Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
File:                     21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft (raw, json)
Hash identifier:          b/8uI0TkHTzLt/ZZ9xzO9MqnjlfywY2nUMACZeOIYZY=
Subject key identifier:   CB:22:C7:D2:7A:7A:77:E0:C1:26:B8:FB:A6:F0:66:6E:27:67:AE:2E
Authority key identifier: 21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
Certificate issuer:       /CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Certificate serial:       676C273365C34CD9879BF3B986C3BECF7236BEA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
Manifest number:          B7
Signing time:             Thu 29 Aug 2024 16:40:46 +0000
Manifest this update:     Thu 29 Aug 2024 16:35:46 +0000
Manifest next update:     Fri 30 Aug 2024 18:27:46 +0000
Files and hashes:         1: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl (hash: qIssrmu9vISllOYYAaOJh/yyChHJrIPBzeZlL81GCyc=)
                          2: 34352e3136392e382e302f32322d3332203d3e20323638303736.roa (hash: Lj/BTDbCqIYD2RT3svK8TKOBODb8OyLepzCunDM6R7E=)
                          3: 323830343a353761303a3a2f33322d313238203d3e20323638303736.roa (hash: verk8Ta6CoWPBC2aaopMCPetVBL/vqoeQKfve2knX3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6c:27:33:65:c3:4c:d9:87:9b:f3:b9:86:c3:be:cf:72:36:be:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
        Validity
            Not Before: Aug 29 16:35:46 2024 GMT
            Not After : Aug 30 18:27:46 2024 GMT
        Subject: CN=CB22C7D27A7A77E0C126B8FBA6F0666E2767AE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:1a:e4:cc:78:82:a8:27:37:21:97:bd:94:
                    da:9e:71:54:a2:4d:0a:b3:b4:bd:e2:9a:2f:6d:34:
                    b3:01:c0:4b:ff:a3:f5:71:a7:03:1d:8f:76:41:25:
                    b6:02:f7:58:30:99:d6:a0:b1:dc:40:c0:f1:f5:2c:
                    87:51:b3:7c:05:fc:c2:16:ff:0b:06:60:4c:f5:f6:
                    be:b1:57:00:2e:8e:cd:45:ab:6b:00:c1:bf:b5:2f:
                    68:c1:36:c6:41:fc:7f:f5:da:ce:40:2a:e4:2a:cc:
                    e6:a8:15:61:91:76:35:24:72:89:0e:b9:57:b3:2b:
                    c7:43:ef:10:54:dd:d2:5b:62:2c:31:81:1b:ba:5d:
                    d1:96:cc:b1:c1:62:2a:f5:8e:69:22:0a:5c:5d:c1:
                    bf:5d:41:6a:0c:2d:5d:52:d3:0b:0e:1e:5e:15:66:
                    a9:51:39:c2:ea:61:35:33:98:5c:1c:c2:22:4b:46:
                    9d:81:20:ec:be:9b:1f:36:ad:1f:64:2d:07:3f:67:
                    df:18:7c:93:4c:88:95:d2:c3:79:7f:ad:af:33:e0:
                    1b:56:0d:57:79:86:0d:81:ab:45:7b:5b:9c:fa:e2:
                    1a:1f:8a:4b:38:aa:74:c4:a8:c6:e5:9b:d1:b2:30:
                    d5:9a:a0:b1:b3:68:1c:c5:06:a6:25:a7:9d:82:76:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:22:C7:D2:7A:7A:77:E0:C1:26:B8:FB:A6:F0:66:6E:27:67:AE:2E
