Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.mft
File:                     BC07094343B21CDB967FB8B26A88D14C2D3B7C62.mft (raw, json)
Hash identifier:          Rtu+C0R1rIT7Oh5v+LnahrqR1MCOA/MtFWRE6UaNKuE=
Subject key identifier:   96:2E:41:E3:9C:45:86:A8:EE:42:71:10:0E:30:06:AF:F6:47:E5:1C
Authority key identifier: BC:07:09:43:43:B2:1C:DB:96:7F:B8:B2:6A:88:D1:4C:2D:3B:7C:62
Certificate issuer:       /CN=BC07094343B21CDB967FB8B26A88D14C2D3B7C62
Certificate serial:       103D23BF1AC6F5B4122EF7797321D45CCF89FDBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.mft
Manifest number:          077F
Signing time:             Mon 15 Apr 2024 08:05:14 +0000
Manifest this update:     Mon 15 Apr 2024 08:00:14 +0000
Manifest next update:     Tue 16 Apr 2024 10:31:14 +0000
Files and hashes:         1: 3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa (hash: Q9VGaa6f1pJRo3kVTdQX/6tkDwSi1dTbDKju5HpdnVk=)
                          2: BC07094343B21CDB967FB8B26A88D14C2D3B7C62.crl (hash: UMcGNRmxoYgQBGu872VmSPLTkOCh7Gw7X9dz8ystXI0=)
                          3: 323830343a323766383a3a2f33322d3438203d3e20323633393332.roa (hash: lwvhRocJrmUs8NK9+ONq3CWjSA5Km1VSQ1kcbtCT0Ys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:23:bf:1a:c6:f5:b4:12:2e:f7:79:73:21:d4:5c:cf:89:fd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07094343B21CDB967FB8B26A88D14C2D3B7C62
        Validity
            Not Before: Apr 15 08:00:14 2024 GMT
            Not After : Apr 16 10:31:14 2024 GMT
        Subject: CN=962E41E39C4586A8EE4271100E3006AFF647E51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:76:22:4b:6e:43:4a:f4:2b:75:12:27:13:
                    ed:8f:35:f9:57:b9:31:64:6e:48:c0:82:33:e1:dd:
                    57:23:39:19:ee:6b:46:7f:4e:94:6d:bb:7a:40:8b:
                    94:29:61:cc:a7:df:f3:83:ac:b2:17:b6:47:4f:99:
                    fd:83:d5:19:db:5e:79:0d:b9:a6:56:0e:4f:2e:3d:
                    8f:fb:33:2c:e1:f2:a7:a7:5a:6f:17:21:98:f6:df:
                    e5:19:02:41:b2:9a:8a:1a:d0:82:4d:60:49:74:16:
                    6a:7d:10:0d:ab:08:89:d8:34:f9:77:be:1a:b9:d2:
                    a0:19:f4:f3:0d:3e:7e:da:f4:08:9b:23:91:d6:a0:
                    b5:2a:c1:82:65:39:76:0b:ad:0b:68:34:3b:85:bc:
                    da:3d:f8:b9:e7:ae:b4:3a:e3:f8:b9:28:33:31:7e:
                    cc:59:46:cf:cb:3d:d2:88:d4:7b:44:a5:cc:9c:f3:
                    52:c8:8a:a1:fd:c4:1b:4a:59:f4:ef:55:aa:62:56:
                    d9:dc:d3:22:1f:8b:48:22:2d:9b:ed:a4:6f:f3:95:
                    64:06:71:78:2a:62:93:c5:8c:94:46:40:e2:8b:75:
                    62:e8:85:d2:b1:54:a5:38:10:4d:79:b7:2f:f2:9f:
                    e8:f7:49:e2:16:1a:0c:21:e7:27:82:fd:8d:bd:30:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:41:E3:9C:45:86:A8:EE:42:71:10:0E:30:06:AF:F6:47:E5:1C
