Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft
File:                     78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft (raw, json)
Hash identifier:          nF4iLCiq/OK2jA4zv//0bm8HrJbYL0ad5ZElNOehc/A=
Subject key identifier:   21:2E:6B:80:1C:76:78:EE:15:17:66:C0:32:90:BB:DB:40:3D:98:1D
Authority key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Certificate issuer:       /CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Certificate serial:       43EA1FD00BFB30C89ED5B5C2E804B6A6F880314D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft
Manifest number:          9F
Signing time:             Thu 22 Aug 2024 00:45:12 +0000
Manifest this update:     Thu 22 Aug 2024 00:40:12 +0000
Manifest next update:     Fri 23 Aug 2024 04:15:12 +0000
Files and hashes:         1: 3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa (hash: IjgReOz2SKRw66rKZNiKNkIoTQuVCtjcUIPQru1FJo0=)
                          2: 323830343a366130303a3a2f33322d3337203d3e20323730333035.roa (hash: zm0qzxlnIxKaiKH6JbEIZ0AcnZ1Wr2w0Yt+KfwqXSV8=)
                          3: 323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa (hash: JhS/i1MZbAp0T6vPSELo6m1Ghq7ylbmRM+qS8XIMz/E=)
                          4: 78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl (hash: CKLjSxmDG1GHfg5j5rxPvQ4XpptQdPNzrusbl9jWJ2o=)
                          5: 3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa (hash: 2jr/uqExmAndMcO1U4WB2IiFjNf6CxKWVaVUZkW1TIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:1f:d0:0b:fb:30:c8:9e:d5:b5:c2:e8:04:b6:a6:f8:80:31:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
        Validity
            Not Before: Aug 22 00:40:12 2024 GMT
            Not After : Aug 23 04:15:12 2024 GMT
        Subject: CN=212E6B801C7678EE151766C03290BBDB403D981D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:8c:96:cb:b3:75:5c:f6:f4:5a:db:88:5d:
                    48:fc:8a:23:b9:33:75:03:0c:1c:56:98:a7:c5:e3:
                    fb:b5:93:e9:56:fd:be:76:99:df:93:58:e7:be:18:
                    06:71:df:86:23:b0:a2:2e:a7:bf:5a:56:5c:21:50:
                    15:0b:0f:8d:c0:b6:18:50:bb:98:25:76:26:fb:82:
                    ff:db:0d:ad:3f:5e:65:ee:18:1b:5d:a5:01:b2:e8:
                    3c:48:6a:dd:d5:db:7a:89:a1:01:4d:0d:9f:49:07:
                    21:72:5e:12:e4:2d:4d:dd:95:5a:4e:26:19:03:a6:
                    ef:70:6d:ef:c5:6d:be:a0:03:68:0c:2f:ab:82:da:
                    fe:91:a0:70:d6:ac:28:9b:e2:b5:6a:31:f1:07:10:
                    32:69:cb:e1:96:f1:ae:16:f2:b2:bc:d0:89:04:02:
                    b0:18:e8:b4:43:33:65:dd:fc:9c:03:7c:81:d6:fc:
                    84:37:ed:e2:c9:ae:34:42:cf:47:7f:af:e7:ba:e1:
                    c1:18:73:ba:5e:86:7c:e0:01:f6:fe:8b:fc:04:9a:
                    a0:b4:66:1f:ee:a4:a0:77:16:e5:c0:a9:3c:70:0e:
                    5a:60:f2:f3:9c:8c:8a:4d:88:f4:63:fe:94:fe:0c:
