Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft
File:                     C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft (raw, json)
Hash identifier:          i6DCbFpscSWx1DDwiQ1gAJOl20JEXuibeVOzEJOhanY=
Subject key identifier:   20:9D:F9:D8:64:B3:49:E1:DF:19:46:B3:B4:07:5A:26:66:E7:8B:AA
Authority key identifier: C7:FD:B1:AE:17:E6:8C:CA:BC:36:EC:4E:9F:6D:05:26:2D:42:FB:80
Certificate issuer:       /CN=C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80
Certificate serial:       31452C81B61137625D622806215285CE8E2DBB4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft
Manifest number:          03
Signing time:             Fri 14 Jun 2024 12:24:24 +0000
Manifest this update:     Fri 14 Jun 2024 12:19:24 +0000
Manifest next update:     Sat 15 Jun 2024 13:34:24 +0000
Files and hashes:         1: C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.crl (hash: jkDBqVE9RFetxLkklgWmmt0iPHWqvH81dR991uEWMRg=)
                          2: 3133312e3136312e36342e302f32322d3332203d3e20323634333639.roa (hash: 92r+SkJvJR+7obUEj2/prIMEINlh17Q3t9C2HRO2tIk=)
                          3: 323830343a316437343a3a2f33322d313238203d3e20323634333639.roa (hash: Mf1lZmjVUVhbEVtJKyiZAMnFVwzN8jTbnqKiMIwKJVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:2c:81:b6:11:37:62:5d:62:28:06:21:52:85:ce:8e:2d:bb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80
        Validity
            Not Before: Jun 14 12:19:24 2024 GMT
            Not After : Jun 15 13:34:24 2024 GMT
        Subject: CN=209DF9D864B349E1DF1946B3B4075A2666E78BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:87:21:28:b8:55:c7:b6:6a:c7:86:eb:6e:
                    50:82:90:06:9a:c9:f2:44:9f:d0:17:86:a8:64:a7:
                    4f:a5:fe:7a:5e:ef:28:9f:3f:2e:c7:17:54:d9:26:
                    48:2d:07:5d:89:da:21:71:e9:5d:fc:e5:b3:84:41:
                    bf:05:09:d9:3f:be:fc:d2:33:7e:15:26:ee:fe:90:
                    10:25:a8:24:cc:68:a7:f3:bb:99:ff:5b:c1:ed:92:
                    b4:3b:6b:c9:4e:d8:0b:82:2f:4d:56:d1:5e:9b:59:
                    92:0c:f3:22:fe:ed:52:37:27:89:97:3a:be:85:2b:
                    0a:54:25:c8:d9:25:29:91:05:cd:ce:a7:6b:80:64:
                    f2:91:50:09:a1:20:00:68:14:f4:aa:a7:2c:67:ac:
                    8c:69:b9:6d:70:dc:d0:5c:e8:b1:62:67:18:2e:09:
                    0e:ab:3b:c8:2b:9b:f9:d5:c7:bd:25:83:04:f5:ff:
                    2a:be:1d:5f:35:a5:85:74:1d:81:dd:aa:81:57:6e:
                    55:e5:cf:a7:3a:1d:91:4a:9c:24:64:c0:11:08:43:
                    a5:86:ed:79:79:b0:f5:a4:49:42:2e:7f:78:5e:5a:
                    3a:28:6c:3d:b7:ff:ff:b9:05:62:87:d3:13:d0:cf:
                    60:f6:fe:ce:e4:51:81:b1:f8:f6:21:80:94:4f:ab:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:F9:D8:64:B3:49:E1:DF:19:46:B3:B4:07:5A:26:66:E7:8B:AA
            X509v3 Authority Key Identifier:
                keyid:C7:FD:B1:AE:17:E6:8C:CA:BC:36:EC:4E:9F:6D:05:26:2D:42:FB:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/C7FDB1AE17E68CCABC36EC4E9F6D05262D42FB80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:f0:22:3c:da:77:42:13:af:43:e8:06:eb:a8:38:2a:10:
         7b:25:b9:72:d6:0f:cc:28:8f:ee:a0:d2:9d:14:b5:89:ed:69:
         26:7b:b1:26:8f:a3:f4:d5:15:bd:2a:e6:f5:e7:c9:40:28:bc:
         bc:79:5f:ff:0a:c2:bf:a3:3a:00:c9:36:82:a8:88:f4:bc:45:
         4c:8a:f4:d5:d7:9e:d1:2a:a0:40:3a:b8:95:6a:ff:09:60:20:
         ed:f2:17:b8:82:52:5a:29:61:76:a7:96:58:5f:a0:ae:36:95:
         e7:6c:02:e9:19:cb:d9:d6:84:ee:bb:87:7c:c5:16:ce:e1:12:
         85:2a:1a:cf:fb:ff:bb:42:be:5f:1f:bc:56:74:ad:b5:af:7d:
         0c:b1:b1:1a:7e:96:06:87:6f:1c:96:11:77:63:73:b9:2e:05:
         fe:de:0a:fb:06:52:f4:ea:ad:b4:fa:06:dc:ac:71:d9:af:5e:
         9c:d6:64:8f:bf:ec:10:33:d7:44:39:10:d5:34:72:b2:f1:04:
         d5:fa:84:d4:d8:99:f0:70:15:a1:e8:0f:20:b0:bc:4c:8f:96:
         a5:f3:f2:2e:b6:d0:36:40:04:ae:08:dc:26:3f:78:37:43:ca:
         7a:54:8e:9c:bc:32:f7:cf:a9:ed:f0:d2:c7:b8:0c:be:ad:26:
         52:b2:ec:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMUUsgbYRN2JdYigGIVKFzo4tu04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdGREIxQUUxN0U2OENDQUJDMzZFQzRFOUY2RDA1MjYy
RDQyRkI4MDAeFw0yNDA2MTQxMjE5MjRaFw0yNDA2MTUxMzM0MjRaMDMxMTAvBgNV
BAMTKDIwOURGOUQ4NjRCMzQ5RTFERjE5NDZCM0I0MDc1QTI2NjZFNzhCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhuochKLhVx7Zqx4brblCCkAaa
yfJEn9AXhqhkp0+l/npe7yifPy7HF1TZJkgtB12J2iFx6V385bOEQb8FCdk/vvzS
M34VJu7+kBAlqCTMaKfzu5n/W8HtkrQ7a8lO2AuCL01W0V6bWZIM8yL+7VI3J4mX
Or6FKwpUJcjZJSmRBc3Op2uAZPKRUAmhIABoFPSqpyxnrIxpuW1w3NBc6LFiZxgu
CQ6rO8grm/nVx70lgwT1/yq+HV81pYV0HYHdqoFXblXlz6c6HZFKnCRkwBEIQ6WG
7Xl5sPWkSUIuf3heWjoobD23//+5BWKH0xPQz2D2/s7kUYGx+PYhgJRPqw6pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIJ352GSzSeHfGUaztAdaJmbni6owHwYDVR0j
BBgwFoAUx/2xrhfmjMq8NuxOn20FJi1C+4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGZ2RGN5cDdhakRxVXJoMnpaMnE1R2lKdExZN3hoZ0tzOEg0NkdYbURN
dUcvMC9DN0ZEQjFBRTE3RTY4Q0NBQkMzNkVDNEU5RjZEMDUyNjJENDJGQjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RkRCMUFFMTdFNjhDQ0FC
QzM2RUM0RTlGNkQwNTI2MkQ0MkZCODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGZ2RGN5cDdhakRxVXJoMnpaMnE1R2lKdExZN3hoZ0tzOEg0NkdYbURNdUcvMC9D
N0ZEQjFBRTE3RTY4Q0NBQkMzNkVDNEU5RjZEMDUyNjJENDJGQjgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALuHwIjzad0ITr0PoBuuoOCoQeyW5ctYPzCiP7qDSnRS1ie1pJnuxJo+j9NUV
vSrm9efJQCi8vHlf/wrCv6M6AMk2gqiI9LxFTIr01dee0SqgQDq4lWr/CWAg7fIX
uIJSWilhdqeWWF+grjaV52wC6RnL2daE7ruHfMUWzuEShSoaz/v/u0K+Xx+8VnSt
ta99DLGxGn6WBodvHJYRd2NzuS4F/t4K+wZS9OqttPoG3Kxx2a9enNZkj7/sEDPX
RDkQ1TRysvEE1fqE1NiZ8HAVoegPILC8TI+WpfPyLrbQNkAErgjcJj94N0PKelSO
nLwy98+p7fDSx7gMvq0mUrLsNA==
-----END CERTIFICATE-----