            X509v3 Authority Key Identifier:
                keyid:BC:07:09:43:43:B2:1C:DB:96:7F:B8:B2:6A:88:D1:4C:2D:3B:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4c:67:8c:0d:72:d6:96:3c:fc:06:55:5c:3b:38:2f:f2:1d:
         b7:32:08:e1:3b:72:65:ba:22:a0:73:30:b0:37:d4:fc:25:82:
         68:59:72:54:e6:e0:44:3c:52:e3:01:0c:e6:85:22:6b:5d:4c:
         27:64:2d:a4:29:52:4a:35:53:37:38:8e:62:48:68:52:75:c1:
         b9:f6:c5:1d:86:78:e8:c0:5c:98:57:c5:d4:46:34:fe:af:bf:
         8d:be:40:3c:3d:e0:83:d7:70:d1:ab:46:f6:ce:0f:3d:bd:12:
         1e:3c:34:0f:6f:bc:f4:cb:8b:e9:2a:0a:52:61:cd:37:6f:9e:
         2a:bf:34:ce:57:b4:a3:86:64:a9:db:ad:0a:61:78:5f:08:4d:
         36:09:b2:03:5c:dd:9a:ac:ad:b6:8e:dc:04:4f:12:31:57:3c:
         ea:df:ea:f0:2a:e8:d3:53:90:5e:61:32:11:68:0a:fc:0b:51:
         3f:15:8d:96:17:d1:b7:17:64:17:b5:25:9d:d6:f7:af:74:0e:
         78:7c:48:19:4d:0d:b5:a4:91:e4:4d:78:cc:30:cd:5b:89:2c:
         fc:1b:44:6e:ae:21:45:bc:35:93:b1:3c:3f:23:44:e9:90:f8:
         25:c4:fd:b8:91:ce:ce:ad:ed:61:a8:13:59:05:ec:62:dd:cf:
         1b:af:1d:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUED0jvxrG9bQSLvd5cyHUXM+J/bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwNzA5NDM0M0IyMUNEQjk2N0ZCOEIyNkE4OEQxNEMy
RDNCN0M2MjAeFw0yNDA0MTUwODAwMTRaFw0yNDA0MTYxMDMxMTRaMDMxMTAvBgNV
BAMTKDk2MkU0MUUzOUM0NTg2QThFRTQyNzExMDBFMzAwNkFGRjY0N0U1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OXYiS25DSvQrdRInE+2PNflX
uTFkbkjAgjPh3VcjORnua0Z/TpRtu3pAi5QpYcyn3/ODrLIXtkdPmf2D1RnbXnkN
uaZWDk8uPY/7Myzh8qenWm8XIZj23+UZAkGymooa0IJNYEl0Fmp9EA2rCInYNPl3
vhq50qAZ9PMNPn7a9AibI5HWoLUqwYJlOXYLrQtoNDuFvNo9+LnnrrQ64/i5KDMx
fsxZRs/LPdKI1HtEpcyc81LIiqH9xBtKWfTvVapiVtnc0yIfi0giLZvtpG/zlWQG
cXgqYpPFjJRGQOKLdWLohdKxVKU4EE15ty/yn+j3SeIWGgwh5yeC/Y29MIHfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUli5B45xFhqjuQnEQDjAGr/ZH5RwwHwYDVR0j
BBgwFoAUvAcJQ0OyHNuWf7iyaojRTC07fGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEx4OXNKOUZRbmsyYlZtZXZTUkZ4UGFhSlg4VFFMVEM3ZDYzVW1XSHdL
eG8vMC9CQzA3MDk0MzQzQjIxQ0RCOTY3RkI4QjI2QTg4RDE0QzJEM0I3QzYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDMDcwOTQzNDNCMjFDREI5
NjdGQjhCMjZBODhEMTRDMkQzQjdDNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEx4OXNKOUZRbmsyYlZtZXZTUkZ4UGFhSlg4VFFMVEM3ZDYzVW1XSHdLeG8vMC9C
QzA3MDk0MzQzQjIxQ0RCOTY3RkI4QjI2QTg4RDE0QzJEM0I3QzYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP0xnjA1y1pY8/AZVXDs4L/IdtzII4TtyZboioHMwsDfU/CWCaFlyVObgRDxS
4wEM5oUia11MJ2QtpClSSjVTNziOYkhoUnXBufbFHYZ46MBcmFfF1EY0/q+/jb5A
PD3gg9dw0atG9s4PPb0SHjw0D2+89MuL6SoKUmHNN2+eKr80zle0o4ZkqdutCmF4
XwhNNgmyA1zdmqytto7cBE8SMVc86t/q8Cro01OQXmEyEWgK/AtRPxWNlhfRtxdk
F7Ulndb3r3QOeHxIGU0NtaSR5E14zDDNW4ks/BtEbq4hRbw1k7E8PyNE6ZD4JcT9
uJHOzq3tYagTWQXsYt3PG68dLA==
-----END CERTIFICATE-----