Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.mft
File:                     1B1702BC517065A11637A946F3D5295EB223FCE1.mft (raw, json)
Hash identifier:          E+JZ0eXeRBNaG/xrcErhUuXF/G/Ic8jsGmm7JhBTrPA=
Subject key identifier:   5D:C9:7A:A7:8A:3D:E7:8D:B6:34:0B:9F:8C:F4:99:3C:E9:76:00:10
Authority key identifier: 1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1
Certificate issuer:       /CN=1B1702BC517065A11637A946F3D5295EB223FCE1
Certificate serial:       0F34E4D35BDE020D68D6871096FF84E522B88336
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.mft
Manifest number:          0799
Signing time:             Mon 15 Apr 2024 11:10:22 +0000
Manifest this update:     Mon 15 Apr 2024 11:05:22 +0000
Manifest next update:     Tue 16 Apr 2024 12:24:22 +0000
Files and hashes:         1: 323830343a333037383a3a2f33322d3438203d3e20323634393533.roa (hash: JXVijsMZg1pxAh+3BmHm4Cep54ViO7iWIPXLy/RCEGM=)
                          2: 1B1702BC517065A11637A946F3D5295EB223FCE1.crl (hash: GaR3DcWLJbJZvbPw1cqcpOHmj4lhv7RnEnNaSKTSbas=)
                          3: 3136382e3232382e3134382e302f32322d3234203d3e20323634393533.roa (hash: Agf4LXiY7bYLFitmWblTI1roptDAmA0mEb2mmH2FK8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:34:e4:d3:5b:de:02:0d:68:d6:87:10:96:ff:84:e5:22:b8:83:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1702BC517065A11637A946F3D5295EB223FCE1
        Validity
            Not Before: Apr 15 11:05:22 2024 GMT
            Not After : Apr 16 12:24:22 2024 GMT
        Subject: CN=5DC97AA78A3DE78DB6340B9F8CF4993CE9760010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:cf:5f:9d:8d:29:42:e5:2d:d8:bf:c8:99:
                    98:50:05:20:3e:42:0d:96:91:da:37:aa:45:87:6f:
                    c9:88:1f:17:df:cb:43:69:a1:f3:b8:79:d9:70:dd:
                    d1:73:91:0b:db:56:3e:f2:8a:7c:0e:f4:c7:5e:a9:
                    13:eb:c2:8b:6c:b5:b1:91:e3:d9:49:d8:66:56:2e:
                    df:57:80:8b:a3:26:69:bd:db:7d:2c:df:78:39:94:
                    6f:9b:b7:58:a3:a8:69:ab:87:d7:54:b3:67:bd:38:
                    45:1c:42:4d:90:0c:8c:17:cd:11:02:8e:5c:76:3f:
                    f6:a1:9b:09:5d:f7:e4:7b:a0:10:92:9a:c8:7c:68:
                    74:1a:e0:4b:6e:b4:24:74:52:2b:ae:5d:94:05:1f:
                    66:6d:fb:4e:22:eb:d0:5d:ca:e4:a2:18:13:7c:bc:
                    3e:e4:39:06:1d:8d:b0:f2:bd:c7:02:2d:aa:cb:f8:
                    ec:37:aa:5a:1c:eb:76:79:cd:e3:31:b4:f8:63:32:
                    f2:e1:05:d5:5a:3f:07:82:f2:0c:62:bf:6e:f0:e8:
                    fe:f9:7a:78:20:5e:10:ab:79:c6:16:91:8d:66:7d:
                    40:f4:db:3d:a7:f5:ef:69:bd:2f:47:d9:c6:1f:db:
                    fd:56:87:50:c1:9e:8f:5e:4d:7f:58:a1:04:86:73:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:7A:A7:8A:3D:E7:8D:B6:34:0B:9F:8C:F4:99:3C:E9:76:00:10
