Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft
File:                     0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft (raw, json)
Hash identifier:          SRUMDYWAkpbnsLPxkpZz1VvLPgnHc8FjxPSDXCnWCFY=
Subject key identifier:   7C:CE:4F:FC:D7:E2:B6:DC:BC:83:30:A7:60:53:1D:0C:A6:EF:0A:74
Authority key identifier: 0B:B5:31:37:B2:26:24:BD:78:7B:FE:2F:51:B6:5C:A4:6C:8E:CC:52
Certificate issuer:       /CN=0BB53137B22624BD787BFE2F51B65CA46C8ECC52
Certificate serial:       118252C83F4A4B4D0B489BABA83A7F298ACF837F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft
Manifest number:          020D
Signing time:             Sun 14 Apr 2024 23:04:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:59:04 +0000
Manifest next update:     Mon 15 Apr 2024 23:46:04 +0000
Files and hashes:         1: 0BB53137B22624BD787BFE2F51B65CA46C8ECC52.crl (hash: HriuI8t32Hcj2iw2Um5/RlnxImnUm1/DtpB8WrSXAoA=)
                          2: 323830343a313466383a3a2f33322d3438203d3e20323633333632.roa (hash: N/v3YAS/BNRtQIl3cijWiXT24ird2+2znJL+2O0u47c=)
                          3: 3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (hash: NnLlFab2aj9dgxORyn3x2+gyHBxoFhyKCVglp4q58kc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:82:52:c8:3f:4a:4b:4d:0b:48:9b:ab:a8:3a:7f:29:8a:cf:83:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BB53137B22624BD787BFE2F51B65CA46C8ECC52
        Validity
            Not Before: Apr 14 22:59:04 2024 GMT
            Not After : Apr 15 23:46:04 2024 GMT
        Subject: CN=7CCE4FFCD7E2B6DCBC8330A760531D0CA6EF0A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:44:c3:07:5f:6d:c2:20:1f:63:25:65:46:
                    a2:b7:29:e6:fc:27:e1:de:99:a7:72:01:b2:31:e1:
                    ee:7c:5b:62:ec:70:ce:d3:1c:37:77:07:57:89:77:
                    e9:50:b8:43:44:8e:a5:30:c6:ad:7d:bf:ee:f5:28:
                    48:76:0e:3e:38:b7:82:46:fc:e0:a9:bf:ed:80:ae:
                    7c:be:6c:e8:b4:fd:84:28:21:a3:cd:00:08:0e:a7:
                    dd:82:fb:c4:91:3a:f1:af:b0:7b:da:f0:42:f5:35:
                    a6:d3:05:f2:6c:b6:40:24:45:16:3e:0c:c1:12:45:
                    c8:5d:6b:d2:59:fe:af:16:84:6e:26:89:75:00:57:
                    73:1f:79:74:9c:72:0e:c3:8a:5a:47:89:f3:0c:bb:
                    69:cf:46:2e:b3:bc:87:de:9a:ca:ae:5a:fc:f9:ff:
                    16:bd:83:00:1c:2e:15:e0:97:09:ca:15:59:5a:14:
                    71:7b:d4:3c:81:ef:58:cb:7f:07:23:b2:66:f4:a0:
                    a1:9b:48:bb:0c:c9:e5:f9:1a:4d:d2:65:20:6d:6b:
                    c3:cd:0a:12:c5:df:6f:08:8a:92:a4:4f:17:94:f3:
                    50:ac:4f:73:4c:c5:3a:75:38:ac:7a:1b:4c:2c:d6:
                    d6:07:83:a8:4f:dc:19:19:eb:20:67:7d:57:68:8e:
                    8c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:4F:FC:D7:E2:B6:DC:BC:83:30:A7:60:53:1D:0C:A6:EF:0A:74
