Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft
File:                     F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft (raw, json)
Hash identifier:          qpht+djgpgVXvyy1CMnMz5LNGn0bs5IKlK+mEojgTmY=
Subject key identifier:   9F:86:D1:49:F8:28:51:32:EE:2A:A2:F2:4A:21:EF:58:AD:67:0C:16
Authority key identifier: F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
Certificate issuer:       /CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
Certificate serial:       789EC9E9AE800D8D9909058EBF0CA5BB3314B659
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft
Manifest number:          72
Signing time:             Sun 14 Apr 2024 22:17:34 +0000
Manifest this update:     Sun 14 Apr 2024 22:12:34 +0000
Manifest next update:     Tue 16 Apr 2024 01:46:34 +0000
Files and hashes:         1: 3137392e34322e342e302f32322d3233203d3e20323731313034.roa (hash: BlZRP6gXy8N/LFQrqgnu8W4HUTiIu8IS8+zAKsg7du4=)
                          2: F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.crl (hash: ++l+Iajr0JT0jcun1VZOaf10r8bErjCOKNC+Cdl0gAs=)
                          3: 323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (hash: pH53QIrinLyUMEpfROqjo23TW2AHuKiY76lkruP1NvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:c9:e9:ae:80:0d:8d:99:09:05:8e:bf:0c:a5:bb:33:14:b6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
        Validity
            Not Before: Apr 14 22:12:34 2024 GMT
            Not After : Apr 16 01:46:34 2024 GMT
        Subject: CN=9F86D149F8285132EE2AA2F24A21EF58AD670C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:89:9a:7a:fa:53:55:4b:e1:83:0e:c2:c0:
                    20:9e:93:c2:7a:11:b5:48:ee:8b:91:cd:21:af:f0:
                    f5:a5:9c:fc:74:d1:5c:f6:85:1f:f1:44:c5:45:24:
                    37:97:9f:b4:7d:d9:9d:fb:f1:d5:39:70:de:68:dc:
                    7c:2a:b3:f7:e4:71:13:6a:63:00:46:29:81:f7:76:
                    44:ab:da:da:19:2e:6e:d2:8f:ff:2f:39:92:bc:7f:
                    97:80:bd:e5:0f:c0:aa:cc:0a:7a:7b:a5:21:06:e1:
                    86:58:fb:b6:41:e7:bf:0e:e3:3a:92:2c:53:e7:fc:
                    f1:3b:6f:1a:b3:8a:ce:4d:a7:ca:5b:74:12:2f:c1:
                    57:a1:8e:27:80:1b:d2:5c:55:26:bd:d9:a5:0f:f6:
                    58:f6:46:50:ed:1d:ee:cf:5d:37:1c:cc:12:34:e8:
                    f2:ec:ca:be:ae:7b:b6:a3:18:5a:c0:0c:d0:c4:82:
                    44:83:1a:af:c0:fe:d7:82:b1:c5:27:f0:e8:9b:f9:
                    f1:a5:9c:ae:98:8e:0d:0e:e3:4b:74:96:b9:a1:36:
                    48:3d:d9:6e:17:14:85:2d:6f:ea:28:95:07:78:9f:
                    dd:45:74:28:2c:05:9e:09:ce:a9:52:d6:bd:da:17:
                    35:27:73:89:98:16:cf:bc:16:1e:d6:fe:2e:c1:c2:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:D1:49:F8:28:51:32:EE:2A:A2:F2:4A:21:EF:58:AD:67:0C:16
