Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft
File:                     8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft (raw, json)
Hash identifier:          wtFmcBknBIquWNX4coMO7ztZfMfXdYsJEYLvLXy3Ygw=
Subject key identifier:   2D:84:8E:89:44:0D:5E:89:B3:CA:39:49:35:E7:4E:94:3B:20:FE:1C
Authority key identifier: 8B:BE:5E:26:7C:AF:7D:2A:92:11:7C:EC:D7:B8:76:6C:83:7E:ED:CA
Certificate issuer:       /CN=8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA
Certificate serial:       723814BAF8A13BA74410A7269F3B87EE99728AFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft
Manifest number:          0B
Signing time:             Thu 16 Nov 2023 12:00:00 +0000
Manifest this update:     Thu 16 Nov 2023 11:55:00 +0000
Manifest next update:     Fri 17 Nov 2023 12:40:00 +0000
Files and hashes:         1: 8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.crl (hash: mio0cY/cFU4b9My2WJ5lP/Lq4OmivaFHQgTRdJLKLjo=)
                          2: 34352e3138392e35322e302f32322d3234203d3e20323639353738.roa (hash: aSn8g/iSq2RcFUHHApcX6IxILUkdALyot4T7cGQZWrY=)
                          3: 323830343a363662383a383030303a3a2f33342d3336203d3e20323639353738.roa (hash: iENxnY4OksX5GUSQlSfhduQY4YPad67bTPPIwpdPmfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:14:ba:f8:a1:3b:a7:44:10:a7:26:9f:3b:87:ee:99:72:8a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA
        Validity
            Not Before: Nov 16 11:55:00 2023 GMT
            Not After : Nov 17 12:40:00 2023 GMT
        Subject: CN=2D848E89440D5E89B3CA394935E74E943B20FE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:96:3a:40:ee:41:38:36:c8:44:4d:12:18:
                    c9:da:c3:d0:d7:e2:75:0b:b4:80:b9:df:b0:1c:6b:
                    75:f1:d3:a8:95:f9:42:62:79:fe:49:9c:2b:d4:53:
                    71:e6:13:2b:34:5d:62:3a:c2:08:b9:62:43:83:60:
                    c4:0d:f0:16:c4:68:ab:b4:c2:7e:c0:a5:9d:00:03:
                    d5:5f:13:42:55:81:f9:5b:f6:fd:52:32:46:d5:48:
                    a2:d0:f5:0b:cb:5a:09:83:5c:39:25:1a:03:28:99:
                    d7:b8:3f:76:df:30:69:54:74:9e:bb:7e:be:3f:3d:
                    c2:59:d5:fe:15:a9:ef:fe:8f:78:6f:49:6e:e0:1c:
                    66:71:b7:c5:54:7e:2c:f6:11:39:af:68:65:59:56:
                    53:00:90:ea:8d:99:95:44:ab:8e:97:02:da:31:5f:
                    a4:f9:07:9e:b0:c9:15:fc:f8:2c:4c:df:f3:a6:d0:
                    9b:ad:db:50:d2:f3:4e:11:b7:e3:fe:a4:99:bf:28:
                    07:57:0e:69:02:6b:02:2c:ac:4a:05:c2:3d:0b:e7:
                    06:f2:ea:d1:83:07:51:43:1f:4c:34:7c:2b:0a:1d:
                    8e:4d:55:ab:f5:96:89:83:25:f4:ad:c6:b9:c9:b1:
                    d2:8c:07:2f:d6:de:ea:c7:6a:e2:ba:2e:14:f7:59:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:84:8E:89:44:0D:5E:89:B3:CA:39:49:35:E7:4E:94:3B:20:FE:1C
