Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft
File:                     B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft (raw, json)
Hash identifier:          u5jskGWuNSFQSJGHeI78tooBkyh7Hl4CR9KsMic85Rk=
Subject key identifier:   36:DA:9D:D0:81:7E:CC:DB:95:30:D6:32:32:A4:D5:32:6C:5E:B0:6B
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       293BE1C37433D4C06493B95D1C8D9ED43BFD20F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft
Manifest number:          0166
Signing time:             Thu 23 Nov 2023 13:44:48 +0000
Manifest this update:     Thu 23 Nov 2023 13:39:48 +0000
Manifest next update:     Fri 24 Nov 2023 16:04:48 +0000
Files and hashes:         1: B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl (hash: v7JfKElUZjkrwLZj0/gcRoXEFIRgOahBL1XntndulpA=)
                          2: 3137372e36372e3137322e302f32332d3233203d3e203532393137.roa (hash: Oe0744LA+c+sQHQFHmmgrhOH2X7V6qSB8qZVlU3wevw=)
                          3: 3137372e36372e3137332e302f32342d3234203d3e203532393137.roa (hash: qXyzhBww2A4IKQy2fo0l5Jrizr7OV9NrQwswviCFYf8=)
                          4: 3137372e31302e3131362e302f32342d3234203d3e203532393137.roa (hash: tXxj1dBPKmPz25v8sxhpKa7AuDBJhNDurg6/LLXxt1Y=)
                          5: 3137372e31302e3131382e302f32342d3234203d3e20323638303132.roa (hash: ohQlj+Mg9jFKR7TsAXaEcExDF1uLMf8SdzGBTNKANkQ=)
                          6: 3137372e36372e3137322e302f32342d3234203d3e203532393137.roa (hash: Ek9HymCgha4kf8qYxRv71x0iAfzJvuxNIonsY6FspMQ=)
                          7: 3137372e31302e3131372e302f32342d3234203d3e203532393137.roa (hash: +T3nHD15bApe2QTCnDDn7r8fnGpMIbQE/18oadn9itk=)
                          8: 3137372e31302e3131392e302f32342d3234203d3e203532393137.roa (hash: 6kSi85O6FCG6h/9GROP7/I9FjsuVeHGsAbAfCpYV/PU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3b:e1:c3:74:33:d4:c0:64:93:b9:5d:1c:8d:9e:d4:3b:fd:20:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Nov 23 13:39:48 2023 GMT
            Not After : Nov 24 16:04:48 2023 GMT
        Subject: CN=36DA9DD0817ECCDB9530D63232A4D5326C5EB06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:9e:7e:a7:39:fa:0b:b9:37:ad:ca:a9:ea:
                    30:a1:7d:cf:80:00:4a:7a:3b:0c:2c:f9:7d:30:cf:
                    42:5e:ee:be:11:62:ec:45:e9:94:36:2f:f1:c8:24:
                    34:0a:3a:d8:79:4a:7a:7f:00:3f:cd:e5:6f:fa:bc:
                    e0:0c:99:60:27:68:3e:77:90:c0:33:5d:d9:ca:dd:
                    25:ca:04:c6:81:5a:f9:d0:9f:f8:93:ef:12:d0:e9:
                    c1:fc:a9:cd:d4:fd:0c:cc:49:20:15:40:59:74:eb:
                    98:ca:a0:00:30:0c:2d:6a:be:ce:b5:e5:4a:15:e5:
                    e2:10:b5:c7:3f:87:b2:6c:1f:aa:91:92:c6:1d:fd:
                    f8:f5:82:e9:c2:b9:a8:ed:96:b5:eb:d3:ee:44:12:
                    88:33:10:e5:9c:be:cd:62:29:eb:35:c5:9c:f3:cc:
                    57:84:5f:f0:d1:4e:5d:94:f4:c4:07:89:16:7a:a8:
                    e6:dc:7b:cd:02:a7:e9:a2:75:00:f9:66:fe:37:19:
                    04:47:56:36:1c:89:58:53:0b:36:35:6e:30:8b:d5:
