Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAPUKCrMXWfiZe1GSbqwKqsfvNC4BVLuFv99Hh38swV8/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.mft
File:                     FB47CFA220EDC17A59F8DE87298196BCB35CC72E.mft (raw, json)
Hash identifier:          EM3LaH2Yew26iQ/3TL1J2xOa1Pkaexg5lQIx+4abs+4=
Subject key identifier:   20:0D:6D:52:DE:5C:24:6F:F5:E0:6E:37:4A:23:B6:97:E0:04:DB:EF
Authority key identifier: FB:47:CF:A2:20:ED:C1:7A:59:F8:DE:87:29:81:96:BC:B3:5C:C7:2E
Certificate issuer:       /CN=FB47CFA220EDC17A59F8DE87298196BCB35CC72E
Certificate serial:       7E1488C2AF37BFCAFCF2A100AA1943963479CBD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAPUKCrMXWfiZe1GSbqwKqsfvNC4BVLuFv99Hh38swV8/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.mft
Manifest number:          A7
Signing time:             Mon 17 Oct 2022 15:50:06 +0000
Manifest this update:     Mon 17 Oct 2022 15:45:06 +0000
Manifest next update:     Tue 18 Oct 2022 17:03:06 +0000
Files and hashes:         1: 3138372e36332e3132312e302f32342d3234203d3e20323730373734.roa (hash: H2oe5WsGUVMg+LqOYwXY9fKHFmYuMi31lJFcdwLDRTQ=)
                          2: FB47CFA220EDC17A59F8DE87298196BCB35CC72E.crl (hash: C5u1KvOt9gDUvOLAU08/DneWe1N6osyi4whAzZfrW1I=)
                          3: 323830343a373133343a3a2f33322d3332203d3e20323730373734.roa (hash: wMKqaOCkErN8vlXApus3ggwV0NstNKpuvv7kN5HJy38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:14:88:c2:af:37:bf:ca:fc:f2:a1:00:aa:19:43:96:34:79:cb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB47CFA220EDC17A59F8DE87298196BCB35CC72E
        Validity
            Not Before: Oct 17 15:45:06 2022 GMT
            Not After : Oct 18 17:03:06 2022 GMT
        Subject: CN=200D6D52DE5C246FF5E06E374A23B697E004DBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:d5:25:11:90:af:b2:c7:66:1a:e7:97:83:
                    c8:95:d0:45:89:d6:d6:d8:91:7f:07:9b:46:e9:a9:
                    64:ba:18:05:10:fd:95:16:e3:6a:6d:8c:60:43:d6:
                    38:81:25:93:9c:61:3f:eb:80:1a:d4:32:11:d6:46:
                    88:2c:38:0f:32:94:f6:9a:53:36:c4:6e:87:fc:7d:
                    24:dc:3a:83:56:35:62:05:c8:de:8e:03:02:79:bf:
                    f4:7b:95:91:7b:4b:75:a4:b1:fe:c3:5f:0a:ed:83:
                    84:52:15:43:76:e5:88:c2:28:cf:8b:5d:ea:f5:f3:
                    6d:68:ce:d7:4b:13:6b:db:87:b0:04:81:ea:37:99:
                    49:5e:94:ef:6e:be:3a:c0:9f:b8:72:b7:af:c6:43:
                    d1:25:44:88:da:81:32:2c:99:0e:b9:83:a1:bd:40:
                    f4:67:da:20:49:13:c9:df:65:62:ea:71:f5:96:ab:
                    3a:58:17:5b:27:68:95:11:8e:e6:60:79:81:c0:78:
                    7b:79:89:de:4a:cb:85:1e:a5:49:de:8f:58:ce:2b:
                    cc:78:3f:2e:40:4e:fc:e5:00:73:a5:17:2e:8c:3c:
                    f4:c0:39:27:b4:43:02:a4:ef:c3:62:f1:9c:c5:0e:
                    d5:37:9f:8b:42:56:b3:8d:9e:64:38:ac:17:f4:9b:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:6D:52:DE:5C:24:6F:F5:E0:6E:37:4A:23:B6:97:E0:04:DB:EF
