Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.mft
File:                     0CC07DB35E383CF173A772290686C3CFD3D894C0.mft (raw, json)
Hash identifier:          m4P1uMDChK9Uj6Lf3ypb8zMZUqPTsKpUVZSCRNZTmXM=
Subject key identifier:   D6:57:79:1D:BA:40:AA:76:4D:71:6D:33:FF:75:26:DB:7A:D4:09:74
Authority key identifier: 0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0
Certificate issuer:       /CN=0CC07DB35E383CF173A772290686C3CFD3D894C0
Certificate serial:       78E5411FFB2F99223D819570C4B8BCEB1862EE0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.mft
Manifest number:          0131
Signing time:             Wed 20 Sep 2023 10:39:04 +0000
Manifest this update:     Wed 20 Sep 2023 10:34:04 +0000
Manifest next update:     Thu 21 Sep 2023 13:28:04 +0000
Files and hashes:         1: 3137372e33382e3231322e302f32322d3234203d3e20323632343131.roa (hash: bgzTCWvgYluGXnqDeeM2P4Pd0eY5pR37CmNZ/4TeQoQ=)
                          2: 3137372e33382e3230382e302f32322d3234203d3e20323632343131.roa (hash: c1At8ThL8yD5GX2cpLjoWTqBgG0Vr2zoB8p1FlhPvOQ=)
                          3: 0CC07DB35E383CF173A772290686C3CFD3D894C0.crl (hash: cPoGrtjBz6UtVMr76GHoTBoQg53MmBm8zLdp3w1uPME=)
                          4: 323830343a3737383a3a2f33322d3438203d3e20323632343131.roa (hash: u/jbJRaH3wgFgPQ1jSARyVOykpgJprmNDOMmv5rURuc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e5:41:1f:fb:2f:99:22:3d:81:95:70:c4:b8:bc:eb:18:62:ee:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC07DB35E383CF173A772290686C3CFD3D894C0
        Validity
            Not Before: Sep 20 10:34:04 2023 GMT
            Not After : Sep 21 13:28:04 2023 GMT
        Subject: CN=D657791DBA40AA764D716D33FF7526DB7AD40974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:d7:9f:98:ba:a7:94:92:bc:bc:c5:74:cf:
                    0c:b6:e4:d9:1a:c7:94:08:e4:03:62:f3:97:b0:05:
                    ab:8c:ec:bc:72:00:8b:fb:55:32:f1:48:72:0c:40:
                    d8:75:c0:d7:07:82:b9:36:ca:b2:73:16:c9:0e:f3:
                    3a:8e:2c:e1:91:18:c4:ae:55:f5:04:e6:29:45:12:
                    fa:da:00:8e:76:c7:11:37:e0:4f:1b:71:f0:31:ee:
                    21:cb:e6:fd:94:a7:60:a5:76:f5:3a:ed:91:1c:d9:
                    80:ac:e0:76:a9:78:b6:85:19:fb:f2:b4:0d:33:72:
                    9d:28:97:8d:b1:21:33:0b:3c:c3:cc:ae:b7:ff:40:
                    c2:b8:74:39:2f:49:33:72:c1:8d:53:52:aa:8d:87:
                    ba:09:e1:fb:ad:ff:38:6e:89:e0:b5:eb:51:90:53:
                    2a:df:65:86:a7:ee:c1:b5:b1:77:44:05:eb:0a:af:
                    83:a6:7d:38:10:87:83:97:e1:72:47:95:58:b3:30:
                    5e:06:0d:d4:9a:37:0d:78:fa:a3:26:be:88:df:fe:
                    98:90:7e:cf:c5:0f:64:ea:ff:be:b8:5b:18:b4:05:
                    f9:32:9d:e6:28:57:12:d6:a3:2d:83:71:b4:9e:c2:
                    b5:91:b7:9f:71:98:93:1e:f1:e3:53:ea:7c:3b:3b:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:79:1D:BA:40:AA:76:4D:71:6D:33:FF:75:26:DB:7A:D4:09:74
