Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft
File:                     9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft (raw, json)
Hash identifier:          ejN3JLzIYfpYXTl0vzWBtzkOtXGoVPSHyPZz05jgZOM=
Subject key identifier:   5B:8D:3C:51:9B:77:7D:7A:44:B4:7F:9D:12:94:0F:4A:9B:CE:5D:C5
Authority key identifier: 9E:A6:20:FA:5E:2E:B3:D7:28:1F:44:6E:7F:FB:AA:1B:71:0B:55:15
Certificate issuer:       /CN=9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515
Certificate serial:       72798B2512E6FA1FD2A676ACA84A0F551593B768
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft
Manifest number:          0173
Signing time:             Mon 15 Apr 2024 00:57:31 +0000
Manifest this update:     Mon 15 Apr 2024 00:52:31 +0000
Manifest next update:     Tue 16 Apr 2024 03:39:31 +0000
Files and hashes:         1: 9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.crl (hash: k8mjTGv5lXdObqc+zYpEBeNVcYEeT4/QXfuKtF4EEEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:8b:25:12:e6:fa:1f:d2:a6:76:ac:a8:4a:0f:55:15:93:b7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515
        Validity
            Not Before: Apr 15 00:52:31 2024 GMT
            Not After : Apr 16 03:39:31 2024 GMT
        Subject: CN=5B8D3C519B777D7A44B47F9D12940F4A9BCE5DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:d3:c5:75:eb:39:f3:21:ea:db:d4:0f:94:
                    b1:9c:1f:29:36:aa:36:8c:fe:a1:ed:06:23:1d:15:
                    81:c9:f5:06:5f:ff:db:ad:5e:65:78:16:38:d3:b5:
                    87:55:71:6f:80:db:42:3e:fc:d8:01:da:57:4a:a9:
                    49:94:7b:50:f8:c3:d3:16:0d:44:43:c0:c8:2d:13:
                    29:6b:b8:59:f1:63:9a:f0:6e:b0:fd:60:22:12:6a:
                    c5:dd:db:61:4a:3d:b0:7e:48:7e:cf:76:3f:4b:03:
                    47:31:6b:c9:fd:c2:25:7f:8d:cf:7b:51:57:9d:62:
                    d4:eb:ba:84:be:cc:d4:1f:2a:a3:11:ec:f4:64:b4:
                    3a:f7:af:6b:09:b0:a9:e5:d4:b0:9b:bc:46:42:6f:
                    79:bc:3c:c0:76:55:0e:1d:58:31:f8:61:85:3d:45:
                    52:6a:e8:f4:d1:50:5f:65:8a:b3:63:8f:82:90:69:
                    09:88:84:88:31:53:e0:61:25:09:c7:d2:b8:b1:76:
                    a4:7e:3c:0a:e4:8c:2b:20:cd:e1:4d:fb:7d:92:6b:
                    06:a8:7e:80:7f:28:78:49:10:b6:c6:72:2e:bb:cc:
                    cc:67:6e:a0:e6:e9:d6:32:c5:60:05:60:0c:eb:50:
                    64:ab:b8:bf:dd:ac:c8:d0:e9:00:a4:ce:43:15:3b:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:3C:51:9B:77:7D:7A:44:B4:7F:9D:12:94:0F:4A:9B:CE:5D:C5
            X509v3 Authority Key Identifier:
