Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
File:                     130B968B1EDC329E460C55006CCB5A9D396FEF29.mft (raw, json)
Hash identifier:          9H7hqdISJwXwPVdXEZj8rmrKP/l8z0UGrmaMzMDjtXM=
Subject key identifier:   73:85:F8:E9:72:3C:42:DF:73:A1:FD:69:56:6E:62:56:2E:C5:84:BA
Authority key identifier: 13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
Certificate issuer:       /CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
Certificate serial:       6D0F1A3A45527E7C7F2935C557E3729A30EE775D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
Manifest number:          0220
Signing time:             Wed 17 Jan 2024 18:24:57 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:57 +0000
Manifest next update:     Thu 18 Jan 2024 19:11:57 +0000
Files and hashes:         1: 3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa (hash: 11QW2CPzt6twFUXHPTslykjxYhPRdjk5bn0iIv6BYmo=)
                          2: 323830343a316463343a3a2f33322d3335203d3e20323634333932.roa (hash: PRRDFwApD25ZiPs2R7DqpxjLWr2c/F1xqSz6Wz8oDCI=)
                          3: 130B968B1EDC329E460C55006CCB5A9D396FEF29.crl (hash: UH1CCdHpS9aNkTsB+OZ6WB2tR2c03F8tA/PanKxns8c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:1a:3a:45:52:7e:7c:7f:29:35:c5:57:e3:72:9a:30:ee:77:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
        Validity
            Not Before: Jan 17 18:19:57 2024 GMT
            Not After : Jan 18 19:11:57 2024 GMT
        Subject: CN=7385F8E9723C42DF73A1FD69566E62562EC584BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:4e:f8:af:e7:1d:e7:d0:88:ac:02:5e:b8:
                    c2:c6:25:8e:fb:2b:2a:83:3f:3a:51:18:56:b2:e5:
                    d4:46:cd:8e:41:7a:2e:2d:8e:ad:6d:14:48:fb:e5:
                    52:fd:dc:13:7c:c4:54:3c:4f:4b:ef:26:7b:6d:72:
                    03:4f:5f:d7:b6:d2:b4:35:f4:72:fb:43:fa:48:ce:
                    c7:8f:d9:6a:07:09:e7:b7:37:ad:a2:15:78:9e:2a:
                    81:c8:86:82:9a:69:cd:1e:7f:7c:c0:de:ea:61:2a:
                    e2:c8:62:12:f5:55:d4:52:b0:01:e1:5c:6c:bd:48:
                    de:68:f5:5c:84:f8:5c:e3:83:e1:37:a2:12:b0:4d:
                    a6:74:79:ac:88:e5:a9:fd:6f:b7:f8:22:dd:cb:b0:
                    67:42:b7:b1:4a:f1:11:b0:3a:f6:6e:22:8b:a8:ce:
                    81:19:5a:d2:70:03:5e:c7:86:ee:10:8a:26:5a:9e:
                    4e:37:18:3f:e8:24:c3:ed:26:cf:9d:df:6e:39:9b:
                    f1:1e:4e:f1:6c:60:e0:7c:1d:ae:c5:20:d5:e8:f0:
                    ab:52:c3:ea:67:37:9b:18:70:fb:b0:3d:66:a5:15:
                    0c:fc:c5:c9:bd:a1:3d:1d:f9:4d:6d:ab:0f:43:dc:
                    14:2f:c0:7c:67:d9:34:a1:fa:ae:6e:c9:45:66:64:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:85:F8:E9:72:3C:42:DF:73:A1:FD:69:56:6E:62:56:2E:C5:84:BA
