Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.mft
File:                     444ECE2EC776570CD1C53B9537FD85C174CA3339.mft (raw, json)
Hash identifier:          S9oksjwIEGzU94zWSKQAqESJ55PlWNelfUoLbth1Tlg=
Subject key identifier:   17:2F:09:A0:2A:48:48:3D:6F:A1:77:DC:A7:5E:E5:85:10:47:AB:97
Authority key identifier: 44:4E:CE:2E:C7:76:57:0C:D1:C5:3B:95:37:FD:85:C1:74:CA:33:39
Certificate issuer:       /CN=444ECE2EC776570CD1C53B9537FD85C174CA3339
Certificate serial:       193C2A10927A0E4C18B839BFCC1C049F7F056196
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.mft
Manifest number:          0A
Signing time:             Mon 17 Jul 2023 18:28:35 +0000
Manifest this update:     Mon 17 Jul 2023 18:23:35 +0000
Manifest next update:     Tue 18 Jul 2023 20:38:35 +0000
Files and hashes:         1: 34352e3233322e3138342e302f32332d3233203d3e20323637323731.roa (hash: FSiH4BOziWxdhIKNjDXxg8in7JsEFR9H2WI2YM1u758=)
                          2: 444ECE2EC776570CD1C53B9537FD85C174CA3339.crl (hash: pnN94ZfTEy0k5Q89WOQRtnegl3s/MKfoVY+svsYqI6k=)
                          3: 34352e3233322e3138342e302f32322d3234203d3e20323637323731.roa (hash: eynpVHWAUyKqqqTJG4D1+otIAjW+HGR5mVUdDLKFgLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3c:2a:10:92:7a:0e:4c:18:b8:39:bf:cc:1c:04:9f:7f:05:61:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444ECE2EC776570CD1C53B9537FD85C174CA3339
        Validity
            Not Before: Jul 17 18:23:35 2023 GMT
            Not After : Jul 18 20:38:35 2023 GMT
        Subject: CN=172F09A02A48483D6FA177DCA75EE5851047AB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:1e:d1:17:a1:bf:b0:05:44:d3:6a:7b:b1:
                    b0:ed:23:42:a8:da:dd:c9:14:6f:35:33:7e:ee:6c:
                    e2:ac:fa:27:0c:71:ec:2f:f6:40:e5:6b:38:ce:a6:
                    23:12:08:07:45:a7:8b:1b:02:f9:67:20:f5:1a:57:
                    b1:7b:26:48:d5:69:ef:cb:79:89:a5:8e:41:c7:44:
                    06:45:04:17:a4:b1:d8:db:3d:e3:c0:9f:b1:66:a4:
                    dc:89:a2:0b:59:be:07:25:e0:c9:da:b7:43:21:35:
                    96:95:25:df:9a:73:50:ed:07:0a:94:b4:2f:1e:00:
                    6f:d4:4b:58:34:c8:c4:bd:7b:cd:f7:fa:c9:52:19:
                    01:7a:8a:c9:2c:50:55:73:73:55:3d:4d:aa:3d:5c:
                    95:e2:d2:d8:6d:8e:86:f4:04:83:97:3b:70:ba:0d:
                    1e:64:de:fa:7f:9d:a3:eb:92:07:32:cf:05:ce:84:
                    a7:dc:87:c9:d6:57:35:09:b6:4e:b8:f2:56:b5:38:
                    4f:6e:e8:2b:4a:76:30:f8:2c:e2:f6:d2:90:d3:96:
                    b5:97:1e:e9:60:69:38:ee:ca:d8:85:e4:fe:32:f5:
                    1c:85:33:ce:76:65:0e:c4:fd:be:df:ee:e3:23:ee:
                    f6:47:28:64:44:a1:2d:cc:7b:95:7d:fb:aa:5d:f0:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2F:09:A0:2A:48:48:3D:6F:A1:77:DC:A7:5E:E5:85:10:47:AB:97
