Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.mft
File:                     B2E49B1A03452929E0088F054E36D9C2CB9D8F75.mft (raw, json)
Hash identifier:          LH5rcwNW1FyJ/CPyhgNdayoHybYPCDRRO081u5qdxqM=
Subject key identifier:   07:43:96:84:68:F4:89:03:06:F3:B8:97:E9:01:6A:50:65:58:7F:6E
Authority key identifier: B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75
Certificate issuer:       /CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
Certificate serial:       04F9B408866F64109E78A634C4B6FB8DD28779F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.mft
Manifest number:          01CF
Signing time:             Thu 14 Sep 2023 06:36:00 +0000
Manifest this update:     Thu 14 Sep 2023 06:31:00 +0000
Manifest next update:     Fri 15 Sep 2023 06:36:00 +0000
Files and hashes:         1: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: jWpL5Ycfi8KSSEt0JDcseZrey4MZHvhcAYcy7O7x6v0=)
                          2: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: y22OJMmtKB1iHvfBzFzoP8DoCrQHPdDpd0taOxeg5xE=)
                          3: B2E49B1A03452929E0088F054E36D9C2CB9D8F75.crl (hash: PiY9Er/F66Twb4r5gQKE12qvtmCAz3dn98yFgSzr7uI=)
                          4: 323830343a6431303a3a2f33322d3336203d3e203532353933.roa (hash: ooTvc0BuOLraPEWjemqWZfJdV3UqLqkqOOwDKdPa6IU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f9:b4:08:86:6f:64:10:9e:78:a6:34:c4:b6:fb:8d:d2:87:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E49B1A03452929E0088F054E36D9C2CB9D8F75
        Validity
            Not Before: Sep 14 06:31:00 2023 GMT
            Not After : Sep 21 06:36:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:44:3d:af:3b:3c:96:be:9c:6c:8f:40:db:
                    54:d9:c2:94:1e:85:62:74:9c:20:75:3f:9c:e0:1d:
                    1d:56:47:7a:ba:7f:fd:9e:9e:8c:dd:30:d2:0a:65:
                    4d:11:34:64:6f:f6:ec:c2:4c:c9:d7:92:11:d7:e1:
                    67:e3:83:ac:aa:3d:01:77:78:23:fe:1f:06:7c:8e:
                    9e:0f:ad:d9:f5:0c:b3:e4:89:93:49:96:e9:66:a4:
                    ca:e5:aa:f9:1e:b5:cf:12:86:f4:db:6b:0c:92:28:
                    fb:19:fe:27:9a:82:4c:b6:f9:46:2e:a4:6e:ca:26:
                    27:75:8c:79:8f:ad:d0:3e:29:22:26:27:a2:cf:91:
                    b8:75:5a:7e:94:24:9a:7b:b2:21:2d:9c:9e:7e:d9:
                    b7:ee:f8:c3:d4:b3:c8:9f:27:8b:1c:ae:4b:2b:0b:
                    51:7e:ca:50:04:b9:07:3a:34:99:e1:3e:20:52:7e:
                    ca:90:3a:1d:32:41:33:2e:56:0d:42:b9:12:6d:c9:
                    d2:88:2b:36:53:f4:0d:ce:88:5a:62:90:09:2c:e1:
                    73:a4:4c:7e:47:08:36:19:77:e7:27:11:9d:44:d2:
                    b3:4c:3c:db:6f:19:d2:da:78:5c:8b:5c:dd:8a:70:
                    a1:03:b2:4e:7a:2f:70:82:a6:65:91:fa:32:25:53:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:43:96:84:68:F4:89:03:06:F3:B8:97:E9:01:6A:50:65:58:7F:6E
            X509v3 Authority Key Identifier:
                keyid:B2:E4:9B:1A:03:45:29:29:E0:08:8F:05:4E:36:D9:C2:CB:9D:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/B2E49B1A03452929E0088F054E36D9C2CB9D8F75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:33:e1:b6:68:b2:f4:46:8c:a1:82:32:fe:46:bf:1f:cc:be:
         c3:a9:6e:6a:fb:9f:e6:b8:a6:43:83:ef:18:00:bb:44:73:09:
         53:c3:19:60:96:57:d6:d5:7c:55:ea:5c:98:f7:95:f3:99:af:
         86:03:19:0f:d3:4e:5f:a2:2b:3e:5b:28:3a:ce:d0:b2:05:3e:
         5b:a2:02:5a:25:38:52:d3:df:72:ed:c2:cd:a9:87:64:cc:eb:
         b9:ef:dc:7d:b1:94:7f:c5:43:b7:a5:b0:51:b3:f0:7a:c6:b8:
         ab:5c:6e:8f:91:e0:32:cd:40:ad:bd:83:84:44:7f:ff:c3:8f:
         f0:b9:73:69:26:97:ac:4c:89:03:7c:4b:52:69:a3:fc:89:df:
         83:24:0c:5a:dd:de:b1:af:2f:c3:cc:f9:10:e2:58:e5:e4:03:
         be:88:b1:18:35:eb:f1:15:4a:4b:5d:87:5b:b8:ea:1a:d1:07:
         5c:0e:20:d4:67:63:b6:7b:07:40:83:fe:aa:30:a9:4e:13:a3:
         cb:f0:45:7e:c6:d1:42:49:17:be:0a:5a:7b:de:b8:9b:b1:11:
         55:33:08:b8:e8:ed:d3:57:e9:2d:f0:eb:fb:42:8e:a4:36:ba:
         b4:07:7c:ef:cc:79:b7:5e:00:42:d0:52:65:3b:0f:0b:c9:da:
         c8:7d:03:b4
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUBPm0CIZvZBCeeKY0xLb7jdKHefgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJFNDlCMUEwMzQ1MjkyOUUwMDg4RjA1NEUzNkQ5QzJD
QjlEOEY3NTAeFw0yMzA5MTQwNjMxMDBaFw0yMzA5MjEwNjM2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZERjQ0M0RBRjNCM0M5NkJF
OUM2QzhGNDBEQjU0RDlDMjk0MUU4NTYyNzQ5QzIwNzUzRjlDRTAxRDFENTY0NzdB
QkE3RkZEOUU5RThDREQzMEQyMEE2NTREMTEzNDY0NkZGNkVDQzI0Q0M5RDc5MjEx
RDdFMTY3RTM4M0FDQUEzRDAxNzc3ODIzRkUxRjA2N0M4RTlFMEZBREQ5RjUwQ0Iz
RTQ4OTkzNDk5NkU5NjZBNENBRTVBQUY5MUVCNUNGMTI4NkY0REI2QjBDOTIyOEZC
MTlGRTI3OUE4MjRDQjZGOTQ2MkVBNDZFQ0EyNjI3NzU4Qzc5OEZBREQwM0UyOTIy
MjYyN0EyQ0Y5MUI4NzU1QTdFOTQyNDlBN0JCMjIxMkQ5QzlFN0VEOUI3RUVGOEMz
RDRCM0M4OUYyNzhCMUNBRTRCMkIwQjUxN0VDQTUwMDRCOTA3M0EzNDk5RTEzRTIw
NTI3RUNBOTAzQTFEMzI0MTMzMkU1NjBENDJCOTEyNkRDOUQyODgyQjM2NTNGNDBE
Q0U4ODVBNjI5MDA5MkNFMTczQTQ0QzdFNDcwODM2MTk3N0U3MjcxMTlENDREMkIz
NEMzQ0RCNkYxOUQyREE3ODVDOEI1Q0REOEE3MEExMDNCMjRFN0EyRjcwODJBNjY1
OTFGQTMyMjU1M0YyNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr99EPa87PJa+nGyPQNtU2cKUHoVidJwgdT+c4B0dVkd6un/9np6M
3TDSCmVNETRkb/bswkzJ15IR1+Fn44Osqj0Bd3gj/h8GfI6eD63Z9Qyz5ImTSZbp
ZqTK5ar5HrXPEob022sMkij7Gf4nmoJMtvlGLqRuyiYndYx5j63QPikiJieiz5G4
dVp+lCSae7IhLZyeftm37vjD1LPInyeLHK5LKwtRfspQBLkHOjSZ4T4gUn7KkDod
MkEzLlYNQrkSbcnSiCs2U/QNzohaYpAJLOFzpEx+Rwg2GXfnJxGdRNKzTDzbbxnS
2nhci1zdinChA7JOei9wgqZlkfoyJVPyWwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAdDloRo9IkDBvO4l+kBalBlWH9uMB8GA1UdIwQYMBaAFLLkmxoDRSkp4AiPBU42
2cLLnY91MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhNU1ZYcTJBcG9QaVpS
cVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAvQjJFNDlCMUEwMzQ1Mjky
OUUwMDg4RjA1NEUzNkQ5QzJDQjlEOEY3NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CMkU0OUIxQTAzNDUyOTI5RTAwODhGMDU0RTM2RDlDMkNCOUQ4
Rjc1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhNU1ZYcTJBcG9QaVpScVphUEMz
cnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAvQjJFNDlCMUEwMzQ1MjkyOUUwMDg4
RjA1NEUzNkQ5QzJDQjlEOEY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAgz4bZosvRGjKGCMv5Gvx/M
vsOpbmr7n+a4pkOD7xgAu0RzCVPDGWCWV9bVfFXqXJj3lfOZr4YDGQ/TTl+iKz5b
KDrO0LIFPluiAlolOFLT33Ltws2ph2TM67nv3H2xlH/FQ7elsFGz8HrGuKtcbo+R
4DLNQK29g4REf//Dj/C5c2kml6xMiQN8S1Jpo/yJ34MkDFrd3rGvL8PM+RDiWOXk
A76IsRg16/EVSktdh1u46hrRB1wOINRnY7Z7B0CD/qowqU4To8vwRX7G0UJJF74K
WnveuJuxEVUzCLjo7dNX6S3w6/tCjqQ2urQHfO/MebdeAELQUmU7DwvJ2sh9A7Q=
-----END CERTIFICATE-----