Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft
File:                     B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft (raw, json)
Hash identifier:          bQzDhrXlQp4FiFLWCtNwL7PtEeh7ljug/jrVC02UHyk=
Subject key identifier:   D8:BF:BA:B1:E5:65:E3:1F:B9:A3:6D:B4:34:62:CB:17:2E:64:F4:48
Authority key identifier: B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F
Certificate issuer:       /CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
Certificate serial:       36BFE40671A4C615563EE98E1C40BDE2871FC704
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft
Manifest number:          0126
Signing time:             Mon 28 Oct 2024 08:00:17 +0000
Manifest this update:     Mon 28 Oct 2024 07:55:17 +0000
Manifest next update:     Tue 29 Oct 2024 08:22:17 +0000
Files and hashes:         1: 323830343a373362303a3a2f33322d3438203d3e20323730393331.roa (hash: Eg37bb82cc8uSDV5Ji5EiYukxQaGLDs+PdPVxt0fWj8=)
                          2: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: W57DzTSoglLj3T3i3gPDjjZlVn6zKq3l+1OuTMuCZp0=)
                          3: B08ED87D0232B32F4B301B81417EB9BEAF579B9F.crl (hash: qo/9lXO2iK1uaBTTOhhgiQw/yaRGHBV9UrlSmyb7CTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bf:e4:06:71:a4:c6:15:56:3e:e9:8e:1c:40:bd:e2:87:1f:c7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
        Validity
            Not Before: Oct 28 07:55:17 2024 GMT
            Not After : Oct 29 08:22:17 2024 GMT
        Subject: CN=D8BFBAB1E565E31FB9A36DB43462CB172E64F448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:f4:c2:30:f5:bf:b5:ea:98:b6:ff:de:f0:
                    c1:10:1e:67:3f:78:b5:00:3d:d2:61:f4:80:ac:c3:
                    df:20:80:d2:59:b9:c9:11:2d:8b:a4:6f:c2:e2:d1:
                    d2:52:f3:f7:47:de:a4:3f:40:f2:ea:ef:43:f2:67:
                    ee:2d:1b:53:73:b0:d8:97:64:af:7d:d7:97:c2:5e:
                    04:8b:01:36:59:12:28:0a:40:98:ac:1f:71:9b:77:
                    71:f1:79:74:b0:05:01:3e:37:11:8d:a4:ec:3e:a9:
                    29:3f:a9:1d:87:96:2c:05:73:3f:f1:db:5d:79:f9:
                    b1:d2:08:99:68:50:a1:76:41:34:f2:6c:a0:7e:a3:
                    fd:04:f3:99:a7:98:65:87:2c:90:d4:a7:e6:b9:2f:
                    38:72:32:71:ac:ef:6d:42:c9:f8:99:5c:0e:c0:f9:
                    4a:ce:67:5b:7c:80:64:9f:b7:fe:88:c9:25:95:03:
                    2b:0a:da:23:cc:ee:30:64:11:31:31:5a:98:0c:55:
                    f4:17:77:bd:dc:1e:0f:81:24:17:2b:ef:77:09:a5:
                    4c:16:29:44:8a:57:5f:16:0e:d7:66:8b:4a:53:74:
                    63:c8:05:2f:5b:80:69:e6:98:60:86:13:7d:be:16:
