Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.mft
File:                     A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.mft (raw, json)
Hash identifier:          Ju+uTrzbaRQSu6pJ0R6Vt1X5xoLjX+6K86UEu5qKGt4=
Subject key identifier:   09:DA:5D:E3:20:3D:9F:4D:23:F7:B7:75:CD:45:70:E0:B5:01:08:C0
Authority key identifier: A7:BB:17:D8:88:4E:B9:01:0E:78:DF:DC:BD:B6:B0:E9:EA:54:3A:3D
Certificate issuer:       /CN=A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D
Certificate serial:       0E710D5026FB51DD0A6A50099410EF7898A1FDC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.mft
Manifest number:          0107
Signing time:             Thu 21 Mar 2024 05:06:16 +0000
Manifest this update:     Thu 21 Mar 2024 05:01:16 +0000
Manifest next update:     Fri 22 Mar 2024 05:56:16 +0000
Files and hashes:         1: 323830343a323161633a3a2f33322d3438203d3e20323634353636.roa (hash: MpX0VGYgkzcXExIG8bpejRkkhr4FrAjy2XR7CKCXx7Y=)
                          2: A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.crl (hash: aZC++wzJAMhzN3hAU56tuGKyViYQhZvZSDR63JJqoTQ=)
                          3: 3133382e302e3134342e302f32322d3234203d3e20323634353636.roa (hash: n6qBbe++8+6PjLOX5qg3wzn4NqLr/di7iaJdKQEi40E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:71:0d:50:26:fb:51:dd:0a:6a:50:09:94:10:ef:78:98:a1:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D
        Validity
            Not Before: Mar 21 05:01:16 2024 GMT
            Not After : Mar 22 05:56:16 2024 GMT
        Subject: CN=09DA5DE3203D9F4D23F7B775CD4570E0B50108C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:21:15:a6:35:99:b3:60:bd:9e:1c:1d:84:6d:
                    be:43:39:b3:5e:68:13:62:21:28:5a:7c:4e:04:e3:
                    95:d0:ca:f6:ba:54:6a:db:f6:df:5e:df:af:37:de:
                    f0:23:bd:d4:59:43:75:91:86:ed:bf:81:90:fb:ce:
                    86:0e:d7:91:be:00:ae:9d:81:b2:6f:07:9d:0b:f5:
                    22:a1:91:1c:aa:54:02:1e:18:75:e3:b4:3e:5c:61:
                    f3:27:ff:04:15:d7:fe:f6:be:8c:a2:34:d7:cd:f7:
                    a3:9b:b2:4c:fe:0a:2b:0b:1a:42:8f:8f:fe:a8:bc:
                    31:9d:4d:0d:b6:7d:f7:d1:53:a5:ed:bf:d9:64:f7:
                    02:63:31:c2:86:1f:8e:19:a3:ff:4e:c0:14:18:f4:
                    7c:c0:33:62:c2:25:f4:4e:22:39:ec:1c:90:4e:07:
                    48:47:39:0d:b5:fa:c7:6f:47:97:0b:b9:e2:7c:6e:
                    98:0e:04:d4:0b:ab:94:e9:99:ac:da:4a:21:51:70:
                    92:69:a1:64:a0:c2:f1:c2:a6:46:4f:4d:97:98:7d:
                    bc:e9:98:22:66:c6:43:f0:d9:39:9e:0d:ba:54:b7:
                    09:98:9b:7c:74:cc:26:65:32:5f:f0:2e:a8:64:4a:
                    84:3b:ce:13:ad:47:88:aa:99:bd:f3:fe:5e:c4:23:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:5D:E3:20:3D:9F:4D:23:F7:B7:75:CD:45:70:E0:B5:01:08:C0
