Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.mft
File:                     BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.mft (raw, json)
Hash identifier:          pj8TI8WU7TpgWU3lLfEEm5PgKns8Cq68UjfLwaCO0B4=
Subject key identifier:   99:1F:0A:52:A3:71:9A:2A:22:B4:DB:21:AB:A7:2E:67:ED:BC:41:54
Authority key identifier: BD:E7:F3:CC:F9:E3:C5:D1:26:89:72:6D:B9:CA:E2:42:20:11:71:B0
Certificate issuer:       /CN=BDE7F3CCF9E3C5D12689726DB9CAE242201171B0
Certificate serial:       5901209F8747E45A9985757485BD02D8B2EF23F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.mft
Manifest number:          14
Signing time:             Tue 10 Sep 2024 11:36:10 +0000
Manifest this update:     Tue 10 Sep 2024 11:31:10 +0000
Manifest next update:     Wed 11 Sep 2024 14:46:10 +0000
Files and hashes:         1: BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.crl (hash: GNKLePEMo0FVcahLb6JcdVBo6GiCi49QwDtc+4cMn+Y=)
                          2: 3137302e37382e302e302f32322d3332203d3e20323635343931.roa (hash: +fFz3xL+hpoRJMXm76QbaOsirmSwHg/qh+dcPbwK+70=)
                          3: 323830343a333466343a3a2f33322d313238203d3e20323635343931.roa (hash: bpFgToaCOXYuaM6kOpeV1DA0wu4Pk395psnUdDNh1BY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:20:9f:87:47:e4:5a:99:85:75:74:85:bd:02:d8:b2:ef:23:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE7F3CCF9E3C5D12689726DB9CAE242201171B0
        Validity
            Not Before: Sep 10 11:31:10 2024 GMT
            Not After : Sep 11 14:46:10 2024 GMT
        Subject: CN=991F0A52A3719A2A22B4DB21ABA72E67EDBC4154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:e2:90:13:e0:64:c7:ab:87:fa:12:92:42:
                    e6:40:44:21:9c:de:b5:21:df:80:ed:d8:6c:34:6a:
                    d4:9d:e2:2d:5d:e6:f2:33:fe:11:ba:c3:3c:5d:b4:
                    da:11:e4:21:42:46:d8:18:70:34:b2:97:a5:71:66:
                    09:23:64:a8:ab:18:08:e9:18:fd:c6:b9:dc:cf:7a:
                    b6:83:86:a1:ee:0b:c4:5e:1e:7f:6b:23:3d:aa:91:
                    b1:99:d0:1f:40:42:c1:a1:5a:c4:c7:ba:50:8a:01:
                    e8:44:09:0d:a5:06:4b:9e:01:d9:f6:6f:3e:0a:f0:
                    38:4d:11:14:68:e1:2e:9f:44:3f:4a:2e:ea:a8:2e:
                    d2:f3:ef:c4:ad:4b:43:bb:d7:55:5b:89:90:45:9a:
                    53:9d:c4:cf:94:01:e3:9b:79:e1:00:df:9f:ad:82:
                    f6:da:59:96:bc:1b:c7:c4:32:6b:9c:fa:45:2c:98:
                    a3:9e:54:1a:ed:5c:fb:ad:79:86:a0:fb:4b:31:b8:
                    2b:c7:ed:70:c1:f4:c4:b2:de:41:d3:7b:07:78:cb:
                    28:94:5a:c7:ce:77:71:5e:c4:5d:54:6e:88:86:af:
                    ad:94:9a:6d:55:68:9d:ed:72:2b:21:a9:dc:d0:66:
                    54:e0:18:39:31:87:1e:c0:87:06:a2:d8:2f:72:c0:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1F:0A:52:A3:71:9A:2A:22:B4:DB:21:AB:A7:2E:67:ED:BC:41:54