            X509v3 Authority Key Identifier:
                keyid:F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:8c:69:a6:f2:96:30:b6:dd:5f:bf:fd:67:b3:52:ff:bf:
         35:39:93:d2:07:d5:77:d5:d0:9f:20:19:f3:0e:11:77:d4:6c:
         34:5d:5c:c1:64:70:20:56:f4:5e:30:1c:3d:00:a4:04:1d:41:
         a8:45:9b:00:ac:98:c0:3c:66:5d:c3:62:43:25:1e:7f:fb:3f:
         e5:67:d3:a6:b3:37:13:04:d2:48:53:ca:86:9c:23:d6:cd:86:
         22:65:9e:b6:a5:60:40:be:b4:b6:c3:90:9e:a0:6c:be:be:78:
         46:04:f8:8b:c4:1b:d3:13:4c:19:b7:ff:68:2d:7e:f0:92:70:
         9a:69:98:e5:f7:72:1b:28:ed:25:e9:d6:7f:29:bc:fb:4f:72:
         63:de:c0:cf:4d:30:6a:09:35:58:36:19:d9:b0:25:01:43:04:
         7a:13:7a:04:17:c1:38:30:dd:34:d2:3f:eb:b9:b4:7f:b4:00:
         51:36:ce:a8:4e:8a:4e:54:38:a6:1c:07:39:b7:32:9a:62:4d:
         08:6e:87:c8:bd:0c:5a:db:6a:40:5c:8b:83:41:a2:9b:90:f2:
         f8:76:1d:68:38:78:5f:c5:85:b5:1e:0e:f9:05:b1:3a:7f:89:
         7c:a2:38:fa:0a:c2:9b:18:e2:45:5f:a2:81:1e:65:53:66:21:
         61:e3:7c:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeJ7J6a6ADY2ZCQWOvwyluzMUtlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMjc3RDVEMUZBOEEwQkJFRUE0NzM0Q0Q2MDE0OUU2
REE2MEI1MDAeFw0yNDA0MTQyMjEyMzRaFw0yNDA0MTYwMTQ2MzRaMDMxMTAvBgNV
BAMTKDlGODZEMTQ5RjgyODUxMzJFRTJBQTJGMjRBMjFFRjU4QUQ2NzBDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJYmaevpTVUvhgw7CwCCek8J6
EbVI7ouRzSGv8PWlnPx00Vz2hR/xRMVFJDeXn7R92Z378dU5cN5o3Hwqs/fkcRNq
YwBGKYH3dkSr2toZLm7Sj/8vOZK8f5eAveUPwKrMCnp7pSEG4YZY+7ZB578O4zqS
LFPn/PE7bxqzis5Np8pbdBIvwVehjieAG9JcVSa92aUP9lj2RlDtHe7PXTcczBI0
6PLsyr6ue7ajGFrADNDEgkSDGq/A/teCscUn8Oib+fGlnK6Yjg0O40t0lrmhNkg9
2W4XFIUtb+oolQd4n91FdCgsBZ4JzqlS1r3aFzUnc4mYFs+8Fh7W/i7BwkmXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn4bRSfgoUTLuKqLySiHvWK1nDBYwHwYDVR0j
BBgwFoAU+OJ31dH6igu+6kc0zWAUnm2mC1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZLRUh5OFIzVHFOSmk3cVBkb0V0d05xcFVnRFU0WFE4cmRBZEpyMWFT
NzIvMS9GOEUyNzdENUQxRkE4QTBCQkVFQTQ3MzRDRDYwMTQ5RTZEQTYwQjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4RTI3N0Q1RDFGQThBMEJC
RUVBNDczNENENjAxNDlFNkRBNjBCNTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjZLRUh5OFIzVHFOSmk3cVBkb0V0d05xcFVnRFU0WFE4cmRBZEpyMWFTNzIvMS9G
OEUyNzdENUQxRkE4QTBCQkVFQTQ3MzRDRDYwMTQ5RTZEQTYwQjUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeh6MaabyljC23V+//WezUv+/NTmT0gfVd9XQnyAZ8w4Rd9RsNF1cwWRwIFb0
XjAcPQCkBB1BqEWbAKyYwDxmXcNiQyUef/s/5WfTprM3EwTSSFPKhpwj1s2GImWe
tqVgQL60tsOQnqBsvr54RgT4i8Qb0xNMGbf/aC1+8JJwmmmY5fdyGyjtJenWfym8
+09yY97Az00wagk1WDYZ2bAlAUMEehN6BBfBODDdNNI/67m0f7QAUTbOqE6KTlQ4
phwHObcymmJNCG6HyL0MWttqQFyLg0Gim5Dy+HYdaDh4X8WFtR4O+QWxOn+JfKI4
+grCmxjiRV+igR5lU2YhYeN8Ww==
-----END CERTIFICATE-----