Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.mft
File:                     D704ED5A93D1B57340DF21829918581BDF630FA9.mft (raw, json)
Hash identifier:          XQUbB49tHBsvMFqzXX3RD/2CgxbaEukmDZgOVLRmkwo=
Subject key identifier:   D0:F2:F0:FF:AA:0B:D2:93:BD:7E:19:B2:F8:C0:96:24:14:CE:A6:92
Authority key identifier: D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9
Certificate issuer:       /CN=D704ED5A93D1B57340DF21829918581BDF630FA9
Certificate serial:       71D2D1A3BE887113CD870DE87235E2982223D0A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.mft
Manifest number:          DD
Signing time:             Mon 15 Apr 2024 08:03:51 +0000
Manifest this update:     Mon 15 Apr 2024 07:58:51 +0000
Manifest next update:     Tue 16 Apr 2024 09:14:51 +0000
Files and hashes:         1: D704ED5A93D1B57340DF21829918581BDF630FA9.crl (hash: M+eCuKNbbQcjlUL0lz+PzCuCvTm/eZAy4rWy/sEqjRo=)
                          2: 3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa (hash: BsjSOGulNF0C7YB7irPseYdxuk/VOCMQAzivaLRwFM4=)
                          3: 323830343a333366343a3a2f33322d3438203d3e20323635343237.roa (hash: cwD/ytdTx0I/1jC9asvYboXFRy3EfY39hJ4QvaY1cuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d2:d1:a3:be:88:71:13:cd:87:0d:e8:72:35:e2:98:22:23:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D704ED5A93D1B57340DF21829918581BDF630FA9
        Validity
            Not Before: Apr 15 07:58:51 2024 GMT
            Not After : Apr 16 09:14:51 2024 GMT
        Subject: CN=D0F2F0FFAA0BD293BD7E19B2F8C0962414CEA692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:2a:d3:0f:b3:18:05:d3:d3:42:ee:d6:9f:
                    0c:42:eb:36:94:d4:74:f4:45:27:d7:d4:fb:3e:28:
                    3d:af:b7:82:98:cc:da:93:28:0c:18:18:b3:98:fe:
                    86:19:5d:c4:63:98:2a:27:30:bc:0e:38:f4:6e:56:
                    03:71:81:c0:18:cf:99:ba:98:8d:83:e4:e4:6c:f0:
                    d0:1b:3a:2a:74:30:65:fb:34:12:32:b0:3a:65:ac:
                    4c:74:f4:a3:2a:5c:62:be:0b:f7:12:1a:cd:25:64:
                    96:6c:b7:7e:a0:cd:38:da:a9:db:fb:ab:fc:90:ec:
                    b1:c0:63:15:b2:9d:50:ea:1e:33:e9:cb:d2:9a:ff:
                    cb:c0:6e:75:33:f2:ac:d5:26:d2:48:4e:a2:b1:0f:
                    c3:1b:16:5e:38:96:ac:56:da:4c:19:c2:1b:e3:a7:
                    e4:41:47:a1:11:fd:5d:dc:e7:d3:5f:69:43:7d:b6:
                    df:f7:56:2b:91:36:42:37:84:d2:f9:e1:0c:e2:e2:
                    85:b3:12:ec:25:1c:ba:de:65:32:46:54:2b:1e:46:
                    ca:66:4a:78:6e:e3:da:7b:75:10:17:f6:0b:50:d8:
                    d3:4b:c5:3e:e6:88:48:47:9b:13:13:a0:ce:aa:de:
                    67:70:6a:6a:6d:ce:5f:4c:54:ef:7a:96:cb:f9:fe:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F2:F0:FF:AA:0B:D2:93:BD:7E:19:B2:F8:C0:96:24:14:CE:A6:92
