Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.mft
File:                     8FB1D96A95A664A5717A857DDB66D00D83410791.mft (raw, json)
Hash identifier:          R+Sc+umTz76WN+6rcir+XU/o8dwT5fJvr5wlAzAwimM=
Subject key identifier:   FC:FB:EB:9D:E6:13:A5:D7:1B:6D:21:AD:3F:EB:E6:63:6E:2F:82:FD
Authority key identifier: 8F:B1:D9:6A:95:A6:64:A5:71:7A:85:7D:DB:66:D0:0D:83:41:07:91
Certificate issuer:       /CN=8FB1D96A95A664A5717A857DDB66D00D83410791
Certificate serial:       09C8D088E740226B47CEB91EC755788777E0A9D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB1D96A95A664A5717A857DDB66D00D83410791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.mft
Manifest number:          4F
Signing time:             Fri 07 Apr 2023 10:17:25 +0000
Manifest this update:     Fri 07 Apr 2023 10:12:25 +0000
Manifest next update:     Sat 08 Apr 2023 10:57:25 +0000
Files and hashes:         1: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: lDpGJzIwx/JgAsqxqfk3aukiu44uvYeBg6hHLWIeyQs=)
                          2: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: SXESk34BtylCFuFERmurXIpe4OCzPOqlavUzwyftdNQ=)
                          3: 8FB1D96A95A664A5717A857DDB66D00D83410791.crl (hash: xCSsGRI0LB+hfZ2VxdBYtoirkNtTTuoJe/yWn0aEcbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c8:d0:88:e7:40:22:6b:47:ce:b9:1e:c7:55:78:87:77:e0:a9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB1D96A95A664A5717A857DDB66D00D83410791
        Validity
            Not Before: Apr  7 10:12:25 2023 GMT
            Not After : Apr  8 10:57:25 2023 GMT
        Subject: CN=FCFBEB9DE613A5D71B6D21AD3FEBE6636E2F82FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:fd:cf:7f:a8:b8:60:c4:43:04:3a:f0:93:
                    67:29:2f:84:f2:14:d3:dd:54:c4:f8:d4:86:dc:2b:
                    ff:e0:99:d9:ee:31:95:7a:9e:a0:d5:d4:a6:22:dc:
                    48:45:87:45:80:5f:5f:34:0e:b8:c8:ea:d6:33:40:
                    af:96:cc:03:20:f6:c2:61:6a:bf:7c:f4:52:45:62:
                    26:13:38:bd:04:26:61:73:f8:62:4d:17:ae:33:23:
                    ad:58:b9:58:a8:0f:bf:bf:bc:ab:04:61:fb:0e:ae:
                    61:b5:76:37:d4:34:a3:45:c5:7e:ad:58:08:fe:75:
                    57:24:c0:84:99:7b:b6:a5:fa:bb:a8:8e:ea:ee:f5:
                    55:8e:07:12:1e:d8:1d:f5:50:94:6c:98:cb:a3:af:
                    5e:3f:9d:65:8f:7a:f1:07:be:64:aa:08:35:76:fd:
                    03:5d:92:f0:0d:57:3a:50:5c:26:d5:f2:46:f6:10:
                    9b:1c:5b:c5:36:e0:0a:a6:c0:a2:2d:2a:24:f7:51:
                    08:1f:90:fc:6b:46:64:ff:68:fc:d2:f4:78:49:e4:
                    5a:f6:c6:a7:ab:b8:a4:c8:a5:65:a4:9e:86:0d:44:
                    79:dd:24:1a:8d:d3:34:b6:3a:64:31:d5:66:33:f1:
                    4c:43:28:6c:33:ad:5c:db:54:a6:40:b3:89:cf:a7:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FB:EB:9D:E6:13:A5:D7:1B:6D:21:AD:3F:EB:E6:63:6E:2F:82:FD
