Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.mft
File:                     B7713B0E8DAA18C5DFF08B63820AABDE889A860C.mft (raw, json)
Hash identifier:          LqNsjX28BTXSVw0ig5RpRLgpWvccUD9+Ee+rOhhFupY=
Subject key identifier:   E9:C9:BF:BA:3D:86:E5:EA:1F:AF:83:E2:D2:A1:A3:7D:3B:A4:00:50
Authority key identifier: B7:71:3B:0E:8D:AA:18:C5:DF:F0:8B:63:82:0A:AB:DE:88:9A:86:0C
Certificate issuer:       /CN=B7713B0E8DAA18C5DFF08B63820AABDE889A860C
Certificate serial:       4CCB1B6336B0B1EDA6D92B47F17514033EBBC87D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.mft
Manifest number:          1F
Signing time:             Fri 18 Aug 2023 16:11:41 +0000
Manifest this update:     Fri 18 Aug 2023 16:06:41 +0000
Manifest next update:     Sat 19 Aug 2023 19:32:41 +0000
Files and hashes:         1: 323830343a6331633a3a2f33322d313238203d3e203532363739.roa (hash: X+R94hZSsC/UXMViiSoU98qDwE0wVfcYsCW69cj0Tcg=)
                          2: 3137372e36372e3231362e302f32312d3332203d3e203532363739.roa (hash: DyK3QM3zxF0TP1b3VZNNiT5uQObJkMw/iOaqzUDiUfw=)
                          3: B7713B0E8DAA18C5DFF08B63820AABDE889A860C.crl (hash: 1fCb3/1HqYE0tO3fj/Tv825K4eUlxlhKENd6vzNZMpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cb:1b:63:36:b0:b1:ed:a6:d9:2b:47:f1:75:14:03:3e:bb:c8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7713B0E8DAA18C5DFF08B63820AABDE889A860C
        Validity
            Not Before: Aug 18 16:06:41 2023 GMT
            Not After : Aug 19 19:32:41 2023 GMT
        Subject: CN=E9C9BFBA3D86E5EA1FAF83E2D2A1A37D3BA40050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:e5:7a:f9:76:50:ca:e0:3b:bb:a1:42:23:
                    b9:fe:03:bc:e3:d8:b7:24:aa:53:d2:a9:92:79:77:
                    7c:f9:94:93:ea:37:6a:48:0f:64:76:db:05:d7:8f:
                    c3:da:d4:04:78:ae:28:b3:bd:9e:9e:95:3e:73:67:
                    93:cc:a4:ec:22:5a:cc:91:28:7d:5d:32:fa:ca:f1:
                    c9:a8:70:a3:20:af:79:0c:22:6b:91:17:68:33:25:
                    f6:5f:0b:3d:69:33:c8:31:a4:bd:6d:fb:48:64:27:
                    3a:17:2b:75:69:7f:8a:42:d9:5c:46:b4:4e:75:a2:
                    af:66:f8:28:dc:62:86:3e:7f:88:5b:a6:bc:40:19:
                    d1:30:b3:9a:e7:c7:d5:58:87:8d:45:a7:68:5b:b2:
                    47:39:1e:f3:7f:a2:e0:ab:63:04:bf:ad:ce:11:5b:
                    42:6c:21:a2:b1:31:86:0c:8a:13:1e:f9:2d:9c:d3:
                    c9:ed:a2:fc:04:1c:83:80:a4:93:b7:5a:88:83:58:
                    d9:68:ec:51:6b:39:9f:f8:82:6a:7c:6a:b0:83:17:
                    d3:34:3f:7a:26:63:7d:43:7d:64:7a:82:5c:6a:95:
                    3d:cc:c3:46:aa:13:bb:8d:64:d5:64:bb:e7:d5:c8:
                    fe:34:06:31:29:af:a4:fa:6e:38:2e:95:47:71:2a:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C9:BF:BA:3D:86:E5:EA:1F:AF:83:E2:D2:A1:A3:7D:3B:A4:00:50
