e8:ae:3d:23:de:bb:42:a1:fe:7e:1a:68:a2:
                    45:a0:bd:54:42:05:da:4e:20:b5:c5:3d:d1:a7:27:
                    ab:0b:d2:d2:a2:aa:c6:7e:a8:e5:9c:f1:f2:17:4b:
                    21:0d:57:d1:9d:83:33:af:3e:c7:ea:da:85:87:b3:
                    f0:65:bc:7a:4b:06:e7:77:25:40:d1:3d:9d:5f:43:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C4:25:ED:F1:78:E5:67:1F:49:C3:C8:68:58:8F:40:B8:82:53:D7
            X509v3 Authority Key Identifier:
                keyid:B2:AB:7B:94:74:73:64:37:E1:E2:51:56:FD:E9:BA:DA:16:13:D9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/B2AB7B9474736437E1E25156FDE9BADA1613D9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:62:53:c9:08:bf:ab:08:82:44:50:dc:c0:59:d5:4c:f6:
         46:d2:ac:b7:52:35:ba:52:0d:d6:0a:7e:b2:ed:2a:24:dc:cf:
         8e:e1:bf:85:aa:1e:fd:bc:d9:e4:b8:33:63:00:94:3a:28:01:
         32:e0:91:af:b2:ef:10:72:db:97:45:ec:51:fa:82:6c:0f:6f:
         40:19:93:b5:9a:a4:b0:33:a6:ad:f8:74:d6:3a:b2:c1:38:03:
         e5:a6:ba:ee:a1:c2:58:89:8f:e7:26:5d:40:48:07:72:a1:e4:
         da:9f:fc:ac:46:e1:93:ad:16:f3:09:e0:09:39:b2:88:e4:1a:
         bc:65:30:1d:52:43:8b:68:14:77:8d:54:ef:45:43:cd:e0:cd:
         47:39:8a:0d:d4:c2:4d:c0:3a:55:b2:7e:25:7e:bd:17:50:99:
         b5:60:50:aa:8d:68:0f:9f:3c:15:69:ca:0a:23:b1:a6:30:76:
         ba:b0:50:10:47:51:53:db:e6:40:72:5c:c8:bb:c3:1c:7a:28:
         fd:ff:b0:ae:20:3b:ce:54:cf:4a:72:fa:14:ba:30:39:6c:15:
         77:da:ea:38:39:71:de:a8:4e:a1:33:2f:d8:46:77:71:ca:d7:
         d3:3a:de:f3:fe:cd:53:fd:3b:77:63:f1:88:a1:08:03:48:c6:
         be:43:8b:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDJR3mOFVPCglke+MXHY9Qr44lK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjdCOTQ3NDczNjQzN0UxRTI1MTU2RkRFOUJBREEx
NjEzRDlCNDAeFw0yMjEyMjcyMTMxMDJaFw0yMjEyMjgyMzEzMDJaMDMxMTAvBgNV
BAMTKEM0QzQyNUVERjE3OEU1NjcxRjQ5QzNDODY4NTg4RjQwQjg4MjUzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBc2gDBRiW7BfA/+tDQdoq7dMZ
pey+OyNQ4vJQIVsIGiqsZAimzz5dFL/TrYOhHr7SeoNoegi1nBzjQdBpPt14GphG
zc/1L3kqcyF07pzFweae9yjNcv9o+soQu1/4mCxGdQ8rzSy3+ocvVb2XPM0bGCoP
wA+lhdp6LPceHiz3P/Ibs3RYXGDxUM9pgPh0SgOM+F7r9gQZpY3ISb5imlRFqnkc
EJJBwc6xVZr4Ohi2ap31o95q6K49I967QqH+fhpookWgvVRCBdpOILXFPdGnJ6sL
0tKiqsZ+qOWc8fIXSyENV9GdgzOvPsfq2oWHs/BlvHpLBud3JUDRPZ1fQyPBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxMQl7fF45WcfScPIaFiPQLiCU9cwHwYDVR0j
BBgwFoAUsqt7lHRzZDfh4lFW/em62hYT2bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hn
NmEvMC9CMkFCN0I5NDc0NzM2NDM3RTFFMjUxNTZGREU5QkFEQTE2MTNEOUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQUI3Qjk0NzQ3MzY0MzdF
MUUyNTE1NkZERTlCQURBMTYxM0Q5QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hnNmEvMC9C
MkFCN0I5NDc0NzM2NDM3RTFFMjUxNTZGREU5QkFEQTE2MTNEOUI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFLZiU8kIv6sIgkRQ3MBZ1Uz2RtKst1I1ulIN1gp+su0qJNzPjuG/haoe/bzZ
5LgzYwCUOigBMuCRr7LvEHLbl0XsUfqCbA9vQBmTtZqksDOmrfh01jqywTgD5aa6
7qHCWImP5yZdQEgHcqHk2p/8rEbhk60W8wngCTmyiOQavGUwHVJDi2gUd41U70VD
zeDNRzmKDdTCTcA6VbJ+JX69F1CZtWBQqo1oD588FWnKCiOxpjB2urBQEEdRU9vm
QHJcyLvDHHoo/f+wriA7zlTPSnL6FLowOWwVd9rqODlx3qhOoTMv2EZ3ccrX0zre
8/7NU/07d2PxiKEIA0jGvkOLiQ==
-----END CERTIFICATE-----