            X509v3 Authority Key Identifier:
                keyid:D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:ce:5a:0d:c8:d2:52:14:9d:05:b1:62:36:bf:7e:f2:0c:
         8b:99:49:33:57:aa:57:ec:76:03:f8:95:4b:eb:d6:30:f8:9a:
         52:f7:7a:48:1d:41:d9:71:f4:be:6b:b0:a4:a8:d7:b1:68:0a:
         24:56:5e:c2:a8:9f:b3:5a:bb:24:29:55:c0:a5:c7:ce:ea:f6:
         6c:78:51:dc:09:cc:f6:44:75:db:09:1c:ac:76:7f:78:f6:d1:
         8e:4b:da:0a:23:92:e8:89:e0:d7:2d:b9:3b:7e:9b:5a:a4:af:
         cb:e5:42:99:7a:8d:21:3b:df:39:6b:02:19:5b:4a:83:6b:5c:
         79:89:85:c7:10:f9:9c:e9:11:85:38:0a:2b:bb:64:10:90:98:
         b6:58:b6:0f:dc:9d:29:e5:f0:86:59:88:c3:84:a6:5d:17:9c:
         0d:11:31:a4:fe:5b:8b:d9:dc:34:35:44:93:66:32:82:66:59:
         36:ea:68:32:fa:21:47:79:13:c9:fe:2c:b1:f7:7c:45:eb:3f:
         3f:03:b2:fc:46:a2:14:89:57:7b:10:40:3b:0b:90:c6:e4:ce:
         2e:11:a2:50:a0:5f:80:07:d5:70:43:07:b5:6a:fe:67:84:38:
         80:6e:15:76:21:e9:50:56:e1:40:31:8f:c5:2d:4c:4c:5a:0e:
         69:14:38:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcdLRo76IcRPNhw3ocjXimCIj0KAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcwNEVENUE5M0QxQjU3MzQwREYyMTgyOTkxODU4MUJE
RjYzMEZBOTAeFw0yNDA0MTUwNzU4NTFaFw0yNDA0MTYwOTE0NTFaMDMxMTAvBgNV
BAMTKEQwRjJGMEZGQUEwQkQyOTNCRDdFMTlCMkY4QzA5NjI0MTRDRUE2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQByrTD7MYBdPTQu7WnwxC6zaU
1HT0RSfX1Ps+KD2vt4KYzNqTKAwYGLOY/oYZXcRjmConMLwOOPRuVgNxgcAYz5m6
mI2D5ORs8NAbOip0MGX7NBIysDplrEx09KMqXGK+C/cSGs0lZJZst36gzTjaqdv7
q/yQ7LHAYxWynVDqHjPpy9Ka/8vAbnUz8qzVJtJITqKxD8MbFl44lqxW2kwZwhvj
p+RBR6ER/V3c59NfaUN9tt/3ViuRNkI3hNL54Qzi4oWzEuwlHLreZTJGVCseRspm
Snhu49p7dRAX9gtQ2NNLxT7miEhHmxMToM6q3mdwamptzl9MVO96lsv5/r+vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0PLw/6oL0pO9fhmy+MCWJBTOppIwHwYDVR0j
BBgwFoAU1wTtWpPRtXNA3yGCmRhYG99jD6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhzZUFGTW12dW9CNGVuTG43Y0JWdkxic0ppVXh5dDJydnlHaDRCYnIy
VW0vMC9ENzA0RUQ1QTkzRDFCNTczNDBERjIxODI5OTE4NTgxQkRGNjMwRkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3MDRFRDVBOTNEMUI1NzM0
MERGMjE4Mjk5MTg1ODFCREY2MzBGQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmhzZUFGTW12dW9CNGVuTG43Y0JWdkxic0ppVXh5dDJydnlHaDRCYnIyVW0vMC9E
NzA0RUQ1QTkzRDFCNTczNDBERjIxODI5OTE4NTgxQkRGNjMwRkE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+fOWg3I0lIUnQWxYja/fvIMi5lJM1eqV+x2A/iVS+vWMPiaUvd6SB1B2XH0
vmuwpKjXsWgKJFZewqifs1q7JClVwKXHzur2bHhR3AnM9kR12wkcrHZ/ePbRjkva
CiOS6Ing1y25O36bWqSvy+VCmXqNITvfOWsCGVtKg2tceYmFxxD5nOkRhTgKK7tk
EJCYtli2D9ydKeXwhlmIw4SmXRecDRExpP5bi9ncNDVEk2YygmZZNupoMvohR3kT
yf4ssfd8Res/PwOy/EaiFIlXexBAOwuQxuTOLhGiUKBfgAfVcEMHtWr+Z4Q4gG4V
diHpUFbhQDGPxS1MTFoOaRQ4BA==
-----END CERTIFICATE-----