Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.mft
File:                     0100E536BF20B90420E048AF7E00575CAE6DCE39.mft (raw, json)
Hash identifier:          oyPMgN9AsycncnfOyC/Q0FUm/nlAmjQTUPdbXC0jyBA=
Subject key identifier:   EE:D9:09:F2:F6:D7:E2:4B:4B:39:16:D2:27:08:EF:68:32:37:3C:B2
Authority key identifier: 01:00:E5:36:BF:20:B9:04:20:E0:48:AF:7E:00:57:5C:AE:6D:CE:39
Certificate issuer:       /CN=0100E536BF20B90420E048AF7E00575CAE6DCE39
Certificate serial:       1A3DE82A9BA986109B6AB40368975CEA58D7B994
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.mft
Manifest number:          C7
Signing time:             Fri 16 Dec 2022 00:01:51 +0000
Manifest this update:     Thu 15 Dec 2022 23:56:51 +0000
Manifest next update:     Sat 17 Dec 2022 03:23:51 +0000
Files and hashes:         1: 323830343a336236343a3a2f33322d3438203d3e20323636313436.roa (hash: l0OZOoEsdo6xTd6XC6Drbvhf/UbPz+v5j1tkkoFlY6I=)
                          2: 0100E536BF20B90420E048AF7E00575CAE6DCE39.crl (hash: DB23Prc/6f3yfWd9fyqxOgFLllEWtThCIYaKsp5gKgM=)
                          3: 3136302e32302e36382e302f32322d3234203d3e20323636313436.roa (hash: hXP/iOPDNUDyfqZJ/Lsl3D1+ZWRpq7+DpoEv4M/dDqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:e8:2a:9b:a9:86:10:9b:6a:b4:03:68:97:5c:ea:58:d7:b9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100E536BF20B90420E048AF7E00575CAE6DCE39
        Validity
            Not Before: Dec 15 23:56:51 2022 GMT
            Not After : Dec 17 03:23:51 2022 GMT
        Subject: CN=EED909F2F6D7E24B4B3916D22708EF6832373CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:68:85:11:08:e2:9c:88:19:e8:54:6e:f7:
                    66:04:b4:93:e8:78:e6:1c:1c:e4:e7:c2:b6:d5:f6:
                    1b:80:20:26:8a:c6:fa:bd:7d:b6:e4:2e:37:f1:20:
                    bc:ce:b1:5d:77:34:56:66:ab:63:3a:5f:5b:09:52:
                    0b:64:8d:6e:15:2a:ee:a5:53:4f:a3:07:04:bd:26:
                    8d:7c:a2:65:93:59:e5:2d:d7:1a:64:13:12:4b:3e:
                    29:79:fd:2e:77:ac:08:a3:b4:a0:cb:ff:d1:2e:8d:
                    8f:e4:27:96:44:da:ad:23:7b:7f:86:ed:49:56:31:
                    6b:17:5c:52:8c:c7:6e:3a:b8:38:06:53:44:4a:dd:
                    68:59:25:7e:a0:b2:ef:cf:1f:f0:a2:60:99:91:bf:
                    83:22:91:2b:b8:40:52:9e:99:da:f5:29:1b:06:70:
                    f7:3b:94:a7:01:33:3f:f1:91:51:94:36:3d:a4:26:
                    43:5b:3f:84:a5:fe:2d:49:2a:37:57:24:96:ce:57:
                    cd:17:e0:46:16:ba:49:c4:6c:c5:15:38:7a:37:bb:
                    ef:0a:66:c8:fe:a6:18:14:11:10:35:f1:45:c0:fd:
                    f8:9c:82:70:db:ca:e0:83:1e:32:21:9a:8e:b9:ca:
                    85:92:e3:26:3f:89:66:19:6e:e7:ba:e1:0a:11:08:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:09:F2:F6:D7:E2:4B:4B:39:16:D2:27:08:EF:68:32:37:3C:B2
