Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/587D179811A7E0BA7871E3F527110F7B2D19F198.mft
File:                     587D179811A7E0BA7871E3F527110F7B2D19F198.mft (raw, json)
Hash identifier:          S7qnI4jl10YaxKqNJb7MbWw/ygdxbqK1ACHO7It/bxM=
Subject key identifier:   02:EE:01:1D:CC:8B:B6:D4:64:28:A1:3D:22:FA:FE:2E:49:4E:D4:01
Authority key identifier: 58:7D:17:98:11:A7:E0:BA:78:71:E3:F5:27:11:0F:7B:2D:19:F1:98
Certificate issuer:       /CN=587D179811A7E0BA7871E3F527110F7B2D19F198
Certificate serial:       185178B46A98F31F50F5E60E26DD6BBEA68B0882
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587D179811A7E0BA7871E3F527110F7B2D19F198.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/587D179811A7E0BA7871E3F527110F7B2D19F198.mft
Manifest number:          0C
Signing time:             Fri 22 Sep 2023 06:26:55 +0000
Manifest this update:     Fri 22 Sep 2023 06:21:55 +0000
Manifest next update:     Sat 23 Sep 2023 07:34:55 +0000
Files and hashes:         1: 587D179811A7E0BA7871E3F527110F7B2D19F198.crl (hash: GAcDtGvgtQpKD54kI0I7/TTtWXznKCBQ0A54DcyI0Hg=)
                          2: 323830343a373031303a3a2f33322d313238203d3e20323730373031.roa (hash: eVvRgGrMSGyTdvppMocUYunTfMri/enHaitEChjW+AA=)
                          3: 3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa (hash: NqhaVMKXe04sZnEIngH3h5Tbx9R4qsIKuxYN43t1Ljs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:51:78:b4:6a:98:f3:1f:50:f5:e6:0e:26:dd:6b:be:a6:8b:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587D179811A7E0BA7871E3F527110F7B2D19F198
        Validity
            Not Before: Sep 22 06:21:55 2023 GMT
            Not After : Sep 23 07:34:55 2023 GMT
        Subject: CN=02EE011DCC8BB6D46428A13D22FAFE2E494ED401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:e2:fd:db:20:68:a6:63:6a:b4:7a:8f:01:
                    24:5c:cf:4a:ee:3a:78:3e:b5:89:ee:a1:e7:b5:a1:
                    3e:7f:d6:a1:43:ea:59:0a:6c:79:1d:d7:1f:9b:54:
                    aa:a6:bf:b6:d6:84:04:88:73:ca:66:48:5a:31:8d:
                    d8:3a:e5:8c:45:b8:eb:b9:b1:4a:c4:61:62:de:6b:
                    e7:4a:91:62:9a:92:24:3f:ef:15:fc:86:b2:cd:61:
                    3e:b1:64:cb:3a:8f:85:12:e2:46:ed:c0:02:db:ed:
                    f8:86:c4:cf:72:e4:57:aa:d5:be:cd:21:e6:78:cb:
                    49:af:da:ee:4b:c8:d3:d2:34:72:9d:1f:ca:17:5e:
                    f8:d1:44:12:95:12:e8:61:bb:19:9a:48:ab:de:d7:
                    03:46:f6:50:11:e2:6e:c1:93:db:6f:11:64:46:41:
                    93:9c:ed:0b:6f:93:c7:99:06:6d:1c:c8:ce:ef:e3:
                    f4:e4:6c:7f:fd:76:af:b2:c8:a0:18:72:46:ab:91:
                    64:1f:84:83:27:a3:6a:8f:c2:87:dc:85:a0:72:41:
                    83:e7:48:4e:a6:57:97:40:28:ec:2e:80:fb:3a:7e:
                    16:82:33:af:74:ac:8d:3a:61:f8:1f:9f:5b:07:67:
                    1d:ee:0d:48:d1:ae:96:7e:ee:7a:e4:e6:21:25:5c:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:01:1D:CC:8B:B6:D4:64:28:A1:3D:22:FA:FE:2E:49:4E:D4:01
