Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.mft
File:                     B027EFA588C207B1131C1CBB733E2F759EDFBFE9.mft (raw, json)
Hash identifier:          l8HOiZuRi2soxvQuMWVD2GQ0rrEiCnnzPypJ+w6cfmM=
Subject key identifier:   86:34:4F:AC:AA:2A:5B:B1:93:63:23:4B:5D:63:4E:CF:49:7B:76:46
Authority key identifier: B0:27:EF:A5:88:C2:07:B1:13:1C:1C:BB:73:3E:2F:75:9E:DF:BF:E9
Certificate issuer:       /CN=B027EFA588C207B1131C1CBB733E2F759EDFBFE9
Certificate serial:       51CCE27C55D57D7F724429CBFC482ADE3A4B9B96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.mft
Manifest number:          D0
Signing time:             Fri 06 Sep 2024 07:00:13 +0000
Manifest this update:     Fri 06 Sep 2024 06:55:13 +0000
Manifest next update:     Sat 07 Sep 2024 08:50:13 +0000
Files and hashes:         1: 323830343a373136343a3a2f33322d3332203d3e20323730373836.roa (hash: CfVtmQ7ymOR1QmLDAaudSoXekkLTygl7u/xN0pARlvU=)
                          2: B027EFA588C207B1131C1CBB733E2F759EDFBFE9.crl (hash: LVNrpXILXvHQf7MmCO8QIhKUiEPd8zhuVMiqFz+jE6U=)
                          3: 3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa (hash: AOPWxiCRyAmq47VJuzg9uMaU+Tdy+tPb7/WrumIocZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cc:e2:7c:55:d5:7d:7f:72:44:29:cb:fc:48:2a:de:3a:4b:9b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B027EFA588C207B1131C1CBB733E2F759EDFBFE9
        Validity
            Not Before: Sep  6 06:55:13 2024 GMT
            Not After : Sep  7 08:50:13 2024 GMT
        Subject: CN=86344FACAA2A5BB19363234B5D634ECF497B7646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:fb:6f:3d:d5:f8:97:f6:39:79:d1:a4:27:
                    92:ef:27:2a:d3:5f:be:de:ae:b7:c9:d9:9d:b3:62:
                    64:55:ce:31:fe:95:63:f7:5c:58:b2:52:9b:a9:b1:
                    e9:f8:be:95:48:c6:a1:21:b4:9f:cf:65:20:3f:a7:
                    71:8c:b3:80:d0:80:22:b8:99:88:83:bd:e2:ab:64:
                    17:57:13:be:84:ee:28:9f:45:42:54:f2:4f:1b:a9:
                    85:21:f1:78:c9:9b:b2:bd:fc:13:c8:20:6b:9b:0d:
                    3b:5d:6c:ee:a5:0e:02:bc:2b:ae:3a:d1:30:48:97:
                    b2:fb:1f:10:7d:c4:26:70:08:d2:73:02:de:f1:99:
                    ee:83:13:e1:da:11:11:a5:64:17:a1:ef:ba:62:43:
                    b1:c9:58:ca:cd:52:e4:03:c5:e6:04:69:c1:75:6b:
                    6e:09:e8:9c:18:d4:41:78:bf:96:11:78:18:ee:e3:
                    f8:84:00:00:b6:aa:94:7a:bd:d0:d9:60:c2:fd:e7:
                    e1:be:0b:5d:ef:8c:3d:11:09:5f:15:52:a6:c7:e3:
                    f6:c7:8f:63:16:a9:34:88:c6:38:89:45:7c:58:98:
                    2e:37:2a:38:30:e3:ab:e7:55:bf:a5:03:4b:a5:da:
                    59:4f:2e:7f:44:1b:24:31:87:69:12:55:d6:09:09:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:4F:AC:AA:2A:5B:B1:93:63:23:4B:5D:63:4E:CF:49:7B:76:46
            X509v3 Authority Key Identifier:
