Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.mft
File:                     67ABA859CE6CBA21AD52947722B1512ECD25200B.mft (raw, json)
Hash identifier:          WzM+B1eqXmtf9QxlLb5i1fv8TRphGJd506DPs1MprYE=
Subject key identifier:   7C:5C:47:7B:90:93:9C:FA:03:43:4B:03:D8:C7:29:11:FB:11:24:D7
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Certificate issuer:       /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial:       6149985E15DBF3A119AFFB9A55BB7E5B352DC7C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.mft
Manifest number:          37
Signing time:             Mon 15 Apr 2024 03:59:57 +0000
Manifest this update:     Mon 15 Apr 2024 03:54:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:59:57 +0000
Files and hashes:         1: 67ABA859CE6CBA21AD52947722B1512ECD25200B.crl (hash: l00A0fp6IqsNwRKn7Kq1lDh9SNqsT0qklQZyhGBbXgI=)
                          2: 3139312e352e36342e302f32312d3234203d3e203631393031.roa (hash: szRjcqaUube3bS9bTor3ISenBquOA+xQ6wZTygM1zso=)
                          3: 3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (hash: ZDg3llB3ciMQJI9JBrmEnZmExCcHuRVoNSMRksP0um0=)
                          4: 3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (hash: SvHz3teKcN6wua71K9j+m+DiBAmVswa15Pd5RSy8YQc=)
                          5: 3139312e352e36342e302f32322d3234203d3e203631393031.roa (hash: 2Ei3pf2vOMBac0NQUC9fmbNEcQemvKNBHPzvUpJS+5g=)
                          6: 323830343a313337303a3a2f33322d3438203d3e203631393031.roa (hash: 3GhsA4DWkmNk4W3Mcl4Sn8HGZwh/GhMQN8naGMIG7YA=)
                          7: 3139312e352e37312e302f32342d3234203d3e203631393031.roa (hash: iE/+svnUddloaXy7A9ZiboJntlbJGgMYlNrra51XkV4=)
                          8: 3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (hash: YNP3UJRv+6RNC+km8GcrTZjGKqyYQMkV/jJyH2iw7o4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:98:5e:15:db:f3:a1:19:af:fb:9a:55:bb:7e:5b:35:2d:c7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
        Validity
            Not Before: Apr 15 03:54:57 2024 GMT
            Not After : Apr 16 06:59:57 2024 GMT
        Subject: CN=7C5C477B90939CFA03434B03D8C72911FB1124D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:50:3e:ad:ac:cd:47:d5:5c:49:e8:f2:90:
                    01:3d:92:60:1e:be:22:37:70:a2:48:30:17:1d:f8:
                    43:92:2a:dc:04:c8:ff:9e:ac:a0:6d:1f:7e:60:52:
                    91:00:55:f5:27:44:fc:86:9c:09:a3:53:c8:bd:11:
                    d3:74:4b:25:75:96:8b:ce:5e:dd:87:b2:60:b9:2d:
                    1c:9a:ae:f2:86:6b:0a:69:9b:17:1b:9a:5d:f4:44:
                    1c:25:9b:0e:b3:5e:8f:50:f1:04:b1:28:a8:b5:3e:
                    07:b8:9b:4e:ce:86:ab:34:9e:b1:c7:6c:fc:ac:5f:
                    70:95:d0:82:a5:89:67:18:55:63:84:55:25:61:19:
                    17:70:32:ce:ca:43:78:72:29:81:f4:6e:c6:d9:d1:
                    45:39:5b:ac:ed:78:50:1e:4d:6f:2e:05:ed:2f:c4:
                    b7:a4:21:03:c6:cd:35:36:75:bc:c2:83:21:c1:35:
                    2b:82:7b:60:43:f2:69:e8:31:f5:5b:df:d0:89:72:
                    14:69:6b:e7:8a:01:e7:d9:80:5f:a7:4c:3c:b5:99:
                    92:8c:8b:0f:cb:66:ae:7a:67:e3:6d:7a:f3:47:26:
                    ab:a7:66:ff:95:fa:61:e1:b0:ec:ed:6a:dd:97:7f:
                    4e:c4:f4:4e:d6:dc:08:2a:e5:83:e6:ee:3c:d5:56:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:47:7B:90:93:9C:FA:03:43:4B:03:D8:C7:29:11:FB:11:24:D7
            X509v3 Authority Key Identifier:
                keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:11:6d:3c:b2:91:fe:6e:86:3c:4f:e6:28:3c:35:89:1c:d6:
         b7:5a:eb:d5:d0:4a:1d:49:d4:3c:ab:c2:ef:35:51:12:74:0e:
         f4:c0:dd:63:8d:d6:87:29:80:1f:34:71:a1:11:80:37:af:9b:
         0c:a8:9c:63:dc:2a:03:cb:fd:9b:0b:53:69:10:9e:4b:95:a0:
         58:10:d6:d3:46:5a:79:d3:64:5d:c2:11:f3:af:5a:52:f8:8e:
         da:3d:e5:3e:1e:0c:ed:34:67:04:3a:20:9c:35:16:f5:43:2c:
         3d:86:65:e3:82:c8:e3:ad:8e:9d:83:e4:55:c4:d0:8a:9a:cf:
         ec:58:61:32:ba:e9:2b:b0:e1:4b:e3:89:11:a0:2b:b7:c0:dd:
         bd:83:ec:23:a4:e0:5d:a6:f7:76:75:0a:36:06:a0:9b:47:b9:
         0d:e9:21:98:c5:ac:ce:82:bf:c4:59:ab:97:fc:5a:29:01:ad:
         09:a6:3f:ce:a0:d0:b0:98:20:ce:73:e8:7d:69:e7:d9:99:a2:
         81:a2:bd:19:95:5b:31:68:d2:10:db:85:37:b3:89:8c:0c:ff:
         0d:73:03:e9:5a:ae:3f:21:e2:94:6e:ce:9e:ba:89:1e:73:f2:
         d8:be:a8:8d:19:a0:38:28:01:cd:5d:1d:38:99:34:9d:36:1c:
         bb:f7:3b:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYUmYXhXb86EZr/uaVbt+WzUtx8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdBQkE4NTlDRTZDQkEyMUFENTI5NDc3MjJCMTUxMkVD
RDI1MjAwQjAeFw0yNDA0MTUwMzU0NTdaFw0yNDA0MTYwNjU5NTdaMDMxMTAvBgNV
BAMTKDdDNUM0NzdCOTA5MzlDRkEwMzQzNEIwM0Q4QzcyOTExRkIxMTI0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkklA+razNR9VcSejykAE9kmAe
viI3cKJIMBcd+EOSKtwEyP+erKBtH35gUpEAVfUnRPyGnAmjU8i9EdN0SyV1lovO
Xt2HsmC5LRyarvKGawppmxcbml30RBwlmw6zXo9Q8QSxKKi1Pge4m07Ohqs0nrHH
bPysX3CV0IKliWcYVWOEVSVhGRdwMs7KQ3hyKYH0bsbZ0UU5W6zteFAeTW8uBe0v
xLekIQPGzTU2dbzCgyHBNSuCe2BD8mnoMfVb39CJchRpa+eKAefZgF+nTDy1mZKM
iw/LZq56Z+NtevNHJqunZv+V+mHhsOztat2Xf07E9E7W3Agq5YPm7jzVVjXpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfFxHe5CTnPoDQ0sD2McpEfsRJNcwHwYDVR0j
BBgwFoAUZ6uoWc5suiGtUpR3IrFRLs0lIAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC82N0FCQTg1OUNFNkNCQTIxQUQ1Mjk0NzcyMkIxNTEyRUNEMjUyMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3QUJBODU5Q0U2Q0JBMjFB
RDUyOTQ3NzIyQjE1MTJFQ0QyNTIwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5dkMvMC82
N0FCQTg1OUNFNkNCQTIxQUQ1Mjk0NzcyMkIxNTEyRUNEMjUyMDBCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASRFtPLKR/m6GPE/mKDw1iRzWt1rr1dBKHUnUPKvC7zVREnQO9MDdY43WhymA
HzRxoRGAN6+bDKicY9wqA8v9mwtTaRCeS5WgWBDW00ZaedNkXcIR869aUviO2j3l
Ph4M7TRnBDognDUW9UMsPYZl44LI462OnYPkVcTQiprP7FhhMrrpK7DhS+OJEaAr
t8DdvYPsI6TgXab3dnUKNgagm0e5DekhmMWszoK/xFmrl/xaKQGtCaY/zqDQsJgg
znPofWnn2ZmigaK9GZVbMWjSENuFN7OJjAz/DXMD6VquPyHilG7OnrqJHnPy2L6o
jRmgOCgBzV0dOJk0nTYcu/c72A==
-----END CERTIFICATE-----