            X509v3 Authority Key Identifier:
                keyid:58:7D:17:98:11:A7:E0:BA:78:71:E3:F5:27:11:0F:7B:2D:19:F1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/587D179811A7E0BA7871E3F527110F7B2D19F198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/587D179811A7E0BA7871E3F527110F7B2D19F198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/587D179811A7E0BA7871E3F527110F7B2D19F198.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:38:59:93:6a:42:6a:4c:50:30:9c:1b:ba:fb:ae:40:c7:8a:
         ea:ea:0f:95:70:0f:0d:94:e8:65:2b:bf:a6:92:71:cc:c9:b3:
         a6:13:c2:65:b2:1b:bd:1d:bf:64:d1:66:0a:4d:52:e1:f8:e0:
         40:11:c7:de:da:27:85:e7:d6:6d:34:12:26:c3:87:c7:82:2f:
         34:ea:a4:7e:fe:82:b8:1e:af:c8:21:73:1a:e7:3d:20:bc:6f:
         22:00:e0:3f:3f:df:96:7a:82:99:8e:70:3d:80:77:5b:db:87:
         5a:fd:d6:c7:4c:63:eb:be:eb:12:58:c6:a1:d0:24:67:1e:10:
         c6:8b:d7:b1:4e:61:e9:1b:8e:39:ed:1b:67:a4:bf:9c:41:0a:
         66:b9:95:04:82:2b:2d:aa:c9:f8:ff:01:8c:32:71:24:a2:f7:
         04:a1:d8:c6:40:63:fd:30:f1:46:94:09:18:e0:3b:cc:8e:c1:
         6d:3f:bc:90:40:26:78:85:c1:40:8c:15:9a:0a:f3:5e:10:39:
         e4:a8:83:fe:58:5b:af:b3:92:c0:4f:ee:c8:a6:36:8c:f7:3b:
         f3:0f:e6:30:a1:5d:bd:b8:0d:c4:cf:93:ef:ce:12:19:40:6e:
         8b:3a:d1:52:af:0d:17:00:c0:0a:1f:b5:4b:37:1b:0f:6f:1a:
         dd:44:60:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGFF4tGqY8x9Q9eYOJt1rvqaLCIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg3RDE3OTgxMUE3RTBCQTc4NzFFM0Y1MjcxMTBGN0Iy
RDE5RjE5ODAeFw0yMzA5MjIwNjIxNTVaFw0yMzA5MjMwNzM0NTVaMDMxMTAvBgNV
BAMTKDAyRUUwMTFEQ0M4QkI2RDQ2NDI4QTEzRDIyRkFGRTJFNDk0RUQ0MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ouL92yBopmNqtHqPASRcz0ru
Ong+tYnuoee1oT5/1qFD6lkKbHkd1x+bVKqmv7bWhASIc8pmSFoxjdg65YxFuOu5
sUrEYWLea+dKkWKakiQ/7xX8hrLNYT6xZMs6j4US4kbtwALb7fiGxM9y5Feq1b7N
IeZ4y0mv2u5LyNPSNHKdH8oXXvjRRBKVEuhhuxmaSKve1wNG9lAR4m7Bk9tvEWRG
QZOc7Qtvk8eZBm0cyM7v4/TkbH/9dq+yyKAYckarkWQfhIMno2qPwofchaByQYPn
SE6mV5dAKOwugPs6fhaCM690rI06Yfgfn1sHZx3uDUjRrpZ+7nrk5iElXMJhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAu4BHcyLttRkKKE9Ivr+LklO1AEwHwYDVR0j
BBgwFoAUWH0XmBGn4Lp4ceP1JxEPey0Z8ZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIx
WHEvMC81ODdEMTc5ODExQTdFMEJBNzg3MUUzRjUyNzExMEY3QjJEMTlGMTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4N0QxNzk4MTFBN0UwQkE3
ODcxRTNGNTI3MTEwRjdCMkQxOUYxOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIxWHEvMC81
ODdEMTc5ODExQTdFMEJBNzg3MUUzRjUyNzExMEY3QjJEMTlGMTk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdjhZk2pCakxQMJwbuvuuQMeK6uoPlXAPDZToZSu/ppJxzMmzphPCZbIbvR2/
ZNFmCk1S4fjgQBHH3tonhefWbTQSJsOHx4IvNOqkfv6CuB6vyCFzGuc9ILxvIgDg
Pz/flnqCmY5wPYB3W9uHWv3Wx0xj677rEljGodAkZx4QxovXsU5h6RuOOe0bZ6S/
nEEKZrmVBIIrLarJ+P8BjDJxJKL3BKHYxkBj/TDxRpQJGOA7zI7BbT+8kEAmeIXB
QIwVmgrzXhA55KiD/lhbr7OSwE/uyKY2jPc78w/mMKFdvbgNxM+T784SGUBuizrR
Uq8NFwDACh+1SzcbD28a3URgXA==
-----END CERTIFICATE-----