Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft
File:                     F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft (raw, json)
Hash identifier:          rqgdT9mvvQQFntWCikgYVpgYK7XA8s8j71BoGW6fmOE=
Subject key identifier:   E5:02:F9:71:7D:48:4E:10:BA:BC:6F:B2:16:78:43:DE:A5:75:86:27
Authority key identifier: F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E
Certificate issuer:       /CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
Certificate serial:       6AC6203AF81F76283812D6C0B944078ABF61CA07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft
Manifest number:          01DF
Signing time:             Mon 15 Apr 2024 02:11:57 +0000
Manifest this update:     Mon 15 Apr 2024 02:06:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:10:57 +0000
Files and hashes:         1: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: p2DTpQ2VxS2yoF6el+bEdtfMRkoloVaM73b7cXDhnRk=)
                          2: F7E422809108C1661A3F43CB3CECF9CB91247E9E.crl (hash: TIyuB+h9MSQ+1he/1dvCWmKmJ0fXxZ13/KkWtqgtpTA=)
                          3: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: jNx4wcHvL/ZGq2geyZw/9Nj0tXwoF4CqMeBwe9KDiBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:20:3a:f8:1f:76:28:38:12:d6:c0:b9:44:07:8a:bf:61:ca:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
        Validity
            Not Before: Apr 15 02:06:57 2024 GMT
            Not After : Apr 16 06:10:57 2024 GMT
        Subject: CN=E502F9717D484E10BABC6FB2167843DEA5758627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:68:ec:39:9e:4a:84:4a:dc:ef:21:72:0c:
                    a5:a5:22:31:3d:ad:32:99:95:06:54:68:82:ce:88:
                    df:25:a9:18:e9:0f:ce:cf:df:22:8b:a5:d2:43:e2:
                    a2:b5:86:20:c1:26:1a:20:98:10:00:9c:e8:ba:3e:
                    2f:da:69:b1:5a:0f:7e:71:f6:e7:5f:de:0c:64:b2:
                    13:36:47:9c:cd:74:b3:6e:db:2b:7e:67:0f:f0:d6:
                    34:d4:94:a7:f5:96:2a:1b:4d:1e:b7:56:80:66:fa:
                    ea:3d:b3:c3:bd:45:1b:e4:75:e0:c6:29:55:3d:bd:
                    46:12:6f:33:f5:4f:dc:9c:2a:f9:be:6c:55:1d:ed:
                    85:4d:5d:b1:40:30:7a:7b:b3:07:d4:07:f6:90:fa:
                    60:cf:35:0a:3c:57:b6:14:cd:ce:9c:c1:0f:35:f8:
                    3c:e2:35:55:b8:73:56:72:20:8e:b5:9e:e9:26:5a:
                    39:dd:af:d6:0e:dc:7e:c8:02:4b:56:d7:4c:93:97:
                    75:30:ba:2a:a4:cc:70:49:20:df:c0:d6:57:1c:b4:
                    37:01:95:61:01:94:a4:45:08:6d:9e:f9:99:a6:7a:
                    c3:43:8c:f8:66:b8:6f:e2:5e:07:ad:c8:f9:ac:35:
                    8e:13:66:6e:37:07:57:8f:94:71:36:b4:ed:44:aa:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:F9:71:7D:48:4E:10:BA:BC:6F:B2:16:78:43:DE:A5:75:86:27
