Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.mft
File:                     AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.mft (raw, json)
Hash identifier:          KPMXL9IMlkpaNM4dKQu3LLhSEdy6494428l3n5m8Bt4=
Subject key identifier:   83:CD:52:99:29:51:F3:4C:3D:CE:45:33:2C:62:0D:88:36:07:58:78
Authority key identifier: AE:7F:53:DA:33:01:84:7B:E9:FC:FB:81:FB:BD:12:76:43:2F:CF:BF
Certificate issuer:       /CN=AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF
Certificate serial:       22E38C64304AA90DA792D9E1E7EC849CB9270CE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.mft
Manifest number:          013E
Signing time:             Mon 11 Dec 2023 21:31:17 +0000
Manifest this update:     Mon 11 Dec 2023 21:26:17 +0000
Manifest next update:     Wed 13 Dec 2023 00:39:17 +0000
Files and hashes:         1: 323830343a326665383a3a2f33322d313238203d3e20323634393230.roa (hash: NvoPA/7Q2CXGFWh4L+ReC4HtL4v+agY/AFfR0XYsugE=)
                          2: AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.crl (hash: Y7vyeph+hKoarrBoRgsvUn8X9SV6LOLd5UdQS7rsnfQ=)
                          3: 3136382e3233322e342e302f32322d3332203d3e20323634393230.roa (hash: 3oF156jjtpy0ccffqo+SGvz2GFImycxly8uxG/IOtJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e3:8c:64:30:4a:a9:0d:a7:92:d9:e1:e7:ec:84:9c:b9:27:0c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF
        Validity
            Not Before: Dec 11 21:26:17 2023 GMT
            Not After : Dec 13 00:39:17 2023 GMT
        Subject: CN=83CD52992951F34C3DCE45332C620D8836075878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:41:ac:14:69:1b:36:38:90:e1:c7:85:28:
                    cc:14:5f:a6:a0:2c:48:de:aa:82:02:24:00:4d:7e:
                    8c:08:e7:0f:35:fb:dd:15:df:cd:aa:d4:36:17:5d:
                    1c:52:d7:4c:e1:84:f0:90:ab:15:56:f4:4b:e6:40:
                    4a:d2:00:42:3c:06:83:ad:ad:ae:1e:a8:f4:d0:fe:
                    9d:a6:9c:64:45:e2:03:7a:4d:54:30:3e:56:7f:69:
                    04:db:c8:f9:78:7a:7b:b9:65:52:06:9a:7d:a4:5d:
                    a6:e1:5c:ac:e5:36:84:71:12:ee:11:92:fb:04:7d:
                    14:8e:7b:f2:61:cd:02:08:a9:dc:03:f3:3e:c6:dc:
                    93:5f:aa:38:89:e2:70:63:8d:96:3e:15:2c:12:71:
                    2a:a9:6c:d9:00:f3:03:4b:98:cd:06:ad:8d:8f:98:
                    03:d5:fd:27:f9:c6:95:68:ab:78:b3:22:9a:34:ef:
                    36:ce:d8:5f:c1:29:7e:f8:38:c6:45:ca:d0:a6:ca:
                    ee:d8:fd:df:76:03:90:92:cc:16:4c:55:8c:df:23:
                    be:a6:97:63:b4:13:56:bb:ee:93:42:ff:06:4f:8e:
                    ec:0c:e2:b5:db:2b:58:54:34:43:01:ee:f2:ed:b4:
                    40:32:be:b9:1d:a7:97:3a:82:d2:b0:a4:69:e0:40:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CD:52:99:29:51:F3:4C:3D:CE:45:33:2C:62:0D:88:36:07:58:78