                    0c:f6:54:cf:9f:fc:b9:71:6a:e3:b9:21:fe:5b:31:
                    6f:ad:a2:b0:62:ec:a7:45:9b:db:f5:6e:e4:da:d1:
                    81:66:cd:db:9e:e8:c7:a2:1c:c5:7d:4b:ba:1a:cd:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:9D:D0:81:7E:CC:DB:95:30:D6:32:32:A4:D5:32:6C:5E:B0:6B
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:86:c0:db:b5:78:89:3f:90:c0:fb:d6:a8:a8:b0:50:e1:
         d7:0e:ad:36:e1:14:0f:45:ba:0b:15:87:49:18:3b:32:e5:cb:
         01:55:05:92:4b:4b:1c:40:bf:2b:64:ef:83:20:d8:81:8b:1d:
         ba:29:47:c8:3d:7f:59:1b:0f:f8:6b:fb:5c:1c:1b:49:24:9b:
         2e:57:da:2c:55:a1:95:05:af:8a:63:7a:87:8b:1d:61:fa:28:
         f7:41:5f:a2:e7:25:2c:cd:05:73:d7:40:ee:b2:9e:64:d3:1a:
         ae:bb:0e:a0:7f:a1:73:b3:64:be:17:06:af:7c:6a:fd:21:a9:
         c3:c1:9e:2a:c3:8c:99:9b:97:57:f7:05:c9:4d:f4:21:50:2a:
         c8:e2:1b:ea:77:ac:31:0f:7c:a4:9b:d8:6b:7e:c9:d8:4c:f9:
         de:54:fe:3d:86:12:61:e2:cd:6f:07:cc:e7:0d:c0:81:3d:b5:
         f7:ce:8b:f9:e8:8f:2a:80:38:50:f6:85:f1:14:b1:76:1c:51:
         c5:97:ce:4d:0e:d4:c4:5c:ee:b8:88:b9:66:2a:d3:42:3a:f9:
         09:c1:71:60:12:b1:4b:f7:0c:7f:2b:ce:a4:74:ae:77:1f:c4:
         4c:e6:42:50:7d:00:cb:5c:d4:03:ad:77:26:8a:24:d5:05:0a:
         19:c2:8d:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKTvhw3Qz1MBkk7ldHI2e1Dv9IPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBNzA1MTk1NzA1RkZFM0U1RDgxRDc3Rjg0MDBCRTJB
RjM4MDlFRTAeFw0yMzExMjMxMzM5NDhaFw0yMzExMjQxNjA0NDhaMDMxMTAvBgNV
BAMTKDM2REE5REQwODE3RUNDREI5NTMwRDYzMjMyQTRENTMyNkM1RUIwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnp5+pzn6C7k3rcqp6jChfc+A
AEp6Owws+X0wz0Je7r4RYuxF6ZQ2L/HIJDQKOth5Snp/AD/N5W/6vOAMmWAnaD53
kMAzXdnK3SXKBMaBWvnQn/iT7xLQ6cH8qc3U/QzMSSAVQFl065jKoAAwDC1qvs61
5UoV5eIQtcc/h7JsH6qRksYd/fj1gunCuajtlrXr0+5EEogzEOWcvs1iKes1xZzz
zFeEX/DRTl2U9MQHiRZ6qObce80Cp+midQD5Zv43GQRHVjYciVhTCzY1bjCL1Qz2
VM+f/LlxauO5If5bMW+torBi7KdFm9v1buTa0YFmzdue6MeiHMV9S7oazdYFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNtqd0IF+zNuVMNYyMqTVMmxesGswHwYDVR0j
BBgwFoAUt6cFGVcF/+Pl2B13+EAL4q84Ce4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ4M2NXZ3MxWUtkNDlqMXlVVEpOMXJKaVF2RXp1RkRFVzFLZ1dXVzdR
UXQvMC9CN0E3MDUxOTU3MDVGRkUzRTVEODFENzdGODQwMEJFMkFGMzgwOUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3QTcwNTE5NTcwNUZGRTNF
NUQ4MUQ3N0Y4NDAwQkUyQUYzODA5RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHZ4M2NXZ3MxWUtkNDlqMXlVVEpOMXJKaVF2RXp1RkRFVzFLZ1dXVzdRUXQvMC9C
N0E3MDUxOTU3MDVGRkUzRTVEODFENzdGODQwMEJFMkFGMzgwOUVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARa2GwNu1eIk/kMD71qiosFDh1w6tNuEUD0W6CxWHSRg7MuXLAVUFkktLHEC/
K2TvgyDYgYsduilHyD1/WRsP+Gv7XBwbSSSbLlfaLFWhlQWvimN6h4sdYfoo90Ff
ouclLM0Fc9dA7rKeZNMarrsOoH+hc7NkvhcGr3xq/SGpw8GeKsOMmZuXV/cFyU30
IVAqyOIb6nesMQ98pJvYa37J2Ez53lT+PYYSYeLNbwfM5w3AgT21986L+eiPKoA4
UPaF8RSxdhxRxZfOTQ7UxFzuuIi5ZirTQjr5CcFxYBKxS/cMfyvOpHSudx/ETOZC
UH0Ay1zUA613Jook1QUKGcKNeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org