Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.mft
File:                     7173EB890308C11804E252B11AD1C7EC54A7DB2F.mft (raw, json)
Hash identifier:          Jm4293h7dA/Upp9vIPZQb0D542iIBhxpm/SSWdCKf8E=
Subject key identifier:   63:DC:2E:0B:50:DD:B6:D7:60:7C:FC:DC:8E:03:65:1C:74:28:49:DF
Authority key identifier: 71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F
Certificate issuer:       /CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
Certificate serial:       71B652F74839A183D9EA537A92037621E9555D4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.mft
Manifest number:          17
Signing time:             Mon 11 Mar 2024 09:04:53 +0000
Manifest this update:     Mon 11 Mar 2024 08:59:53 +0000
Manifest next update:     Tue 12 Mar 2024 12:20:53 +0000
Files and hashes:         1: 323830343a363037633a3a2f33322d313238203d3e20323639313730.roa (hash: KESXg6m2vegdO1MWDu3KsEXRVsC+UXhO+/GY0X8Uqd4=)
                          2: 34352e3138312e36302e302f32322d3332203d3e20323639313730.roa (hash: oPpTaBxbRI4dGHXQG/rFZ7xKxxPkKyXSd2vGPIo1oic=)
                          3: 7173EB890308C11804E252B11AD1C7EC54A7DB2F.crl (hash: 0jc/W2kkH/Ps4IUc3adD3Nf4ERpa0F0z11pbLa/JfT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:52:f7:48:39:a1:83:d9:ea:53:7a:92:03:76:21:e9:55:5d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
        Validity
            Not Before: Mar 11 08:59:53 2024 GMT
            Not After : Mar 12 12:20:53 2024 GMT
        Subject: CN=63DC2E0B50DDB6D7607CFCDC8E03651C742849DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:5e:6c:61:50:db:fb:16:49:c3:4a:af:8d:
                    99:bc:23:ec:37:a1:04:47:c6:0c:43:d5:5a:fa:32:
                    81:64:62:83:05:13:af:bc:b2:2b:9f:97:dd:fa:1a:
                    ae:20:8f:8b:80:9e:aa:d5:5f:33:f7:ae:fa:50:af:
                    80:2a:a7:99:79:c0:4b:e8:4a:73:62:16:9b:53:09:
                    ea:2f:b5:ec:04:a5:3b:5c:2d:94:51:d9:dc:40:a9:
                    20:f4:43:8b:6d:c6:8c:df:81:b9:30:60:2a:3c:03:
                    f0:b5:37:71:ee:87:7a:50:ed:13:33:37:74:b0:c6:
                    fb:3a:da:13:7f:cf:5a:1d:f0:01:01:78:db:1e:af:
                    c8:df:83:cb:1f:ae:54:a9:39:6b:ca:3e:c2:f0:18:
                    a4:13:16:7d:b8:3c:e6:31:fe:cd:9e:27:dc:e8:80:
                    d8:06:85:7c:66:20:d5:71:e6:1e:d9:81:d7:a0:8a:
                    11:16:b8:4f:55:30:24:53:d5:fc:54:a6:5a:88:bc:
                    cc:af:ed:65:74:b7:47:ec:70:fc:33:80:89:36:33:
                    94:30:f3:c2:ae:2e:e2:f9:a8:41:25:63:a6:b0:3b:
                    51:88:0a:60:ef:bc:05:6c:14:44:53:3c:9b:c7:88:
                    36:11:17:14:2b:c2:59:3f:87:c1:bc:db:41:40:f1:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:2E:0B:50:DD:B6:D7:60:7C:FC:DC:8E:03:65:1C:74:28:49:DF
