Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft
File:                     BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft (raw, json)
Hash identifier:          sGwuXX+R/gPCP/sf7k7NYzmLH4w2bXsSv37bX624QNo=
Subject key identifier:   40:BF:8E:77:F2:9C:3E:DE:B3:1F:55:87:D7:C0:EE:AE:03:E5:CD:45
Authority key identifier: BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D
Certificate issuer:       /CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
Certificate serial:       64977C232427598C65EB7070F18981E5369281F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft
Manifest number:          0168
Signing time:             Sun 14 Apr 2024 23:30:45 +0000
Manifest this update:     Sun 14 Apr 2024 23:25:45 +0000
Manifest next update:     Tue 16 Apr 2024 01:50:45 +0000
Files and hashes:         1: 34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa (hash: NzxcpifmH/tYNsdatzgnkcPVUZQ9aWo++q6L0X5ORDg=)
                          2: 323830343a356331343a3a2f33322d313238203d3e20323638383836.roa (hash: /TzR8FVGkzCHQASn3Avd6mBF8NlD1XDMyYpvamYL6g0=)
                          3: BE253B1D2A29537AA15E656F80DD5C74AB78B69D.crl (hash: B8mn16XnoWaXley4noyzAt2ijse6M9VYzxAE7SuC4p8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:97:7c:23:24:27:59:8c:65:eb:70:70:f1:89:81:e5:36:92:81:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
        Validity
            Not Before: Apr 14 23:25:45 2024 GMT
            Not After : Apr 16 01:50:45 2024 GMT
        Subject: CN=40BF8E77F29C3EDEB31F5587D7C0EEAE03E5CD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:09:a9:e6:9a:6b:d1:1a:7a:c4:e0:a1:e6:
                    c0:33:d7:d8:0d:e7:6a:90:2e:2b:52:da:36:eb:0c:
                    85:1c:b5:27:b4:ff:96:05:a0:9e:95:43:4e:81:ca:
                    e1:81:a5:b8:99:b4:56:48:e8:52:9d:b5:08:85:cb:
                    2c:a7:20:c5:8b:0d:98:d3:5b:34:34:cc:b4:b2:b1:
                    f9:19:cb:57:32:3c:d7:cf:d1:e1:15:07:5a:fa:db:
                    60:da:f7:5b:e6:03:82:49:3f:5b:6c:b1:b3:71:07:
                    88:2f:d2:47:8d:52:0e:83:8b:07:87:7e:be:0d:dd:
                    07:a0:0a:38:5a:53:73:cc:f6:1c:20:3b:65:2e:d0:
                    e0:a5:71:00:d8:e0:f8:f2:d2:c8:dd:00:e1:64:a6:
                    4b:c2:d9:d9:bb:7a:b4:a3:31:95:70:1b:44:99:cd:
                    1a:92:9d:4a:7a:df:07:d7:2b:35:55:f9:3b:bd:e4:
                    03:37:3c:24:93:a3:91:37:93:75:6c:8b:15:c8:db:
                    03:f5:61:f9:89:1c:91:a7:4b:59:bc:fe:3c:5f:69:
                    db:90:92:90:a9:3a:0b:db:34:07:ab:37:2c:9b:d4:
                    e5:d7:16:8a:9e:94:11:0b:ac:0c:6b:69:b2:e9:97:
                    85:4a:b2:7d:0a:59:0d:0d:16:7d:82:77:b4:1a:b9:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BF:8E:77:F2:9C:3E:DE:B3:1F:55:87:D7:C0:EE:AE:03:E5:CD:45
