Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft
File:                     29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft (raw, json)
Hash identifier:          554ZB5nsdRxBarLTMenMxxCyXlFccAwM1IOvbUACTY4=
Subject key identifier:   B6:E0:57:03:76:A4:5C:E1:9F:CB:78:B1:C5:EC:B9:C6:99:40:0D:0F
Authority key identifier: 29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE
Certificate issuer:       /CN=29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE
Certificate serial:       48682D0C0D17669C467A23E54C4A8652E951196E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft
Manifest number:          B7
Signing time:             Mon 15 Apr 2024 06:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:15:00 +0000
Files and hashes:         1: 29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.crl (hash: uIrOKv+d485DZiKsP/TJiUHXidW5xGm2EJ54vijpVvs=)
                          2: 323830343a373962633a3a2f33322d3438203d3e20323731333234.roa (hash: hqlrDqq0CIN1OHHg8Tiiq4uj6G9ALpXJ+9HLOhKBags=)
                          3: 3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa (hash: 23BRsb2zwoHv0LzETJnkQMcBYFmUWAtQu7Bkv/1zbCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:68:2d:0c:0d:17:66:9c:46:7a:23:e5:4c:4a:86:52:e9:51:19:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE
        Validity
            Not Before: Apr 15 06:25:00 2024 GMT
            Not After : Apr 16 10:15:00 2024 GMT
        Subject: CN=B6E0570376A45CE19FCB78B1C5ECB9C699400D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:4a:fc:4b:13:52:5d:3b:97:e3:bb:20:d7:
                    d5:f0:90:00:50:e3:6a:a7:d0:c6:3a:5e:24:06:b8:
                    6f:d9:61:3f:f1:fd:8a:b3:da:9c:10:f9:51:e7:94:
                    7a:bf:1d:54:c5:cb:6e:a1:b2:3e:eb:df:ab:b5:26:
                    a0:c2:15:c6:0f:53:ef:1d:bb:78:0f:6b:41:a3:fd:
                    ca:57:fc:cc:c8:66:b5:fe:95:e4:46:f9:d8:db:b8:
                    cd:fd:8c:fd:11:d4:73:34:05:dc:92:c6:10:23:0b:
                    d7:4c:42:39:90:fa:30:0c:ff:9d:7e:4d:62:0a:ef:
                    b1:5a:49:f2:aa:15:17:ee:aa:41:cb:fb:51:23:c9:
                    15:1b:18:28:3d:17:26:15:71:9e:52:0c:03:4d:ab:
                    70:6f:69:04:40:b1:d4:7a:3c:71:f1:c2:2a:fa:34:
                    f6:57:38:3e:db:b7:38:0d:ea:74:33:f2:dd:ce:7d:
                    9d:70:f4:6d:a5:0c:47:b8:fd:92:0f:20:40:dc:07:
                    1e:46:2d:a9:a6:0a:18:dc:1f:52:9e:18:d4:e5:da:
                    d7:ee:70:7d:2c:f5:40:6e:f1:3a:9a:93:66:f0:ad:
                    a2:3b:ef:61:b5:14:96:27:0c:3e:6f:f7:34:b6:11:
                    ba:24:5a:e0:c9:5a:3a:64:0a:8a:a5:b6:72:e8:fb:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:57:03:76:A4:5C:E1:9F:CB:78:B1:C5:EC:B9:C6:99:40:0D:0F
