Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/BD697319E06F7C63EFC364697F28802013634F3F.mft
File:                     BD697319E06F7C63EFC364697F28802013634F3F.mft (raw, json)
Hash identifier:          yvrTRAS2w1Ljm0IdG7MyTFV1bsNiG9hJEAEmlVX9EyM=
Subject key identifier:   FE:47:8C:27:49:3E:6B:0E:CE:59:79:EC:F8:8C:A8:C3:BA:99:32:1D
Authority key identifier: BD:69:73:19:E0:6F:7C:63:EF:C3:64:69:7F:28:80:20:13:63:4F:3F
Certificate issuer:       /CN=BD697319E06F7C63EFC364697F28802013634F3F
Certificate serial:       2A20FF353D1808AABFC6CDE3380D6CE77878ADE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD697319E06F7C63EFC364697F28802013634F3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/BD697319E06F7C63EFC364697F28802013634F3F.mft
Manifest number:          32
Signing time:             Fri 10 May 2024 13:54:03 +0000
Manifest this update:     Fri 10 May 2024 13:49:03 +0000
Manifest next update:     Sat 11 May 2024 15:23:03 +0000
Files and hashes:         1: 323830343a326565633a3a2f33322d3336203d3e20323634383631.roa (hash: C1/8hQmWOm1dZQChUk/QyAXGcC63h0H56C8O8FHpqr0=)
                          2: BD697319E06F7C63EFC364697F28802013634F3F.crl (hash: 0eLnjqE8ZgN4zFPHbOWGP9avYhm1RdkaIVg98zotHQI=)
                          3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: XY7qJgbo+Jy0QoMX49p/PeMpl0CTnpr22aShkxI9ZbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:20:ff:35:3d:18:08:aa:bf:c6:cd:e3:38:0d:6c:e7:78:78:ad:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD697319E06F7C63EFC364697F28802013634F3F
        Validity
            Not Before: May 10 13:49:03 2024 GMT
            Not After : May 11 15:23:03 2024 GMT
        Subject: CN=FE478C27493E6B0ECE5979ECF88CA8C3BA99321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:fd:ad:2f:e6:25:d4:97:fe:a8:fb:e9:29:
                    04:5b:f1:6d:6f:4a:e9:a1:34:3a:0f:ae:f2:ab:62:
                    6a:a3:ef:43:e9:9c:8c:5b:c3:13:21:2c:c9:d9:e4:
                    72:2b:28:18:ba:41:9e:95:2f:c7:bf:93:81:b5:50:
                    4b:e6:b4:33:bd:18:82:4a:7b:54:d4:b0:20:1f:25:
                    39:63:aa:8e:38:bb:58:a6:68:1a:37:f4:f4:df:48:
                    ea:d3:51:61:85:2c:ae:02:30:57:bd:5c:83:67:1e:
                    8d:cb:f0:b4:52:27:97:da:d8:f3:8a:7d:58:37:96:
                    f9:62:3e:b4:98:c9:73:bf:21:67:b8:55:63:8f:49:
                    29:2b:69:35:15:d8:d9:7f:dc:73:71:9a:a0:a9:3e:
                    da:78:1c:57:96:4e:e6:4f:6f:72:74:8c:2c:da:4c:
                    a7:db:cb:ec:2d:52:40:60:6b:34:f1:3d:ac:57:8f:
                    0a:18:1b:3e:a0:ab:60:f4:80:f9:b6:60:f8:6a:51:
                    4c:77:10:19:4f:04:fb:94:05:5e:20:52:74:60:d4:
                    0b:8e:a9:e3:54:8a:fc:3c:f6:8e:be:9d:0e:5b:7e:
                    a8:39:f5:52:72:ed:1d:4b:2b:00:4d:b1:d1:8c:8a:
                    69:13:be:a6:e9:7a:16:9e:a3:88:0b:02:aa:0f:13:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:8C:27:49:3E:6B:0E:CE:59:79:EC:F8:8C:A8:C3:BA:99:32:1D