            X509v3 Authority Key Identifier:
                keyid:B7:71:3B:0E:8D:AA:18:C5:DF:F0:8B:63:82:0A:AB:DE:88:9A:86:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/B7713B0E8DAA18C5DFF08B63820AABDE889A860C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:85:03:24:07:f6:6b:31:23:5d:b3:84:7d:60:d0:7a:f0:5f:
         d8:dd:53:72:01:ba:36:3f:5d:c6:cc:0a:af:55:ad:75:bf:35:
         8b:e6:23:a9:66:41:ab:6f:3f:3d:de:12:5f:06:53:9e:44:13:
         9e:d9:7e:22:fd:71:4f:ad:2c:57:f5:f0:4c:54:a1:63:dc:be:
         e4:0d:14:1e:67:a2:3a:dc:21:34:a2:bc:2b:ea:58:b1:35:bb:
         5e:5d:ee:dd:86:8e:f8:11:0c:f9:e5:8c:a0:9d:d6:57:67:12:
         6f:ad:c8:b2:ed:26:33:ae:dd:a0:de:a2:d3:5a:2e:bc:cd:1d:
         9e:81:bc:e0:e1:2c:72:6c:68:a1:f9:eb:37:60:bb:52:36:07:
         65:a4:ad:be:54:cf:f2:ca:71:9e:2c:c6:1c:0d:59:0f:22:b5:
         34:e3:d0:70:99:2d:57:aa:1a:ab:9c:31:a1:10:d6:18:f8:f5:
         09:b6:d8:bf:99:ce:b9:cb:60:e8:ac:a8:74:72:03:85:dd:43:
         70:90:1b:c3:98:92:f8:08:16:14:b1:28:fc:f6:a7:a0:c0:87:
         b6:58:e4:33:de:e2:7c:da:b3:15:e3:7b:ee:cc:a4:9d:8f:be:
         41:37:e8:fd:aa:7d:3a:e3:93:f4:4c:d8:0a:02:f8:f8:f4:6e:
         cb:c5:70:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTMsbYzawse2m2StH8XUUAz67yH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3MTNCMEU4REFBMThDNURGRjA4QjYzODIwQUFCREU4
ODlBODYwQzAeFw0yMzA4MTgxNjA2NDFaFw0yMzA4MTkxOTMyNDFaMDMxMTAvBgNV
BAMTKEU5QzlCRkJBM0Q4NkU1RUExRkFGODNFMkQyQTFBMzdEM0JBNDAwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMOV6+XZQyuA7u6FCI7n+A7zj
2LckqlPSqZJ5d3z5lJPqN2pID2R22wXXj8Pa1AR4riizvZ6elT5zZ5PMpOwiWsyR
KH1dMvrK8cmocKMgr3kMImuRF2gzJfZfCz1pM8gxpL1t+0hkJzoXK3Vpf4pC2VxG
tE51oq9m+CjcYoY+f4hbprxAGdEws5rnx9VYh41Fp2hbskc5HvN/ouCrYwS/rc4R
W0JsIaKxMYYMihMe+S2c08ntovwEHIOApJO3WoiDWNlo7FFrOZ/4gmp8arCDF9M0
P3omY31DfWR6glxqlT3Mw0aqE7uNZNVku+fVyP40BjEpr6T6bjgulUdxKiGFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6cm/uj2G5eofr4Pi0qGjfTukAFAwHwYDVR0j
BBgwFoAUt3E7Do2qGMXf8Itjggqr3oiahgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1pN1BSR3U1bkJtNXk0dFN6ZHdzSm5mc2M2Tmt4cmNHdTZMdHhlU1h4
bzUvMC9CNzcxM0IwRThEQUExOEM1REZGMDhCNjM4MjBBQUJERTg4OUE4NjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3NzEzQjBFOERBQTE4QzVE
RkYwOEI2MzgyMEFBQkRFODg5QTg2MEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG1pN1BSR3U1bkJtNXk0dFN6ZHdzSm5mc2M2Tmt4cmNHdTZMdHhlU1h4bzUvMC9C
NzcxM0IwRThEQUExOEM1REZGMDhCNjM4MjBBQUJERTg4OUE4NjBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYUDJAf2azEjXbOEfWDQevBf2N1TcgG6Nj9dxswKr1Wtdb81i+YjqWZBq28/
Pd4SXwZTnkQTntl+Iv1xT60sV/XwTFShY9y+5A0UHmeiOtwhNKK8K+pYsTW7Xl3u
3YaO+BEM+eWMoJ3WV2cSb63Isu0mM67doN6i01ouvM0dnoG84OEscmxoofnrN2C7
UjYHZaStvlTP8spxnizGHA1ZDyK1NOPQcJktV6oaq5wxoRDWGPj1CbbYv5nOuctg
6KyodHIDhd1DcJAbw5iS+AgWFLEo/PanoMCHtljkM97ifNqzFeN77syknY++QTfo
/ap9OuOT9EzYCgL4+PRuy8VwXQ==
-----END CERTIFICATE-----