Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.mft
File:                     BFE42304450EA733F37BD9420D070B3323835C2F.mft (raw, json)
Hash identifier:          XWLMJYWV6+1cIKmUEz7DCD5GuLMs/20xIBrUUViY5gQ=
Subject key identifier:   0D:76:69:A3:D2:77:6B:75:7B:F4:4E:34:1F:66:D7:C2:37:4C:C5:50
Authority key identifier: BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F
Certificate issuer:       /CN=BFE42304450EA733F37BD9420D070B3323835C2F
Certificate serial:       24D0C66FE0925CB2AFB1A3677E4CC333BE70BDDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.mft
Manifest number:          58
Signing time:             Sun 14 Apr 2024 17:59:17 +0000
Manifest this update:     Sun 14 Apr 2024 17:54:17 +0000
Manifest next update:     Mon 15 Apr 2024 20:29:17 +0000
Files and hashes:         1: 323830343a336263383a3a2f33332d3438203d3e20323636313730.roa (hash: d08TWz1M4t7qCRn/3wweQJZbZgKP0HbEI3v/3JWWStI=)
                          2: 323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa (hash: U3YyEAg0q2CxcgPJL4qH2CbjU10NL12tbZ1R9D/9IQc=)
                          3: 323830343a336263383a3a2f33322d3332203d3e20323636313730.roa (hash: mUrDeBAFY+AH7A5Aq6PaP99QB1STN+6+IvFhR+CJZkw=)
                          4: BFE42304450EA733F37BD9420D070B3323835C2F.crl (hash: JVhXX8gtbz6yUwqtnAcrLIOBOG4kc87Bi8qMdo1QjKQ=)
                          5: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: txNEhRVSb7v7nBug+I4d6+zJ7mmM7aQMJbbYAO/DSpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d0:c6:6f:e0:92:5c:b2:af:b1:a3:67:7e:4c:c3:33:be:70:bd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE42304450EA733F37BD9420D070B3323835C2F
        Validity
            Not Before: Apr 14 17:54:17 2024 GMT
            Not After : Apr 15 20:29:17 2024 GMT
        Subject: CN=0D7669A3D2776B757BF44E341F66D7C2374CC550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:01:d2:8d:d6:0d:40:17:a6:64:64:75:d8:
                    2d:2a:46:c7:e1:c4:a0:0c:3a:82:fd:55:9d:42:a5:
                    99:8c:fb:0d:92:71:f6:54:cf:eb:41:a6:dd:14:30:
                    2a:9b:e4:a8:84:55:51:49:8c:3b:c8:77:4b:6b:b3:
                    37:e0:32:3d:ec:ab:c9:7c:ed:53:3a:47:b3:11:2b:
                    66:95:ce:89:98:7b:54:65:15:43:91:0e:b9:c7:a9:
                    f9:b5:ee:aa:0c:b8:be:c3:76:ed:2a:e6:92:5e:4a:
                    cb:e1:31:4d:aa:8b:6f:fc:48:f3:df:e9:87:d8:4e:
                    4d:78:31:13:3a:e5:9e:3e:c8:e0:5d:ce:ca:78:29:
                    39:02:63:c6:cf:a8:9e:5b:83:98:3b:f7:d0:38:88:
                    34:c2:68:4f:e2:3d:7b:d6:29:f5:4c:85:14:31:82:
                    7a:e2:e6:aa:ca:7d:f3:ef:40:bc:3f:cf:a6:45:40:
                    e9:ae:f4:4c:80:3f:71:a7:9e:d0:79:49:d6:c3:8e:
                    c3:e3:9d:09:64:5d:3a:0f:f9:66:01:4f:d7:cd:7a:
                    f4:b8:d4:4c:47:c5:6b:a5:35:7b:3d:10:fe:13:44:
                    9f:c7:9e:dd:2f:48:a3:86:fb:84:70:ef:fe:22:a9:
                    f5:20:33:83:58:b7:b0:63:6d:75:c3:c0:78:61:1a:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:76:69:A3:D2:77:6B:75:7B:F4:4E:34:1F:66:D7:C2:37:4C:C5:50
            X509v3 Authority Key Identifier:
                keyid:BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:53:61:11:8b:5f:38:96:74:47:69:00:3a:50:ab:ba:35:
         bb:1c:39:69:20:41:df:9b:41:02:72:46:07:66:89:cf:57:0c:
         ac:cb:33:72:fd:19:48:c9:a1:91:6c:79:f6:fd:25:55:ff:12:
         11:5e:48:32:9f:54:33:d8:88:bf:34:f6:69:d3:04:86:be:f6:
         2d:2b:ca:a1:b4:bf:d7:38:40:9d:96:b4:44:96:a1:43:5a:32:
         56:47:69:3f:b9:86:5c:17:1b:39:1e:13:84:b1:87:69:0f:3a:
         30:2a:97:22:3b:8d:07:e9:1a:49:96:17:92:4a:16:a2:ee:71:
         b1:ab:b4:65:8d:cf:4c:6f:67:52:5a:90:c5:b3:f0:7b:03:44:
         eb:af:0e:5e:8a:9e:4b:3a:81:1a:ee:5b:ad:3e:99:01:c6:b6:
         36:9b:8b:83:c5:de:f0:c4:1d:b2:8e:47:40:fc:27:97:ea:0d:
         fc:1e:4a:21:14:d7:10:3d:7b:1f:08:db:59:bc:4e:fb:b2:ef:
         8b:b4:09:ce:6a:c7:f1:5b:24:4d:3f:37:4f:74:71:d7:a5:41:
         56:08:c6:70:12:05:9d:96:14:98:d6:cd:8c:dc:6d:38:e3:bc:
         25:be:5d:d5:12:a3:53:49:f5:75:42:9f:09:70:0f:c0:36:89:
         87:9e:d3:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJNDGb+CSXLKvsaNnfkzDM75wvdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFNDIzMDQ0NTBFQTczM0YzN0JEOTQyMEQwNzBCMzMy
MzgzNUMyRjAeFw0yNDA0MTQxNzU0MTdaFw0yNDA0MTUyMDI5MTdaMDMxMTAvBgNV
BAMTKDBENzY2OUEzRDI3NzZCNzU3QkY0NEUzNDFGNjZEN0MyMzc0Q0M1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYwHSjdYNQBemZGR12C0qRsfh
xKAMOoL9VZ1CpZmM+w2ScfZUz+tBpt0UMCqb5KiEVVFJjDvId0trszfgMj3sq8l8
7VM6R7MRK2aVzomYe1RlFUORDrnHqfm17qoMuL7Ddu0q5pJeSsvhMU2qi2/8SPPf
6YfYTk14MRM65Z4+yOBdzsp4KTkCY8bPqJ5bg5g799A4iDTCaE/iPXvWKfVMhRQx
gnri5qrKffPvQLw/z6ZFQOmu9EyAP3GnntB5SdbDjsPjnQlkXToP+WYBT9fNevS4
1ExHxWulNXs9EP4TRJ/Hnt0vSKOG+4Rw7/4iqfUgM4NYt7BjbXXDwHhhGgRVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDXZpo9J3a3V79E40H2bXwjdMxVAwHwYDVR0j
BBgwFoAUv+QjBEUOpzPze9lCDQcLMyODXC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlIOU5ETjFEbXk2akZZNFVjQ1dieW9ZYXdDd2NydUVCUFVyck1Vd1FF
a1kvMC9CRkU0MjMwNDQ1MEVBNzMzRjM3QkQ5NDIwRDA3MEIzMzIzODM1QzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGRTQyMzA0NDUwRUE3MzNG
MzdCRDk0MjBEMDcwQjMzMjM4MzVDMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjlIOU5ETjFEbXk2akZZNFVjQ1dieW9ZYXdDd2NydUVCUFVyck1Vd1FFa1kvMC9C
RkU0MjMwNDQ1MEVBNzMzRjM3QkQ5NDIwRDA3MEIzMzIzODM1QzJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABHxTYRGLXziWdEdpADpQq7o1uxw5aSBB35tBAnJGB2aJz1cMrMszcv0ZSMmh
kWx59v0lVf8SEV5IMp9UM9iIvzT2adMEhr72LSvKobS/1zhAnZa0RJahQ1oyVkdp
P7mGXBcbOR4ThLGHaQ86MCqXIjuNB+kaSZYXkkoWou5xsau0ZY3PTG9nUlqQxbPw
ewNE668OXoqeSzqBGu5brT6ZAca2NpuLg8Xe8MQdso5HQPwnl+oN/B5KIRTXED17
HwjbWbxO+7Lvi7QJzmrH8VskTT83T3Rx16VBVgjGcBIFnZYUmNbNjNxtOOO8Jb5d
1RKjU0n1dUKfCXAPwDaJh57TlQ==
-----END CERTIFICATE-----