                keyid:B0:27:EF:A5:88:C2:07:B1:13:1C:1C:BB:73:3E:2F:75:9E:DF:BF:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/1/B027EFA588C207B1131C1CBB733E2F759EDFBFE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:55:7e:ea:db:72:00:dd:42:af:56:8d:30:d3:85:f0:5d:
         a0:4d:30:bc:11:e2:6d:4b:71:5f:ae:87:64:fb:a7:75:bb:ae:
         7c:89:f5:01:d8:be:3e:83:53:a2:77:55:72:40:52:b4:77:a4:
         4b:be:ac:fb:08:12:2b:ea:19:51:16:2c:a8:02:f8:5d:48:7a:
         df:b3:e7:f7:fe:b6:13:a5:56:ef:12:66:88:e7:89:ec:51:90:
         cd:f4:91:33:56:c6:6c:c2:0b:20:b9:9c:c5:41:6e:3b:dc:25:
         91:b5:99:72:21:64:ec:79:8a:a1:09:71:a6:07:db:ac:1c:32:
         f6:69:8e:10:06:8e:f9:f3:da:91:5a:ff:70:f6:a8:07:b6:00:
         06:3e:f6:64:21:b8:6c:83:e2:a4:46:f4:da:14:8b:6c:00:f3:
         41:eb:f3:18:44:19:25:d9:8b:ef:23:40:ea:64:a1:e5:ab:44:
         14:18:cf:e3:9d:33:3e:f6:8f:bb:54:43:65:cc:6c:ad:91:e3:
         35:c6:dc:73:41:eb:ce:bb:22:d9:43:dd:dd:32:ad:1a:d0:09:
         21:1c:85:7c:d0:2c:60:2a:56:9a:58:7d:27:72:3b:b2:b1:05:
         d0:f1:1c:8f:b9:35:72:c8:0d:24:70:5c:59:e0:2c:41:e5:37:
         0b:c9:0f:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUczifFXVfX9yRCnL/Egq3jpLm5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAyN0VGQTU4OEMyMDdCMTEzMUMxQ0JCNzMzRTJGNzU5
RURGQkZFOTAeFw0yNDA5MDYwNjU1MTNaFw0yNDA5MDcwODUwMTNaMDMxMTAvBgNV
BAMTKDg2MzQ0RkFDQUEyQTVCQjE5MzYzMjM0QjVENjM0RUNGNDk3Qjc2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqvtvPdX4l/Y5edGkJ5LvJyrT
X77errfJ2Z2zYmRVzjH+lWP3XFiyUpupsen4vpVIxqEhtJ/PZSA/p3GMs4DQgCK4
mYiDveKrZBdXE76E7iifRUJU8k8bqYUh8XjJm7K9/BPIIGubDTtdbO6lDgK8K646
0TBIl7L7HxB9xCZwCNJzAt7xme6DE+HaERGlZBeh77piQ7HJWMrNUuQDxeYEacF1
a24J6JwY1EF4v5YReBju4/iEAAC2qpR6vdDZYML95+G+C13vjD0RCV8VUqbH4/bH
j2MWqTSIxjiJRXxYmC43Kjgw46vnVb+lA0ul2llPLn9EGyQxh2kSVdYJCR7jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhjRPrKoqW7GTYyNLXWNOz0l7dkYwHwYDVR0j
BBgwFoAUsCfvpYjCB7ETHBy7cz4vdZ7fv+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29rd0VCUmRmQmNRUVBxaEtzOWViRVRFYThpM05id3NXQ0dUWTRQbkI5
cDQvMS9CMDI3RUZBNTg4QzIwN0IxMTMxQzFDQkI3MzNFMkY3NTlFREZCRkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMjdFRkE1ODhDMjA3QjEx
MzFDMUNCQjczM0UyRjc1OUVERkJGRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R29rd0VCUmRmQmNRUVBxaEtzOWViRVRFYThpM05id3NXQ0dUWTRQbkI5cDQvMS9C
MDI3RUZBNTg4QzIwN0IxMTMxQzFDQkI3MzNFMkY3NTlFREZCRkU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnMhVfurbcgDdQq9WjTDThfBdoE0wvBHibUtxX66HZPundbuufIn1Adi+PoNT
ondVckBStHekS76s+wgSK+oZURYsqAL4XUh637Pn9/62E6VW7xJmiOeJ7FGQzfSR
M1bGbMILILmcxUFuO9wlkbWZciFk7HmKoQlxpgfbrBwy9mmOEAaO+fPakVr/cPao
B7YABj72ZCG4bIPipEb02hSLbADzQevzGEQZJdmL7yNA6mSh5atEFBjP450zPvaP
u1RDZcxsrZHjNcbcc0Hrzrsi2UPd3TKtGtAJIRyFfNAsYCpWmlh9J3I7srEF0PEc
j7k1csgNJHBcWeAsQeU3C8kPGw==
-----END CERTIFICATE-----