Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft
File:                     AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft (raw, json)
Hash identifier:          wg6V2Gyvl+xPkdXj/9YlYn4xztBTU4PFNIKJ7eL1soE=
Subject key identifier:   72:30:8C:F0:3D:2A:82:C6:B3:F8:1D:21:CE:FA:BD:E5:30:0E:7F:6A
Authority key identifier: AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54
Certificate issuer:       /CN=AD30B412FE51DB2B109A7EB7F8931FC45C188D54
Certificate serial:       55F0336E074C14E58EF6354B4207F5D2A41AE4D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft
Manifest number:          7C
Signing time:             Mon 15 Apr 2024 11:20:21 +0000
Manifest this update:     Mon 15 Apr 2024 11:15:21 +0000
Manifest next update:     Tue 16 Apr 2024 13:19:21 +0000
Files and hashes:         1: 3230302e33362e3134342e302f32322d3234203d3e20323731333033.roa (hash: Bgm47afRztIP8gZRLMD/YpIp57zT3pKRcgpgeqHMSzY=)
                          2: AD30B412FE51DB2B109A7EB7F8931FC45C188D54.crl (hash: zC8k3kj2u297xi2/cBHb+xbdFixqGX28cFn/n7Amd9I=)
                          3: 323830343a373936383a3a2f33322d3438203d3e20323731333033.roa (hash: ze0YRLnAShQNc/+/kshqcCPhQic1WWrL8+LjLWFWiKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f0:33:6e:07:4c:14:e5:8e:f6:35:4b:42:07:f5:d2:a4:1a:e4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD30B412FE51DB2B109A7EB7F8931FC45C188D54
        Validity
            Not Before: Apr 15 11:15:21 2024 GMT
            Not After : Apr 16 13:19:21 2024 GMT
        Subject: CN=72308CF03D2A82C6B3F81D21CEFABDE5300E7F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:fd:b2:a8:b8:16:5c:78:76:f6:7f:98:72:
                    8f:99:66:5c:b0:29:d1:e7:ec:c8:88:9a:b0:eb:36:
                    08:b3:3c:15:65:28:de:bc:b2:e5:52:91:57:5f:ae:
                    b5:c4:af:c3:6d:22:b5:4e:dd:8b:f8:73:ef:a6:38:
                    87:9b:55:4f:d0:10:7f:30:5a:ee:96:43:33:90:63:
                    db:29:83:a2:fb:50:0b:95:55:35:e3:1b:d2:18:6b:
                    aa:10:d2:fd:19:e4:9d:9d:31:98:4c:61:17:fd:76:
                    47:1c:ec:dd:d4:70:6a:44:f7:e5:75:44:3e:af:19:
                    48:1e:3d:e8:0e:8b:c4:54:48:07:03:dd:8d:ac:7a:
                    e4:18:66:a0:7b:e4:ec:18:dd:52:bd:77:f8:bc:8c:
                    a5:13:73:7e:0d:f3:24:69:ad:c3:03:b2:95:4e:8b:
                    67:38:3d:72:41:11:0f:bc:09:2d:32:c7:4b:81:26:
                    d7:ce:da:f0:09:dd:ac:5a:f5:a6:30:7f:63:ff:2d:
                    f8:f2:94:2f:7c:93:f5:58:03:0d:01:d1:d6:aa:4f:
                    99:a9:82:b3:4d:90:21:3b:93:40:6a:7a:9d:0f:86:
                    31:09:50:4e:18:4c:d6:8d:f8:0d:5a:c3:7a:85:e8:
