Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft
File:                     67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft (raw, json)
Hash identifier:          88ZGd3NUNbSuIXuTrEeoUdWZ8cQ5RfHEWNFyijxAHTQ=
Subject key identifier:   5F:58:2D:FF:AB:78:C3:9B:25:C8:B9:38:61:C0:89:5C:23:A1:91:B4
Authority key identifier: 67:F9:F3:AF:B6:CC:A6:AC:41:CA:29:62:B8:CD:ED:84:54:09:A8:F0
Certificate issuer:       /CN=67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0
Certificate serial:       68135845D028E2DB6B8073DF0633A9B22F824E44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft
Manifest number:          10
Signing time:             Sun 17 Apr 2022 09:20:00 +0000
Manifest this update:     Sun 17 Apr 2022 09:15:00 +0000
Manifest next update:     Mon 18 Apr 2022 12:04:00 +0000
Files and hashes:         1: 323830343a336334633a3a2f33322d3334203d3e20323636323032.roa (hash: zWYjS4bE7sV/FWNFS4lxdhEG1M7HgjTWyHG7Nu9hyhk=)
                          2: 67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.crl (hash: MxXyi9XKt8m65QkHE0n3Ns+5/9XnJqCn+TK28IkaR2o=)
                          3: 3139322e3134302e33362e302f32322d3234203d3e20323636323032.roa (hash: TXIW0ZUw96TKsFfDfu4b6YUcgWAms0pUFNlSfuiLXhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:13:58:45:d0:28:e2:db:6b:80:73:df:06:33:a9:b2:2f:82:4e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0
        Validity
            Not Before: Apr 17 09:15:00 2022 GMT
            Not After : Apr 18 12:04:00 2022 GMT
        Subject: CN=5F582DFFAB78C39B25C8B93861C0895C23A191B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:c5:a4:cf:ff:a2:98:2b:29:80:f4:dd:7b:
                    3c:ec:a5:32:b5:16:2e:75:86:8d:3d:c2:25:26:8c:
                    f0:34:b5:9d:3c:db:70:3b:ad:d3:7a:07:d0:9f:8d:
                    27:03:e4:90:d5:5c:0a:48:d2:2a:06:ca:ef:df:6b:
                    93:e9:3a:f0:71:02:31:7d:53:af:a8:6d:8f:6f:ff:
                    fb:b0:d6:ac:b8:c2:b9:16:fe:bb:4a:22:63:19:20:
                    6e:f9:6f:bc:98:54:0a:b0:3a:a4:42:96:2a:1d:9d:
                    84:65:df:01:e9:d4:96:37:ef:3e:44:86:6c:14:7f:
                    46:c5:20:d7:65:83:47:8e:e8:ac:9a:27:39:39:e9:
                    a9:64:f1:5d:26:f3:ee:dc:8c:e0:ac:fc:d9:38:89:
                    53:66:cc:26:4a:3c:a7:e0:3d:7a:28:62:02:b9:13:
                    5b:25:6e:e1:95:83:81:2f:be:3b:16:59:71:b9:70:
                    ff:b9:4a:72:b3:53:10:d2:dd:3a:86:a9:da:9f:02:
                    76:77:dd:cc:a7:f7:91:53:aa:78:ab:8f:78:58:c2:
                    26:0f:fa:76:42:1c:22:a0:ed:90:48:f7:52:61:86:
                    e0:81:e9:81:9b:b2:dc:67:f9:a8:c1:d2:bc:94:75:
                    ff:91:ee:92:8f:4e:e5:c3:41:db:77:cb:d5:a1:3c:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:58:2D:FF:AB:78:C3:9B:25:C8:B9:38:61:C0:89:5C:23:A1:91:B4