            X509v3 Authority Key Identifier:
                keyid:F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:45:6c:48:47:6e:ff:3b:4b:77:1e:1d:64:c2:b4:4e:d1:
         b3:7c:0b:70:80:16:73:ad:65:34:a9:d1:93:a4:b7:ff:fc:2d:
         6d:26:56:c7:71:aa:27:36:35:a2:b4:74:4a:7e:4f:bf:33:6f:
         dc:75:27:d3:94:cc:9f:77:d3:b1:29:f2:2d:20:c1:6f:88:f6:
         4d:09:0c:a7:c9:54:79:ea:99:4b:96:30:d9:7e:73:f5:4b:87:
         a5:ca:49:88:3c:2e:db:e2:c8:2e:48:24:14:d0:0f:c4:90:03:
         98:55:ac:5d:1e:3e:9d:71:e9:e7:69:54:a5:ce:5e:ba:ff:ad:
         15:87:47:e5:5e:d9:36:12:e1:9c:77:0b:8d:70:3d:5b:28:82:
         a1:06:a7:2d:5c:3b:ca:10:4b:ff:41:74:d5:c2:de:2d:ff:17:
         78:27:c8:c7:42:70:4c:33:e1:08:e6:fb:3d:65:8a:86:e2:d6:
         df:e1:ea:b2:dd:9c:ec:d9:58:25:0e:ab:c0:37:64:c9:97:8b:
         1d:cc:ff:d0:66:3f:37:4c:5f:a5:bd:9e:69:0a:94:d6:cf:ce:
         a3:32:b0:45:8f:b5:9d:fe:0c:50:b2:75:6c:70:8c:5c:3f:33:
         8d:9a:14:d7:41:eb:8e:a5:cb:bd:bd:01:bb:ad:ea:3a:e9:86:
         b9:8d:bc:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUasYgOvgfdig4EtbAuUQHir9hygcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdFNDIyODA5MTA4QzE2NjFBM0Y0M0NCM0NFQ0Y5Q0I5
MTI0N0U5RTAeFw0yNDA0MTUwMjA2NTdaFw0yNDA0MTYwNjEwNTdaMDMxMTAvBgNV
BAMTKEU1MDJGOTcxN0Q0ODRFMTBCQUJDNkZCMjE2Nzg0M0RFQTU3NTg2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsR2jsOZ5KhErc7yFyDKWlIjE9
rTKZlQZUaILOiN8lqRjpD87P3yKLpdJD4qK1hiDBJhogmBAAnOi6Pi/aabFaD35x
9udf3gxkshM2R5zNdLNu2yt+Zw/w1jTUlKf1liobTR63VoBm+uo9s8O9RRvkdeDG
KVU9vUYSbzP1T9ycKvm+bFUd7YVNXbFAMHp7swfUB/aQ+mDPNQo8V7YUzc6cwQ81
+DziNVW4c1ZyII61nukmWjndr9YO3H7IAktW10yTl3UwuiqkzHBJIN/A1lcctDcB
lWEBlKRFCG2e+ZmmesNDjPhmuG/iXgetyPmsNY4TZm43B1ePlHE2tO1EqilfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5QL5cX1IThC6vG+yFnhD3qV1hicwHwYDVR0j
BBgwFoAU9+QigJEIwWYaP0PLPOz5y5Ekfp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt
Q1kvMC9GN0U0MjI4MDkxMDhDMTY2MUEzRjQzQ0IzQ0VDRjlDQjkxMjQ3RTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y3RTQyMjgwOTEwOEMxNjYx
QTNGNDNDQjNDRUNGOUNCOTEyNDdFOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xtQ1kvMC9G
N0U0MjI4MDkxMDhDMTY2MUEzRjQzQ0IzQ0VDRjlDQjkxMjQ3RTlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMEtFbEhHbv87S3ceHWTCtE7Rs3wLcIAWc61lNKnRk6S3//wtbSZWx3GqJzY1
orR0Sn5PvzNv3HUn05TMn3fTsSnyLSDBb4j2TQkMp8lUeeqZS5Yw2X5z9UuHpcpJ
iDwu2+LILkgkFNAPxJADmFWsXR4+nXHp52lUpc5euv+tFYdH5V7ZNhLhnHcLjXA9
WyiCoQanLVw7yhBL/0F01cLeLf8XeCfIx0JwTDPhCOb7PWWKhuLW3+Hqst2c7NlY
JQ6rwDdkyZeLHcz/0GY/N0xfpb2eaQqU1s/OozKwRY+1nf4MULJ1bHCMXD8zjZoU
10HrjqXLvb0Bu63qOumGuY28Xg==
-----END CERTIFICATE-----