Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft
File:                     C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft (raw, json)
Hash identifier:          SH+teuy5MSg0X7m4rzQxhj4HL5vEYW0Ui9tIpDncaWQ=
Subject key identifier:   CA:60:47:BF:B2:44:F8:CB:98:DC:15:12:3C:49:2F:D1:95:C8:22:F7
Authority key identifier: C7:B9:97:B2:4F:DE:6C:2E:BF:7B:46:89:9A:8F:BB:AB:48:CB:63:7A
Certificate issuer:       /CN=C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A
Certificate serial:       71CC2BC2020BFC7838B3C0F8C45F1C26BC9AF3D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft
Manifest number:          0215
Signing time:             Thu 18 Jan 2024 15:47:25 +0000
Manifest this update:     Thu 18 Jan 2024 15:42:25 +0000
Manifest next update:     Fri 19 Jan 2024 16:28:25 +0000
Files and hashes:         1: 34352e3136322e3137362e302f32322d3234203d3e20323638353337.roa (hash: BPhagrWw0xfHyg1lvNvROydvrS71I1RBD8g8cqQyJUI=)
                          2: 323830343a353262383a3a2f33322d313238203d3e20323638353337.roa (hash: tT745OTWtxint8vpqXa+iAUvK6QN3izWt8leOeXcxYg=)
                          3: C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.crl (hash: 8VPxCm5rsSztS6uCl1chRbEzfff8PkOmQ31OWtH6/TA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cc:2b:c2:02:0b:fc:78:38:b3:c0:f8:c4:5f:1c:26:bc:9a:f3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A
        Validity
            Not Before: Jan 18 15:42:25 2024 GMT
            Not After : Jan 19 16:28:25 2024 GMT
        Subject: CN=CA6047BFB244F8CB98DC15123C492FD195C822F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:cf:9e:fb:24:fd:48:a3:22:51:9d:98:ca:
                    5b:9d:d5:73:4d:dd:7b:21:44:7d:ce:0f:e8:c8:7b:
                    04:a7:24:75:21:7f:2e:18:95:e4:98:d3:c7:5e:34:
                    50:32:c6:7b:b6:72:03:e9:8f:63:af:e6:6e:74:13:
                    d5:76:70:97:a6:61:23:3d:e6:db:2a:ad:4b:f9:43:
                    56:35:f5:d5:e5:70:f1:68:8f:8d:a5:2a:64:28:6f:
                    a5:37:a0:9d:60:70:06:46:c5:1d:d8:1c:a7:d8:ca:
                    bf:07:ab:a0:b1:67:84:05:80:fc:85:d6:95:04:f3:
                    5a:65:c9:fd:ee:e5:fa:66:17:63:f3:45:96:0d:20:
                    5d:c4:92:84:c6:3a:7d:28:f7:13:4b:9f:84:3d:2a:
                    32:32:93:dc:60:6c:7a:53:fb:56:36:cf:1c:21:7f:
                    42:8b:47:bb:e3:2a:40:22:4c:00:c6:a1:2f:eb:4a:
                    c1:6e:80:25:40:01:61:b4:b8:18:d5:8d:09:c2:95:
                    e3:e8:f8:0d:ea:70:67:9b:96:cd:1a:26:ac:75:4b:
                    f5:28:74:75:99:1a:a4:41:ef:ee:1e:04:09:31:7c:
                    f9:85:38:fd:9b:89:ce:82:c6:7f:02:2c:6e:0f:cf:
                    6a:6d:ec:14:6d:f1:eb:a9:95:4d:5a:aa:e1:c0:ec:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:60:47:BF:B2:44:F8:CB:98:DC:15:12:3C:49:2F:D1:95:C8:22:F7
