Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft
File:                     133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft (raw, json)
Hash identifier:          qNZnYVBP/uOMaC6tfUkk5NlGSZrgMp7zttxdKAM7HpI=
Subject key identifier:   BA:BF:F4:DD:DF:F1:BF:AB:30:19:68:C9:BD:09:45:5B:62:CC:6E:14
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       1D02B28F9672B29C311BD94694590B33937A09CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft
Manifest number:          21
Signing time:             Mon 15 Apr 2024 07:25:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:48:00 +0000
Files and hashes:         1: 3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa (hash: eUJl2WfVfqZvIgFzVBzWArVA3dTkU0zrdWimq8b0qOY=)
                          2: 3230312e37362e302e302f32302d3234203d3e203238363432.roa (hash: UntpoW/a5VDusb2YfTyxKboNBd77NTsoXEkwuDzgkZg=)
                          3: 3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa (hash: arGGIouIBaQrYF+LNxgBMyjUL1d+nHNtbHLePT8m7TI=)
                          4: 323830343a6566343a3a2f33322d3438203d3e203238363432.roa (hash: 4tGaMfqAg4NWHOSJx69LYPUc1d6jUzsJPEu9rS86ATM=)
                          5: 3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (hash: D0H5H24HGn78Llgc6NF69kbkyLcQD6Z7KGMZDM0HUyU=)
                          6: 133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl (hash: 9r0QhdS5acAWmFVNpWqfl77Yy/ByAaqh0mFMj1S9EkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:02:b2:8f:96:72:b2:9c:31:1b:d9:46:94:59:0b:33:93:7a:09:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Apr 15 07:20:00 2024 GMT
            Not After : Apr 16 10:48:00 2024 GMT
        Subject: CN=BABFF4DDDFF1BFAB301968C9BD09455B62CC6E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:9e:9c:24:ef:ee:8b:21:ce:1d:e2:7f:0d:
                    4f:77:8e:09:24:e9:39:75:fc:f6:52:bc:59:36:23:
                    96:68:88:b8:e7:32:13:b8:7a:27:9d:d4:0a:cd:dd:
                    13:09:7d:96:91:cf:59:e4:03:b4:dc:fb:91:60:fc:
                    7d:16:d8:5e:69:49:e9:ac:b5:5c:b1:eb:a7:fc:f6:
                    5b:f1:19:56:1d:a1:9e:dd:93:a7:60:31:ba:18:7b:
                    e4:3f:73:b9:05:c0:11:bd:49:3b:b3:a5:67:cd:be:
                    93:e1:f7:98:a6:20:4d:22:6c:76:35:eb:a0:8f:7f:
                    dd:ed:58:1b:a8:5f:76:c1:18:18:8a:87:71:dd:fe:
                    ef:fd:79:02:a9:50:d3:16:61:6a:c4:fd:2a:9e:07:
                    b8:8a:2e:1c:96:63:2d:a3:f7:f3:89:a2:d9:bb:60:
                    9f:84:76:10:41:81:b1:90:2e:1d:be:da:ae:2b:7b:
                    e0:03:c7:a4:76:80:3c:74:a0:48:0c:2c:ab:52:34:
                    4e:d2:f1:2a:90:75:fc:63:18:d4:f4:0a:0e:6a:1d:
                    31:44:ef:e3:1d:66:79:48:b3:b4:5b:c1:99:af:be:
                    f7:b6:ed:94:8f:54:20:fa:d0:c5:4b:dd:d0:66:d8:
                    2e:09:16:6d:6c:99:d1:4a:aa:dc:e1:5f:fb:ee:b7:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BF:F4:DD:DF:F1:BF:AB:30:19:68:C9:BD:09:45:5B:62:CC:6E:14
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:17:08:c5:a1:39:ef:b3:25:49:5f:6e:b1:c1:02:59:67:56:
         f2:b6:0a:d3:82:19:6a:a8:4c:68:68:f4:46:93:5d:85:85:68:
         90:0c:3f:78:68:da:dc:4c:81:2f:a2:e5:eb:02:2f:b4:b5:fb:
         0f:ab:eb:ab:c6:96:62:f0:3d:1b:41:1b:65:c9:89:83:fe:d6:
         50:11:fc:f7:7c:17:00:3d:ed:50:17:59:24:fa:ce:9b:03:52:
         b1:40:50:b4:88:f1:5a:01:dc:42:3b:3a:00:b8:67:2b:d0:85:
         fc:1f:e9:fd:73:2f:4e:9d:18:14:86:cd:84:31:ab:50:df:06:
         7d:85:60:df:6b:ed:b6:7c:86:29:84:d2:c5:b5:8c:e2:0e:f0:
         b5:8c:ab:02:d8:3d:cc:86:0f:da:fc:47:98:49:ae:c7:9e:15:
         3d:c3:e8:cc:85:1b:17:a0:35:e5:1c:eb:1a:14:46:b4:94:bb:
         e5:66:e2:8b:1b:15:84:9c:bc:2c:d6:d7:87:09:7e:79:56:de:
         54:cb:07:b7:da:a7:25:0d:35:b3:2e:79:1f:3e:0c:00:39:f6:
         91:21:4a:10:c8:43:09:10:cc:45:fc:f0:5a:c1:c2:be:b7:1e:
         06:e2:03:00:f0:f3:38:ad:88:94:63:b4:40:01:dc:b8:74:a4:
         f7:c9:41:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHQKyj5ZyspwxG9lGlFkLM5N6Cc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMzRUM3M0Y4NzM1NTJCN0MxQzJFN0FBNjFEMzAxNEUz
M0ZCNzkzRTAeFw0yNDA0MTUwNzIwMDBaFw0yNDA0MTYxMDQ4MDBaMDMxMTAvBgNV
BAMTKEJBQkZGNEREREZGMUJGQUIzMDE5NjhDOUJEMDk0NTVCNjJDQzZFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmJ6cJO/uiyHOHeJ/DU93jgkk
6Tl1/PZSvFk2I5ZoiLjnMhO4eied1ArN3RMJfZaRz1nkA7Tc+5Fg/H0W2F5pSems
tVyx66f89lvxGVYdoZ7dk6dgMboYe+Q/c7kFwBG9STuzpWfNvpPh95imIE0ibHY1
66CPf93tWBuoX3bBGBiKh3Hd/u/9eQKpUNMWYWrE/SqeB7iKLhyWYy2j9/OJotm7
YJ+EdhBBgbGQLh2+2q4re+ADx6R2gDx0oEgMLKtSNE7S8SqQdfxjGNT0Cg5qHTFE
7+MdZnlIs7RbwZmvvve27ZSPVCD60MVL3dBm2C4JFm1smdFKqtzhX/vut5mDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUur/03d/xv6swGWjJvQlFW2LMbhQwHwYDVR0j
BBgwFoAUEz7HP4c1UrfBwueqYdMBTjP7eT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlF
QWQvMC8xMzNFQzczRjg3MzU1MkI3QzFDMkU3QUE2MUQzMDE0RTMzRkI3OTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzM0VDNzNGODczNTUyQjdD
MUMyRTdBQTYxRDMwMTRFMzNGQjc5M0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlFQWQvMC8x
MzNFQzczRjg3MzU1MkI3QzFDMkU3QUE2MUQzMDE0RTMzRkI3OTNFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABxcIxaE577MlSV9uscECWWdW8rYK04IZaqhMaGj0RpNdhYVokAw/eGja3EyB
L6Ll6wIvtLX7D6vrq8aWYvA9G0EbZcmJg/7WUBH893wXAD3tUBdZJPrOmwNSsUBQ
tIjxWgHcQjs6ALhnK9CF/B/p/XMvTp0YFIbNhDGrUN8GfYVg32vttnyGKYTSxbWM
4g7wtYyrAtg9zIYP2vxHmEmux54VPcPozIUbF6A15RzrGhRGtJS75WbiixsVhJy8
LNbXhwl+eVbeVMsHt9qnJQ01sy55Hz4MADn2kSFKEMhDCRDMRfzwWsHCvrceBuID
APDzOK2IlGO0QAHcuHSk98lBRQ==
-----END CERTIFICATE-----