            X509v3 Authority Key Identifier:
                keyid:13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:ff:03:bc:e7:2e:7c:14:be:e8:3f:f2:10:0a:d0:ad:25:
         bf:6a:20:7f:39:eb:63:5f:5e:33:36:78:1c:08:7f:91:59:4d:
         51:72:15:5e:eb:da:e7:07:89:2e:6d:ae:9b:17:79:e4:0b:bf:
         36:0a:80:8c:a8:f4:db:ff:46:ef:b1:d5:28:cb:d8:71:d3:ff:
         30:30:1b:79:05:84:b1:76:20:6a:7b:86:09:53:6d:54:b9:73:
         ac:f5:e8:fa:43:d2:2d:0c:1a:a0:b0:4d:21:2a:d8:51:37:db:
         d9:c3:b5:09:87:25:b4:ba:06:2a:13:4f:d4:bb:42:89:d4:fe:
         2b:79:2c:c4:d6:a8:fe:85:fa:3f:83:7f:d9:bd:c1:02:c7:fe:
         24:48:31:4a:c5:08:c6:c4:98:f6:8c:ef:c2:b7:7a:7e:b7:1c:
         30:1f:4e:8d:7a:81:81:e8:75:89:7e:49:26:66:c2:6c:68:33:
         b8:d6:be:31:89:e6:0b:27:a2:ec:ae:63:1b:bb:84:c6:3a:05:
         32:a7:32:13:59:f9:69:52:30:46:f1:35:7e:5a:cd:8c:4c:4b:
         f6:3a:83:4d:24:13:4d:10:33:bf:bc:8e:78:1f:b0:34:c5:ba:
         7a:26:67:63:ba:8c:aa:58:42:92:c3:dd:b2:80:38:87:c8:4f:
         3a:87:66:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbQ8aOkVSfnx/KTXFV+NymjDud10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQjk2OEIxRURDMzI5RTQ2MEM1NTAwNkNDQjVBOUQz
OTZGRUYyOTAeFw0yNDAxMTcxODE5NTdaFw0yNDAxMTgxOTExNTdaMDMxMTAvBgNV
BAMTKDczODVGOEU5NzIzQzQyREY3M0ExRkQ2OTU2NkU2MjU2MkVDNTg0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjk74r+cd59CIrAJeuMLGJY77
KyqDPzpRGFay5dRGzY5Bei4tjq1tFEj75VL93BN8xFQ8T0vvJnttcgNPX9e20rQ1
9HL7Q/pIzseP2WoHCee3N62iFXieKoHIhoKaac0ef3zA3uphKuLIYhL1VdRSsAHh
XGy9SN5o9VyE+Fzjg+E3ohKwTaZ0eayI5an9b7f4It3LsGdCt7FK8RGwOvZuIouo
zoEZWtJwA17Hhu4QiiZank43GD/oJMPtJs+d3245m/EeTvFsYOB8Ha7FINXo8KtS
w+pnN5sYcPuwPWalFQz8xcm9oT0d+U1tqw9D3BQvwHxn2TSh+q5uyUVmZJ35AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc4X46XI8Qt9zof1pVm5iVi7FhLowHwYDVR0j
BBgwFoAUEwuWix7cMp5GDFUAbMtanTlv7ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6
REYvMC8xMzBCOTY4QjFFREMzMjlFNDYwQzU1MDA2Q0NCNUE5RDM5NkZFRjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMEI5NjhCMUVEQzMyOUU0
NjBDNTUwMDZDQ0I1QTlEMzk2RkVGMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6REYvMC8x
MzBCOTY4QjFFREMzMjlFNDYwQzU1MDA2Q0NCNUE5RDM5NkZFRjI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADqP/A7znLnwUvug/8hAK0K0lv2ogfznrY19eMzZ4HAh/kVlNUXIVXuva5weJ
Lm2umxd55Au/NgqAjKj02/9G77HVKMvYcdP/MDAbeQWEsXYganuGCVNtVLlzrPXo
+kPSLQwaoLBNISrYUTfb2cO1CYcltLoGKhNP1LtCidT+K3ksxNao/oX6P4N/2b3B
Asf+JEgxSsUIxsSY9ozvwrd6frccMB9OjXqBgeh1iX5JJmbCbGgzuNa+MYnmCyei
7K5jG7uExjoFMqcyE1n5aVIwRvE1flrNjExL9jqDTSQTTRAzv7yOeB+wNMW6eiZn
Y7qMqlhCksPdsoA4h8hPOodm/g==
-----END CERTIFICATE-----