            X509v3 Authority Key Identifier:
                keyid:BD:69:73:19:E0:6F:7C:63:EF:C3:64:69:7F:28:80:20:13:63:4F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/BD697319E06F7C63EFC364697F28802013634F3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD697319E06F7C63EFC364697F28802013634F3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/BD697319E06F7C63EFC364697F28802013634F3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:9d:75:fc:46:1f:1f:de:98:6a:4f:c1:61:c5:c7:fb:64:
         54:4b:2f:df:24:99:05:d9:95:d2:85:6b:5e:71:3b:e8:8b:c9:
         77:e5:a9:f8:61:2e:f3:43:77:cc:15:10:fe:b1:61:ab:51:d7:
         97:f6:24:29:4f:3f:3e:fc:bf:e4:af:80:fa:21:67:93:9c:26:
         bc:2c:fd:b1:7f:29:e6:31:d6:f4:38:54:43:63:95:c9:24:7d:
         da:ee:3e:a5:eb:c4:6c:b2:31:d2:5c:71:04:44:4d:b8:dc:8c:
         d5:05:1c:4b:f4:49:43:d4:4a:74:59:f0:a2:c4:1f:69:4a:eb:
         df:3a:91:12:2d:3d:19:cc:fb:e2:08:ee:5d:e3:7e:93:f9:fc:
         e6:ba:0d:b3:71:4a:03:b5:05:ee:da:06:7a:c9:6f:b1:14:e5:
         f5:f7:c4:ca:17:42:14:db:13:c1:75:72:9e:64:6c:65:68:a4:
         e8:2f:f2:44:73:98:c6:b4:39:02:b6:9d:b7:3e:63:08:ed:5a:
         40:d8:72:73:b6:0b:af:ba:3b:11:55:fb:e9:cf:98:e4:65:14:
         4e:cc:8c:96:d4:d3:d0:ec:5e:fc:40:10:25:74:67:c1:24:14:
         7a:44:5d:a3:c9:2c:06:6c:60:b1:ad:01:fe:5a:88:d8:e0:26:
         49:4f:e8:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKiD/NT0YCKq/xs3jOA1s53h4reIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ2OTczMTlFMDZGN0M2M0VGQzM2NDY5N0YyODgwMjAx
MzYzNEYzRjAeFw0yNDA1MTAxMzQ5MDNaFw0yNDA1MTExNTIzMDNaMDMxMTAvBgNV
BAMTKEZFNDc4QzI3NDkzRTZCMEVDRTU5NzlFQ0Y4OENBOEMzQkE5OTMyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyv2tL+Yl1Jf+qPvpKQRb8W1v
SumhNDoPrvKrYmqj70PpnIxbwxMhLMnZ5HIrKBi6QZ6VL8e/k4G1UEvmtDO9GIJK
e1TUsCAfJTljqo44u1imaBo39PTfSOrTUWGFLK4CMFe9XINnHo3L8LRSJ5fa2POK
fVg3lvliPrSYyXO/IWe4VWOPSSkraTUV2Nl/3HNxmqCpPtp4HFeWTuZPb3J0jCza
TKfby+wtUkBgazTxPaxXjwoYGz6gq2D0gPm2YPhqUUx3EBlPBPuUBV4gUnRg1AuO
qeNUivw89o6+nQ5bfqg59VJy7R1LKwBNsdGMimkTvqbpehaeo4gLAqoPE55jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/keMJ0k+aw7OWXns+Iyow7qZMh0wHwYDVR0j
BBgwFoAUvWlzGeBvfGPvw2RpfyiAIBNjTz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4
U0wvMS9CRDY5NzMxOUUwNkY3QzYzRUZDMzY0Njk3RjI4ODAyMDEzNjM0RjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JENjk3MzE5RTA2RjdDNjNF
RkMzNjQ2OTdGMjg4MDIwMTM2MzRGM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMS9C
RDY5NzMxOUUwNkY3QzYzRUZDMzY0Njk3RjI4ODAyMDEzNjM0RjNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdlqddfxGHx/emGpPwWHFx/tkVEsv3ySZBdmV0oVrXnE76IvJd+Wp+GEu80N3
zBUQ/rFhq1HXl/YkKU8/Pvy/5K+A+iFnk5wmvCz9sX8p5jHW9DhUQ2OVySR92u4+
pevEbLIx0lxxBERNuNyM1QUcS/RJQ9RKdFnwosQfaUrr3zqREi09Gcz74gjuXeN+
k/n85roNs3FKA7UF7toGeslvsRTl9ffEyhdCFNsTwXVynmRsZWik6C/yRHOYxrQ5
Aradtz5jCO1aQNhyc7YLr7o7EVX76c+Y5GUUTsyMltTT0Oxe/EAQJXRnwSQUekRd
o8ksBmxgsa0B/lqI2OAmSU/o1A==
-----END CERTIFICATE-----