Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.mft
File:                     BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.mft (raw, json)
Hash identifier:          fQ5h1+EtByu5VD6qST71dDsN2r1DxVCDJ+VLmHLbLrQ=
Subject key identifier:   7C:BF:73:2E:91:2F:4C:65:49:98:50:01:48:EB:2F:F1:F3:05:D9:09
Authority key identifier: BD:AE:36:2D:19:4E:90:D5:AA:66:D8:EC:2F:F6:C2:1A:5F:3F:4B:09
Certificate issuer:       /CN=BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09
Certificate serial:       70EDEAC7B53D6077AFD59FFEDE37BFAA4D659D8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.mft
Manifest number:          37
Signing time:             Sun 14 Apr 2024 20:42:58 +0000
Manifest this update:     Sun 14 Apr 2024 20:37:58 +0000
Manifest next update:     Mon 15 Apr 2024 21:32:58 +0000
Files and hashes:         1: 3139302e322e36342e302f32322d3332203d3e20323730333137.roa (hash: IpjfLB6kLLcROOU1aK1y7gTevxEPnOXyRACC63l23oY=)
                          2: 323830343a366132633a3a2f33322d313238203d3e20323730333137.roa (hash: 0zDfJvmdS9ualsMfwhx25pl0PZMKY7Wo0aF1vLBa+gQ=)
                          3: BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.crl (hash: Knk9O86YBRUGpmpbjBBlU5RY+EnWNZJBpIQCPpnOXOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:ea:c7:b5:3d:60:77:af:d5:9f:fe:de:37:bf:aa:4d:65:9d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09
        Validity
            Not Before: Apr 14 20:37:58 2024 GMT
            Not After : Apr 15 21:32:58 2024 GMT
        Subject: CN=7CBF732E912F4C654998500148EB2FF1F305D909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:50:b8:d3:83:d9:7d:d2:5e:5e:4b:1d:f3:8c:
                    ef:86:1b:37:a0:0e:23:18:c3:c9:fd:fd:2f:91:1c:
                    c2:3c:a7:ac:16:76:52:c3:21:0f:6c:e2:d7:cf:a2:
                    40:78:b6:82:2e:0c:42:96:df:3c:86:d1:8c:2a:04:
                    51:bc:94:91:6d:46:95:9c:9b:3a:b6:5a:8d:03:87:
                    c9:9f:0c:63:b3:55:c2:a0:63:ef:61:8c:0e:4f:23:
                    a3:56:04:47:07:2e:93:5d:94:d1:41:4d:b4:4b:70:
                    d3:84:cb:52:29:94:9f:d9:9b:a9:36:97:74:85:b3:
                    d0:9d:94:e0:91:f6:c4:d2:40:7a:77:55:d6:33:60:
                    dc:f6:94:2f:bd:72:3c:14:ae:f1:2d:07:e2:fd:60:
                    aa:6c:57:0d:09:a3:e2:3a:06:ea:f4:7f:59:3b:29:
                    95:22:51:ba:04:c9:e9:81:be:32:6b:c0:c5:33:2f:
                    96:f9:26:6d:c1:0f:5c:8e:74:b9:d7:e5:cb:f1:a0:
                    63:df:38:22:31:db:66:86:53:55:d5:4c:1e:65:62:
                    48:6d:09:45:a1:9c:d4:16:f5:a2:04:75:24:fe:d1:
                    89:91:8e:c2:c9:ca:d1:2a:21:d8:bb:75:a4:53:94:
                    f5:cf:a0:43:f5:ed:06:bb:eb:05:43:bf:1e:23:58:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:73:2E:91:2F:4C:65:49:98:50:01:48:EB:2F:F1:F3:05:D9:09