            X509v3 Authority Key Identifier:
                keyid:01:00:E5:36:BF:20:B9:04:20:E0:48:AF:7E:00:57:5C:AE:6D:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/0100E536BF20B90420E048AF7E00575CAE6DCE39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:39:16:61:a9:8f:17:75:7c:7c:5d:ab:e0:5c:c7:fe:a0:
         be:80:ac:21:19:0b:d2:a2:52:dd:f0:0b:ff:c7:8a:51:6e:6e:
         9a:61:cb:92:69:e3:03:8a:a4:7b:d2:8e:6a:c0:6f:1d:26:0a:
         49:b9:1d:63:b2:ef:bd:e8:ba:48:3b:e4:7f:f7:5e:ac:62:ed:
         43:20:c2:fc:d0:b0:f2:eb:3e:fe:9f:34:6d:e3:e9:fc:b7:4e:
         60:fc:a7:fe:96:9b:21:22:36:db:41:da:84:28:d4:f7:a8:14:
         24:03:9e:d8:20:71:3f:64:93:7f:ec:22:14:5c:d3:ac:36:52:
         8c:ac:17:60:c6:04:2c:b7:95:a9:0e:2c:2e:95:0b:8e:e4:96:
         06:72:0e:fb:2c:3f:8e:62:47:03:7a:1d:3a:9f:b1:9d:4c:e8:
         02:f9:c4:e2:d5:e3:6f:95:c6:bd:d4:b6:54:2d:d2:0f:b8:e2:
         6c:0b:1f:9e:9e:f2:d6:df:99:07:8e:ab:c0:2c:2a:c8:48:77:
         5b:b3:81:9a:79:b5:81:b9:d7:90:1f:99:ac:57:dd:c9:2e:78:
         0d:a3:d2:cf:17:40:e2:d7:6a:2f:74:b8:11:7e:46:d3:46:e5:
         e1:9f:21:bf:c8:fc:90:b7:b5:02:3f:50:22:4d:2f:74:19:d5:
         06:01:01:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGj3oKpuphhCbarQDaJdc6ljXuZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwMEU1MzZCRjIwQjkwNDIwRTA0OEFGN0UwMDU3NUNB
RTZEQ0UzOTAeFw0yMjEyMTUyMzU2NTFaFw0yMjEyMTcwMzIzNTFaMDMxMTAvBgNV
BAMTKEVFRDkwOUYyRjZEN0UyNEI0QjM5MTZEMjI3MDhFRjY4MzIzNzNDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLk2iFEQjinIgZ6FRu92YEtJPo
eOYcHOTnwrbV9huAICaKxvq9fbbkLjfxILzOsV13NFZmq2M6X1sJUgtkjW4VKu6l
U0+jBwS9Jo18omWTWeUt1xpkExJLPil5/S53rAijtKDL/9EujY/kJ5ZE2q0je3+G
7UlWMWsXXFKMx246uDgGU0RK3WhZJX6gsu/PH/CiYJmRv4MikSu4QFKemdr1KRsG
cPc7lKcBMz/xkVGUNj2kJkNbP4Sl/i1JKjdXJJbOV80X4EYWuknEbMUVOHo3u+8K
Zsj+phgUERA18UXA/ficgnDbyuCDHjIhmo65yoWS4yY/iWYZbue64QoRCLf3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7tkJ8vbX4ktLORbSJwjvaDI3PLIwHwYDVR0j
BBgwFoAUAQDlNr8guQQg4EivfgBXXK5tzjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVRbnp5RlBNcTQ3a3c0OUY5RW5CMkRUQWhUMjFBZ2NWZ0trakNxQ05M
a0gvMC8wMTAwRTUzNkJGMjBCOTA0MjBFMDQ4QUY3RTAwNTc1Q0FFNkRDRTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxMDBFNTM2QkYyMEI5MDQy
MEUwNDhBRjdFMDA1NzVDQUU2RENFMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGVRbnp5RlBNcTQ3a3c0OUY5RW5CMkRUQWhUMjFBZ2NWZ0trakNxQ05Ma0gvMC8w
MTAwRTUzNkJGMjBCOTA0MjBFMDQ4QUY3RTAwNTc1Q0FFNkRDRTM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaVo5FmGpjxd1fHxdq+Bcx/6gvoCsIRkL0qJS3fAL/8eKUW5ummHLkmnjA4qk
e9KOasBvHSYKSbkdY7Lvvei6SDvkf/derGLtQyDC/NCw8us+/p80bePp/LdOYPyn
/pabISI220HahCjU96gUJAOe2CBxP2STf+wiFFzTrDZSjKwXYMYELLeVqQ4sLpUL
juSWBnIO+yw/jmJHA3odOp+xnUzoAvnE4tXjb5XGvdS2VC3SD7jibAsfnp7y1t+Z
B46rwCwqyEh3W7OBmnm1gbnXkB+ZrFfdyS54DaPSzxdA4tdqL3S4EX5G00bl4Z8h
v8j8kLe1Aj9QIk0vdBnVBgEBlQ==
-----END CERTIFICATE-----