Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft
File:                     7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft (raw, json)
Hash identifier:          CzbJRZpfEyExdZf8cNSoNUyVL+U8bybFdgoRNqHjaEE=
Subject key identifier:   A4:9A:F0:5B:DF:41:F8:8F:18:40:74:B9:C9:6B:F8:CB:41:97:CA:9C
Authority key identifier: 7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B
Certificate issuer:       /CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
Certificate serial:       1D7399007AE877EE51D7F63310824D05E824E763
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft
Manifest number:          B2
Signing time:             Sun 14 Apr 2024 20:01:29 +0000
Manifest this update:     Sun 14 Apr 2024 19:56:29 +0000
Manifest next update:     Mon 15 Apr 2024 22:31:29 +0000
Files and hashes:         1: 7FE0F22C7FC909A759F205D5F392B7F33D0E650B.crl (hash: tdpqLsUuZNERpW88LqK/7U2XwbsXZimwSxqP7KRfGyU=)
                          2: 3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa (hash: xVxOfYVoMC77frcSzfSrn9cVrgQWlfkh9PoMjZZyBzU=)
                          3: 323830343a323337343a3a2f33322d3438203d3e20323634313633.roa (hash: rgeizvKc/JUVtlBUbUcN9sOwLyBF6HY6aA6x7lsW3Oo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:73:99:00:7a:e8:77:ee:51:d7:f6:33:10:82:4d:05:e8:24:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
        Validity
            Not Before: Apr 14 19:56:29 2024 GMT
            Not After : Apr 15 22:31:29 2024 GMT
        Subject: CN=A49AF05BDF41F88F184074B9C96BF8CB4197CA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:68:f1:bf:72:19:c8:89:8e:d9:2a:58:12:
                    6b:cc:4d:40:04:dd:d0:2a:88:15:7e:aa:33:d9:ab:
                    1a:ce:b0:56:39:3f:6b:8e:1d:0b:25:f0:69:bc:23:
                    d8:07:42:bf:ab:9d:b0:2c:29:81:21:f5:e0:47:74:
                    ce:04:2c:a1:60:6d:63:53:14:f6:77:64:cc:3d:a3:
                    57:f4:b2:07:64:b6:e3:6f:66:b7:cf:18:97:07:b2:
                    1f:c1:ae:8e:af:1c:1b:3b:11:37:92:13:ad:3c:f5:
                    35:6e:11:fc:b5:2c:55:f5:cf:ae:69:b2:c8:10:9d:
                    73:6d:42:23:38:11:c7:f6:84:c2:24:ab:36:2e:8d:
                    76:cf:90:52:55:e0:67:a6:04:31:ed:58:37:3f:77:
                    00:88:f1:7f:dd:f1:b9:c7:d4:a4:c9:38:86:c8:62:
                    0e:77:dd:5e:f8:41:9a:0e:91:88:48:65:1c:cd:c4:
                    8e:cf:89:c5:86:b4:10:cf:ec:e7:81:e3:72:82:c9:
                    67:47:2f:b3:41:95:53:84:c8:33:cb:7f:d1:58:70:
                    b0:20:e5:9d:da:4f:e0:8f:95:b0:3b:18:22:73:36:
                    c1:85:2d:3e:a6:2e:4e:10:d8:66:79:c3:ad:92:b1:
                    c2:f4:12:18:53:e0:a3:48:a3:0e:63:9d:47:84:cf:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9A:F0:5B:DF:41:F8:8F:18:40:74:B9:C9:6B:F8:CB:41:97:CA:9C