            X509v3 Authority Key Identifier:
                keyid:BD:AE:36:2D:19:4E:90:D5:AA:66:D8:EC:2F:F6:C2:1A:5F:3F:4B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/BDAE362D194E90D5AA66D8EC2FF6C21A5F3F4B09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:27:b4:05:39:49:63:46:aa:06:ca:ac:bc:8e:bd:12:d9:0f:
         d4:e5:65:62:8a:fc:0f:2e:1e:a6:e0:ae:50:de:95:1c:b0:8a:
         cd:02:53:71:56:01:e4:f3:b3:ec:7d:1d:6c:d8:64:94:9d:3d:
         8b:96:a5:5a:31:3b:08:9f:97:e7:09:ba:9a:8e:e0:de:41:0a:
         98:07:d2:86:ed:48:b4:16:68:bc:92:c9:3a:6c:d5:82:ce:97:
         37:f9:f6:b4:e7:c9:d4:89:60:13:1a:77:d0:6d:5f:b4:13:79:
         4e:2f:37:41:27:b6:17:f8:59:24:9c:d9:84:ab:1c:76:33:3d:
         74:44:a5:f4:dc:9f:37:d7:4b:c0:a4:84:f3:67:43:d2:50:ac:
         38:92:75:3f:f6:bb:0c:a4:bd:e1:1d:bf:85:3d:63:4e:74:ca:
         e4:dc:4d:31:22:a3:cc:fd:dd:bd:b5:d8:51:39:47:3a:56:b5:
         f1:ac:28:a0:55:fd:b5:01:86:8a:74:f8:a9:a1:8e:06:40:18:
         24:78:44:13:b2:c4:47:b1:44:16:ec:a3:56:45:cd:5a:83:54:
         a3:5d:4b:14:cf:cf:6d:4a:7d:87:0f:da:cd:49:4f:4d:62:3d:
         37:fa:9c:95:f0:ba:56:c6:65:7d:ec:9e:69:21:7e:cd:88:d7:
         22:82:f2:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcO3qx7U9YHev1Z/+3je/qk1lnY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRBRTM2MkQxOTRFOTBENUFBNjZEOEVDMkZGNkMyMUE1
RjNGNEIwOTAeFw0yNDA0MTQyMDM3NThaFw0yNDA0MTUyMTMyNThaMDMxMTAvBgNV
BAMTKDdDQkY3MzJFOTEyRjRDNjU0OTk4NTAwMTQ4RUIyRkYxRjMwNUQ5MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpULjTg9l90l5eSx3zjO+GGzeg
DiMYw8n9/S+RHMI8p6wWdlLDIQ9s4tfPokB4toIuDEKW3zyG0YwqBFG8lJFtRpWc
mzq2Wo0Dh8mfDGOzVcKgY+9hjA5PI6NWBEcHLpNdlNFBTbRLcNOEy1IplJ/Zm6k2
l3SFs9CdlOCR9sTSQHp3VdYzYNz2lC+9cjwUrvEtB+L9YKpsVw0Jo+I6Bur0f1k7
KZUiUboEyemBvjJrwMUzL5b5Jm3BD1yOdLnX5cvxoGPfOCIx22aGU1XVTB5lYkht
CUWhnNQW9aIEdST+0YmRjsLJytEqIdi7daRTlPXPoEP17Qa76wVDvx4jWCflAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfL9zLpEvTGVJmFABSOsv8fMF2QkwHwYDVR0j
BBgwFoAUva42LRlOkNWqZtjsL/bCGl8/SwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pWQjdpRmtIUWNYNEVXTDU4cUtqVXppcmdnb0paWGRiaGVjcFRXMnRW
QnovMC9CREFFMzYyRDE5NEU5MEQ1QUE2NkQ4RUMyRkY2QzIxQTVGM0Y0QjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JEQUUzNjJEMTk0RTkwRDVB
QTY2RDhFQzJGRjZDMjFBNUYzRjRCMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0pWQjdpRmtIUWNYNEVXTDU4cUtqVXppcmdnb0paWGRiaGVjcFRXMnRWQnovMC9C
REFFMzYyRDE5NEU5MEQ1QUE2NkQ4RUMyRkY2QzIxQTVGM0Y0QjA5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeSe0BTlJY0aqBsqsvI69EtkP1OVlYor8Dy4epuCuUN6VHLCKzQJTcVYB5POz
7H0dbNhklJ09i5alWjE7CJ+X5wm6mo7g3kEKmAfShu1ItBZovJLJOmzVgs6XN/n2
tOfJ1IlgExp30G1ftBN5Ti83QSe2F/hZJJzZhKscdjM9dESl9NyfN9dLwKSE82dD
0lCsOJJ1P/a7DKS94R2/hT1jTnTK5NxNMSKjzP3dvbXYUTlHOla18awooFX9tQGG
inT4qaGOBkAYJHhEE7LER7FEFuyjVkXNWoNUo11LFM/PbUp9hw/azUlPTWI9N/qc
lfC6VsZlfeyeaSF+zYjXIoLy8Q==
-----END CERTIFICATE-----