            X509v3 Authority Key Identifier:
                keyid:C7:B9:97:B2:4F:DE:6C:2E:BF:7B:46:89:9A:8F:BB:AB:48:CB:63:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/C7B997B24FDE6C2EBF7B46899A8FBBAB48CB637A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:55:b9:25:b5:28:13:8c:75:93:3a:90:60:e7:71:dc:0e:
         cb:8b:fd:4b:b3:79:c9:b7:1d:e5:b8:21:fd:c3:81:5f:b9:11:
         31:71:4d:37:ea:7e:3f:e8:1f:ec:18:2a:f7:70:44:cf:70:e4:
         d5:17:59:cc:23:2a:fb:dd:43:93:81:02:bd:63:42:dc:95:ac:
         e6:a2:73:4e:66:90:a6:2a:ea:a2:23:20:98:60:61:14:f2:df:
         de:a6:3f:54:db:21:58:2a:47:7b:3e:af:6d:c5:5e:6b:5f:7c:
         17:46:5f:11:ee:ea:94:10:e1:ee:c7:d6:bb:c5:0c:01:65:01:
         62:36:7a:14:27:55:c5:fa:03:25:6b:f2:7b:43:2c:ef:86:c9:
         3b:c1:12:40:da:48:85:e5:db:3e:9d:ad:53:0e:e1:db:0f:a7:
         14:6f:5b:d7:cb:24:d1:53:09:f2:51:24:d5:cd:97:af:62:70:
         1b:d4:ff:12:ca:c6:7d:f8:1d:2d:61:2c:a6:53:8e:66:e3:8c:
         cc:0a:40:ac:40:37:9f:6c:fc:a0:56:0b:8c:2e:94:3d:7b:59:
         db:80:58:df:e2:26:37:ce:42:16:da:8b:69:60:48:20:b9:74:
         3d:7f:22:e6:22:3f:14:43:28:5d:5f:70:fd:a1:c2:a2:54:5c:
         c1:9a:58:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUccwrwgIL/Hg4s8D4xF8cJrya89YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdCOTk3QjI0RkRFNkMyRUJGN0I0Njg5OUE4RkJCQUI0
OENCNjM3QTAeFw0yNDAxMTgxNTQyMjVaFw0yNDAxMTkxNjI4MjVaMDMxMTAvBgNV
BAMTKENBNjA0N0JGQjI0NEY4Q0I5OERDMTUxMjNDNDkyRkQxOTVDODIyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoj8+e+yT9SKMiUZ2Yylud1XNN
3XshRH3OD+jIewSnJHUhfy4YleSY08deNFAyxnu2cgPpj2Ov5m50E9V2cJemYSM9
5tsqrUv5Q1Y19dXlcPFoj42lKmQob6U3oJ1gcAZGxR3YHKfYyr8Hq6CxZ4QFgPyF
1pUE81plyf3u5fpmF2PzRZYNIF3EkoTGOn0o9xNLn4Q9KjIyk9xgbHpT+1Y2zxwh
f0KLR7vjKkAiTADGoS/rSsFugCVAAWG0uBjVjQnClePo+A3qcGebls0aJqx1S/Uo
dHWZGqRB7+4eBAkxfPmFOP2bic6Cxn8CLG4Pz2pt7BRt8euplU1aquHA7Dr1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUymBHv7JE+MuY3BUSPEkv0ZXIIvcwHwYDVR0j
BBgwFoAUx7mXsk/ebC6/e0aJmo+7q0jLY3owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdlQ3NVc2JyQ1VSaVc4UXZaR01FdWd0R0NlTnRoSkxGNFp2RERkdVRH
Rm0vMC9DN0I5OTdCMjRGREU2QzJFQkY3QjQ2ODk5QThGQkJBQjQ4Q0I2MzdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3Qjk5N0IyNEZERTZDMkVC
RjdCNDY4OTlBOEZCQkFCNDhDQjYzN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTdlQ3NVc2JyQ1VSaVc4UXZaR01FdWd0R0NlTnRoSkxGNFp2RERkdVRHRm0vMC9D
N0I5OTdCMjRGREU2QzJFQkY3QjQ2ODk5QThGQkJBQjQ4Q0I2MzdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVqBVuSW1KBOMdZM6kGDncdwOy4v9S7N5ybcd5bgh/cOBX7kRMXFNN+p+P+gf
7Bgq93BEz3Dk1RdZzCMq+91Dk4ECvWNC3JWs5qJzTmaQpirqoiMgmGBhFPLf3qY/
VNshWCpHez6vbcVea198F0ZfEe7qlBDh7sfWu8UMAWUBYjZ6FCdVxfoDJWvye0Ms
74bJO8ESQNpIheXbPp2tUw7h2w+nFG9b18sk0VMJ8lEk1c2Xr2JwG9T/EsrGffgd
LWEsplOOZuOMzApArEA3n2z8oFYLjC6UPXtZ24BY3+ImN85CFtqLaWBIILl0PX8i
5iI/FEMoXV9w/aHColRcwZpYUQ==
-----END CERTIFICATE-----