Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
File:                     89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft (raw, json)
Hash identifier:          GYBSib8SgFlgUUBNAXqD/zJnw41u8CjHBLr0sWLpWNU=
Subject key identifier:   02:AC:72:4A:F5:EE:74:E7:D0:7D:BB:5E:BB:04:24:33:68:06:17:7D
Authority key identifier: 89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
Certificate issuer:       /CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
Certificate serial:       200BF7EE11F4B78DEDEFFA2866F9FA33D88C7CFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
Manifest number:          0131
Signing time:             Wed 23 Oct 2024 18:06:00 +0000
Manifest this update:     Wed 23 Oct 2024 18:01:00 +0000
Manifest next update:     Thu 24 Oct 2024 18:06:00 +0000
Files and hashes:         1: 89CE27D64527B101D4BBA3737DAAF6FA000F34B0.crl (hash: Mry8BKwFUic4X+PABdcpuIKsVuclppF68HpNFGzJmFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:f7:ee:11:f4:b7:8d:ed:ef:fa:28:66:f9:fa:33:d8:8c:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
        Validity
            Not Before: Oct 23 18:01:00 2024 GMT
            Not After : Oct 30 18:06:00 2024 GMT
        Subject: CN=3082010A0282010100B74EB9D7FA7284583C23F9809CC8B4344D87C5151C7BC21ED2D3AE23F652E4FAAFD8572F12572C9DDD1AD067B1A11BD1B8F577D4F6CACFA33B8AEE764A84FD108A1F89091022E5EE4D3C1AE48B9293139C0E1056BB1AAF9A57F9519EFAA0B101C65E32E5B8B3BA03F48D6A3D81372CFDE1756E8C6DD6E27D69808CF25AC6DF91BA96852343A979AA76C70BC1994D705C5F0C1F84D32DA7050D7EABFF06F1B1C7099CBC835BFAAFFE6D09744A326EDC4F1AEE3C888151CA95B6B7C8485A441B8422DCBC04A755FC2DDC9CC066D6E53B73BC0AB20C646C09A50E9D42C2FF7F08B6CD1F8DADAABFFF987B78701665E8151C546143586AD7B51042A7732393284FF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:b9:d7:fa:72:84:58:3c:23:f9:80:9c:c8:
                    b4:34:4d:87:c5:15:1c:7b:c2:1e:d2:d3:ae:23:f6:
                    52:e4:fa:af:d8:57:2f:12:57:2c:9d:dd:1a:d0:67:
                    b1:a1:1b:d1:b8:f5:77:d4:f6:ca:cf:a3:3b:8a:ee:
                    76:4a:84:fd:10:8a:1f:89:09:10:22:e5:ee:4d:3c:
                    1a:e4:8b:92:93:13:9c:0e:10:56:bb:1a:af:9a:57:
                    f9:51:9e:fa:a0:b1:01:c6:5e:32:e5:b8:b3:ba:03:
                    f4:8d:6a:3d:81:37:2c:fd:e1:75:6e:8c:6d:d6:e2:
                    7d:69:80:8c:f2:5a:c6:df:91:ba:96:85:23:43:a9:
                    79:aa:76:c7:0b:c1:99:4d:70:5c:5f:0c:1f:84:d3:
                    2d:a7:05:0d:7e:ab:ff:06:f1:b1:c7:09:9c:bc:83:
                    5b:fa:af:fe:6d:09:74:4a:32:6e:dc:4f:1a:ee:3c:
                    88:81:51:ca:95:b6:b7:c8:48:5a:44:1b:84:22:dc:
                    bc:04:a7:55:fc:2d:dc:9c:c0:66:d6:e5:3b:73:bc:
                    0a:b2:0c:64:6c:09:a5:0e:9d:42:c2:ff:7f:08:b6:
                    cd:1f:8d:ad:aa:bf:ff:98:7b:78:70:16:65:e8:15:
                    1c:54:61:43:58:6a:d7:b5:10:42:a7:73:23:93:28:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AC:72:4A:F5:EE:74:E7:D0:7D:BB:5E:BB:04:24:33:68:06:17:7D
            X509v3 Authority Key Identifier:
                keyid:89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:d3:d2:69:2c:17:49:54:da:6d:99:d6:75:12:1b:ce:8a:
         f5:f6:b8:d6:0b:19:01:1e:45:4a:37:c4:8c:ed:ce:12:f9:0f:
         7b:89:28:11:f4:27:08:4d:5e:44:e1:75:01:01:a0:40:c4:73:
         dc:38:cd:f7:c0:e7:48:10:5b:26:58:b0:cc:45:07:19:86:19:
         93:37:3e:f8:8e:ce:f0:8d:3a:d1:3c:81:e4:3c:9d:ca:19:70:
         c3:0f:1d:63:45:48:13:e1:2d:db:9e:73:28:27:13:6f:5e:37:
         59:e5:e0:97:40:fc:ad:58:c3:8f:10:85:77:52:4b:41:d6:6d:
         11:27:9a:13:78:15:df:15:7a:f5:1d:ae:f5:3d:81:b7:f2:6d:
         24:69:8c:a0:72:e4:b7:28:81:d3:bf:f6:ec:06:c2:24:10:51:
         8d:1b:f0:ea:0f:6e:32:da:33:f0:ca:88:94:71:c1:b6:bf:ae:
         99:bd:a5:e7:4f:5a:eb:78:58:b9:8c:4e:a1:2b:e7:93:6d:33:
         25:4c:1a:4b:2c:2f:69:8d:52:76:d7:f2:58:01:fb:12:86:16:
         a8:06:88:17:0a:2a:16:fb:83:d7:6a:ae:57:90:06:83:f5:e9:
         55:ea:7b:ae:29:fb:72:eb:f1:41:80:17:e8:92:2d:92:f6:33:
         03:62:a6:16
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUIAv37hH0t43t7/ooZvn6M9iMfPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDRTI3RDY0NTI3QjEwMUQ0QkJBMzczN0RBQUY2RkEw
MDBGMzRCMDAeFw0yNDEwMjMxODAxMDBaFw0yNDEwMzAxODA2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc0RUI5RDdGQTcyODQ1ODND
MjNGOTgwOUNDOEI0MzQ0RDg3QzUxNTFDN0JDMjFFRDJEM0FFMjNGNjUyRTRGQUFG
RDg1NzJGMTI1NzJDOURERDFBRDA2N0IxQTExQkQxQjhGNTc3RDRGNkNBQ0ZBMzNC
OEFFRTc2NEE4NEZEMTA4QTFGODkwOTEwMjJFNUVFNEQzQzFBRTQ4QjkyOTMxMzlD
MEUxMDU2QkIxQUFGOUE1N0Y5NTE5RUZBQTBCMTAxQzY1RTMyRTVCOEIzQkEwM0Y0
OEQ2QTNEODEzNzJDRkRFMTc1NkU4QzZERDZFMjdENjk4MDhDRjI1QUM2REY5MUJB
OTY4NTIzNDNBOTc5QUE3NkM3MEJDMTk5NEQ3MDVDNUYwQzFGODREMzJEQTcwNTBE
N0VBQkZGMDZGMUIxQzcwOTlDQkM4MzVCRkFBRkZFNkQwOTc0NEEzMjZFREM0RjFB
RUUzQzg4ODE1MUNBOTVCNkI3Qzg0ODVBNDQxQjg0MjJEQ0JDMDRBNzU1RkMyRERD
OUNDMDY2RDZFNTNCNzNCQzBBQjIwQzY0NkMwOUE1MEU5RDQyQzJGRjdGMDhCNkNE
MUY4REFEQUFCRkZGOTg3Qjc4NzAxNjY1RTgxNTFDNTQ2MTQzNTg2QUQ3QjUxMDQy
QTc3MzIzOTMyODRGRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt0651/pyhFg8I/mAnMi0NE2HxRUce8Ie0tOuI/ZS5Pqv2FcvElcs
nd0a0GexoRvRuPV31PbKz6M7iu52SoT9EIofiQkQIuXuTTwa5IuSkxOcDhBWuxqv
mlf5UZ76oLEBxl4y5bizugP0jWo9gTcs/eF1boxt1uJ9aYCM8lrG35G6loUjQ6l5
qnbHC8GZTXBcXwwfhNMtpwUNfqv/BvGxxwmcvINb+q/+bQl0SjJu3E8a7jyIgVHK
lba3yEhaRBuEIty8BKdV/C3cnMBm1uU7c7wKsgxkbAmlDp1Cwv9/CLbNH42tqr//
mHt4cBZl6BUcVGFDWGrXtRBCp3MjkyhP+QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAKsckr17nTn0H27XrsEJDNoBhd9MB8GA1UdIwQYMBaAFInOJ9ZFJ7EB1Lujc32q
9voADzSwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RCM3FjQkRGZVdjU2hY
M2R0WTlKaVNvUGFZSkZYdHljZ2NFMm1oOVRrUkJBLzEvODlDRTI3RDY0NTI3QjEw
MUQ0QkJBMzczN0RBQUY2RkEwMDBGMzRCMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84OUNFMjdENjQ1MjdCMTAxRDRCQkEzNzM3REFBRjZGQTAwMEYz
NEIwLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RCM3FjQkRGZVdjU2hYM2R0WTlK
aVNvUGFZSkZYdHljZ2NFMm1oOVRrUkJBLzEvODlDRTI3RDY0NTI3QjEwMUQ0QkJB
MzczN0RBQUY2RkEwMDBGMzRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACa609JpLBdJVNptmdZ1EhvO
ivX2uNYLGQEeRUo3xIztzhL5D3uJKBH0JwhNXkThdQEBoEDEc9w4zffA50gQWyZY
sMxFBxmGGZM3PviOzvCNOtE8geQ8ncoZcMMPHWNFSBPhLduecygnE29eN1nl4JdA
/K1Yw48QhXdSS0HWbREnmhN4Fd8VevUdrvU9gbfybSRpjKBy5LcogdO/9uwGwiQQ
UY0b8OoPbjLaM/DKiJRxwba/rpm9pedPWut4WLmMTqEr55NtMyVMGkssL2mNUnbX
8lgB+xKGFqgGiBcKKhb7g9dqrleQBoP16VXqe64p+3Lr8UGAF+iSLZL2MwNiphY=
-----END CERTIFICATE-----