Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.mft
File:                     9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.mft (raw, json)
Hash identifier:          2yMvufsMkrJatK6VzPjtGPUDipB+HUxoqg3zb/SRFPg=
Subject key identifier:   73:94:83:67:09:94:00:12:2F:DE:3B:10:40:F0:59:74:D7:E9:A0:CF
Authority key identifier: 9D:8C:C9:B5:8C:BC:58:54:7F:E2:1F:49:B6:37:E2:F2:8F:E4:A9:FF
Certificate issuer:       /CN=9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF
Certificate serial:       771BC1F7B737AD0460080082D4E09D1EEC830633
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.mft
Manifest number:          1F
Signing time:             Mon 15 Apr 2024 08:38:06 +0000
Manifest this update:     Mon 15 Apr 2024 08:33:06 +0000
Manifest next update:     Tue 16 Apr 2024 11:43:06 +0000
Files and hashes:         1: 9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.crl (hash: CfktJsH7kU1DYEm8pgatJL9NAtILsX89lrUGwlqp9yo=)
                          2: 3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (hash: hczzvGksBNX2dEeQelVIAA9xUaEasZBByL1QY0eYaPI=)
                          3: 323830343a333734303a3a2f33322d313238203d3e20323636333939.roa (hash: mUIO386rK81A1nOndt7GcS5RiG8cl3/9+OJZ35GJz4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1b:c1:f7:b7:37:ad:04:60:08:00:82:d4:e0:9d:1e:ec:83:06:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF
        Validity
            Not Before: Apr 15 08:33:06 2024 GMT
            Not After : Apr 16 11:43:06 2024 GMT
        Subject: CN=73948367099400122FDE3B1040F05974D7E9A0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:61:fa:ee:3d:ad:ab:ac:3f:3e:df:de:d1:
                    2a:65:08:91:d8:81:c2:51:ff:f1:c1:95:56:df:dd:
                    8c:3b:c7:4e:1f:44:ba:7e:dd:b3:b6:8b:e4:e4:da:
                    cc:21:e4:31:a1:bd:b2:e9:8d:75:7c:81:5b:da:d8:
                    31:31:a2:e8:62:4a:9d:8e:b9:19:2a:9d:0c:be:8c:
                    f2:0f:b1:6f:53:1f:a5:7b:61:80:0d:82:28:9a:6d:
                    51:fe:f9:24:20:05:7b:a2:73:22:45:80:1e:2d:4e:
                    be:ab:5a:b7:9f:c0:89:95:d7:75:ce:f2:d9:65:c6:
                    92:ab:83:70:d4:3e:a6:78:34:22:ec:fb:38:60:4a:
                    97:76:18:d5:05:c5:ee:9a:20:93:55:dc:86:0c:31:
                    e0:8f:bf:c6:1c:f1:3e:b3:2c:87:d9:84:06:19:e4:
                    88:52:f1:03:09:b4:9c:b4:86:e7:2f:2f:29:56:64:
                    5f:96:29:9f:3c:3f:3c:63:2b:0d:81:8b:bd:d5:65:
                    4d:b6:c5:0b:66:b9:b9:6a:56:4b:e3:eb:0c:80:38:
                    fc:da:4e:9a:5a:5b:cb:02:ce:74:5a:68:89:14:69:
                    e2:10:e1:14:65:c4:29:ae:21:71:9e:b7:64:ac:6c:
                    ef:da:78:61:06:d1:58:71:27:e8:0e:3b:bf:c1:24:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:83:67:09:94:00:12:2F:DE:3B:10:40:F0:59:74:D7:E9:A0:CF
