Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.mft
File:                     648C4362DD5346F387DB57D97560FBCD239648F1.mft (raw, json)
Hash identifier:          ky0O+UcKcyAeHJV2RSIXVqKFIBCwl5cyl7oD2QQQEjI=
Subject key identifier:   BA:9B:FF:7E:FB:F8:78:D7:E3:89:65:4C:F3:A7:97:7E:08:7E:03:4A
Authority key identifier: 64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1
Certificate issuer:       /CN=648C4362DD5346F387DB57D97560FBCD239648F1
Certificate serial:       7332FE2E613E78B005E8BED92CF19425E121BA38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/648C4362DD5346F387DB57D97560FBCD239648F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.mft
Manifest number:          B7
Signing time:             Mon 12 Feb 2024 20:59:18 +0000
Manifest this update:     Mon 12 Feb 2024 20:54:18 +0000
Manifest next update:     Tue 13 Feb 2024 23:15:18 +0000
Files and hashes:         1: 3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa (hash: JhhP8GAs7yv6WV+HG/v6HwX4by6VFAPWB55RtnCHvE8=)
                          2: 648C4362DD5346F387DB57D97560FBCD239648F1.crl (hash: Mxqk+MMjayGFOuyTQLtlcmbtpUByUB3ingU1lZyQS7k=)
                          3: 323830343a3834633a3a2f33322d3438203d3e20323632333633.roa (hash: jRP0ZM/EQRZpIag82u6AfCnO0FgF+urqVXOYl3zh5cY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:fe:2e:61:3e:78:b0:05:e8:be:d9:2c:f1:94:25:e1:21:ba:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648C4362DD5346F387DB57D97560FBCD239648F1
        Validity
            Not Before: Feb 12 20:54:18 2024 GMT
            Not After : Feb 13 23:15:18 2024 GMT
        Subject: CN=BA9BFF7EFBF878D7E389654CF3A7977E087E034A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:a9:d7:16:36:e2:a7:dd:cc:3e:00:bc:9a:
                    f5:cd:f9:37:7a:53:27:55:de:2f:93:e6:12:38:f2:
                    b8:b2:cb:ef:65:47:3a:e2:ea:89:cc:72:af:3c:d8:
                    33:89:84:ae:23:f3:6a:1f:e9:f1:3b:23:9f:e0:e4:
                    7f:22:81:f7:41:4b:7c:e1:8a:63:01:31:ed:3e:11:
                    d3:58:7e:73:98:70:88:95:23:5b:3e:da:f3:89:76:
                    c1:e3:a8:99:6a:d4:81:1c:ce:55:4d:81:8a:c8:da:
                    56:6f:99:f5:ae:09:cd:f1:39:ee:af:e7:e2:9b:94:
                    a6:24:b3:ce:e0:f8:7a:01:fa:f5:88:3e:30:4e:e5:
                    ee:a4:46:15:6d:a7:41:42:ad:3c:69:fb:38:0a:2d:
                    9b:36:0d:92:95:94:21:e6:73:61:b3:df:46:c4:ad:
                    ca:7e:39:99:d2:d8:86:cf:a1:ae:cb:fa:4f:16:de:
                    fc:39:99:0b:e0:fa:96:47:90:fb:74:77:05:04:d2:
                    8d:ec:41:80:4e:ac:32:ba:31:54:f3:17:02:dd:1a:
                    1a:b4:13:23:79:bd:a5:64:b0:63:15:06:21:af:f7:
                    c0:fd:de:74:39:05:84:a2:a9:e1:d4:21:c8:a8:3c:
                    2d:48:e6:b2:13:8f:49:d8:74:01:cf:d2:aa:a5:0e:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:FF:7E:FB:F8:78:D7:E3:89:65:4C:F3:A7:97:7E:08:7E:03:4A
