Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.mft
File:                     9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.mft (raw, json)
Hash identifier:          1A+NUPEQmdIKZckT7R51CFIoCzdkMSIpQFcJqZXMl9g=
Subject key identifier:   34:8E:5D:6C:98:8D:7E:50:0E:25:E3:5D:FE:94:3C:1C:D9:4F:29:7E
Authority key identifier: 9F:75:03:92:A5:47:40:B0:F9:DA:FE:D4:C0:E0:C7:A4:AC:64:3B:BA
Certificate issuer:       /CN=9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA
Certificate serial:       125C4DB47D32EE0395FA1DC6439A7B1838431ED7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.mft
Manifest number:          78
Signing time:             Sun 03 Sep 2023 19:54:28 +0000
Manifest this update:     Sun 03 Sep 2023 19:49:28 +0000
Manifest next update:     Mon 04 Sep 2023 20:49:28 +0000
Files and hashes:         1: 9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.crl (hash: E9Qe0nE5Qz0Lf46s2KpekJ+syXw0jp6a+ZSKHYSfssk=)
                          2: 34352e37302e36342e302f32322d3233203d3e20323637353636.roa (hash: NFScRCM9LWDcTL51PENi17DK9O70aUd9+JusxAJ74CE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5c:4d:b4:7d:32:ee:03:95:fa:1d:c6:43:9a:7b:18:38:43:1e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA
        Validity
            Not Before: Sep  3 19:49:28 2023 GMT
            Not After : Sep  4 20:49:28 2023 GMT
        Subject: CN=348E5D6C988D7E500E25E35DFE943C1CD94F297E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:f1:a8:26:ae:b4:ee:2f:de:b4:57:0c:c1:
                    d6:54:14:bf:8e:db:1b:86:91:33:c5:2d:e6:9e:8b:
                    1d:bc:d6:f2:0c:80:8b:f6:8d:c3:25:92:aa:39:cd:
                    db:53:5b:b3:82:38:1a:0e:31:13:a8:9c:1e:5f:b2:
                    62:5e:5b:f5:d9:37:ce:68:2d:67:25:2d:3d:b8:83:
                    1a:41:8e:bb:ad:9c:c1:7f:5e:70:80:37:22:2a:07:
                    51:f2:bb:63:11:84:d4:6b:61:dc:47:94:df:18:c9:
                    c2:98:77:98:7a:ad:d9:fa:25:fb:c6:b8:92:bb:cc:
                    04:09:07:58:98:b9:c7:3a:27:70:dc:d5:f9:5e:fb:
                    2d:22:69:9e:e1:68:87:6d:43:ea:73:89:e1:25:55:
                    5a:91:f8:dd:d4:5e:ad:66:d7:2b:e7:26:c2:8c:56:
                    13:48:58:dc:22:1c:df:4d:88:82:49:44:71:6d:ea:
                    ed:97:96:01:63:f1:af:1a:01:f3:fa:27:c5:c0:0d:
                    13:c8:5b:ba:a3:a7:fa:d2:45:e8:42:9e:b7:4d:92:
                    e4:28:13:32:98:18:68:01:ea:cf:56:2b:85:69:9b:
                    b9:e0:2a:9b:ec:84:87:31:79:fd:b5:23:c8:d6:81:
                    14:25:10:88:ce:05:8d:d0:2a:e2:72:07:01:ed:93:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:5D:6C:98:8D:7E:50:0E:25:E3:5D:FE:94:3C:1C:D9:4F:29:7E
            X509v3 Authority Key Identifier:
                keyid:9F:75:03:92:A5:47:40:B0:F9:DA:FE:D4:C0:E0:C7:A4:AC:64:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/9F750392A54740B0F9DAFED4C0E0C7A4AC643BBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:95:a2:bc:55:e0:bf:48:6e:2c:ad:ec:72:36:32:64:69:
         42:72:f0:4e:40:cf:d8:46:4d:f4:93:52:55:9a:fa:88:51:6f:
         1a:74:5b:44:f6:0a:a5:42:43:a6:e4:bf:00:24:cf:48:fe:26:
         49:aa:5a:6d:23:2a:9c:cf:a1:eb:a7:a1:ab:ed:69:0c:e1:e9:
         a4:92:11:22:37:6b:67:8b:76:3e:b2:50:87:d9:ef:61:f1:15:
         20:98:dc:61:a7:a9:80:2b:3e:d4:00:f7:54:3a:33:94:65:b7:
         f6:53:8a:1c:a9:4d:01:ba:d8:c3:0e:e1:57:47:69:88:20:5f:
         5d:07:67:24:0b:85:cd:59:8c:22:72:1f:fd:09:b6:e0:d5:ea:
         91:83:48:06:d7:9f:51:49:de:a3:b8:92:e2:0b:64:99:52:4e:
         cd:10:fb:8e:f4:4a:a5:fd:fe:a0:55:33:af:99:a0:d3:7d:27:
         89:e2:d7:47:e7:79:62:05:7b:44:c1:f0:16:dc:cf:82:14:62:
         e1:78:26:7d:79:10:cb:a3:41:f5:87:ab:2e:64:38:0c:fb:1b:
         29:f9:7d:21:44:2b:7e:e9:d7:bf:e6:44:1e:d8:c8:29:d3:88:
         9d:36:9b:71:eb:ec:2d:16:3f:84:e8:d1:7f:7b:6a:bb:cf:f8:
         f6:2f:35:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUElxNtH0y7gOV+h3GQ5p7GDhDHtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY3NTAzOTJBNTQ3NDBCMEY5REFGRUQ0QzBFMEM3QTRB
QzY0M0JCQTAeFw0yMzA5MDMxOTQ5MjhaFw0yMzA5MDQyMDQ5MjhaMDMxMTAvBgNV
BAMTKDM0OEU1RDZDOTg4RDdFNTAwRTI1RTM1REZFOTQzQzFDRDk0RjI5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJfGoJq607i/etFcMwdZUFL+O
2xuGkTPFLeaeix281vIMgIv2jcMlkqo5zdtTW7OCOBoOMROonB5fsmJeW/XZN85o
LWclLT24gxpBjrutnMF/XnCANyIqB1Hyu2MRhNRrYdxHlN8YycKYd5h6rdn6JfvG
uJK7zAQJB1iYucc6J3Dc1fle+y0iaZ7haIdtQ+pzieElVVqR+N3UXq1m1yvnJsKM
VhNIWNwiHN9NiIJJRHFt6u2XlgFj8a8aAfP6J8XADRPIW7qjp/rSRehCnrdNkuQo
EzKYGGgB6s9WK4Vpm7ngKpvshIcxef21I8jWgRQlEIjOBY3QKuJyBwHtk5xXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNI5dbJiNflAOJeNd/pQ8HNlPKX4wHwYDVR0j
BBgwFoAUn3UDkqVHQLD52v7UwODHpKxkO7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3p1dnRyaWNEckxpVFV1ODFqbTNlbzIxRVZMclY2dFRaZHk1Rm1TNlZ2
Vm8vMC85Rjc1MDM5MkE1NDc0MEIwRjlEQUZFRDRDMEUwQzdBNEFDNjQzQkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGNzUwMzkyQTU0NzQwQjBG
OURBRkVENEMwRTBDN0E0QUM2NDNCQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3p1dnRyaWNEckxpVFV1ODFqbTNlbzIxRVZMclY2dFRaZHk1Rm1TNlZ2Vm8vMC85
Rjc1MDM5MkE1NDc0MEIwRjlEQUZFRDRDMEUwQzdBNEFDNjQzQkJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMp+VorxV4L9Ibiyt7HI2MmRpQnLwTkDP2EZN9JNSVZr6iFFvGnRbRPYKpUJD
puS/ACTPSP4mSapabSMqnM+h66ehq+1pDOHppJIRIjdrZ4t2PrJQh9nvYfEVIJjc
YaepgCs+1AD3VDozlGW39lOKHKlNAbrYww7hV0dpiCBfXQdnJAuFzVmMInIf/Qm2
4NXqkYNIBtefUUneo7iS4gtkmVJOzRD7jvRKpf3+oFUzr5mg030nieLXR+d5YgV7
RMHwFtzPghRi4XgmfXkQy6NB9YerLmQ4DPsbKfl9IUQrfunXv+ZEHtjIKdOInTab
cevsLRY/hOjRf3tqu8/49i812w==
-----END CERTIFICATE-----