            X509v3 Authority Key Identifier:
                keyid:9D:8C:C9:B5:8C:BC:58:54:7F:E2:1F:49:B6:37:E2:F2:8F:E4:A9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9D8CC9B58CBC58547FE21F49B637E2F28FE4A9FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b7:ad:07:2e:98:d5:cb:68:c3:11:b4:d5:c6:8e:fa:34:a5:
         4a:8d:80:25:39:f9:75:85:69:bf:9b:2a:ed:74:5e:ee:12:62:
         61:05:b0:c3:97:87:7f:75:10:f2:49:e6:5f:fd:6a:0e:cc:a5:
         41:0c:4c:5f:da:91:67:ce:fc:37:3b:11:17:c5:46:b6:7a:fe:
         db:0e:f6:b5:54:19:7b:e8:4b:ff:3f:c3:9b:7d:b3:86:49:29:
         c9:cb:10:b8:7a:75:cb:67:dd:2f:15:09:98:ee:71:fa:02:6e:
         60:73:b1:4e:f0:f7:e2:19:91:ed:5d:9f:df:0e:f1:a7:77:56:
         05:b3:d4:58:19:e5:8f:ca:55:38:db:b4:88:fd:48:0d:99:86:
         b2:16:b0:65:82:3a:db:54:24:dd:3c:01:e2:df:ba:61:28:d5:
         b8:34:f3:59:4b:e6:e7:1b:12:92:e8:cf:3e:19:d4:48:c6:28:
         13:6b:c2:d9:b0:48:56:82:19:cd:54:af:52:40:64:71:bc:37:
         c8:b4:54:40:07:3d:75:a3:fd:f9:0b:85:68:2f:05:0d:7b:c7:
         80:c9:48:26:ac:83:b4:e2:c4:6d:23:be:58:07:f4:17:49:02:
         9f:65:6d:72:0b:45:83:e9:83:cd:e8:78:08:b8:66:30:f4:07:
         24:ad:bd:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdxvB97c3rQRgCACC1OCdHuyDBjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4Q0M5QjU4Q0JDNTg1NDdGRTIxRjQ5QjYzN0UyRjI4
RkU0QTlGRjAeFw0yNDA0MTUwODMzMDZaFw0yNDA0MTYxMTQzMDZaMDMxMTAvBgNV
BAMTKDczOTQ4MzY3MDk5NDAwMTIyRkRFM0IxMDQwRjA1OTc0RDdFOUEwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQmH67j2tq6w/Pt/e0SplCJHY
gcJR//HBlVbf3Yw7x04fRLp+3bO2i+Tk2swh5DGhvbLpjXV8gVva2DExouhiSp2O
uRkqnQy+jPIPsW9TH6V7YYANgiiabVH++SQgBXuicyJFgB4tTr6rWrefwImV13XO
8tllxpKrg3DUPqZ4NCLs+zhgSpd2GNUFxe6aIJNV3IYMMeCPv8Yc8T6zLIfZhAYZ
5IhS8QMJtJy0hucvLylWZF+WKZ88PzxjKw2Bi73VZU22xQtmublqVkvj6wyAOPza
TppaW8sCznRaaIkUaeIQ4RRlxCmuIXGet2SsbO/aeGEG0VhxJ+gOO7/BJJu9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc5SDZwmUABIv3jsQQPBZdNfpoM8wHwYDVR0j
BBgwFoAUnYzJtYy8WFR/4h9Jtjfi8o/kqf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFk
eHEvMC85RDhDQzlCNThDQkM1ODU0N0ZFMjFGNDlCNjM3RTJGMjhGRTRBOUZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEOENDOUI1OENCQzU4NTQ3
RkUyMUY0OUI2MzdFMkYyOEZFNEE5RkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFkeHEvMC85
RDhDQzlCNThDQkM1ODU0N0ZFMjFGNDlCNjM3RTJGMjhGRTRBOUZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx7etBy6Y1ctowxG01caO+jSlSo2AJTn5dYVpv5sq7XRe7hJiYQWww5eHf3UQ
8knmX/1qDsylQQxMX9qRZ878NzsRF8VGtnr+2w72tVQZe+hL/z/Dm32zhkkpycsQ
uHp1y2fdLxUJmO5x+gJuYHOxTvD34hmR7V2f3w7xp3dWBbPUWBnlj8pVONu0iP1I
DZmGshawZYI621Qk3TwB4t+6YSjVuDTzWUvm5xsSkujPPhnUSMYoE2vC2bBIVoIZ
zVSvUkBkcbw3yLRUQAc9daP9+QuFaC8FDXvHgMlIJqyDtOLEbSO+WAf0F0kCn2Vt
cgtFg+mDzeh4CLhmMPQHJK29RA==
-----END CERTIFICATE-----