            X509v3 Authority Key Identifier:
                keyid:44:4E:CE:2E:C7:76:57:0C:D1:C5:3B:95:37:FD:85:C1:74:CA:33:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e2:e1:f6:27:70:54:b1:c9:ed:94:6a:cd:4e:8d:84:a9:9d:
         69:de:53:a6:cf:df:7f:c5:9c:7b:f3:07:50:06:94:b6:2a:1f:
         f8:02:32:30:d8:54:05:e4:d8:d2:c3:a4:8c:64:52:7f:e6:53:
         df:7a:9d:71:82:23:cc:8e:b3:89:09:d7:b7:d4:00:fd:db:48:
         0e:58:07:e0:7b:a7:48:c5:1e:04:eb:1f:95:6b:b8:cb:84:be:
         95:c4:16:95:d5:14:26:6a:7a:04:b6:76:02:73:ce:3a:be:af:
         28:90:68:12:60:11:c4:b5:df:ae:5f:fd:0e:8e:0c:6d:b4:38:
         44:cf:1b:1e:0c:56:49:21:90:ac:00:dd:1b:1a:c8:ac:72:b8:
         47:eb:8a:22:08:64:95:0e:4a:53:dd:c2:a9:0d:85:57:10:c4:
         c9:dc:3e:66:db:ad:d7:99:0c:84:02:c1:dd:7f:b8:77:2e:79:
         b1:32:33:63:3e:e6:f0:f8:20:c5:bb:da:db:62:23:2e:b8:43:
         f7:ec:1c:b0:18:05:34:b8:61:0c:cf:84:8f:59:ff:ff:e3:30:
         b9:04:d2:46:94:a9:96:00:d9:82:9a:83:b6:8e:93:47:45:f1:
         d8:c5:2f:f3:a9:f3:51:75:83:50:0e:a5:f8:b1:59:38:ea:2f:
         cd:aa:5f:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGTwqEJJ6DkwYuDm/zBwEn38FYZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0RUNFMkVDNzc2NTcwQ0QxQzUzQjk1MzdGRDg1QzE3
NENBMzMzOTAeFw0yMzA3MTcxODIzMzVaFw0yMzA3MTgyMDM4MzVaMDMxMTAvBgNV
BAMTKDE3MkYwOUEwMkE0ODQ4M0Q2RkExNzdEQ0E3NUVFNTg1MTA0N0FCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrx7RF6G/sAVE02p7sbDtI0Ko
2t3JFG81M37ubOKs+icMcewv9kDlazjOpiMSCAdFp4sbAvlnIPUaV7F7JkjVae/L
eYmljkHHRAZFBBeksdjbPePAn7FmpNyJogtZvgcl4Mnat0MhNZaVJd+ac1DtBwqU
tC8eAG/US1g0yMS9e833+slSGQF6isksUFVzc1U9Tao9XJXi0thtjob0BIOXO3C6
DR5k3vp/naPrkgcyzwXOhKfch8nWVzUJtk648la1OE9u6CtKdjD4LOL20pDTlrWX
HulgaTjuytiF5P4y9RyFM852ZQ7E/b7f7uMj7vZHKGREoS3Me5V9+6pd8I0VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFy8JoCpISD1voXfcp17lhRBHq5cwHwYDVR0j
BBgwFoAURE7OLsd2VwzRxTuVN/2FwXTKMzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnF0ejVQVFVZQ2Rxd0o1Q0FIcnVZUWlOMjZBRHNVamVKQ3hkTjdBcFNq
RXQvMC80NDRFQ0UyRUM3NzY1NzBDRDFDNTNCOTUzN0ZEODVDMTc0Q0EzMzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0NEVDRTJFQzc3NjU3MENE
MUM1M0I5NTM3RkQ4NUMxNzRDQTMzMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnF0ejVQVFVZQ2Rxd0o1Q0FIcnVZUWlOMjZBRHNVamVKQ3hkTjdBcFNqRXQvMC80
NDRFQ0UyRUM3NzY1NzBDRDFDNTNCOTUzN0ZEODVDMTc0Q0EzMzM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtuLh9idwVLHJ7ZRqzU6NhKmdad5Tps/ff8Wce/MHUAaUtiof+AIyMNhUBeTY
0sOkjGRSf+ZT33qdcYIjzI6ziQnXt9QA/dtIDlgH4HunSMUeBOsflWu4y4S+lcQW
ldUUJmp6BLZ2AnPOOr6vKJBoEmARxLXfrl/9Do4MbbQ4RM8bHgxWSSGQrADdGxrI
rHK4R+uKIghklQ5KU93CqQ2FVxDEydw+Ztut15kMhALB3X+4dy55sTIzYz7m8Pgg
xbva22IjLrhD9+wcsBgFNLhhDM+Ej1n//+MwuQTSRpSplgDZgpqDto6TR0Xx2MUv
86nzUXWDUA6l+LFZOOovzapfnQ==
-----END CERTIFICATE-----