                    be:11:40:90:6f:96:94:4a:3a:bc:66:b7:95:04:34:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:BA:B1:E5:65:E3:1F:B9:A3:6D:B4:34:62:CB:17:2E:64:F4:48
            X509v3 Authority Key Identifier:
                keyid:B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:68:68:a8:7e:41:c7:5d:71:15:e1:61:5f:34:88:2d:23:
         01:3c:df:e9:de:29:c3:52:4e:d5:ba:22:25:ef:20:c6:bc:ad:
         99:d6:79:de:13:7c:51:19:59:38:c4:69:f2:40:b3:6f:f7:fe:
         1e:d1:09:02:f1:b6:18:86:6b:05:b1:e0:2f:c6:2b:94:77:fd:
         0b:d2:fb:d1:ef:3b:85:63:6a:d2:13:54:e4:09:77:e8:11:3f:
         e5:53:8d:7b:91:c2:c9:42:cc:d9:5c:68:4c:b5:65:c9:f0:36:
         b7:02:6f:6e:d5:f8:12:e5:bf:da:9c:35:bc:64:00:63:93:36:
         30:ad:bd:9e:63:13:47:c4:84:1a:b8:1a:e3:c6:17:a2:ba:03:
         3d:b8:e1:ad:3d:84:58:19:a4:8d:a7:b2:88:42:2e:3f:ea:f4:
         be:7d:67:15:53:8d:f1:a0:f0:6f:41:19:3c:fd:41:ae:4a:65:
         c7:21:e4:c2:22:e7:1f:d6:71:cc:04:0c:c0:9e:10:cf:40:e5:
         7d:61:f2:0e:8e:39:2f:2f:bc:be:76:2a:d4:fa:91:e5:d0:7f:
         f7:d2:3d:4a:62:bd:23:c1:c5:9a:e0:12:c4:4d:a5:3f:ba:f7:
         2f:17:fa:32:90:40:a9:67:82:85:05:0c:6d:90:ca:28:81:cd:
         13:73:38:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNr/kBnGkxhVWPumOHEC94ocfxwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA4RUQ4N0QwMjMyQjMyRjRCMzAxQjgxNDE3RUI5QkVB
RjU3OUI5RjAeFw0yNDEwMjgwNzU1MTdaFw0yNDEwMjkwODIyMTdaMDMxMTAvBgNV
BAMTKEQ4QkZCQUIxRTU2NUUzMUZCOUEzNkRCNDM0NjJDQjE3MkU2NEY0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduPTCMPW/teqYtv/e8MEQHmc/
eLUAPdJh9ICsw98ggNJZuckRLYukb8Li0dJS8/dH3qQ/QPLq70PyZ+4tG1NzsNiX
ZK9915fCXgSLATZZEigKQJisH3Gbd3HxeXSwBQE+NxGNpOw+qSk/qR2HliwFcz/x
2115+bHSCJloUKF2QTTybKB+o/0E85mnmGWHLJDUp+a5LzhyMnGs721CyfiZXA7A
+UrOZ1t8gGSft/6IySWVAysK2iPM7jBkETExWpgMVfQXd73cHg+BJBcr73cJpUwW
KUSKV18WDtdmi0pTdGPIBS9bgGnmmGCGE32+Fr4RQJBvlpRKOrxmt5UENDGNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2L+6seVl4x+5o220NGLLFy5k9EgwHwYDVR0j
BBgwFoAUsI7YfQIysy9LMBuBQX65vq9Xm58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZl
WG4vMS9CMDhFRDg3RDAyMzJCMzJGNEIzMDFCODE0MTdFQjlCRUFGNTc5QjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOEVEODdEMDIzMkIzMkY0
QjMwMUI4MTQxN0VCOUJFQUY1NzlCOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZlWG4vMS9C
MDhFRDg3RDAyMzJCMzJGNEIzMDFCODE0MTdFQjlCRUFGNTc5QjlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFzRoaKh+QcddcRXhYV80iC0jATzf6d4pw1JO1boiJe8gxrytmdZ53hN8URlZ
OMRp8kCzb/f+HtEJAvG2GIZrBbHgL8YrlHf9C9L70e87hWNq0hNU5Al36BE/5VON
e5HCyULM2VxoTLVlyfA2twJvbtX4EuW/2pw1vGQAY5M2MK29nmMTR8SEGrga48YX
oroDPbjhrT2EWBmkjaeyiEIuP+r0vn1nFVON8aDwb0EZPP1BrkplxyHkwiLnH9Zx
zAQMwJ4Qz0DlfWHyDo45Ly+8vnYq1PqR5dB/99I9SmK9I8HFmuASxE2lP7r3Lxf6
MpBAqWeChQUMbZDKKIHNE3M4cg==
-----END CERTIFICATE-----