            X509v3 Authority Key Identifier:
                keyid:1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:d1:51:3d:fc:7d:22:64:a4:65:a8:d0:42:a4:d4:6e:69:
         40:2c:fb:11:5d:97:89:67:e3:9f:c8:54:74:0e:d5:f4:6c:f1:
         45:15:29:8f:73:12:a2:ef:bf:fb:e5:49:4d:f2:50:bb:7b:21:
         25:c9:f5:a7:87:75:09:cd:de:5b:09:d4:1f:7f:51:13:00:8b:
         2d:7e:ec:0e:eb:2b:c5:55:be:06:71:37:a2:72:74:11:06:e5:
         f3:82:de:88:4f:80:d7:58:a4:70:14:b7:f0:a9:1d:3f:83:51:
         09:be:b4:32:8e:bf:25:dd:68:ef:9f:56:9d:d3:ca:e7:0a:23:
         24:15:48:48:c8:13:02:2d:b2:e7:e0:71:d0:6f:ac:d1:e3:44:
         e9:a8:21:40:25:f7:58:03:32:ab:d8:ff:61:d8:fc:18:f4:41:
         62:6a:1b:f9:f7:02:a0:99:4d:68:1f:68:76:ec:f7:a5:0e:24:
         6c:27:13:3d:57:29:ef:0d:6a:d2:00:02:fa:08:fc:29:e3:f8:
         e0:15:ed:0a:d8:05:a1:3b:88:5e:f0:63:91:7a:1e:e8:c1:67:
         03:91:f5:97:b1:ac:ff:f7:39:99:77:06:80:68:75:ff:73:5c:
         d1:69:7d:67:bc:4a:33:15:0f:27:0c:1e:2c:64:9c:95:45:53:
         77:c3:2a:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDzTk01veAg1o1ocQlv+E5SK4gzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIxNzAyQkM1MTcwNjVBMTE2MzdBOTQ2RjNENTI5NUVC
MjIzRkNFMTAeFw0yNDA0MTUxMTA1MjJaFw0yNDA0MTYxMjI0MjJaMDMxMTAvBgNV
BAMTKDVEQzk3QUE3OEEzREU3OERCNjM0MEI5RjhDRjQ5OTNDRTk3NjAwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiaM9fnY0pQuUt2L/ImZhQBSA+
Qg2Wkdo3qkWHb8mIHxffy0NpofO4edlw3dFzkQvbVj7yinwO9MdeqRPrwotstbGR
49lJ2GZWLt9XgIujJmm9230s33g5lG+bt1ijqGmrh9dUs2e9OEUcQk2QDIwXzREC
jlx2P/ahmwld9+R7oBCSmsh8aHQa4EtutCR0UiuuXZQFH2Zt+04i69BdyuSiGBN8
vD7kOQYdjbDyvccCLarL+Ow3qloc63Z5zeMxtPhjMvLhBdVaPweC8gxiv27w6P75
enggXhCrecYWkY1mfUD02z2n9e9pvS9H2cYf2/1Wh1DBno9eTX9YoQSGcx7NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXcl6p4o95422NAufjPSZPOl2ABAwHwYDVR0j
BBgwFoAUGxcCvFFwZaEWN6lG89UpXrIj/OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZVSDlZdjFRWHRGcnk3Q0dQVVRXaUtUNzRmc011MTNra29BNGZldWhI
YmsvMC8xQjE3MDJCQzUxNzA2NUExMTYzN0E5NDZGM0Q1Mjk1RUIyMjNGQ0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCMTcwMkJDNTE3MDY1QTEx
NjM3QTk0NkYzRDUyOTVFQjIyM0ZDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlZVSDlZdjFRWHRGcnk3Q0dQVVRXaUtUNzRmc011MTNra29BNGZldWhIYmsvMC8x
QjE3MDJCQzUxNzA2NUExMTYzN0E5NDZGM0Q1Mjk1RUIyMjNGQ0UxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcBbRUT38fSJkpGWo0EKk1G5pQCz7EV2XiWfjn8hUdA7V9GzxRRUpj3MSou+/
++VJTfJQu3shJcn1p4d1Cc3eWwnUH39REwCLLX7sDusrxVW+BnE3onJ0EQbl84Le
iE+A11ikcBS38KkdP4NRCb60Mo6/Jd1o759WndPK5wojJBVISMgTAi2y5+Bx0G+s
0eNE6aghQCX3WAMyq9j/Ydj8GPRBYmob+fcCoJlNaB9oduz3pQ4kbCcTPVcp7w1q
0gAC+gj8KeP44BXtCtgFoTuIXvBjkXoe6MFnA5H1l7Gs//c5mXcGgGh1/3Nc0Wl9
Z7xKMxUPJwweLGSclUVTd8MqHg==
-----END CERTIFICATE-----