                    a2:46:a9:b8:ed:5d:a6:4a:05:51:d6:94:0b:8f:e3:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:6B:80:1C:76:78:EE:15:17:66:C0:32:90:BB:DB:40:3D:98:1D
            X509v3 Authority Key Identifier:
                keyid:78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:dc:76:08:e3:f8:3e:8c:2c:d6:21:b4:85:d2:cc:d4:a7:
         e8:06:8f:53:9b:f4:48:bb:5e:9b:16:05:9d:20:63:f0:c0:56:
         67:1d:16:e3:1c:8d:47:97:64:a3:f2:fc:5e:b0:50:60:94:fe:
         04:91:8f:d1:bb:e9:20:22:1a:3f:52:e8:f7:16:58:46:ae:fb:
         49:80:26:dc:ed:28:31:72:48:c1:c8:5a:af:8c:1c:21:d6:b0:
         81:be:b4:9e:b6:d6:41:6d:01:38:1e:73:e4:97:13:0b:e6:94:
         a7:a7:aa:30:51:a6:0f:b6:7c:bf:03:22:bf:af:65:ae:b7:ad:
         6c:3c:74:24:b2:57:01:80:af:17:ae:f0:86:38:1e:b5:7f:16:
         43:95:e9:45:29:5a:71:38:8f:36:7c:d6:91:39:5c:93:4d:c3:
         39:73:a2:c4:2c:76:61:ef:ef:99:49:9d:9b:ca:9a:92:1a:44:
         43:63:f6:e8:7a:dc:32:87:45:de:e7:b0:54:c2:89:63:1d:b7:
         ce:04:1d:94:b5:c9:01:61:a3:51:5e:26:68:0c:79:5e:86:8b:
         80:2b:4b:f4:e3:d7:96:4a:2e:59:0a:fc:d4:3a:86:f0:f8:37:
         55:11:92:7b:a7:7e:59:b4:1d:1f:d8:50:3a:19:14:d6:85:a0:
         bc:39:e4:39
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQ+of0Av7MMie1bXC6AS2pviAMU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFMEUzREExMkI2OTU1REE1QTc1NDUzODlCMjY3MUIx
NUQ3QzU3MDAeFw0yNDA4MjIwMDQwMTJaFw0yNDA4MjMwNDE1MTJaMDMxMTAvBgNV
BAMTKDIxMkU2QjgwMUM3Njc4RUUxNTE3NjZDMDMyOTBCQkRCNDAzRDk4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfoyWy7N1XPb0WtuIXUj8iiO5
M3UDDBxWmKfF4/u1k+lW/b52md+TWOe+GAZx34YjsKIup79aVlwhUBULD43AthhQ
u5gldib7gv/bDa0/XmXuGBtdpQGy6DxIat3V23qJoQFNDZ9JByFyXhLkLU3dlVpO
JhkDpu9wbe/Fbb6gA2gML6uC2v6RoHDWrCib4rVqMfEHEDJpy+GW8a4W8rK80IkE
ArAY6LRDM2Xd/JwDfIHW/IQ37eLJrjRCz0d/r+e64cEYc7pehnzgAfb+i/wEmqC0
Zh/upKB3FuXAqTxwDlpg8vOcjIpNiPRj/pT+DKJGqbjtXaZKBVHWlAuP45apAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUIS5rgBx2eO4VF2bAMpC720A9mB0wHwYDVR0j
BBgwFoAUeODj2hK2lV2lp1RTibJnGxXXxXAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzAvNzhFMEUzREExMkI2OTU1REE1QTc1NDUzODlCMjY3MUIxNUQ3QzU3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OEUwRTNEQTEyQjY5NTVEQTVB
NzU0NTM4OUIyNjcxQjE1RDdDNTcwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2s4
THZDZUhLYkdnOWZXbm5HYjZ2SnRnaTVFR3REV0pHNU1rVkpkZk04a3EvMC83OEUw
RTNEQTEyQjY5NTVEQTVBNzU0NTM4OUIyNjcxQjE1RDdDNTcwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
AsPcdgjj+D6MLNYhtIXSzNSn6AaPU5v0SLtemxYFnSBj8MBWZx0W4xyNR5dko/L8
XrBQYJT+BJGP0bvpICIaP1Lo9xZYRq77SYAm3O0oMXJIwchar4wcIdawgb60nrbW
QW0BOB5z5JcTC+aUp6eqMFGmD7Z8vwMiv69lrretbDx0JLJXAYCvF67whjgetX8W
Q5XpRSlacTiPNnzWkTlck03DOXOixCx2Ye/vmUmdm8qakhpEQ2P26HrcModF3uew
VMKJYx23zgQdlLXJAWGjUV4maAx5XoaLgCtL9OPXlkouWQr81DqG8Pg3VRGSe6d+
WbQdH9hQOhkU1oWgvDnkOQ==
-----END CERTIFICATE-----