            X509v3 Authority Key Identifier:
                keyid:A7:BB:17:D8:88:4E:B9:01:0E:78:DF:DC:BD:B6:B0:E9:EA:54:3A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/A7BB17D8884EB9010E78DFDCBDB6B0E9EA543A3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:6e:3c:20:3e:f5:a1:c1:79:6d:cf:02:0e:27:f0:44:5c:
         d0:b0:82:81:8b:3f:07:57:3b:b0:bd:8e:4e:57:1e:a4:35:26:
         d7:06:43:a0:e7:96:0f:86:af:12:37:5d:07:14:ee:81:f1:11:
         80:ae:40:7f:f9:e3:71:99:d5:26:0b:b6:c8:c1:31:47:3c:13:
         66:ad:59:d0:fe:8e:3e:5f:af:97:3d:38:a8:7b:0e:85:77:b8:
         95:04:49:61:cb:5f:a5:82:53:19:08:58:6a:13:a7:3c:86:53:
         86:83:68:68:87:e1:78:34:22:7d:e7:9a:2c:83:30:92:d4:ba:
         5f:c6:16:92:30:2a:30:d8:63:81:88:3c:e3:de:97:4b:cd:61:
         5f:92:af:1b:23:bc:86:df:83:9a:bd:08:b9:0b:24:c2:4f:3a:
         e4:fa:a3:e1:a2:23:60:49:cf:eb:f9:ac:61:32:a5:89:f3:52:
         be:8b:27:9c:d0:ec:f4:f9:dd:a1:7d:6e:22:9c:26:d0:34:38:
         64:f7:f7:af:b6:91:cc:8d:f4:de:fb:45:4d:82:57:29:a6:74:
         2c:41:3a:ea:87:c3:8c:9d:a3:e0:2a:a7:58:ad:29:b3:ac:6a:
         58:b9:0a:07:5f:48:1d:05:a6:5e:7f:ce:cf:3b:c7:6b:d0:2a:
         8d:3b:fe:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDnENUCb7Ud0KalAJlBDveJih/ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQjE3RDg4ODRFQjkwMTBFNzhERkRDQkRCNkIwRTlF
QTU0M0EzRDAeFw0yNDAzMjEwNTAxMTZaFw0yNDAzMjIwNTU2MTZaMDMxMTAvBgNV
BAMTKDA5REE1REUzMjAzRDlGNEQyM0Y3Qjc3NUNENDU3MEUwQjUwMTA4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0IRWmNZmzYL2eHB2Ebb5DObNe
aBNiIShafE4E45XQyva6VGrb9t9e36833vAjvdRZQ3WRhu2/gZD7zoYO15G+AK6d
gbJvB50L9SKhkRyqVAIeGHXjtD5cYfMn/wQV1/72voyiNNfN96Obskz+CisLGkKP
j/6ovDGdTQ22fffRU6Xtv9lk9wJjMcKGH44Zo/9OwBQY9HzAM2LCJfROIjnsHJBO
B0hHOQ21+sdvR5cLueJ8bpgOBNQLq5TpmazaSiFRcJJpoWSgwvHCpkZPTZeYfbzp
mCJmxkPw2TmeDbpUtwmYm3x0zCZlMl/wLqhkSoQ7zhOtR4iqmb3z/l7EI5s5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCdpd4yA9n00j97d1zUVw4LUBCMAwHwYDVR0j
BBgwFoAUp7sX2IhOuQEOeN/cvbaw6epUOj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0QlFuVmFzSGhO
VWMvMC9BN0JCMTdEODg4NEVCOTAxMEU3OERGRENCREI2QjBFOUVBNTQzQTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3QkIxN0Q4ODg0RUI5MDEw
RTc4REZEQ0JEQjZCMEU5RUE1NDNBM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0QlFuVmFzSGhOVWMvMC9B
N0JCMTdEODg4NEVCOTAxMEU3OERGRENCREI2QjBFOUVBNTQzQTNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfNFuPCA+9aHBeW3PAg4n8ERc0LCCgYs/B1c7sL2OTlcepDUm1wZDoOeWD4av
EjddBxTugfERgK5Af/njcZnVJgu2yMExRzwTZq1Z0P6OPl+vlz04qHsOhXe4lQRJ
YctfpYJTGQhYahOnPIZThoNoaIfheDQifeeaLIMwktS6X8YWkjAqMNhjgYg8496X
S81hX5KvGyO8ht+Dmr0IuQskwk865Pqj4aIjYEnP6/msYTKlifNSvosnnNDs9Pnd
oX1uIpwm0DQ4ZPf3r7aRzI303vtFTYJXKaZ0LEE66ofDjJ2j4CqnWK0ps6xqWLkK
B19IHQWmXn/OzzvHa9AqjTv+qw==
-----END CERTIFICATE-----