Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
File:                     0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft (raw, json)
Hash identifier:          02E57Bl9LfxMhzJmwDAbkuFLeTBeswhlRP77a3SqcRU=
Subject key identifier:   BD:C3:48:D2:01:8D:F8:91:5E:17:D1:77:32:51:3C:BD:9D:0C:B9:0C
Authority key identifier: 0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1
Certificate issuer:       /CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
Certificate serial:       0566B723BC04748257056493F4C9DEEEE26ADB03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft
Manifest number:          82
Signing time:             Tue 09 Jul 2024 13:39:12 +0000
Manifest this update:     Tue 09 Jul 2024 13:34:12 +0000
Manifest next update:     Wed 10 Jul 2024 14:16:12 +0000
Files and hashes:         1: 3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa (hash: JWOxGRqSdr6gP/zVmxbpWunT1/NIBj1UP6w5/WpAyf4=)
                          2: 3230312e3138322e3231362e302f32322d3232203d3e20323637353430.roa (hash: yyYhClG40N35Zhjk0puObLJpZMH407MvDMaRpVnEr5Y=)
                          3: 323830343a343266383a3a2f33322d3334203d3e20323637353430.roa (hash: dt7+MEBDaLKqvTFviS/qhBEkgdpH4qxC7qgaIKC7Gbk=)
                          4: 0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl (hash: fUPHusvI/3sqGd5yRTVnzpwFOoMSSh+Gg2Drkfv1JIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:b7:23:bc:04:74:82:57:05:64:93:f4:c9:de:ee:e2:6a:db:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA72FE6026E6A9D29C970C9BA50C497455A4CD1
        Validity
            Not Before: Jul  9 13:34:12 2024 GMT
            Not After : Jul 10 14:16:12 2024 GMT
        Subject: CN=BDC348D2018DF8915E17D17732513CBD9D0CB90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:18:a5:75:d4:e8:15:a2:28:7e:b0:aa:4b:
                    78:1f:75:44:d4:23:e4:6a:5c:3c:8f:bb:4f:36:97:
                    b2:e5:50:1c:1c:e7:a5:b0:be:d1:7a:08:49:38:8e:
                    6f:94:7c:02:49:37:55:7a:54:08:f9:8a:41:4b:c4:
                    5e:84:16:d6:1a:9e:9c:7f:cf:f1:39:b3:19:f2:37:
                    a4:8d:7d:22:16:f9:b8:bc:67:e5:49:cf:a8:64:b1:
                    1a:39:49:40:16:0f:0c:89:47:92:77:1b:14:66:0e:
                    4b:f8:77:11:8c:49:48:aa:06:5b:25:72:71:2c:c8:
                    34:df:aa:06:e5:cd:60:94:a6:23:58:fc:34:30:02:
                    2c:13:5d:dd:4a:47:d0:8d:e8:ad:53:51:04:b0:0b:
                    91:cf:1b:69:d5:f9:35:10:2a:ad:00:11:09:fb:65:
                    fc:5f:b5:5e:2e:00:36:91:19:46:62:3d:54:8f:3e:
                    f9:08:d3:80:f5:7b:30:7f:c2:8e:b2:fc:fc:7d:1b:
                    7a:d8:3b:1d:d4:51:51:95:8c:de:23:b0:80:ec:4d:
                    95:68:eb:ce:8e:b8:35:76:b8:55:90:1f:f9:68:18:
                    39:27:a0:bb:ed:31:71:53:d6:99:c7:94:71:7c:b8:
                    0d:d1:44:cb:91:5a:48:0d:00:c4:6c:83:48:59:dd:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:48:D2:01:8D:F8:91:5E:17:D1:77:32:51:3C:BD:9D:0C:B9:0C