                    45:20:fd:2b:21:96:94:4d:a9:0c:6a:58:45:77:24:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:8C:F0:3D:2A:82:C6:B3:F8:1D:21:CE:FA:BD:E5:30:0E:7F:6A
            X509v3 Authority Key Identifier:
                keyid:AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:be:c4:ba:54:da:da:29:a3:4a:44:67:34:e2:e4:ec:ae:02:
         0f:17:05:57:1c:cc:d7:63:7f:3b:6d:d4:a8:2d:17:f8:91:8e:
         59:c3:5e:e4:c4:47:bd:7a:3a:d3:80:da:d5:84:e1:7b:bf:33:
         23:e6:01:c2:50:df:06:4a:df:db:59:31:0b:a7:1c:b3:5a:1d:
         97:a0:7a:b2:14:e7:5b:8c:14:d3:73:8b:ac:01:c9:d3:54:1a:
         da:7d:3e:4c:eb:cf:85:9c:68:ff:6f:77:9d:8c:c4:2f:29:0e:
         fa:8f:40:80:1d:ea:b8:7c:02:c5:9a:38:2b:12:28:b5:04:9d:
         ad:43:ed:eb:6d:63:12:f2:0b:11:ab:26:51:e3:5f:fe:2c:5e:
         99:0d:a4:87:18:fe:c6:88:21:d0:7a:8e:e3:41:cb:58:49:4f:
         ef:47:80:10:e0:6c:bc:0f:9e:6c:2f:29:90:b9:1b:43:1c:63:
         15:c7:b9:61:12:05:b3:f3:07:fe:21:12:2d:78:16:42:b4:48:
         43:a6:28:e3:3b:1b:ec:54:24:38:d3:1c:a2:d7:79:bd:7a:af:
         cd:32:d3:96:11:5c:34:89:1b:3b:45:62:e5:63:35:2e:86:b5:
         69:3f:49:c3:c3:44:a5:57:2b:3f:15:22:4f:64:f4:48:32:fb:
         c9:7d:17:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVfAzbgdMFOWO9jVLQgf10qQa5NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzMEI0MTJGRTUxREIyQjEwOUE3RUI3Rjg5MzFGQzQ1
QzE4OEQ1NDAeFw0yNDA0MTUxMTE1MjFaFw0yNDA0MTYxMzE5MjFaMDMxMTAvBgNV
BAMTKDcyMzA4Q0YwM0QyQTgyQzZCM0Y4MUQyMUNFRkFCREU1MzAwRTdGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzP2yqLgWXHh29n+Yco+ZZlyw
KdHn7MiImrDrNgizPBVlKN68suVSkVdfrrXEr8NtIrVO3Yv4c++mOIebVU/QEH8w
Wu6WQzOQY9spg6L7UAuVVTXjG9IYa6oQ0v0Z5J2dMZhMYRf9dkcc7N3UcGpE9+V1
RD6vGUgePegOi8RUSAcD3Y2seuQYZqB75OwY3VK9d/i8jKUTc34N8yRprcMDspVO
i2c4PXJBEQ+8CS0yx0uBJtfO2vAJ3axa9aYwf2P/LfjylC98k/VYAw0B0daqT5mp
grNNkCE7k0Bqep0PhjEJUE4YTNaN+A1aw3qF6EUg/SshlpRNqQxqWEV3JJa9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcjCM8D0qgsaz+B0hzvq95TAOf2owHwYDVR0j
BBgwFoAUrTC0Ev5R2ysQmn63+JMfxFwYjVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRq
NEsvMC9BRDMwQjQxMkZFNTFEQjJCMTA5QTdFQjdGODkzMUZDNDVDMTg4RDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEMzBCNDEyRkU1MURCMkIx
MDlBN0VCN0Y4OTMxRkM0NUMxODhENTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRqNEsvMC9B
RDMwQjQxMkZFNTFEQjJCMTA5QTdFQjdGODkzMUZDNDVDMTg4RDU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKb7EulTa2imjSkRnNOLk7K4CDxcFVxzM12N/O23UqC0X+JGOWcNe5MRHvXo6
04Da1YThe78zI+YBwlDfBkrf21kxC6ccs1odl6B6shTnW4wU03OLrAHJ01Qa2n0+
TOvPhZxo/293nYzELykO+o9AgB3quHwCxZo4KxIotQSdrUPt621jEvILEasmUeNf
/ixemQ2khxj+xogh0HqO40HLWElP70eAEOBsvA+ebC8pkLkbQxxjFce5YRIFs/MH
/iESLXgWQrRIQ6Yo4zsb7FQkONMcotd5vXqvzTLTlhFcNIkbO0Vi5WM1Loa1aT9J
w8NEpVcrPxUiT2T0SDL7yX0Xiw==
-----END CERTIFICATE-----