                keyid:9E:A6:20:FA:5E:2E:B3:D7:28:1F:44:6E:7F:FB:AA:1B:71:0B:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:50:cf:e1:03:ea:6e:a1:68:18:33:39:a0:d9:89:ee:16:
         e3:fa:32:df:22:3a:94:86:c5:df:2f:69:3e:f7:10:21:55:0e:
         51:2e:79:f2:30:61:7e:b5:7f:2a:5f:6a:72:71:0b:f1:64:9c:
         2a:04:54:18:1a:32:9c:53:43:5a:2a:43:1f:13:bf:6c:d5:8a:
         dd:d2:98:20:d9:c2:a3:68:94:e9:0d:ac:71:06:e8:af:77:83:
         89:dd:95:97:01:57:80:b7:69:84:d2:8b:79:bb:11:75:94:66:
         8b:41:22:e9:91:aa:4c:e0:f7:0b:ce:cd:8c:6a:67:f3:cf:29:
         be:fc:5c:95:29:3f:8e:26:e3:40:9e:53:00:c9:7f:b7:60:b8:
         e9:2f:56:3f:a4:8d:93:b5:f0:64:80:2b:db:7d:f6:04:34:7e:
         59:5b:f3:f8:44:02:6c:83:a6:7f:ce:bd:6c:ad:f6:5e:57:80:
         53:6e:ca:9e:eb:59:33:b0:87:5b:ca:33:56:cb:03:5b:20:f5:
         50:ee:ea:35:e8:ac:6f:94:1f:43:03:ce:23:13:6c:d1:54:d6:
         70:fb:d8:5e:f6:ff:2b:75:b0:d9:71:09:7b:25:19:42:9e:9d:
         c6:c0:2b:40:8f:84:88:27:6e:dd:49:fc:b5:3d:60:ef:cf:08:
         6c:4e:f0:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcnmLJRLm+h/SpnasqEoPVRWTt2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVBNjIwRkE1RTJFQjNENzI4MUY0NDZFN0ZGQkFBMUI3
MTBCNTUxNTAeFw0yNDA0MTUwMDUyMzFaFw0yNDA0MTYwMzM5MzFaMDMxMTAvBgNV
BAMTKDVCOEQzQzUxOUI3NzdEN0E0NEI0N0Y5RDEyOTQwRjRBOUJDRTVEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0dPFdes58yHq29QPlLGcHyk2
qjaM/qHtBiMdFYHJ9QZf/9utXmV4FjjTtYdVcW+A20I+/NgB2ldKqUmUe1D4w9MW
DURDwMgtEylruFnxY5rwbrD9YCISasXd22FKPbB+SH7Pdj9LA0cxa8n9wiV/jc97
UVedYtTruoS+zNQfKqMR7PRktDr3r2sJsKnl1LCbvEZCb3m8PMB2VQ4dWDH4YYU9
RVJq6PTRUF9lirNjj4KQaQmIhIgxU+BhJQnH0rixdqR+PArkjCsgzeFN+32Sawao
foB/KHhJELbGci67zMxnbqDm6dYyxWAFYAzrUGSruL/drMjQ6QCkzkMVOymRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUW408UZt3fXpEtH+dEpQPSpvOXcUwHwYDVR0j
BBgwFoAUnqYg+l4us9coH0Ruf/uqG3ELVRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJXOFdGbVpjOXNGN3l5YkZMQlV2cm9FdjVONEV4VWtwYWVuaUtrdWJX
WngvMC85RUE2MjBGQTVFMkVCM0Q3MjgxRjQ0NkU3RkZCQUExQjcxMEI1NTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFQTYyMEZBNUUyRUIzRDcy
ODFGNDQ2RTdGRkJBQTFCNzEwQjU1MTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVJXOFdGbVpjOXNGN3l5YkZMQlV2cm9FdjVONEV4VWtwYWVuaUtrdWJXWngvMC85
RUE2MjBGQTVFMkVCM0Q3MjgxRjQ0NkU3RkZCQUExQjcxMEI1NTE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP1ZQz+ED6m6haBgzOaDZie4W4/oy3yI6lIbF3y9pPvcQIVUOUS558jBhfrV/
Kl9qcnEL8WScKgRUGBoynFNDWipDHxO/bNWK3dKYINnCo2iU6Q2scQbor3eDid2V
lwFXgLdphNKLebsRdZRmi0Ei6ZGqTOD3C87NjGpn888pvvxclSk/jibjQJ5TAMl/
t2C46S9WP6SNk7XwZIAr2332BDR+WVvz+EQCbIOmf869bK32XleAU27KnutZM7CH
W8ozVssDWyD1UO7qNeisb5QfQwPOIxNs0VTWcPvYXvb/K3Ww2XEJeyUZQp6dxsAr
QI+EiCdu3Un8tT1g788IbE7wbA==
-----END CERTIFICATE-----