Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft
File:                     8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft (raw, json)
Hash identifier:          2n+r1loOibLsw7kCOJ70La1uipxOh87wUJ7AwqPW1jk=
Subject key identifier:   BB:22:D9:E5:C5:E9:66:53:FC:83:CB:27:DC:2A:C8:8F:3D:8F:5F:4E
Authority key identifier: 8A:45:08:21:8C:19:58:F2:03:B5:29:CB:F3:C6:F0:D1:57:AF:CD:08
Certificate issuer:       /CN=8A4508218C1958F203B529CBF3C6F0D157AFCD08
Certificate serial:       236DE3DA6D9655E05617A13198978F09F814620E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft
Manifest number:          020D
Signing time:             Sun 14 Apr 2024 22:24:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:19:04 +0000
Manifest next update:     Tue 16 Apr 2024 01:58:04 +0000
Files and hashes:         1: 34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa (hash: Mrzxckhl37KJvr7pEjwDDNqf7Dq07xrgpe8X1RlbRXU=)
                          2: 8A4508218C1958F203B529CBF3C6F0D157AFCD08.crl (hash: jMbMeUPmroXsrjgmqvRh3o7fPOt2d52e6ZI/BcZkg7Q=)
                          3: 323830343a356666343a3a2f33322d3438203d3e20323639313336.roa (hash: dLndk12A1xpwdlxZcEmIk3oMmuVRPi799a8HVzIICi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6d:e3:da:6d:96:55:e0:56:17:a1:31:98:97:8f:09:f8:14:62:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A4508218C1958F203B529CBF3C6F0D157AFCD08
        Validity
            Not Before: Apr 14 22:19:04 2024 GMT
            Not After : Apr 16 01:58:04 2024 GMT
        Subject: CN=BB22D9E5C5E96653FC83CB27DC2AC88F3D8F5F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:49:19:3b:db:70:f7:50:85:3c:59:44:e2:
                    81:5f:3c:3d:e1:e7:68:5b:e4:d2:21:b7:0c:de:e9:
                    ce:cb:da:10:ec:70:40:14:db:2d:ef:9a:50:da:58:
                    ba:4b:26:c7:2c:8a:4b:4c:82:49:a9:24:ae:08:d4:
                    d5:33:b3:4d:f7:3e:24:fd:70:1f:d6:5b:a3:32:5a:
                    46:31:c6:99:03:dd:7a:44:be:f3:f0:bb:11:d6:cb:
                    40:fd:de:b5:ad:d5:ec:90:49:73:d6:18:fa:2d:f0:
                    ea:9b:bb:81:ec:ad:3b:7e:c0:84:68:b8:e9:fd:69:
                    da:c0:e7:8a:bb:9b:17:c1:b6:25:a4:f8:77:3f:3e:
                    a8:c5:64:a2:99:5c:a9:37:77:b3:df:ba:41:26:eb:
                    05:7b:01:d7:03:a1:bc:14:b2:5c:02:2e:af:bd:3d:
                    14:3c:62:e2:6a:53:91:35:2a:34:61:98:8a:8e:32:
                    9d:ac:60:07:35:70:ee:31:a9:78:6c:5e:28:df:01:
                    06:1f:59:78:b5:7c:18:05:d7:5a:85:5b:e9:14:b1:
                    a4:cc:c3:75:8c:7f:ba:ca:86:72:0a:f0:6f:54:8d:
                    32:33:59:61:b5:6f:33:31:18:4c:a5:e1:37:1d:4b:
                    d9:18:b8:b8:fc:c8:a6:59:05:12:eb:2e:b2:bb:9d:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:22:D9:E5:C5:E9:66:53:FC:83:CB:27:DC:2A:C8:8F:3D:8F:5F:4E