            X509v3 Authority Key Identifier:
                keyid:7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ad:34:a8:cd:74:c5:9f:80:42:9e:87:29:6a:ae:d8:a7:7d:
         0d:68:9f:a6:3f:47:56:08:c7:b9:6f:3b:1f:4e:22:59:ec:86:
         10:4b:8e:a9:54:94:2f:64:c3:e9:50:5b:10:d6:19:ea:0c:92:
         44:a6:6b:38:1f:68:3a:70:2e:74:23:49:43:e4:10:9d:89:a8:
         74:57:39:43:fe:ec:f8:f3:77:92:78:a7:e5:43:30:e4:8b:c7:
         3c:fa:90:e5:19:1f:d3:b7:c6:0f:a5:66:91:c3:92:be:ac:49:
         4f:32:90:66:99:79:6e:62:69:db:6d:7d:fe:dd:83:cc:ba:5d:
         23:6f:6b:ee:70:c6:0b:1d:07:2c:cd:a7:44:7e:a8:89:94:3e:
         47:da:83:f5:cb:9f:ee:3c:f7:75:3e:7b:a4:07:2c:1d:5f:83:
         9d:0a:61:3a:60:bc:d8:f4:0e:dd:c8:cd:56:af:b5:6d:76:6d:
         a0:09:65:9d:7c:8b:1b:31:ba:1a:5d:19:06:d7:af:b1:6f:31:
         84:63:60:e5:1e:90:a2:23:6a:f3:5e:1c:dc:9d:0b:f5:85:33:
         51:18:4b:c2:16:41:27:ec:a3:fd:e9:97:47:c4:2b:25:2e:bd:
         cf:bd:1a:d6:8a:07:be:ee:87:65:3d:78:52:40:01:9e:34:09:
         d0:0c:ba:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHXOZAHrod+5R1/YzEIJNBegk52MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZFMEYyMkM3RkM5MDlBNzU5RjIwNUQ1RjM5MkI3RjMz
RDBFNjUwQjAeFw0yNDA0MTQxOTU2MjlaFw0yNDA0MTUyMjMxMjlaMDMxMTAvBgNV
BAMTKEE0OUFGMDVCREY0MUY4OEYxODQwNzRCOUM5NkJGOENCNDE5N0NBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrmjxv3IZyImO2SpYEmvMTUAE
3dAqiBV+qjPZqxrOsFY5P2uOHQsl8Gm8I9gHQr+rnbAsKYEh9eBHdM4ELKFgbWNT
FPZ3ZMw9o1f0sgdktuNvZrfPGJcHsh/Bro6vHBs7ETeSE6089TVuEfy1LFX1z65p
ssgQnXNtQiM4Ecf2hMIkqzYujXbPkFJV4GemBDHtWDc/dwCI8X/d8bnH1KTJOIbI
Yg533V74QZoOkYhIZRzNxI7PicWGtBDP7OeB43KCyWdHL7NBlVOEyDPLf9FYcLAg
5Z3aT+CPlbA7GCJzNsGFLT6mLk4Q2GZ5w62SscL0EhhT4KNIow5jnUeEz//BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpJrwW99B+I8YQHS5yWv4y0GXypwwHwYDVR0j
BBgwFoAUf+DyLH/JCadZ8gXV85K38z0OZQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1IzWHJadGppM1lyYjN2MXp2dWsyREJ4eVE3QjQxenBqVXVBTTdGVkh1
dkUvMC83RkUwRjIyQzdGQzkwOUE3NTlGMjA1RDVGMzkyQjdGMzNEMEU2NTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGRTBGMjJDN0ZDOTA5QTc1
OUYyMDVENUYzOTJCN0YzM0QwRTY1MEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1IzWHJadGppM1lyYjN2MXp2dWsyREJ4eVE3QjQxenBqVXVBTTdGVkh1dkUvMC83
RkUwRjIyQzdGQzkwOUE3NTlGMjA1RDVGMzkyQjdGMzNEMEU2NTBCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx600qM10xZ+AQp6HKWqu2Kd9DWifpj9HVgjHuW87H04iWeyGEEuOqVSUL2TD
6VBbENYZ6gySRKZrOB9oOnAudCNJQ+QQnYmodFc5Q/7s+PN3knin5UMw5IvHPPqQ
5Rkf07fGD6VmkcOSvqxJTzKQZpl5bmJp2219/t2DzLpdI29r7nDGCx0HLM2nRH6o
iZQ+R9qD9cuf7jz3dT57pAcsHV+DnQphOmC82PQO3cjNVq+1bXZtoAllnXyLGzG6
Gl0ZBtevsW8xhGNg5R6QoiNq814c3J0L9YUzURhLwhZBJ+yj/emXR8QrJS69z70a
1ooHvu6HZT14UkABnjQJ0Ay6OQ==
-----END CERTIFICATE-----