            X509v3 Authority Key Identifier:
                keyid:AE:7F:53:DA:33:01:84:7B:E9:FC:FB:81:FB:BD:12:76:43:2F:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/0/AE7F53DA3301847BE9FCFB81FBBD1276432FCFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:fc:15:b5:66:b3:80:55:77:a7:ea:15:87:ef:49:5d:e8:
         29:c5:6e:11:18:17:b1:b8:18:44:44:63:cc:77:1d:1a:57:51:
         6c:9d:9d:49:a6:99:ca:95:4f:db:65:02:35:2f:6f:50:51:1f:
         9e:9c:85:90:21:e5:c4:69:eb:a1:51:97:df:b7:a1:3a:09:cd:
         ac:7f:8b:f0:57:1f:5e:05:6b:fe:a9:af:f9:2c:01:f7:56:5e:
         b1:ad:e4:bc:45:d2:14:eb:65:a1:f9:7f:72:00:e0:a4:4e:86:
         2b:aa:49:f1:60:81:b9:ab:1e:20:6f:1a:44:50:56:fc:c9:31:
         67:f9:75:70:e1:d3:8e:ae:89:45:e7:0e:8a:29:ee:ab:c8:2b:
         1c:10:73:b3:69:97:a6:3f:6b:21:4e:c4:4a:ad:a7:73:1b:40:
         40:60:38:06:9d:34:00:a7:4e:97:cf:c7:4f:ad:ce:25:b0:ab:
         d6:74:df:5a:cd:43:30:9d:87:04:0c:b9:b6:13:16:32:ca:63:
         db:7e:40:37:a6:2e:19:a3:59:d1:fc:74:69:8b:47:d1:87:cc:
         f6:f4:c1:8a:da:8d:15:80:28:9a:cf:e5:21:d0:a1:41:27:0e:
         2e:d8:a5:5e:71:94:22:45:82:0e:31:e9:f8:53:85:ed:ff:f2:
         16:1b:7f:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIuOMZDBKqQ2nktnh5+yEnLknDOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU3RjUzREEzMzAxODQ3QkU5RkNGQjgxRkJCRDEyNzY0
MzJGQ0ZCRjAeFw0yMzEyMTEyMTI2MTdaFw0yMzEyMTMwMDM5MTdaMDMxMTAvBgNV
BAMTKDgzQ0Q1Mjk5Mjk1MUYzNEMzRENFNDUzMzJDNjIwRDg4MzYwNzU4NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8kGsFGkbNjiQ4ceFKMwUX6ag
LEjeqoICJABNfowI5w81+90V382q1DYXXRxS10zhhPCQqxVW9EvmQErSAEI8BoOt
ra4eqPTQ/p2mnGRF4gN6TVQwPlZ/aQTbyPl4enu5ZVIGmn2kXabhXKzlNoRxEu4R
kvsEfRSOe/JhzQIIqdwD8z7G3JNfqjiJ4nBjjZY+FSwScSqpbNkA8wNLmM0GrY2P
mAPV/Sf5xpVoq3izIpo07zbO2F/BKX74OMZFytCmyu7Y/d92A5CSzBZMVYzfI76m
l2O0E1a77pNC/wZPjuwM4rXbK1hUNEMB7vLttEAyvrkdp5c6gtKwpGngQEt5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUg81SmSlR80w9zkUzLGINiDYHWHgwHwYDVR0j
BBgwFoAUrn9T2jMBhHvp/PuB+70SdkMvz78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzFuNGh5cnV1ZGFFdHpnTGJoZXU4ZEx0d1F5UHB0NHZ6czdVYmliMTFV
UUMvMC9BRTdGNTNEQTMzMDE4NDdCRTlGQ0ZCODFGQkJEMTI3NjQzMkZDRkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFN0Y1M0RBMzMwMTg0N0JF
OUZDRkI4MUZCQkQxMjc2NDMyRkNGQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzFuNGh5cnV1ZGFFdHpnTGJoZXU4ZEx0d1F5UHB0NHZ6czdVYmliMTFVUUMvMC9B
RTdGNTNEQTMzMDE4NDdCRTlGQ0ZCODFGQkJEMTI3NjQzMkZDRkJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj1j8FbVms4BVd6fqFYfvSV3oKcVuERgXsbgYRERjzHcdGldRbJ2dSaaZypVP
22UCNS9vUFEfnpyFkCHlxGnroVGX37ehOgnNrH+L8FcfXgVr/qmv+SwB91Zesa3k
vEXSFOtlofl/cgDgpE6GK6pJ8WCBuaseIG8aRFBW/MkxZ/l1cOHTjq6JRecOiinu
q8grHBBzs2mXpj9rIU7ESq2ncxtAQGA4Bp00AKdOl8/HT63OJbCr1nTfWs1DMJ2H
BAy5thMWMspj235AN6YuGaNZ0fx0aYtH0YfM9vTBitqNFYAoms/lIdChQScOLtil
XnGUIkWCDjHp+FOF7f/yFht/Sg==
-----END CERTIFICATE-----