            X509v3 Authority Key Identifier:
                keyid:8A:45:08:21:8C:19:58:F2:03:B5:29:CB:F3:C6:F0:D1:57:AF:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/8A4508218C1958F203B529CBF3C6F0D157AFCD08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:09:ff:2c:93:b1:06:dd:ab:25:e0:d1:7c:5f:da:a5:e5:
         28:fa:9b:14:71:e8:a6:44:e7:a4:60:a7:9b:b3:78:96:60:74:
         ee:1f:6c:70:6c:2b:ea:16:83:3d:98:fc:5d:a8:c9:e0:66:2f:
         81:c1:8e:8b:1d:28:85:14:03:9d:d3:33:31:67:20:9c:de:33:
         30:a3:c1:63:2a:c3:74:b4:80:1e:25:fa:d7:6a:08:07:b3:c4:
         34:18:60:99:5d:b1:75:69:fa:24:ea:8c:17:e8:e9:42:ff:f6:
         b0:36:81:47:a5:b0:a4:aa:c1:aa:19:84:aa:d6:eb:d3:bf:50:
         b3:c7:ef:ad:a6:b6:10:63:40:50:83:59:62:28:67:d9:73:3e:
         60:8a:b4:be:68:63:29:39:8a:50:21:96:c0:bf:85:57:99:e1:
         a3:6d:2a:27:1e:ff:78:31:30:86:c0:d1:38:f0:2f:aa:fa:d6:
         e7:52:e6:24:99:f9:82:b0:6c:41:81:cf:08:00:31:64:43:99:
         97:8d:31:43:99:4d:56:36:fb:ad:93:ef:47:bc:a0:86:4e:3c:
         67:55:58:c2:2a:5b:b5:00:de:3a:3b:b1:0f:80:13:87:81:80:
         34:14:a7:5a:f2:c2:20:37:55:09:4b:4b:ec:28:cc:03:82:ae:
         d3:07:e5:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI23j2m2WVeBWF6ExmJePCfgUYg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE0NTA4MjE4QzE5NThGMjAzQjUyOUNCRjNDNkYwRDE1
N0FGQ0QwODAeFw0yNDA0MTQyMjE5MDRaFw0yNDA0MTYwMTU4MDRaMDMxMTAvBgNV
BAMTKEJCMjJEOUU1QzVFOTY2NTNGQzgzQ0IyN0RDMkFDODhGM0Q4RjVGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuUkZO9tw91CFPFlE4oFfPD3h
52hb5NIhtwze6c7L2hDscEAU2y3vmlDaWLpLJscsiktMgkmpJK4I1NUzs033PiT9
cB/WW6MyWkYxxpkD3XpEvvPwuxHWy0D93rWt1eyQSXPWGPot8Oqbu4HsrTt+wIRo
uOn9adrA54q7mxfBtiWk+Hc/PqjFZKKZXKk3d7PfukEm6wV7AdcDobwUslwCLq+9
PRQ8YuJqU5E1KjRhmIqOMp2sYAc1cO4xqXhsXijfAQYfWXi1fBgF11qFW+kUsaTM
w3WMf7rKhnIK8G9UjTIzWWG1bzMxGEyl4TcdS9kYuLj8yKZZBRLrLrK7nbKNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuyLZ5cXpZlP8g8sn3CrIjz2PX04wHwYDVR0j
BBgwFoAUikUIIYwZWPIDtSnL88bw0VevzQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1FbThFeEVSN3JyczdGclNKQlA2RGtLcXd2a0s2NWhWZHMzalUzR0xy
d1gvMC84QTQ1MDgyMThDMTk1OEYyMDNCNTI5Q0JGM0M2RjBEMTU3QUZDRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNDUwODIxOEMxOTU4RjIw
M0I1MjlDQkYzQzZGMEQxNTdBRkNEMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qm1FbThFeEVSN3JyczdGclNKQlA2RGtLcXd2a0s2NWhWZHMzalUzR0xyd1gvMC84
QTQ1MDgyMThDMTk1OEYyMDNCNTI5Q0JGM0M2RjBEMTU3QUZDRDA4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC4cJ/yyTsQbdqyXg0Xxf2qXlKPqbFHHopkTnpGCnm7N4lmB07h9scGwr6haD
PZj8XajJ4GYvgcGOix0ohRQDndMzMWcgnN4zMKPBYyrDdLSAHiX612oIB7PENBhg
mV2xdWn6JOqMF+jpQv/2sDaBR6WwpKrBqhmEqtbr079Qs8fvraa2EGNAUINZYihn
2XM+YIq0vmhjKTmKUCGWwL+FV5nho20qJx7/eDEwhsDROPAvqvrW51LmJJn5grBs
QYHPCAAxZEOZl40xQ5lNVjb7rZPvR7yghk48Z1VYwipbtQDeOjuxD4ATh4GANBSn
WvLCIDdVCUtL7CjMA4Ku0wfl+Q==
-----END CERTIFICATE-----