            X509v3 Authority Key Identifier:
                keyid:BD:E7:F3:CC:F9:E3:C5:D1:26:89:72:6D:B9:CA:E2:42:20:11:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/BDE7F3CCF9E3C5D12689726DB9CAE242201171B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:34:0f:b2:a9:0a:c2:c0:89:c1:51:18:ec:e7:b8:06:65:54:
         53:2c:41:8f:72:c9:91:d1:1e:68:83:c6:70:2b:c5:9e:0c:2f:
         54:9e:a9:46:14:ad:19:92:e7:ac:9d:78:4c:7b:96:2d:89:66:
         78:37:0d:9d:f7:6f:3f:fd:c1:dc:7a:83:99:08:3b:b7:69:91:
         8f:fa:44:f9:c7:0f:5a:f3:bf:c8:cb:cc:06:a9:f1:c3:95:40:
         2b:fe:cf:0a:a3:b6:ba:9b:28:16:31:7e:44:08:67:5f:93:fe:
         e2:21:30:ee:ca:2a:35:7c:01:e1:d1:c1:a1:be:ef:f4:e7:b0:
         b4:a7:75:4c:ca:34:07:86:81:56:d1:2d:0b:75:85:e4:ed:b0:
         c9:c7:68:fc:96:be:67:ee:d9:36:cf:58:48:06:d6:37:ac:da:
         17:80:14:9e:4e:6a:96:55:48:87:eb:05:29:62:83:e2:58:42:
         0b:c1:57:da:d8:1e:5b:94:84:c3:8b:7c:00:1e:02:6b:7f:6b:
         bb:6f:e7:bb:4d:eb:87:f0:e5:0f:7f:9b:db:63:2d:e5:75:d5:
         ca:e7:9a:c2:4f:73:19:29:48:d1:39:91:d7:ef:f9:38:5c:d3:
         86:39:c2:a6:3d:ae:86:17:d7:c0:8f:73:9e:37:bf:5d:5d:5d:
         7b:e6:8d:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWQEgn4dH5FqZhXV0hb0C2LLvI/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFN0YzQ0NGOUUzQzVEMTI2ODk3MjZEQjlDQUUyNDIy
MDExNzFCMDAeFw0yNDA5MTAxMTMxMTBaFw0yNDA5MTExNDQ2MTBaMDMxMTAvBgNV
BAMTKDk5MUYwQTUyQTM3MTlBMkEyMkI0REIyMUFCQTcyRTY3RURCQzQxNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KeKQE+Bkx6uH+hKSQuZARCGc
3rUh34Dt2Gw0atSd4i1d5vIz/hG6wzxdtNoR5CFCRtgYcDSyl6VxZgkjZKirGAjp
GP3GudzPeraDhqHuC8ReHn9rIz2qkbGZ0B9AQsGhWsTHulCKAehECQ2lBkueAdn2
bz4K8DhNERRo4S6fRD9KLuqoLtLz78StS0O711VbiZBFmlOdxM+UAeObeeEA35+t
gvbaWZa8G8fEMmuc+kUsmKOeVBrtXPuteYag+0sxuCvH7XDB9MSy3kHTewd4yyiU
WsfOd3FexF1UboiGr62Umm1VaJ3tcishqdzQZlTgGDkxhx7Ahwai2C9ywLiTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmR8KUqNxmioitNshq6cuZ+28QVQwHwYDVR0j
BBgwFoAUvefzzPnjxdEmiXJtucriQiARcbAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl
dUQvMC9CREU3RjNDQ0Y5RTNDNUQxMjY4OTcyNkRCOUNBRTI0MjIwMTE3MUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTdGM0NDRjlFM0M1RDEy
Njg5NzI2REI5Q0FFMjQyMjAxMTcxQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJldUQvMC9C
REU3RjNDQ0Y5RTNDNUQxMjY4OTcyNkRCOUNBRTI0MjIwMTE3MUIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZjQPsqkKwsCJwVEY7Oe4BmVUUyxBj3LJkdEeaIPGcCvFngwvVJ6pRhStGZLn
rJ14THuWLYlmeDcNnfdvP/3B3HqDmQg7t2mRj/pE+ccPWvO/yMvMBqnxw5VAK/7P
CqO2upsoFjF+RAhnX5P+4iEw7soqNXwB4dHBob7v9OewtKd1TMo0B4aBVtEtC3WF
5O2wycdo/Ja+Z+7ZNs9YSAbWN6zaF4AUnk5qllVIh+sFKWKD4lhCC8FX2tgeW5SE
w4t8AB4Ca39ru2/nu03rh/DlD3+b22Mt5XXVyueawk9zGSlI0TmR1+/5OFzThjnC
pj2uhhfXwI9znje/XV1de+aNIA==
-----END CERTIFICATE-----