            X509v3 Authority Key Identifier:
                keyid:0B:A7:2F:E6:02:6E:6A:9D:29:C9:70:C9:BA:50:C4:97:45:5A:4C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/1/0BA72FE6026E6A9D29C970C9BA50C497455A4CD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ba:b5:06:ea:26:8d:46:13:54:25:a4:ef:7e:b2:9f:ae:16:
         5e:96:01:8b:44:ca:c8:17:b3:a7:4d:c4:65:c9:8c:3f:e5:49:
         39:68:bb:2e:7a:85:b5:77:fc:46:5b:89:f2:f2:a9:bb:55:a7:
         54:77:73:30:7b:a4:f1:a0:b1:3d:1e:0f:c3:13:42:be:f5:ab:
         34:73:96:f3:0d:3d:a5:27:1a:67:4c:25:79:e8:dd:f0:ad:5e:
         8c:ea:53:74:17:73:aa:6b:ea:f4:f1:c8:5c:33:da:70:71:be:
         18:8d:65:30:0b:1e:87:b4:24:6b:d1:cc:48:13:77:a6:d0:3b:
         ec:7e:35:5a:3e:b8:f7:9f:3a:64:57:17:14:3c:d4:70:f7:d3:
         59:54:04:c6:f1:c0:a0:f6:c2:2d:dc:70:b4:b1:14:e5:91:d3:
         d0:90:e4:2e:4d:0d:34:07:7a:52:42:3a:17:80:59:1c:e2:33:
         56:23:e8:b0:02:f0:fb:e8:9f:be:1c:c9:0d:f1:47:4d:30:3f:
         fc:de:88:e8:40:bb:cb:e0:7d:ed:51:c9:58:4c:da:bf:bc:f8:
         98:a0:dd:be:25:55:88:35:27:8a:5b:f9:03:b0:08:09:d6:78:
         e0:11:b9:5b:23:2a:eb:e5:c1:f0:5e:70:0e:78:c5:d8:8a:69:
         6e:79:5a:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBWa3I7wEdIJXBWST9Mne7uJq2wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJBNzJGRTYwMjZFNkE5RDI5Qzk3MEM5QkE1MEM0OTc0
NTVBNENEMTAeFw0yNDA3MDkxMzM0MTJaFw0yNDA3MTAxNDE2MTJaMDMxMTAvBgNV
BAMTKEJEQzM0OEQyMDE4REY4OTE1RTE3RDE3NzMyNTEzQ0JEOUQwQ0I5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyRilddToFaIofrCqS3gfdUTU
I+RqXDyPu082l7LlUBwc56WwvtF6CEk4jm+UfAJJN1V6VAj5ikFLxF6EFtYanpx/
z/E5sxnyN6SNfSIW+bi8Z+VJz6hksRo5SUAWDwyJR5J3GxRmDkv4dxGMSUiqBlsl
cnEsyDTfqgblzWCUpiNY/DQwAiwTXd1KR9CN6K1TUQSwC5HPG2nV+TUQKq0AEQn7
ZfxftV4uADaRGUZiPVSPPvkI04D1ezB/wo6y/Px9G3rYOx3UUVGVjN4jsIDsTZVo
686OuDV2uFWQH/loGDknoLvtMXFT1pnHlHF8uA3RRMuRWkgNAMRsg0hZ3Y7VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvcNI0gGN+JFeF9F3MlE8vZ0MuQwwHwYDVR0j
BBgwFoAUC6cv5gJuap0pyXDJulDEl0VaTNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRCNzZ4Z0c0WW1lOTFnR3JNTHNyWU1wUGpaZ0ZSYldRUUpucVVnY1hq
UkwvMS8wQkE3MkZFNjAyNkU2QTlEMjlDOTcwQzlCQTUwQzQ5NzQ1NUE0Q0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQTcyRkU2MDI2RTZBOUQy
OUM5NzBDOUJBNTBDNDk3NDU1QTRDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjRCNzZ4Z0c0WW1lOTFnR3JNTHNyWU1wUGpaZ0ZSYldRUUpucVVnY1hqUkwvMS8w
QkE3MkZFNjAyNkU2QTlEMjlDOTcwQzlCQTUwQzQ5NzQ1NUE0Q0QxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAorq1BuomjUYTVCWk736yn64WXpYBi0TKyBezp03EZcmMP+VJOWi7LnqFtXf8
RluJ8vKpu1WnVHdzMHuk8aCxPR4PwxNCvvWrNHOW8w09pScaZ0wleejd8K1ejOpT
dBdzqmvq9PHIXDPacHG+GI1lMAseh7Qka9HMSBN3ptA77H41Wj649586ZFcXFDzU
cPfTWVQExvHAoPbCLdxwtLEU5ZHT0JDkLk0NNAd6UkI6F4BZHOIzViPosALw++if
vhzJDfFHTTA//N6I6EC7y+B97VHJWEzav7z4mKDdviVViDUnilv5A7AICdZ44BG5
WyMq6+XB8F5wDnjF2IppbnlaiQ==
-----END CERTIFICATE-----