            X509v3 Authority Key Identifier:
                keyid:8F:B1:D9:6A:95:A6:64:A5:71:7A:85:7D:DB:66:D0:0D:83:41:07:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB1D96A95A664A5717A857DDB66D00D83410791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/8FB1D96A95A664A5717A857DDB66D00D83410791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:b9:bf:3d:a3:1b:b7:70:37:fa:a8:1a:cd:f7:4e:fe:31:
         18:16:27:db:67:fe:70:dc:59:c7:41:ef:f9:20:c1:99:97:e1:
         8d:9d:d9:5a:79:23:5a:12:c3:93:36:25:83:a0:f7:1e:48:6d:
         13:54:8f:33:c1:7a:47:bc:4d:a3:84:18:44:e3:03:2d:d9:96:
         2e:3a:96:f9:7d:9c:ea:34:c9:e2:00:13:21:e6:ef:e8:8a:1e:
         51:2e:df:8b:26:4a:b8:23:bf:fa:13:87:85:75:48:e6:af:f6:
         1c:cc:de:3d:1f:e3:49:be:3e:09:c6:cd:bb:2a:5b:6d:de:c9:
         58:26:5b:09:44:20:1b:a9:5b:e4:6c:d2:a8:7f:6b:6c:cb:d5:
         b0:e3:81:49:57:69:f8:09:c3:ea:35:81:e6:af:4a:15:53:a4:
         05:75:28:f0:d2:cb:ba:2a:1e:d4:be:e4:a9:4a:3a:07:4c:c2:
         67:56:bf:9f:38:ce:4e:f4:1d:37:dc:cf:51:c0:27:86:97:cc:
         63:b8:0b:94:8e:95:ba:59:a8:4d:d2:0d:9b:4a:09:f8:b7:26:
         bf:06:41:7f:b4:fa:f5:eb:c5:09:f7:9b:d9:36:ed:1c:1d:10:
         2c:72:eb:6c:da:ea:09:e9:3b:62:bb:cc:87:2f:71:43:b4:12:
         4e:3f:09:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCcjQiOdAImtHzrkex1V4h3fgqdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZCMUQ5NkE5NUE2NjRBNTcxN0E4NTdEREI2NkQwMEQ4
MzQxMDc5MTAeFw0yMzA0MDcxMDEyMjVaFw0yMzA0MDgxMDU3MjVaMDMxMTAvBgNV
BAMTKEZDRkJFQjlERTYxM0E1RDcxQjZEMjFBRDNGRUJFNjYzNkUyRjgyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/P3Pf6i4YMRDBDrwk2cpL4Ty
FNPdVMT41IbcK//gmdnuMZV6nqDV1KYi3EhFh0WAX180DrjI6tYzQK+WzAMg9sJh
ar989FJFYiYTOL0EJmFz+GJNF64zI61YuVioD7+/vKsEYfsOrmG1djfUNKNFxX6t
WAj+dVckwISZe7al+ruojuru9VWOBxIe2B31UJRsmMujr14/nWWPevEHvmSqCDV2
/QNdkvANVzpQXCbV8kb2EJscW8U24AqmwKItKiT3UQgfkPxrRmT/aPzS9HhJ5Fr2
xqeruKTIpWWknoYNRHndJBqN0zS2OmQx1WYz8UxDKGwzrVzbVKZAs4nPp1BxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/PvrneYTpdcbbSGtP+vmY24vgv0wHwYDVR0j
BBgwFoAUj7HZapWmZKVxeoV922bQDYNBB5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt
Q1kvMC84RkIxRDk2QTk1QTY2NEE1NzE3QTg1N0REQjY2RDAwRDgzNDEwNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGQjFEOTZBOTVBNjY0QTU3
MTdBODU3RERCNjZEMDBEODM0MTA3OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xtQ1kvMC84
RkIxRDk2QTk1QTY2NEE1NzE3QTg1N0REQjY2RDAwRDgzNDEwNzkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMqi5vz2jG7dwN/qoGs33Tv4xGBYn22f+cNxZx0Hv+SDBmZfhjZ3ZWnkjWhLD
kzYlg6D3HkhtE1SPM8F6R7xNo4QYROMDLdmWLjqW+X2c6jTJ4gATIebv6IoeUS7f
iyZKuCO/+hOHhXVI5q/2HMzePR/jSb4+CcbNuypbbd7JWCZbCUQgG6lb5GzSqH9r
bMvVsOOBSVdp+AnD6jWB5q9KFVOkBXUo8NLLuioe1L7kqUo6B0zCZ1a/nzjOTvQd
N9zPUcAnhpfMY7gLlI6VulmoTdINm0oJ+LcmvwZBf7T69evFCfeb2TbtHB0QLHLr
bNrqCek7YrvMhy9xQ7QSTj8JCQ==
-----END CERTIFICATE-----