            X509v3 Authority Key Identifier:
                keyid:0B:B5:31:37:B2:26:24:BD:78:7B:FE:2F:51:B6:5C:A4:6C:8E:CC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/0BB53137B22624BD787BFE2F51B65CA46C8ECC52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:9d:a3:8f:99:f4:ef:bd:9c:1c:ec:06:00:c1:3c:d3:e2:
         7f:16:7a:0b:7e:bc:df:f9:16:ea:5b:52:78:b1:2b:05:9c:19:
         81:15:7e:0f:c0:11:fd:e9:90:40:e5:72:63:6b:87:cb:0c:27:
         c4:f8:88:4e:51:58:e5:3d:1e:65:4f:c6:a4:55:c4:ad:a9:d2:
         90:ad:01:4c:30:b7:53:3e:e4:5c:17:9a:ec:78:76:25:19:98:
         cd:99:6c:e3:05:80:e5:5f:b6:05:7b:7f:93:13:39:23:dc:5d:
         16:31:e8:90:f0:ff:f1:9a:f7:ba:4a:81:bf:56:9f:c3:e1:ff:
         2e:2e:47:48:f6:83:61:49:de:ba:d4:62:cc:20:dd:e1:28:b5:
         cb:b2:f5:43:5e:a8:4b:ff:42:0d:cb:d9:05:ce:bd:d1:58:d1:
         21:c3:08:b5:c1:84:08:61:fe:87:8b:b3:6b:89:e8:e9:11:0a:
         02:02:8b:f2:f7:41:07:5a:0c:c6:81:bf:51:50:88:4d:5a:2f:
         c4:8e:73:83:3d:e9:46:9f:a0:3c:a1:1e:25:b9:a6:19:12:88:
         57:86:d4:85:73:27:55:47:3a:5e:26:0a:04:a3:2e:48:3f:54:
         d0:68:c7:61:b5:90:46:a4:75:e0:f0:e5:c6:34:ae:23:fd:01:
         95:c1:44:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEYJSyD9KS00LSJurqDp/KYrPg38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJCNTMxMzdCMjI2MjRCRDc4N0JGRTJGNTFCNjVDQTQ2
QzhFQ0M1MjAeFw0yNDA0MTQyMjU5MDRaFw0yNDA0MTUyMzQ2MDRaMDMxMTAvBgNV
BAMTKDdDQ0U0RkZDRDdFMkI2RENCQzgzMzBBNzYwNTMxRDBDQTZFRjBBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcETDB19twiAfYyVlRqK3Keb8
J+HemadyAbIx4e58W2LscM7THDd3B1eJd+lQuENEjqUwxq19v+71KEh2Dj44t4JG
/OCpv+2Arny+bOi0/YQoIaPNAAgOp92C+8SROvGvsHva8EL1NabTBfJstkAkRRY+
DMESRchda9JZ/q8WhG4miXUAV3MfeXSccg7DilpHifMMu2nPRi6zvIfemsquWvz5
/xa9gwAcLhXglwnKFVlaFHF71DyB71jLfwcjsmb0oKGbSLsMyeX5Gk3SZSBta8PN
ChLF328IipKkTxeU81CsT3NMxTp1OKx6G0ws1tYHg6hP3BkZ6yBnfVdojoy7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfM5P/Nfitty8gzCnYFMdDKbvCnQwHwYDVR0j
BBgwFoAUC7UxN7ImJL14e/4vUbZcpGyOzFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUs3bTdKM25ZdTRIb0Z0eXJSRnNROFFHN0dzRXFvOXNzUXFjM05kdFJR
QTQvMC8wQkI1MzEzN0IyMjYyNEJENzg3QkZFMkY1MUI2NUNBNDZDOEVDQzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCQjUzMTM3QjIyNjI0QkQ3
ODdCRkUyRjUxQjY1Q0E0NkM4RUNDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUs3bTdKM25ZdTRIb0Z0eXJSRnNROFFHN0dzRXFvOXNzUXFjM05kdFJRQTQvMC8w
QkI1MzEzN0IyMjYyNEJENzg3QkZFMkY1MUI2NUNBNDZDOEVDQzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg6Odo4+Z9O+9nBzsBgDBPNPifxZ6C3683/kW6ltSeLErBZwZgRV+D8AR/emQ
QOVyY2uHywwnxPiITlFY5T0eZU/GpFXEranSkK0BTDC3Uz7kXBea7Hh2JRmYzZls
4wWA5V+2BXt/kxM5I9xdFjHokPD/8Zr3ukqBv1afw+H/Li5HSPaDYUneutRizCDd
4Si1y7L1Q16oS/9CDcvZBc690VjRIcMItcGECGH+h4uza4no6REKAgKL8vdBB1oM
xoG/UVCITVovxI5zgz3pRp+gPKEeJbmmGRKIV4bUhXMnVUc6XiYKBKMuSD9U0GjH
YbWQRqR14PDlxjSuI/0BlcFExQ==
-----END CERTIFICATE-----