Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft
File:                     8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft (raw, json)
Hash identifier:          kpe7ZQwXYBBumyFCCrQqls/0X8xyP5Mhmt43Uo8HR7E=
Subject key identifier:   A5:E4:BB:06:9F:50:3B:21:AF:E7:B7:A1:17:DB:CB:E7:22:E7:72:40
Authority key identifier: 8B:10:E8:8F:B6:10:CE:99:2B:0C:C7:96:50:F8:B7:A5:48:A6:BD:A9
Certificate issuer:       /CN=8B10E88FB610CE992B0CC79650F8B7A548A6BDA9
Certificate serial:       3878D67C04FE4D9AA0BDB42CF538024511332B11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft
Manifest number:          35
Signing time:             Tue 16 May 2023 13:33:52 +0000
Manifest this update:     Tue 16 May 2023 13:28:52 +0000
Manifest next update:     Wed 17 May 2023 15:21:52 +0000
Files and hashes:         1: 323830343a326162633a3a2f33322d313238203d3e20323634303931.roa (hash: vum1lbdcW13dwF1/zVbMFex25//8KJFAjHYoMokE/F8=)
                          2: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: wqXSgJHA2lzwyBJJ/5kkbRzCFa43txx0JWWJpH3to5g=)
                          3: 8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.crl (hash: avVU01LU/621X3OL3Zm3JcvFmioc8hwCkFvT6cWeu6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:d6:7c:04:fe:4d:9a:a0:bd:b4:2c:f5:38:02:45:11:33:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B10E88FB610CE992B0CC79650F8B7A548A6BDA9
        Validity
            Not Before: May 16 13:28:52 2023 GMT
            Not After : May 17 15:21:52 2023 GMT
        Subject: CN=A5E4BB069F503B21AFE7B7A117DBCBE722E77240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:26:9a:25:ab:98:5c:98:fa:39:5b:db:78:
                    fb:3e:b7:d0:fc:13:18:89:b6:36:27:3a:de:09:e4:
                    4d:e1:e4:ff:b5:00:fd:e2:b8:69:26:8d:33:43:d8:
                    a8:9d:5d:73:ce:d5:9d:5c:bb:9d:2f:e8:55:a8:76:
                    2a:6c:88:a2:cd:ed:2f:f2:ef:f7:92:7f:57:54:a5:
                    58:16:5f:93:bc:ac:f8:78:38:bf:a7:c7:6d:c9:a1:
                    3d:89:67:d2:b9:ec:fc:3a:df:61:e5:e2:48:2b:a6:
                    c4:30:9b:21:9d:4f:e9:35:fb:71:b5:4d:35:5e:ce:
                    14:91:36:34:fd:94:5f:27:3f:4d:93:86:5b:6f:22:
                    6c:c6:f1:38:ff:b1:b2:78:9b:d4:78:25:ae:aa:12:
                    72:b6:39:fc:d7:c4:0c:1f:e4:70:2d:a9:98:24:7a:
                    93:e6:b5:95:37:dd:cf:a3:b7:6d:19:8b:00:31:3f:
                    04:38:3f:10:d6:ff:e1:68:33:22:7f:ef:ec:c1:a0:
                    62:a7:47:14:32:f0:44:d0:1a:68:a1:5c:ae:ec:e3:
                    1a:d9:e5:03:f4:f7:a6:86:8a:94:64:a3:e1:cb:d8:
                    8c:82:4d:64:eb:6c:1d:90:07:19:40:11:52:22:be:
                    d8:c9:35:d7:99:7a:9d:28:c8:f4:50:b4:76:f0:82:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:BB:06:9F:50:3B:21:AF:E7:B7:A1:17:DB:CB:E7:22:E7:72:40