            X509v3 Authority Key Identifier:
                keyid:64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/648C4362DD5346F387DB57D97560FBCD239648F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:c4:98:10:41:c0:98:36:0f:0f:81:3f:4b:f5:d5:a5:54:
         fd:04:f8:12:5d:91:78:4d:ec:e7:02:08:f2:74:89:e7:cc:2d:
         ca:44:a5:65:dd:9b:ce:4a:04:04:9c:bc:1c:ba:88:b0:62:aa:
         6d:77:cc:b4:1d:72:df:9a:76:98:12:7f:3c:7b:48:c3:b7:b8:
         47:46:97:0d:a0:44:68:2c:d4:92:fb:62:18:b7:8e:9a:00:76:
         08:34:17:d9:34:b0:11:ff:ae:b0:c3:43:91:9f:40:c3:56:8f:
         bc:de:9d:29:49:2b:43:be:b7:08:eb:0b:ca:24:2a:64:11:4a:
         f9:33:db:89:e3:38:f1:0b:c1:eb:cf:87:ce:07:71:05:0a:41:
         fa:3a:ed:34:bc:be:1d:24:a2:4d:08:62:04:80:60:70:a5:a8:
         c0:2a:40:77:da:f0:11:f3:ed:90:05:95:08:b7:c6:73:ef:23:
         2e:67:28:d2:f2:7d:61:8d:61:42:fb:74:7f:a0:07:92:c0:4c:
         70:84:07:69:73:42:ef:96:cf:c6:dc:4c:aa:66:9e:f5:1c:86:
         56:82:a9:cc:6b:97:8d:c4:2f:31:cb:21:d5:d7:0d:6e:7f:2c:
         92:48:79:78:19:c6:07:bd:7f:0a:6d:40:25:1e:96:9a:4c:bc:
         75:b7:dc:97
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUczL+LmE+eLAF6L7ZLPGUJeEhujgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ4QzQzNjJERDUzNDZGMzg3REI1N0Q5NzU2MEZCQ0Qy
Mzk2NDhGMTAeFw0yNDAyMTIyMDU0MThaFw0yNDAyMTMyMzE1MThaMDMxMTAvBgNV
BAMTKEJBOUJGRjdFRkJGODc4RDdFMzg5NjU0Q0YzQTc5NzdFMDg3RTAzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfM6nXFjbip93MPgC8mvXN+Td6
UydV3i+T5hI48riyy+9lRzri6onMcq882DOJhK4j82of6fE7I5/g5H8igfdBS3zh
imMBMe0+EdNYfnOYcIiVI1s+2vOJdsHjqJlq1IEczlVNgYrI2lZvmfWuCc3xOe6v
5+KblKYks87g+HoB+vWIPjBO5e6kRhVtp0FCrTxp+zgKLZs2DZKVlCHmc2Gz30bE
rcp+OZnS2IbPoa7L+k8W3vw5mQvg+pZHkPt0dwUE0o3sQYBOrDK6MVTzFwLdGhq0
EyN5vaVksGMVBiGv98D93nQ5BYSiqeHUIcioPC1I5rITj0nYdAHP0qqlDmEXAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUupv/fvv4eNfjiWVM86eXfgh+A0owHwYDVR0j
BBgwFoAUZIxDYt1TRvOH21fZdWD7zSOWSPEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hjS1VXakVWZldC
LzAvNjQ4QzQzNjJERDUzNDZGMzg3REI1N0Q5NzU2MEZCQ0QyMzk2NDhGMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NDhDNDM2MkRENTM0NkYzODdE
QjU3RDk3NTYwRkJDRDIzOTY0OEYxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Vx
Q0RBaG5MZk0zNmprc3hZOWFaOTgxRmVSb3c2SFhDeGNLVVdqRVZmV0IvMC82NDhD
NDM2MkRENTM0NkYzODdEQjU3RDk3NTYwRkJDRDIzOTY0OEYxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
XWvEmBBBwJg2Dw+BP0v11aVU/QT4El2ReE3s5wII8nSJ58wtykSlZd2bzkoEBJy8
HLqIsGKqbXfMtB1y35p2mBJ/PHtIw7e4R0aXDaBEaCzUkvtiGLeOmgB2CDQX2TSw
Ef+usMNDkZ9Aw1aPvN6dKUkrQ763COsLyiQqZBFK+TPbieM48QvB68+HzgdxBQpB
+jrtNLy+HSSiTQhiBIBgcKWowCpAd9rwEfPtkAWVCLfGc+8jLmco0vJ9YY1hQvt0
f6AHksBMcIQHaXNC75bPxtxMqmae9RyGVoKpzGuXjcQvMcsh1dcNbn8skkh5eBnG
B71/Cm1AJR6Wmky8dbfclw==
-----END CERTIFICATE-----