            X509v3 Authority Key Identifier:
                keyid:71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:c0:ae:ce:c9:86:8f:1f:22:d4:28:18:78:2c:a8:ec:21:
         a0:41:fd:a0:fe:d2:4d:ad:27:b0:94:57:0c:3b:ca:37:91:61:
         fa:f3:c0:20:ac:99:7f:8c:d0:34:d8:94:cd:c1:4f:92:c0:f0:
         e7:39:68:0b:f6:e3:a4:1a:57:4e:56:6d:dd:9e:a2:ff:b5:f2:
         a0:6d:aa:c2:2a:98:90:d1:21:be:52:09:da:4e:80:42:cd:9d:
         78:69:9b:13:8e:c0:dd:0b:3c:17:2f:32:53:a3:3f:f6:f9:e8:
         bd:dc:ce:6f:ef:1a:23:35:cc:dc:6b:ca:00:9f:5b:dc:36:08:
         b0:58:7d:4c:a5:eb:e6:b6:eb:4a:2a:3b:c7:80:fe:dd:7a:25:
         f9:f3:40:bc:c1:8e:62:39:d8:56:f7:4e:c0:3d:72:3c:37:3b:
         10:f7:db:b1:97:10:1c:a7:5a:f4:b1:f5:b7:52:7a:30:d9:9a:
         57:66:be:5d:24:17:75:53:b4:c2:d8:33:ce:c9:f6:82:b7:c1:
         91:03:7a:90:a4:d3:b9:45:6e:91:06:08:03:46:13:72:8d:cc:
         95:44:2b:47:7b:ef:e1:13:0a:29:a0:64:af:5c:4f:3d:7e:35:
         0f:2a:6f:d1:dd:c8:e1:54:44:70:6a:c0:fe:91:7d:9f:8f:5c:
         8f:e5:9b:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcbZS90g5oYPZ6lN6kgN2IelVXUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3M0VCODkwMzA4QzExODA0RTI1MkIxMUFEMUM3RUM1
NEE3REIyRjAeFw0yNDAzMTEwODU5NTNaFw0yNDAzMTIxMjIwNTNaMDMxMTAvBgNV
BAMTKDYzREMyRTBCNTBEREI2RDc2MDdDRkNEQzhFMDM2NTFDNzQyODQ5REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9V5sYVDb+xZJw0qvjZm8I+w3
oQRHxgxD1Vr6MoFkYoMFE6+8siufl936Gq4gj4uAnqrVXzP3rvpQr4Aqp5l5wEvo
SnNiFptTCeovtewEpTtcLZRR2dxAqSD0Q4ttxozfgbkwYCo8A/C1N3Huh3pQ7RMz
N3Swxvs62hN/z1od8AEBeNser8jfg8sfrlSpOWvKPsLwGKQTFn24POYx/s2eJ9zo
gNgGhXxmINVx5h7ZgdegihEWuE9VMCRT1fxUplqIvMyv7WV0t0fscPwzgIk2M5Qw
88KuLuL5qEElY6awO1GICmDvvAVsFERTPJvHiDYRFxQrwlk/h8G820FA8SM/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY9wuC1DdttdgfPzcjgNlHHQoSd8wHwYDVR0j
BBgwFoAUcXPriQMIwRgE4lKxGtHH7FSn2y8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhoU25icnJvTURwTlRmUVMxdVV6UUNZTXZweFpNcnFDQU56REo0QmdO
anYvMC83MTczRUI4OTAzMDhDMTE4MDRFMjUyQjExQUQxQzdFQzU0QTdEQjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxNzNFQjg5MDMwOEMxMTgw
NEUyNTJCMTFBRDFDN0VDNTRBN0RCMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFhoU25icnJvTURwTlRmUVMxdVV6UUNZTXZweFpNcnFDQU56REo0QmdOanYvMC83
MTczRUI4OTAzMDhDMTE4MDRFMjUyQjExQUQxQzdFQzU0QTdEQjJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN23Ars7Jho8fItQoGHgsqOwhoEH9oP7STa0nsJRXDDvKN5Fh+vPAIKyZf4zQ
NNiUzcFPksDw5zloC/bjpBpXTlZt3Z6i/7XyoG2qwiqYkNEhvlIJ2k6AQs2deGmb
E47A3Qs8Fy8yU6M/9vnovdzOb+8aIzXM3GvKAJ9b3DYIsFh9TKXr5rbrSio7x4D+
3Xol+fNAvMGOYjnYVvdOwD1yPDc7EPfbsZcQHKda9LH1t1J6MNmaV2a+XSQXdVO0
wtgzzsn2grfBkQN6kKTTuUVukQYIA0YTco3MlUQrR3vv4RMKKaBkr1xPPX41Dypv
0d3I4VREcGrA/pF9n49cj+WbEw==
-----END CERTIFICATE-----