            X509v3 Authority Key Identifier:
                keyid:8B:10:E8:8F:B6:10:CE:99:2B:0C:C7:96:50:F8:B7:A5:48:A6:BD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/8B10E88FB610CE992B0CC79650F8B7A548A6BDA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:50:d9:9f:0a:66:d6:47:24:69:81:6c:b7:ee:8c:f9:61:
         c2:8b:94:c4:30:4c:c4:e2:7f:2a:e5:bd:24:a9:bb:9c:9d:8c:
         07:f7:6e:37:1e:cd:8a:97:c2:3d:0b:05:a5:19:0a:98:d3:25:
         11:a7:6b:8e:fa:34:6f:6c:9e:f8:72:d3:82:2d:94:56:77:9f:
         60:8d:51:cb:99:26:14:be:4d:e6:d7:4d:1c:c2:e4:c3:00:9d:
         0a:35:0c:1f:c2:e5:70:3b:f1:35:22:ab:a6:3e:a0:76:f2:50:
         d5:c4:67:c5:cf:94:b8:6c:44:63:ce:ef:8f:0a:61:ee:2d:71:
         8d:9a:f4:ca:53:d9:01:d2:99:61:4f:16:a8:99:16:e1:6f:7e:
         d2:4d:0d:1d:97:d0:38:05:2c:13:ef:79:ba:b3:85:c8:cf:45:
         cd:d3:f5:f8:46:6f:8f:21:48:1c:9e:ec:42:9a:8c:3b:26:1e:
         12:94:6a:e8:c4:77:58:a6:12:94:ae:21:20:83:73:f5:74:31:
         96:4e:91:c0:59:ec:ed:ef:13:86:4b:96:61:c0:71:44:f0:66:
         94:a5:2d:d3:56:09:41:2f:99:98:24:90:f8:6b:5d:ab:80:60:
         5f:66:6c:dc:17:bb:ab:63:d4:71:66:b4:01:48:3a:58:a7:76:
         e8:30:ca:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOHjWfAT+TZqgvbQs9TgCRREzKxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIxMEU4OEZCNjEwQ0U5OTJCMENDNzk2NTBGOEI3QTU0
OEE2QkRBOTAeFw0yMzA1MTYxMzI4NTJaFw0yMzA1MTcxNTIxNTJaMDMxMTAvBgNV
BAMTKEE1RTRCQjA2OUY1MDNCMjFBRkU3QjdBMTE3REJDQkU3MjJFNzcyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51CaaJauYXJj6OVvbePs+t9D8
ExiJtjYnOt4J5E3h5P+1AP3iuGkmjTND2KidXXPO1Z1cu50v6FWodipsiKLN7S/y
7/eSf1dUpVgWX5O8rPh4OL+nx23JoT2JZ9K57Pw632Hl4kgrpsQwmyGdT+k1+3G1
TTVezhSRNjT9lF8nP02ThltvImzG8Tj/sbJ4m9R4Ja6qEnK2OfzXxAwf5HAtqZgk
epPmtZU33c+jt20ZiwAxPwQ4PxDW/+FoMyJ/7+zBoGKnRxQy8ETQGmihXK7s4xrZ
5QP096aGipRko+HL2IyCTWTrbB2QBxlAEVIivtjJNdeZep0oyPRQtHbwgml1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpeS7Bp9QOyGv57ehF9vL5yLnckAwHwYDVR0j
BBgwFoAUixDoj7YQzpkrDMeWUPi3pUimvakwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw
YTUvMC84QjEwRTg4RkI2MTBDRTk5MkIwQ0M3OTY1MEY4QjdBNTQ4QTZCREE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCMTBFODhGQjYxMENFOTky
QjBDQzc5NjUwRjhCN0E1NDhBNkJEQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdwYTUvMC84
QjEwRTg4RkI2MTBDRTk5MkIwQ0M3OTY1MEY4QjdBNTQ4QTZCREE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADedQ2Z8KZtZHJGmBbLfujPlhwouUxDBMxOJ/KuW9JKm7nJ2MB/duNx7NipfC
PQsFpRkKmNMlEadrjvo0b2ye+HLTgi2UVnefYI1Ry5kmFL5N5tdNHMLkwwCdCjUM
H8LlcDvxNSKrpj6gdvJQ1cRnxc+UuGxEY87vjwph7i1xjZr0ylPZAdKZYU8WqJkW
4W9+0k0NHZfQOAUsE+95urOFyM9FzdP1+EZvjyFIHJ7sQpqMOyYeEpRq6MR3WKYS
lK4hIINz9XQxlk6RwFns7e8ThkuWYcBxRPBmlKUt01YJQS+ZmCSQ+Gtdq4BgX2Zs
3Be7q2PUcWa0AUg6WKd26DDKkQ==
-----END CERTIFICATE-----