            X509v3 Authority Key Identifier:
                keyid:8B:BE:5E:26:7C:AF:7D:2A:92:11:7C:EC:D7:B8:76:6C:83:7E:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/8BBE5E267CAF7D2A92117CECD7B8766C837EEDCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:4f:94:7a:bf:89:04:5c:a1:70:85:e1:35:48:38:d8:af:
         d8:63:27:f0:3a:01:e9:01:e7:02:dd:d2:68:55:8a:9b:42:89:
         13:21:13:14:d9:35:89:78:ce:49:6c:6c:53:bc:5c:e3:29:e6:
         f2:fb:14:34:9e:c1:64:9b:3b:ff:07:07:37:30:d9:a9:fb:59:
         c8:05:75:8d:91:b1:f6:25:24:05:ee:dc:0e:0e:d8:1b:a7:6a:
         4b:e4:96:fa:1e:29:b5:1a:cd:46:74:b3:4a:76:1d:2b:d8:b6:
         07:21:07:dd:1a:d4:a1:e3:b6:b9:54:0e:a8:ca:4e:85:1c:ff:
         93:9a:f5:db:e2:18:bf:64:35:f1:55:8d:25:1e:65:0e:12:88:
         43:51:c3:13:46:e1:a5:33:05:3c:fc:bb:04:01:d9:92:95:fe:
         50:70:c5:4d:ad:2f:ac:f2:bf:d8:29:8a:19:05:69:2f:8d:b3:
         83:3d:eb:5c:6f:7e:f5:ca:6c:1d:3d:78:8f:f0:b8:64:35:9b:
         8f:c7:b8:a8:7c:00:3d:cd:b8:4b:6d:a0:f0:3e:99:8d:fe:7c:
         4b:8b:10:dc:3a:d1:94:71:14:66:1f:91:93:da:8b:dd:46:cd:
         1d:65:66:f3:23:34:1f:ad:f4:2a:6f:7b:30:0a:ac:1f:e4:93:
         f9:1e:dd:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcjgUuvihO6dEEKcmnzuH7plyivswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCRTVFMjY3Q0FGN0QyQTkyMTE3Q0VDRDdCODc2NkM4
MzdFRURDQTAeFw0yMzExMTYxMTU1MDBaFw0yMzExMTcxMjQwMDBaMDMxMTAvBgNV
BAMTKDJEODQ4RTg5NDQwRDVFODlCM0NBMzk0OTM1RTc0RTk0M0IyMEZFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQ5Y6QO5BODbIRE0SGMnaw9DX
4nULtIC537Aca3Xx06iV+UJief5JnCvUU3HmEys0XWI6wgi5YkODYMQN8BbEaKu0
wn7ApZ0AA9VfE0JVgflb9v1SMkbVSKLQ9QvLWgmDXDklGgMomde4P3bfMGlUdJ67
fr4/PcJZ1f4Vqe/+j3hvSW7gHGZxt8VUfiz2ETmvaGVZVlMAkOqNmZVEq46XAtox
X6T5B56wyRX8+CxM3/Om0Jut21DS804Rt+P+pJm/KAdXDmkCawIsrEoFwj0L5wby
6tGDB1FDH0w0fCsKHY5NVav1lomDJfStxrnJsdKMBy/W3urHauK6LhT3WSmnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULYSOiUQNXomzyjlJNedOlDsg/hwwHwYDVR0j
BBgwFoAUi75eJnyvfSqSEXzs17h2bIN+7cowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEN6Tm50dWc0OFdlblQxR3dUQmlVZWNKNUtVa3NkUk5YTVRMSk1CS3Z0
aFIvMC84QkJFNUUyNjdDQUY3RDJBOTIxMTdDRUNEN0I4NzY2QzgzN0VFRENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCQkU1RTI2N0NBRjdEMkE5
MjExN0NFQ0Q3Qjg3NjZDODM3RUVEQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEN6Tm50dWc0OFdlblQxR3dUQmlVZWNKNUtVa3NkUk5YTVRMSk1CS3Z0aFIvMC84
QkJFNUUyNjdDQUY3RDJBOTIxMTdDRUNEN0I4NzY2QzgzN0VFRENBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArrFPlHq/iQRcoXCF4TVIONiv2GMn8DoB6QHnAt3SaFWKm0KJEyETFNk1iXjO
SWxsU7xc4ynm8vsUNJ7BZJs7/wcHNzDZqftZyAV1jZGx9iUkBe7cDg7YG6dqS+SW
+h4ptRrNRnSzSnYdK9i2ByEH3RrUoeO2uVQOqMpOhRz/k5r12+IYv2Q18VWNJR5l
DhKIQ1HDE0bhpTMFPPy7BAHZkpX+UHDFTa0vrPK/2CmKGQVpL42zgz3rXG9+9cps
HT14j/C4ZDWbj8e4qHwAPc24S22g8D6Zjf58S4sQ3DrRlHEUZh+Rk9qL3UbNHWVm
8yM0H630Km97MAqsH+ST+R7drg==
-----END CERTIFICATE-----