            X509v3 Authority Key Identifier:
                keyid:21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:93:7d:4f:57:01:e6:74:6b:7f:a4:b2:ba:38:7a:10:88:6c:
         5d:fb:5b:4f:5f:13:70:b5:58:06:c3:92:45:1e:1c:7e:e1:8b:
         62:63:19:d7:84:3f:32:4e:e9:66:42:d8:55:b0:89:f6:07:47:
         9c:82:53:f7:27:04:3e:d1:cb:6c:a7:51:f7:01:42:a3:e1:bc:
         b0:01:25:d1:1f:cd:e1:69:4b:d3:f5:95:03:81:39:83:b8:d6:
         3c:b8:bb:e7:1a:ab:00:18:ea:6c:6e:dd:2d:a4:fc:84:0e:14:
         0e:f4:ba:c3:54:89:84:78:ef:ad:4d:dc:fd:fa:b6:bb:88:0a:
         d4:fe:48:01:fd:9f:d0:b0:be:80:75:c9:7b:2c:4a:98:42:69:
         75:72:81:66:60:77:d8:c5:b2:06:78:ac:13:a2:a9:21:1c:c3:
         ef:60:52:7b:40:f3:4e:a1:e3:c6:f6:8f:1d:03:a1:45:83:e1:
         0b:fd:e1:ed:50:d4:10:60:88:a8:bc:69:83:9b:e1:2c:68:40:
         c9:46:91:18:9b:d3:39:f5:fe:d1:7b:f6:00:e5:1f:c6:2c:c1:
         f5:32:b7:05:56:5b:75:18:99:98:e8:e4:69:6b:a9:ec:a1:b1:
         ca:f0:04:a0:39:33:42:7d:44:55:f8:56:1c:d8:27:0c:c1:b6:
         1f:a4:dc:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ2wnM2XDTNmHm/O5hsO+z3I2vqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFEQTlBODY1OEQ5MDI4RTcyQkEzMkRDMUJFNDc1MTlF
RjI3MUY5RTAeFw0yNDA4MjkxNjM1NDZaFw0yNDA4MzAxODI3NDZaMDMxMTAvBgNV
BAMTKENCMjJDN0QyN0E3QTc3RTBDMTI2QjhGQkE2RjA2NjZFMjc2N0FFMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNBrkzHiCqCc3IZe9lNqecVSi
TQqztL3imi9tNLMBwEv/o/VxpwMdj3ZBJbYC91gwmdagsdxAwPH1LIdRs3wF/MIW
/wsGYEz19r6xVwAujs1Fq2sAwb+1L2jBNsZB/H/12s5AKuQqzOaoFWGRdjUkcokO
uVezK8dD7xBU3dJbYiwxgRu6XdGWzLHBYir1jmkiClxdwb9dQWoMLV1S0wsOHl4V
ZqlROcLqYTUzmFwcwiJLRp2BIOy+mx82rR9kLQc/Z98YfJNMiJXSw3l/ra8z4BtW
DVd5hg2Bq0V7W5z64hofiks4qnTEqMblm9GyMNWaoLGzaBzFBqYlp52CdjHHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyyLH0np6d+DBJrj7pvBmbidnri4wHwYDVR0j
BBgwFoAUIdqahljZAo5yujLcG+R1Ge8nH54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjFwWG9qS1lWVnpiWXB5Z2JMWjRZQW5IZjJnVWM3Nnd3WTdSQVpwYXRS
dEsvMC8yMURBOUE4NjU4RDkwMjhFNzJCQTMyREMxQkU0NzUxOUVGMjcxRjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxREE5QTg2NThEOTAyOEU3
MkJBMzJEQzFCRTQ3NTE5RUYyNzFGOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RjFwWG9qS1lWVnpiWXB5Z2JMWjRZQW5IZjJnVWM3Nnd3WTdSQVpwYXRSdEsvMC8y
MURBOUE4NjU4RDkwMjhFNzJCQTMyREMxQkU0NzUxOUVGMjcxRjlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlZN9T1cB5nRrf6Syujh6EIhsXftbT18TcLVYBsOSRR4cfuGLYmMZ14Q/Mk7p
ZkLYVbCJ9gdHnIJT9ycEPtHLbKdR9wFCo+G8sAEl0R/N4WlL0/WVA4E5g7jWPLi7
5xqrABjqbG7dLaT8hA4UDvS6w1SJhHjvrU3c/fq2u4gK1P5IAf2f0LC+gHXJeyxK
mEJpdXKBZmB32MWyBnisE6KpIRzD72BSe0DzTqHjxvaPHQOhRYPhC/3h7VDUEGCI
qLxpg5vhLGhAyUaRGJvTOfX+0Xv2AOUfxizB9TK3BVZbdRiZmOjkaWup7KGxyvAE
oDkzQn1EVfhWHNgnDMG2H6Tcng==
-----END CERTIFICATE-----