            X509v3 Authority Key Identifier:
                keyid:BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:ec:f4:81:af:43:11:1f:f6:47:ea:8d:cb:07:72:e7:70:
         a2:86:23:9c:4c:be:dd:ef:b2:ce:5c:d4:01:0a:f1:bc:bb:87:
         26:9d:65:7f:85:78:04:8d:7e:40:eb:0b:92:e5:0a:88:81:32:
         d1:fc:43:e7:a6:47:5b:b9:71:df:b9:a8:c1:ca:b5:50:ed:4b:
         ec:8b:dc:b3:ae:2f:85:75:f9:bc:59:80:c5:d4:2b:c6:a7:1f:
         63:ca:1e:f7:b7:8a:c3:ea:4e:5e:da:bd:f1:77:37:21:7c:f7:
         f7:2c:b3:0b:f8:28:cc:ca:0d:d8:b7:21:74:a0:50:f4:6c:03:
         35:84:95:1e:93:f9:78:4a:d7:69:c7:c9:77:b3:69:dd:7a:8e:
         f6:31:6d:41:30:1a:36:b2:45:99:38:a9:58:e4:39:79:21:4e:
         0c:79:1f:92:65:45:36:1e:bc:ee:7d:95:9e:c0:e7:ba:43:27:
         45:99:62:a0:62:11:d7:da:48:06:71:ec:46:78:bb:62:ca:de:
         a0:39:7c:4c:79:76:db:5c:fb:d4:c3:c4:30:a1:38:8d:b7:b6:
         22:2b:f0:24:4f:e4:f9:26:8e:7e:34:6e:77:71:84:cd:3f:37:
         c4:c2:5b:47:59:31:db:fa:f7:45:d2:8d:4c:88:74:66:f3:c5:
         56:45:2b:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZJd8IyQnWYxl63Bw8YmB5TaSgfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUyNTNCMUQyQTI5NTM3QUExNUU2NTZGODBERDVDNzRB
Qjc4QjY5RDAeFw0yNDA0MTQyMzI1NDVaFw0yNDA0MTYwMTUwNDVaMDMxMTAvBgNV
BAMTKDQwQkY4RTc3RjI5QzNFREVCMzFGNTU4N0Q3QzBFRUFFMDNFNUNENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSgmp5ppr0Rp6xOCh5sAz19gN
52qQLitS2jbrDIUctSe0/5YFoJ6VQ06ByuGBpbiZtFZI6FKdtQiFyyynIMWLDZjT
WzQ0zLSysfkZy1cyPNfP0eEVB1r622Da91vmA4JJP1tssbNxB4gv0keNUg6DiweH
fr4N3QegCjhaU3PM9hwgO2Uu0OClcQDY4Pjy0sjdAOFkpkvC2dm7erSjMZVwG0SZ
zRqSnUp63wfXKzVV+Tu95AM3PCSTo5E3k3VsixXI2wP1YfmJHJGnS1m8/jxfaduQ
kpCpOgvbNAerNyyb1OXXFoqelBELrAxrabLpl4VKsn0KWQ0NFn2Cd7QaufoTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQL+Od/KcPt6zH1WH18DurgPlzUUwHwYDVR0j
BBgwFoAUviU7HSopU3qhXmVvgN1cdKt4tp0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJiN1RWblNtVHB0ZllmbnlmYjdkSHJjNU5QN05DdlBWc2Rob3R4emFT
d3YvMC9CRTI1M0IxRDJBMjk1MzdBQTE1RTY1NkY4MERENUM3NEFCNzhCNjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFMjUzQjFEMkEyOTUzN0FB
MTVFNjU2RjgwREQ1Qzc0QUI3OEI2OUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnJiN1RWblNtVHB0ZllmbnlmYjdkSHJjNU5QN05DdlBWc2Rob3R4emFTd3YvMC9C
RTI1M0IxRDJBMjk1MzdBQTE1RTY1NkY4MERENUM3NEFCNzhCNjlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQuPs9IGvQxEf9kfqjcsHcudwooYjnEy+3e+yzlzUAQrxvLuHJp1lf4V4BI1+
QOsLkuUKiIEy0fxD56ZHW7lx37mowcq1UO1L7Ivcs64vhXX5vFmAxdQrxqcfY8oe
97eKw+pOXtq98Xc3IXz39yyzC/gozMoN2LchdKBQ9GwDNYSVHpP5eErXacfJd7Np
3XqO9jFtQTAaNrJFmTipWOQ5eSFODHkfkmVFNh687n2VnsDnukMnRZlioGIR19pI
BnHsRni7YsreoDl8THl221z71MPEMKE4jbe2IivwJE/k+SaOfjRud3GEzT83xMJb
R1kx2/r3RdKNTIh0ZvPFVkUrig==
-----END CERTIFICATE-----