Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/4CA2099C40507994E0D22468C36B2991BEB4BC9F.mft
File:                     4CA2099C40507994E0D22468C36B2991BEB4BC9F.mft (raw, json)
Hash identifier:          /8r6KxodUnTkkgbgxFEY2scINcubI2+RqD7137xC/lE=
Subject key identifier:   7E:8F:C4:01:B6:FF:07:07:91:B9:70:5E:41:2D:AA:C8:27:0D:C2:AE
Authority key identifier: 4C:A2:09:9C:40:50:79:94:E0:D2:24:68:C3:6B:29:91:BE:B4:BC:9F
Certificate issuer:       /CN=4CA2099C40507994E0D22468C36B2991BEB4BC9F
Certificate serial:       2678EACF5A20B50875CDBE9BAB5397C1CD2222A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA2099C40507994E0D22468C36B2991BEB4BC9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/4CA2099C40507994E0D22468C36B2991BEB4BC9F.mft
Manifest number:          58
Signing time:             Sat 24 Aug 2024 23:00:10 +0000
Manifest this update:     Sat 24 Aug 2024 22:55:10 +0000
Manifest next update:     Mon 26 Aug 2024 01:28:10 +0000
Files and hashes:         1: 3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (hash: K2yC6zMmf7koVr9BFIlEQfFOp428bTD35d0/mc7UChc=)
                          2: 323830343a373634633a3a2f33322d3634203d3e20323731313032.roa (hash: 2uMGkkaH+7UhWWQOvC7icJCH9nviysUQhsdpWWePD98=)
                          3: 4CA2099C40507994E0D22468C36B2991BEB4BC9F.crl (hash: Dxe5uyQHZhWC/B8Q7dUJlkxvF84TGhwV0zwiuPm/Z6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:78:ea:cf:5a:20:b5:08:75:cd:be:9b:ab:53:97:c1:cd:22:22:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA2099C40507994E0D22468C36B2991BEB4BC9F
        Validity
            Not Before: Aug 24 22:55:10 2024 GMT
            Not After : Aug 26 01:28:10 2024 GMT
        Subject: CN=7E8FC401B6FF070791B9705E412DAAC8270DC2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:3c:d3:e8:77:72:a2:4e:50:e2:46:ce:1f:
                    8e:55:f5:43:33:8b:6a:bc:17:e3:d1:1d:c2:0f:38:
                    9a:ee:c6:6a:36:53:ae:71:5b:5a:65:ce:7b:d9:73:
                    e7:33:3a:24:b2:0f:05:35:75:80:25:85:82:c8:f6:
                    c9:65:9c:5c:84:c4:d0:d5:29:1f:51:20:8e:6a:3f:
                    fb:6e:11:d2:67:b3:43:08:f0:18:87:3f:48:d7:21:
                    b1:8e:b0:2b:dc:c8:a5:71:29:6b:0d:a2:4c:c1:fb:
                    d6:8c:77:b6:0a:0d:14:bd:88:ce:2c:fa:2e:01:6c:
                    d3:df:2f:fb:83:0b:d0:73:f7:54:d7:37:61:4e:94:
                    17:22:57:c5:15:72:d8:ad:87:f3:ff:a3:8a:eb:e2:
                    38:58:63:5c:e0:21:ae:49:41:d8:4e:7c:45:c8:e3:
                    a4:11:b6:13:b9:7f:a1:d2:5f:fe:c5:0e:f0:ba:9c:
                    78:54:65:9d:39:72:28:f8:2d:02:30:96:23:30:e0:
                    d8:85:ce:48:38:1d:78:d2:71:2c:c7:0a:d5:61:d5:
                    70:4a:bf:88:9b:5c:1c:8b:0c:11:e0:96:ae:2f:96:
                    4f:6e:cb:e8:d8:19:f9:0d:a9:e7:dc:82:eb:2d:54:
                    04:97:32:63:9d:bf:6f:b7:08:fe:dd:63:46:f0:4c:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:C4:01:B6:FF:07:07:91:B9:70:5E:41:2D:AA:C8:27:0D:C2:AE
            X509v3 Authority Key Identifier:
                keyid:4C:A2:09:9C:40:50:79:94:E0:D2:24:68:C3:6B:29:91:BE:B4:BC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/4CA2099C40507994E0D22468C36B2991BEB4BC9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA2099C40507994E0D22468C36B2991BEB4BC9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/4CA2099C40507994E0D22468C36B2991BEB4BC9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:4a:96:d9:14:37:73:99:d3:f2:cc:44:98:ff:e0:c3:2a:
         0d:e8:a3:0e:38:e9:7e:03:38:c8:9c:6c:99:31:51:45:d5:d3:
         ca:ed:f3:db:21:58:41:c8:28:bf:66:66:94:c4:ab:fe:3f:50:
         f1:11:e4:62:ed:42:d7:6d:8a:41:60:d6:d4:3d:b1:d9:9b:de:
         a9:43:ea:cd:c4:b5:28:18:5d:91:9e:a3:a8:be:cc:6f:fa:df:
         87:8a:3c:ec:df:5e:1b:d8:55:16:a6:b3:f1:24:82:eb:7a:16:
         96:0e:81:6e:f1:5b:7a:e4:4c:3d:a4:f3:3a:d0:88:0a:91:ce:
         4e:c6:92:34:46:97:c3:a1:a0:20:6d:cf:50:d8:56:28:70:6b:
         a8:e4:c7:e0:ac:61:22:20:4a:ac:22:22:a6:4d:23:95:94:48:
         12:7b:fe:98:5f:61:9c:53:b3:ad:8e:97:95:6d:26:5e:17:04:
         7d:15:01:3c:ce:64:6a:a8:6a:9d:4b:9c:01:ae:84:2a:d2:38:
         fd:31:29:49:d6:30:b2:ee:cd:88:21:5e:5a:b1:fa:0f:ed:64:
         32:e1:31:9b:a2:78:24:bd:fc:a6:7f:8e:56:df:21:73:6f:70:
         a7:3a:65:5e:ee:e2:8c:fd:5d:ec:ce:48:57:3f:99:67:b4:b8:
         60:b9:e6:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJnjqz1ogtQh1zb6bq1OXwc0iIqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENBMjA5OUM0MDUwNzk5NEUwRDIyNDY4QzM2QjI5OTFC
RUI0QkM5RjAeFw0yNDA4MjQyMjU1MTBaFw0yNDA4MjYwMTI4MTBaMDMxMTAvBgNV
BAMTKDdFOEZDNDAxQjZGRjA3MDc5MUI5NzA1RTQxMkRBQUM4MjcwREMyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwTzT6Hdyok5Q4kbOH45V9UMz
i2q8F+PRHcIPOJruxmo2U65xW1plznvZc+czOiSyDwU1dYAlhYLI9sllnFyExNDV
KR9RII5qP/tuEdJns0MI8BiHP0jXIbGOsCvcyKVxKWsNokzB+9aMd7YKDRS9iM4s
+i4BbNPfL/uDC9Bz91TXN2FOlBciV8UVctith/P/o4rr4jhYY1zgIa5JQdhOfEXI
46QRthO5f6HSX/7FDvC6nHhUZZ05cij4LQIwliMw4NiFzkg4HXjScSzHCtVh1XBK
v4ibXByLDBHglq4vlk9uy+jYGfkNqefcgustVASXMmOdv2+3CP7dY0bwTBQrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfo/EAbb/BweRuXBeQS2qyCcNwq4wHwYDVR0j
BBgwFoAUTKIJnEBQeZTg0iRow2spkb60vJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JoVllUVHlOR2tRM0dkOUNaUDRGeGZTd2gyUEREeUVCU3dSWmlnSHly
dWcvMC80Q0EyMDk5QzQwNTA3OTk0RTBEMjI0NjhDMzZCMjk5MUJFQjRCQzlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIwOTlDNDA1MDc5OTRF
MEQyMjQ2OEMzNkIyOTkxQkVCNEJDOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0JoVllUVHlOR2tRM0dkOUNaUDRGeGZTd2gyUEREeUVCU3dSWmlnSHlydWcvMC80
Q0EyMDk5QzQwNTA3OTk0RTBEMjI0NjhDMzZCMjk5MUJFQjRCQzlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbJJKltkUN3OZ0/LMRJj/4MMqDeijDjjpfgM4yJxsmTFRRdXTyu3z2yFYQcgo
v2ZmlMSr/j9Q8RHkYu1C122KQWDW1D2x2ZveqUPqzcS1KBhdkZ6jqL7Mb/rfh4o8
7N9eG9hVFqaz8SSC63oWlg6BbvFbeuRMPaTzOtCICpHOTsaSNEaXw6GgIG3PUNhW
KHBrqOTH4KxhIiBKrCIipk0jlZRIEnv+mF9hnFOzrY6XlW0mXhcEfRUBPM5kaqhq
nUucAa6EKtI4/TEpSdYwsu7NiCFeWrH6D+1kMuExm6J4JL38pn+OVt8hc29wpzpl
Xu7ijP1d7M5IVz+ZZ7S4YLnmYw==
-----END CERTIFICATE-----