Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.mft
File:                     DF563158661BF15D74E352702AFF21D97D2FBCCD.mft (raw, json)
Hash identifier:          TV5tzDBezx9TCiKwiFw70uT9tZ39AceEKA/pupt+uAg=
Subject key identifier:   4A:F0:F0:49:D0:B3:F3:CE:D8:28:99:33:01:2A:26:A7:97:7D:DA:93
Authority key identifier: DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD
Certificate issuer:       /CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
Certificate serial:       14B198C89F5191CE2192171943E490E566CE4515
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.mft
Manifest number:          77
Signing time:             Sun 14 Apr 2024 19:56:29 +0000
Manifest this update:     Sun 14 Apr 2024 19:51:29 +0000
Manifest next update:     Mon 15 Apr 2024 22:48:29 +0000
Files and hashes:         1: DF563158661BF15D74E352702AFF21D97D2FBCCD.crl (hash: 48E3qsrobQK3su/wfL90U+xSQjzbDcroswNQFOp9atg=)
                          2: 323830343a373730303a3a2f33322d313238203d3e20323731313438.roa (hash: VuG2qaAKDoYFOECfOwMquL5b/V08CwnrBEtEdBHC8S4=)
                          3: 3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa (hash: eRfSnRElalFaLMrAAEblufNw1JY0GPrZdCkIujYH1mo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b1:98:c8:9f:51:91:ce:21:92:17:19:43:e4:90:e5:66:ce:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
        Validity
            Not Before: Apr 14 19:51:29 2024 GMT
            Not After : Apr 15 22:48:29 2024 GMT
        Subject: CN=4AF0F049D0B3F3CED8289933012A26A7977DDA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:ee:7a:fc:fd:ef:b5:a4:31:d5:9d:25:33:
                    57:32:ed:90:16:e7:b6:2d:9f:61:9a:4d:b0:e7:6e:
                    07:79:e2:8b:bb:fc:ba:ba:79:85:c6:c2:31:80:ad:
                    c7:2f:9a:10:0a:18:57:8c:af:59:44:6c:4e:a1:a3:
                    1f:eb:7b:f3:0d:29:8e:64:14:af:76:63:35:80:45:
                    3e:74:2e:12:75:f3:fb:98:22:18:2e:41:0a:2d:8c:
                    a7:e5:68:8f:08:31:ab:5e:eb:9f:af:8a:59:93:34:
                    07:80:8e:99:3b:81:46:cd:9d:7f:73:b6:16:27:1d:
                    9b:59:bb:e5:57:c2:60:3e:37:47:4a:d1:65:8b:66:
                    c9:67:d3:2b:e1:0d:41:d8:f9:57:ed:aa:a6:f4:f0:
                    f2:ae:9c:ff:43:7a:97:ad:1a:24:2e:46:65:1f:5b:
                    f8:7e:49:c9:f4:fb:99:ea:44:c1:9c:7a:74:fd:9c:
                    a8:75:ca:fb:8a:43:4a:4e:62:4b:c7:2a:b5:ee:8a:
                    8c:5c:07:6b:a5:81:96:d1:a6:20:ac:f2:13:c1:6d:
                    03:c8:d8:9d:51:a9:32:84:a7:cc:9c:11:bc:ab:b1:
                    36:94:4c:49:84:40:79:42:8a:86:28:e5:4d:eb:d9:
                    93:11:2f:4e:96:ce:12:3d:45:aa:b2:96:65:a5:96:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:F0:49:D0:B3:F3:CE:D8:28:99:33:01:2A:26:A7:97:7D:DA:93