            X509v3 Authority Key Identifier:
                keyid:FB:47:CF:A2:20:ED:C1:7A:59:F8:DE:87:29:81:96:BC:B3:5C:C7:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAPUKCrMXWfiZe1GSbqwKqsfvNC4BVLuFv99Hh38swV8/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAPUKCrMXWfiZe1GSbqwKqsfvNC4BVLuFv99Hh38swV8/0/FB47CFA220EDC17A59F8DE87298196BCB35CC72E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:82:f6:8a:57:c4:43:a7:eb:ee:2c:d1:50:d0:b0:f9:ce:
         3c:49:26:c0:28:c1:25:1a:75:b8:5c:00:24:77:69:78:00:be:
         f7:34:3f:14:06:d5:65:5b:37:1e:20:ce:e3:6f:0c:ff:52:de:
         c6:5d:6b:61:64:ab:46:a8:66:66:d2:82:db:3d:e3:30:82:35:
         47:72:10:60:d3:93:16:7d:98:85:f3:81:d9:43:62:33:b5:c1:
         f6:a9:07:ec:dd:9e:37:88:eb:01:7f:8b:e0:55:fe:b0:96:96:
         93:aa:ab:ac:b9:98:3e:60:13:6e:61:6f:fa:cf:bc:52:e2:02:
         0d:aa:d4:50:52:24:e0:03:45:28:2d:53:68:79:5c:8c:a1:a5:
         cb:ef:f2:4d:09:07:a6:b3:89:fc:2e:d6:49:90:f0:fb:97:73:
         00:2d:9f:61:61:29:bb:9c:f4:31:6c:f1:30:9c:35:9d:63:c8:
         d1:06:98:45:06:d5:af:9d:32:3a:7a:b7:68:6c:16:11:19:93:
         a2:8d:ac:01:3e:be:19:bc:71:a2:9a:20:0d:1f:ac:bb:bd:69:
         c4:40:c7:fc:db:ea:7a:ac:12:cc:e3:af:ec:e4:57:07:5d:56:
         07:a4:ef:d2:95:d9:de:06:da:25:f9:94:b7:0d:ab:c0:4f:b7:
         77:8c:0e:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfhSIwq83v8r88qEAqhlDljR5y9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0N0NGQTIyMEVEQzE3QTU5RjhERTg3Mjk4MTk2QkNC
MzVDQzcyRTAeFw0yMjEwMTcxNTQ1MDZaFw0yMjEwMTgxNzAzMDZaMDMxMTAvBgNV
BAMTKDIwMEQ2RDUyREU1QzI0NkZGNUUwNkUzNzRBMjNCNjk3RTAwNERCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YtUlEZCvssdmGueXg8iV0EWJ
1tbYkX8Hm0bpqWS6GAUQ/ZUW42ptjGBD1jiBJZOcYT/rgBrUMhHWRogsOA8ylPaa
UzbEbof8fSTcOoNWNWIFyN6OAwJ5v/R7lZF7S3Wksf7DXwrtg4RSFUN25YjCKM+L
Xer1821oztdLE2vbh7AEgeo3mUlelO9uvjrAn7hyt6/GQ9ElRIjagTIsmQ65g6G9
QPRn2iBJE8nfZWLqcfWWqzpYF1snaJURjuZgeYHAeHt5id5Ky4UepUnej1jOK8x4
Py5ATvzlAHOlFy6MPPTAOSe0QwKk78Ni8ZzFDtU3n4tCVrONnmQ4rBf0m1ATAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIA1tUt5cJG/14G43SiO2l+AE2+8wHwYDVR0j
BBgwFoAU+0fPoiDtwXpZ+N6HKYGWvLNcxy4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFQVUtDck1YV2ZpWmUxR1NicXdLcXNmdk5DNEJWTHVGdjk5SGgzOHN3
VjgvMC9GQjQ3Q0ZBMjIwRURDMTdBNTlGOERFODcyOTgxOTZCQ0IzNUNDNzJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNDdDRkEyMjBFREMxN0E1
OUY4REU4NzI5ODE5NkJDQjM1Q0M3MkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFQVUtDck1YV2ZpWmUxR1NicXdLcXNmdk5DNEJWTHVGdjk5SGgzOHN3VjgvMC9G
QjQ3Q0ZBMjIwRURDMTdBNTlGOERFODcyOTgxOTZCQ0IzNUNDNzJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYo+C9opXxEOn6+4s0VDQsPnOPEkmwCjBJRp1uFwAJHdpeAC+9zQ/FAbVZVs3
HiDO428M/1Lexl1rYWSrRqhmZtKC2z3jMII1R3IQYNOTFn2YhfOB2UNiM7XB9qkH
7N2eN4jrAX+L4FX+sJaWk6qrrLmYPmATbmFv+s+8UuICDarUUFIk4ANFKC1TaHlc
jKGly+/yTQkHprOJ/C7WSZDw+5dzAC2fYWEpu5z0MWzxMJw1nWPI0QaYRQbVr50y
Onq3aGwWERmToo2sAT6+GbxxopogDR+su71pxEDH/NvqeqwSzOOv7ORXB11WB6Tv
0pXZ3gbaJfmUtw2rwE+3d4wOeg==
-----END CERTIFICATE-----