            X509v3 Authority Key Identifier:
                keyid:67:F9:F3:AF:B6:CC:A6:AC:41:CA:29:62:B8:CD:ED:84:54:09:A8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:1c:fd:d3:ae:a6:3c:49:c4:eb:63:03:b6:2c:b5:af:80:fa:
         f0:32:6b:ec:ec:77:72:cc:b8:cb:dd:c6:3d:4e:41:46:ce:51:
         41:31:6c:b8:81:f1:14:75:d0:c3:64:cd:3f:e3:4b:f1:2e:eb:
         fa:23:0a:ab:9f:f0:ba:11:ab:9e:d7:b5:58:ec:42:74:c8:47:
         e9:8a:53:eb:82:74:9e:53:5e:d7:06:c9:42:ff:53:aa:e4:91:
         bb:84:6e:78:93:38:cd:10:59:55:07:77:07:60:e2:7a:51:93:
         4c:bf:1f:b2:63:df:c0:59:37:68:11:e4:92:9b:fd:20:01:17:
         3c:b1:6c:68:2a:60:1e:38:9e:64:e3:c3:51:0d:5b:83:a9:01:
         e9:40:58:2d:1e:81:17:34:d0:b1:e5:9f:3a:e5:3d:ad:e0:8c:
         a0:2f:fa:88:ca:33:03:26:cf:22:d4:d4:d5:f1:9f:50:77:27:
         0b:45:82:ed:0f:f1:c7:3c:d1:f7:3b:85:9b:b8:db:62:18:98:
         fc:4f:2a:ba:47:ab:95:c0:74:57:81:f2:17:91:01:3b:7d:96:
         df:dd:7e:db:e1:24:3a:1d:19:ab:17:16:ec:e2:7c:a1:26:70:
         7a:81:b3:da:8d:8a:31:fb:6e:82:4f:52:92:46:3b:12:53:5d:
         f4:a2:02:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaBNYRdAo4ttrgHPfBjOpsi+CTkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdGOUYzQUZCNkNDQTZBQzQxQ0EyOTYyQjhDREVEODQ1
NDA5QThGMDAeFw0yMjA0MTcwOTE1MDBaFw0yMjA0MTgxMjA0MDBaMDMxMTAvBgNV
BAMTKDVGNTgyREZGQUI3OEMzOUIyNUM4QjkzODYxQzA4OTVDMjNBMTkxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTG8Wkz/+imCspgPTdezzspTK1
Fi51ho09wiUmjPA0tZ0823A7rdN6B9CfjScD5JDVXApI0ioGyu/fa5PpOvBxAjF9
U6+obY9v//uw1qy4wrkW/rtKImMZIG75b7yYVAqwOqRCliodnYRl3wHp1JY37z5E
hmwUf0bFINdlg0eO6KyaJzk56alk8V0m8+7cjOCs/Nk4iVNmzCZKPKfgPXooYgK5
E1slbuGVg4EvvjsWWXG5cP+5SnKzUxDS3TqGqdqfAnZ33cyn95FTqnirj3hYwiYP
+nZCHCKg7ZBI91JhhuCB6YGbstxn+ajB0ryUdf+R7pKPTuXDQdt3y9WhPDBfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX1gt/6t4w5slyLk4YcCJXCOhkbQwHwYDVR0j
BBgwFoAUZ/nzr7bMpqxByiliuM3thFQJqPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VnUDF1TGhKaTlZb25XRHQ3UFQ3Tkx1WndkYk04VmVrMUwzN0ZSZ0pl
N1YvMC82N0Y5RjNBRkI2Q0NBNkFDNDFDQTI5NjJCOENERUQ4NDU0MDlBOEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RjlGM0FGQjZDQ0E2QUM0
MUNBMjk2MkI4Q0RFRDg0NTQwOUE4RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3VnUDF1TGhKaTlZb25XRHQ3UFQ3Tkx1WndkYk04VmVrMUwzN0ZSZ0plN1YvMC82
N0Y5RjNBRkI2Q0NBNkFDNDFDQTI5NjJCOENERUQ4NDU0MDlBOEYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6Bz9066mPEnE62MDtiy1r4D68DJr7Ox3csy4y93GPU5BRs5RQTFsuIHxFHXQ
w2TNP+NL8S7r+iMKq5/wuhGrnte1WOxCdMhH6YpT64J0nlNe1wbJQv9TquSRu4Ru
eJM4zRBZVQd3B2DielGTTL8fsmPfwFk3aBHkkpv9IAEXPLFsaCpgHjieZOPDUQ1b
g6kB6UBYLR6BFzTQseWfOuU9reCMoC/6iMozAybPItTU1fGfUHcnC0WC7Q/xxzzR
9zuFm7jbYhiY/E8qukerlcB0V4HyF5EBO32W391+2+EkOh0ZqxcW7OJ8oSZweoGz
2o2KMftugk9SkkY7ElNd9KICoA==
-----END CERTIFICATE-----