Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/7890AF48996EDD206A067B260A631BAD94E33F0C.mft
File:                     7890AF48996EDD206A067B260A631BAD94E33F0C.mft (raw, json)
Hash identifier:          bxBrzQxtboXZHoNiZ9W1wHEaV3dVanRRPrPfkOSe2Es=
Subject key identifier:   BE:CA:FE:31:89:0D:79:64:C8:A5:3D:CC:24:B0:12:B0:EF:09:6B:98
Authority key identifier: 78:90:AF:48:99:6E:DD:20:6A:06:7B:26:0A:63:1B:AD:94:E3:3F:0C
Certificate issuer:       /CN=7890AF48996EDD206A067B260A631BAD94E33F0C
Certificate serial:       26BECA9D53DBF5B5C221E44C071C142BD4E5050B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7890AF48996EDD206A067B260A631BAD94E33F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/7890AF48996EDD206A067B260A631BAD94E33F0C.mft
Manifest number:          03F8
Signing time:             Fri 02 Dec 2022 13:56:57 +0000
Manifest this update:     Fri 02 Dec 2022 13:51:57 +0000
Manifest next update:     Sat 03 Dec 2022 14:45:57 +0000
Files and hashes:         1: 3136382e3232372e34382e302f32322d3234203d3e20323634383732.roa (hash: KRw306QFfj2VJwtDzyH0puX5DiS0N9JyWdXCyS1yj2M=)
                          2: 7890AF48996EDD206A067B260A631BAD94E33F0C.crl (hash: Nftrn1l+kEilDM8hIkHRYxoWOeIaZz/XvkbRvOsypjo=)
                          3: 323830343a326631633a3a2f33322d3438203d3e20323634383732.roa (hash: M97NtzXdPIpz+Q+mswjjOwnOOnXmLJlvNpLBVSEXP7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:ca:9d:53:db:f5:b5:c2:21:e4:4c:07:1c:14:2b:d4:e5:05:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7890AF48996EDD206A067B260A631BAD94E33F0C
        Validity
            Not Before: Dec  2 13:51:57 2022 GMT
            Not After : Dec  3 14:45:57 2022 GMT
        Subject: CN=BECAFE31890D7964C8A53DCC24B012B0EF096B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:b0:07:e2:0c:a8:b6:32:b5:9b:df:37:ef:
                    6e:87:8a:25:06:fe:d9:90:3a:c9:7f:0f:2d:dc:ca:
                    50:9b:67:b1:27:05:50:7a:a8:6c:10:23:0f:b7:b9:
                    08:aa:d7:aa:cf:71:8d:6b:f0:89:09:ce:26:04:43:
                    dc:64:2b:57:ec:ed:79:6b:60:97:f3:cd:bd:36:8a:
                    0b:23:29:a9:18:72:30:97:cc:cf:c2:75:58:f5:d2:
                    10:6c:3a:a7:3d:86:4d:c8:08:79:14:53:45:08:f4:
                    28:42:5e:f5:ea:00:29:09:c8:96:b2:29:0a:f9:de:
                    e0:21:bd:44:57:bd:00:59:56:d5:e9:63:43:13:86:
                    ea:90:42:5f:04:fe:e6:71:9b:5a:b9:ac:0b:b0:63:
                    d1:f9:ff:5c:72:e9:72:34:5a:d0:fe:fa:e6:e0:e9:
                    ca:d0:cb:4d:42:3e:e6:a1:a8:24:06:ab:44:d0:11:
                    de:05:93:b3:de:19:b1:08:5e:b9:0b:19:9a:44:eb:
                    33:f0:dd:de:dd:e2:28:0f:a6:e8:60:9c:22:dd:69:
                    60:be:c3:05:c1:e5:82:55:63:cf:17:b2:49:6e:e7:
                    e1:14:ab:48:0a:17:71:e2:bc:4a:8f:85:ab:6d:94:
                    a2:59:94:3e:a9:6a:7b:2f:c9:8c:5c:67:c3:a2:9a:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:FE:31:89:0D:79:64:C8:A5:3D:CC:24:B0:12:B0:EF:09:6B:98
            X509v3 Authority Key Identifier:
                keyid:78:90:AF:48:99:6E:DD:20:6A:06:7B:26:0A:63:1B:AD:94:E3:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/7890AF48996EDD206A067B260A631BAD94E33F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7890AF48996EDD206A067B260A631BAD94E33F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/7890AF48996EDD206A067B260A631BAD94E33F0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:62:8b:e4:b9:10:a2:5e:f1:2f:60:c1:87:1f:be:fb:fd:
         41:19:4d:f1:96:62:19:0b:a5:ed:dc:d5:84:dc:d3:a3:31:53:
         2f:1c:cd:40:b2:1e:ea:0e:14:f3:06:e9:04:93:bc:67:9f:01:
         08:65:a6:95:d3:75:1c:dd:9b:32:40:11:38:22:33:95:62:eb:
         b4:02:d2:0c:0a:1a:32:9a:ae:24:11:a9:42:50:ef:31:8e:0b:
         e3:50:04:76:7a:81:6e:69:75:f4:b7:84:ce:32:42:02:02:a5:
         89:1b:02:8e:5f:3c:3e:ad:0f:31:92:1b:f7:0d:de:ea:7b:27:
         34:6b:45:f6:b7:16:96:39:d5:6c:15:c4:ba:c2:65:6c:32:52:
         76:ba:12:8d:3a:6e:bc:4d:94:3d:5c:54:70:92:50:b1:d2:90:
         e7:c0:d1:60:00:e0:cd:2f:38:b2:25:1c:68:2a:50:38:19:68:
         a2:89:25:0f:23:84:2c:22:67:bd:e0:18:d6:49:9f:77:c7:9d:
         ca:57:90:d2:59:c9:ec:3b:c4:d1:c1:89:d5:b8:2e:c0:15:fe:
         4f:2e:ad:af:ab:b0:b7:38:2c:32:91:6e:48:b8:3d:37:5a:90:
         90:32:f9:65:83:d5:db:d5:13:62:2a:12:fb:46:60:22:9b:93:
         65:25:bd:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJr7KnVPb9bXCIeRMBxwUK9TlBQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg5MEFGNDg5OTZFREQyMDZBMDY3QjI2MEE2MzFCQUQ5
NEUzM0YwQzAeFw0yMjEyMDIxMzUxNTdaFw0yMjEyMDMxNDQ1NTdaMDMxMTAvBgNV
BAMTKEJFQ0FGRTMxODkwRDc5NjRDOEE1M0RDQzI0QjAxMkIwRUYwOTZCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH47AH4gyotjK1m983726HiiUG
/tmQOsl/Dy3cylCbZ7EnBVB6qGwQIw+3uQiq16rPcY1r8IkJziYEQ9xkK1fs7Xlr
YJfzzb02igsjKakYcjCXzM/CdVj10hBsOqc9hk3ICHkUU0UI9ChCXvXqACkJyJay
KQr53uAhvURXvQBZVtXpY0MThuqQQl8E/uZxm1q5rAuwY9H5/1xy6XI0WtD++ubg
6crQy01CPuahqCQGq0TQEd4Fk7PeGbEIXrkLGZpE6zPw3d7d4igPpuhgnCLdaWC+
wwXB5YJVY88Xsklu5+EUq0gKF3HivEqPhattlKJZlD6pansvyYxcZ8OimiZZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvsr+MYkNeWTIpT3MJLASsO8Ja5gwHwYDVR0j
BBgwFoAUeJCvSJlu3SBqBnsmCmMbrZTjPwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNudTk3eHN5OGRvakZjblJQcWR3RUtZd0ZqUEF0Z2NCSmt1VXQ1dGpq
QWkvMC83ODkwQUY0ODk5NkVERDIwNkEwNjdCMjYwQTYzMUJBRDk0RTMzRjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4OTBBRjQ4OTk2RUREMjA2
QTA2N0IyNjBBNjMxQkFEOTRFMzNGMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnNudTk3eHN5OGRvakZjblJQcWR3RUtZd0ZqUEF0Z2NCSmt1VXQ1dGpqQWkvMC83
ODkwQUY0ODk5NkVERDIwNkEwNjdCMjYwQTYzMUJBRDk0RTMzRjBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAF9ii+S5EKJe8S9gwYcfvvv9QRlN8ZZiGQul7dzVhNzTozFTLxzNQLIe6g4U
8wbpBJO8Z58BCGWmldN1HN2bMkAROCIzlWLrtALSDAoaMpquJBGpQlDvMY4L41AE
dnqBbml19LeEzjJCAgKliRsCjl88Pq0PMZIb9w3e6nsnNGtF9rcWljnVbBXEusJl
bDJSdroSjTpuvE2UPVxUcJJQsdKQ58DRYADgzS84siUcaCpQOBloooklDyOELCJn
veAY1kmfd8edyleQ0lnJ7DvE0cGJ1bguwBX+Ty6tr6uwtzgsMpFuSLg9N1qQkDL5
ZYPV29UTYioS+0ZgIpuTZSW9tQ==
-----END CERTIFICATE-----