            X509v3 Authority Key Identifier:
                keyid:29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:dd:e8:5f:ba:39:aa:3e:c9:1c:ab:f5:df:e1:2f:d0:d6:ca:
         a8:ab:2d:25:83:42:82:47:18:d4:ea:71:77:f1:44:bd:46:6f:
         e2:63:4f:64:67:3c:6d:e2:ba:c5:ae:08:b3:a8:a6:b5:a0:df:
         b6:5f:e4:41:c7:61:f7:35:51:5e:d7:61:1a:1c:38:2e:9d:7e:
         6e:f1:b1:6d:b0:cb:6c:34:b8:f7:c7:bc:01:e7:4a:3a:0e:0b:
         8e:9e:8a:db:3f:1c:1e:8c:2d:5e:e0:af:8b:56:32:5a:cb:96:
         21:f9:d7:bc:a0:f8:86:95:3d:e2:8d:69:a8:11:0c:ec:ff:eb:
         20:32:48:16:b3:a7:a3:3d:a0:cb:45:ca:57:b7:05:a7:dc:f6:
         0e:17:f4:d4:72:72:cf:92:89:fa:02:0e:5d:8b:76:9d:c6:2a:
         48:14:bb:76:35:e6:87:10:dd:e3:4c:59:95:29:f9:b3:ff:e8:
         4c:7b:96:d8:2b:27:50:c4:c2:be:ae:ad:3b:8d:50:1d:14:a5:
         f7:3e:63:8b:f7:26:ac:1c:0a:0a:51:09:8d:3e:eb:6b:63:f9:
         7f:02:91:6f:9b:3f:b3:f7:4f:f7:7d:fd:44:a6:2a:15:46:70:
         22:30:2e:34:46:a3:ab:75:6a:01:35:88:45:2d:76:24:75:42:
         bd:31:e9:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSGgtDA0XZpxGeiPlTEqGUulRGW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCRTA3QTRBNDM1MDhDNTFBRTA5RERFMzlDRjUxQTNG
RTVFMzFFRTAeFw0yNDA0MTUwNjI1MDBaFw0yNDA0MTYxMDE1MDBaMDMxMTAvBgNV
BAMTKEI2RTA1NzAzNzZBNDVDRTE5RkNCNzhCMUM1RUNCOUM2OTk0MDBEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3Ur8SxNSXTuX47sg19XwkABQ
42qn0MY6XiQGuG/ZYT/x/Yqz2pwQ+VHnlHq/HVTFy26hsj7r36u1JqDCFcYPU+8d
u3gPa0Gj/cpX/MzIZrX+leRG+djbuM39jP0R1HM0BdySxhAjC9dMQjmQ+jAM/51+
TWIK77FaSfKqFRfuqkHL+1EjyRUbGCg9FyYVcZ5SDANNq3BvaQRAsdR6PHHxwir6
NPZXOD7btzgN6nQz8t3OfZ1w9G2lDEe4/ZIPIEDcBx5GLammChjcH1KeGNTl2tfu
cH0s9UBu8Tqak2bwraI772G1FJYnDD5v9zS2EbokWuDJWjpkCoqltnLo++GnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtuBXA3akXOGfy3ixxey5xplADQ8wHwYDVR0j
BBgwFoAUKb4HpKQ1CMUa4J3eOc9Ro/5eMe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2JvbkRwcGd2cXRYZDYyQVAxQ2JUVEhhQm1kVW1LRnVRSGNYa2h6TmZm
YWovMC8yOUJFMDdBNEE0MzUwOEM1MUFFMDlEREUzOUNGNTFBM0ZFNUUzMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI5QkUwN0E0QTQzNTA4QzUx
QUUwOURERTM5Q0Y1MUEzRkU1RTMxRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2JvbkRwcGd2cXRYZDYyQVAxQ2JUVEhhQm1kVW1LRnVRSGNYa2h6TmZmYWovMC8y
OUJFMDdBNEE0MzUwOEM1MUFFMDlEREUzOUNGNTFBM0ZFNUUzMUVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATt3oX7o5qj7JHKv13+Ev0NbKqKstJYNCgkcY1Opxd/FEvUZv4mNPZGc8beK6
xa4Is6imtaDftl/kQcdh9zVRXtdhGhw4Lp1+bvGxbbDLbDS498e8AedKOg4Ljp6K
2z8cHowtXuCvi1YyWsuWIfnXvKD4hpU94o1pqBEM7P/rIDJIFrOnoz2gy0XKV7cF
p9z2Dhf01HJyz5KJ+gIOXYt2ncYqSBS7djXmhxDd40xZlSn5s//oTHuW2CsnUMTC
vq6tO41QHRSl9z5ji/cmrBwKClEJjT7ra2P5fwKRb5s/s/dP9339RKYqFUZwIjAu
NEajq3VqATWIRS12JHVCvTHpSg==
-----END CERTIFICATE-----