            X509v3 Authority Key Identifier:
                keyid:0C:C0:7D:B3:5E:38:3C:F1:73:A7:72:29:06:86:C3:CF:D3:D8:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/0CC07DB35E383CF173A772290686C3CFD3D894C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:aa:c5:cf:f3:72:e6:f6:e4:6e:fe:4d:7a:dd:28:12:6a:
         e0:c4:4b:2e:37:a5:ca:52:e6:d3:7c:10:fb:62:76:c7:af:b1:
         64:26:fe:12:cf:f2:a8:38:2a:80:10:58:79:da:a2:54:10:0b:
         49:3d:26:69:2e:59:c3:26:3c:ee:2f:cc:b2:ae:a1:25:40:cb:
         85:7a:b0:f0:30:4f:44:b3:cc:fc:61:3a:d0:1a:27:7b:5b:9e:
         7d:93:5f:88:1e:18:79:52:45:89:e7:ef:e2:8e:54:cc:7e:dc:
         8c:4d:06:48:03:4f:8d:c0:ce:92:82:e4:84:77:b0:be:08:1b:
         f6:9e:ca:8a:54:b1:70:90:82:db:14:11:de:05:0c:3c:b0:c3:
         88:2e:d4:7f:e9:63:4d:0b:e0:8f:1f:4d:69:b1:2d:5e:f4:cc:
         ca:91:c8:82:20:d1:17:75:32:67:45:18:4a:dc:13:95:bb:07:
         70:9b:9c:fb:ca:5f:5c:1d:e6:27:d9:63:db:db:ff:f4:0e:a2:
         97:ea:30:69:71:0d:62:7b:2b:32:57:97:22:6d:30:57:6b:f5:
         f2:a0:64:5f:fe:a7:73:6a:77:cf:10:97:86:ed:52:a2:4c:98:
         f2:05:a4:70:b2:62:64:83:23:54:e6:5f:25:e4:24:d2:41:38:
         43:e4:01:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeOVBH/svmSI9gZVwxLi86xhi7gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDMDdEQjM1RTM4M0NGMTczQTc3MjI5MDY4NkMzQ0ZE
M0Q4OTRDMDAeFw0yMzA5MjAxMDM0MDRaFw0yMzA5MjExMzI4MDRaMDMxMTAvBgNV
BAMTKEQ2NTc3OTFEQkE0MEFBNzY0RDcxNkQzM0ZGNzUyNkRCN0FENDA5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndtefmLqnlJK8vMV0zwy25Nka
x5QI5ANi85ewBauM7LxyAIv7VTLxSHIMQNh1wNcHgrk2yrJzFskO8zqOLOGRGMSu
VfUE5ilFEvraAI52xxE34E8bcfAx7iHL5v2Up2CldvU67ZEc2YCs4HapeLaFGfvy
tA0zcp0ol42xITMLPMPMrrf/QMK4dDkvSTNywY1TUqqNh7oJ4fut/zhuieC161GQ
UyrfZYan7sG1sXdEBesKr4OmfTgQh4OX4XJHlVizMF4GDdSaNw14+qMmvojf/piQ
fs/FD2Tq/764Wxi0BfkyneYoVxLWoy2DcbSewrWRt59xmJMe8eNT6nw7OwQtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1ld5HbpAqnZNcW0z/3Um23rUCXQwHwYDVR0j
BBgwFoAUDMB9s144PPFzp3IpBobDz9PYlMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJFYVBRbXVaQzVzVjdweldITHpHNWVXZG5Ec3lrQkNhWXY4czNwOHli
NlcvMC8wQ0MwN0RCMzVFMzgzQ0YxNzNBNzcyMjkwNjg2QzNDRkQzRDg5NEMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDQzA3REIzNUUzODNDRjE3
M0E3NzIyOTA2ODZDM0NGRDNEODk0QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGJFYVBRbXVaQzVzVjdweldITHpHNWVXZG5Ec3lrQkNhWXY4czNwOHliNlcvMC8w
Q0MwN0RCMzVFMzgzQ0YxNzNBNzcyMjkwNjg2QzNDRkQzRDg5NEMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvIyqxc/zcub25G7+TXrdKBJq4MRLLjelylLm03wQ+2J2x6+xZCb+Es/yqDgq
gBBYedqiVBALST0maS5ZwyY87i/Msq6hJUDLhXqw8DBPRLPM/GE60Bone1uefZNf
iB4YeVJFiefv4o5UzH7cjE0GSANPjcDOkoLkhHewvggb9p7KilSxcJCC2xQR3gUM
PLDDiC7Uf+ljTQvgjx9NabEtXvTMypHIgiDRF3UyZ0UYStwTlbsHcJuc+8pfXB3m
J9lj29v/9A6il+owaXENYnsrMleXIm0wV2v18qBkX/6nc2p3zxCXhu1SokyY8gWk
cLJiZIMjVOZfJeQk0kE4Q+QBtw==
-----END CERTIFICATE-----