            X509v3 Authority Key Identifier:
                keyid:DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:92:f1:4d:6a:59:d6:e9:23:f6:79:5b:5a:a8:bb:e3:69:
         da:ed:e3:ca:31:5b:e6:51:a1:17:e4:be:6b:8e:2b:1a:e6:8d:
         32:5b:48:bd:f0:30:51:e2:79:d8:f3:c1:83:66:4a:25:04:12:
         c3:a2:bb:cf:5e:cf:13:bf:b4:05:17:dc:88:d1:de:0a:42:b6:
         00:28:34:bc:41:ef:3e:46:3a:3d:ce:56:ae:11:84:06:36:83:
         0f:8d:c7:e7:d1:6e:3c:29:50:02:3d:a9:ae:07:6e:f8:58:c6:
         6d:95:b0:25:75:35:63:9f:eb:c9:03:25:24:42:eb:27:5f:93:
         aa:db:05:d6:ac:54:61:e2:72:a2:87:1d:0d:10:52:16:92:21:
         ca:82:cf:5b:7f:83:3a:e7:46:2d:57:86:55:52:33:d7:19:59:
         d0:e9:4d:50:57:81:3b:eb:12:66:bc:8c:2e:ed:60:84:75:06:
         14:16:bc:5d:41:ee:b6:17:c3:97:78:70:f7:ef:d4:56:10:31:
         93:09:2e:5f:e2:34:b2:f7:34:fa:13:7e:d3:b0:d8:86:a0:89:
         48:98:e1:08:94:44:f9:40:ac:dd:fe:7e:ed:0a:08:a7:bf:83:
         bf:71:66:0f:2c:96:b7:87:77:71:a2:1b:d2:22:70:c1:3b:9f:
         47:c9:c2:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFLGYyJ9Rkc4hkhcZQ+SQ5WbORRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY1NjMxNTg2NjFCRjE1RDc0RTM1MjcwMkFGRjIxRDk3
RDJGQkNDRDAeFw0yNDA0MTQxOTUxMjlaFw0yNDA0MTUyMjQ4MjlaMDMxMTAvBgNV
BAMTKDRBRjBGMDQ5RDBCM0YzQ0VEODI4OTkzMzAxMkEyNkE3OTc3RERBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLY+56/P3vtaQx1Z0lM1cy7ZAW
57Ytn2GaTbDnbgd54ou7/Lq6eYXGwjGArccvmhAKGFeMr1lEbE6hox/re/MNKY5k
FK92YzWART50LhJ18/uYIhguQQotjKflaI8IMate65+vilmTNAeAjpk7gUbNnX9z
thYnHZtZu+VXwmA+N0dK0WWLZsln0yvhDUHY+Vftqqb08PKunP9DepetGiQuRmUf
W/h+Scn0+5nqRMGcenT9nKh1yvuKQ0pOYkvHKrXuioxcB2ulgZbRpiCs8hPBbQPI
2J1RqTKEp8ycEbyrsTaUTEmEQHlCioYo5U3r2ZMRL06WzhI9RaqylmWlluwLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSvDwSdCz887YKJkzASomp5d92pMwHwYDVR0j
BBgwFoAU31YxWGYb8V1041JwKv8h2X0vvM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN25NTk1LbmFyQkNtZ01qTXQ2OEFpYnhOZHQxYmRwbnQ0NmFlZ3l0Mm96
RkYvMC9ERjU2MzE1ODY2MUJGMTVENzRFMzUyNzAyQUZGMjFEOTdEMkZCQ0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGNTYzMTU4NjYxQkYxNUQ3
NEUzNTI3MDJBRkYyMUQ5N0QyRkJDQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N25NTk1LbmFyQkNtZ01qTXQ2OEFpYnhOZHQxYmRwbnQ0NmFlZ3l0Mm96RkYvMC9E
RjU2MzE1ODY2MUJGMTVENzRFMzUyNzAyQUZGMjFEOTdEMkZCQ0NELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASn2S8U1qWdbpI/Z5W1qou+Np2u3jyjFb5lGhF+S+a44rGuaNMltIvfAwUeJ5
2PPBg2ZKJQQSw6K7z17PE7+0BRfciNHeCkK2ACg0vEHvPkY6Pc5WrhGEBjaDD43H
59FuPClQAj2prgdu+FjGbZWwJXU1Y5/ryQMlJELrJ1+TqtsF1qxUYeJyoocdDRBS
FpIhyoLPW3+DOudGLVeGVVIz1xlZ0OlNUFeBO+sSZryMLu1ghHUGFBa8XUHuthfD
l3hw9+/UVhAxkwkuX+I0svc0+hN+07DYhqCJSJjhCJRE+UCs3f5+7QoIp7+Dv3Fm
DyyWt4d3caIb0iJwwTufR8nCvQ==
-----END CERTIFICATE-----