Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          4PYrcZTD+hWjOCoNNrTSpFysJVOGxrSQsfnh+TXbkfw=
Subject key identifier:   B1:99:1E:53:02:DB:7A:C7:30:B0:50:DE:81:A6:28:59:01:03:D0:FD
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       17E6C9B80AF7D7F7517941EACE5FED3A9AD149C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 13:01:50 +0000
Manifest this update:     Fri 31 Jan 2025 12:56:50 +0000
Manifest next update:     Sat 01 Feb 2025 15:09:50 +0000
Files and hashes:         1: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: ERY9qe9y8/1RMMKjILUtvtSIu6OEG4sK48bPt8qw4ms=)
                          2: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: vP2icQWvFWbesjCpkIkBW5Yvs6RLc6XZQc05EEqqVB4=)
                          3: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: m1GVohJF0p68NiE5mcUpvdX4FassKLYnASxFsWAf9D4=)
                          4: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: Of+jzPuWQXXIxn+zzFCz07ZooE4Y6JmGZcYTBdvfNps=)
                          5: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: cD/PwWCOaUOle8OFK94hIBqelONS7yuThafrKd6fCtQ=)
                          6: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: E9BYzBNIUTrXqKsTm+DQW7RBYM1M5JmZferInwjgCXw=)
                          7: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: gkMRtdPyFCsOEajnNYfFjx6MyRBrmK6RRWwlefPOQa0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e6:c9:b8:0a:f7:d7:f7:51:79:41:ea:ce:5f:ed:3a:9a:d1:49:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jan 31 12:56:50 2025 GMT
            Not After : Feb  1 15:09:50 2025 GMT
        Subject: CN=B1991E5302DB7AC730B050DE81A628590103D0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:0f:0d:57:96:b1:31:24:16:df:ca:f8:3b:
                    3f:86:67:b2:a8:52:2f:59:c7:26:28:11:79:cc:21:
                    ba:d0:03:6c:23:9c:d8:50:f0:2f:0d:b7:27:39:2f:
                    e9:cc:ea:69:11:a6:2a:07:e6:68:ce:59:d7:b6:b2:
                    d5:19:a9:81:50:d4:5e:60:99:10:72:ca:43:18:6d:
                    b3:42:8e:a0:9a:01:44:ca:6e:54:70:02:a0:d3:60:
                    b1:59:8d:38:a3:ec:27:fa:ed:27:7a:0a:de:d1:af:
                    56:3b:67:cb:aa:19:50:14:68:92:c9:95:3a:64:19:
                    e6:a8:bb:34:4b:73:cf:7c:b3:7f:9c:6d:62:cb:9c:
                    bc:a3:15:ad:37:88:3e:b8:27:27:ef:18:f4:55:33:
                    84:29:6c:d6:86:fe:c8:89:ed:72:74:a1:d4:15:9f:
                    dd:48:e6:85:f4:aa:d6:39:b1:52:a6:d8:85:24:4b:
                    47:a7:d9:12:18:aa:86:75:4f:f9:9a:7f:fb:74:f4:
                    c7:ce:1b:32:2e:47:c7:f1:1a:0b:e3:d2:7b:0a:47:
                    2b:33:e4:2a:cd:a1:4d:ec:da:74:6a:bd:20:0c:eb:
                    c8:0a:a3:8b:1d:62:ca:d7:24:ab:9c:84:f7:bd:4e:
                    9e:9e:26:4c:f9:ef:3b:3e:4f:dd:5b:90:4e:07:2a:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:1E:53:02:DB:7A:C7:30:B0:50:DE:81:A6:28:59:01:03:D0:FD
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8d:02:47:74:95:0a:ee:55:21:bb:44:f1:1e:5e:8d:ef:65:
         db:ce:a3:58:83:6c:22:79:39:b0:ef:a6:bd:62:c2:57:1e:f9:
         7e:9b:3a:27:ad:d0:7e:2b:ee:1f:2d:4d:44:de:e8:4b:96:c0:
         55:0d:27:fa:28:15:a5:9a:62:a2:49:ee:83:4c:97:bf:d7:03:
         a2:b8:22:c9:be:a6:3e:b7:f3:c6:6d:33:42:dd:93:82:ff:e6:
         91:d8:ee:13:cd:66:7e:88:c7:f6:7d:69:cb:19:12:9e:0a:74:
         42:9f:1d:85:13:72:ea:a4:83:f4:09:54:79:a2:18:2e:f0:59:
         85:8a:d7:76:96:78:77:f0:26:b6:59:e4:56:83:97:04:be:e6:
         c1:48:31:38:44:89:7c:0c:32:a7:87:16:13:3a:37:12:12:0c:
         3c:ed:81:2b:37:54:34:ac:25:b4:42:08:3d:31:26:69:d8:e2:
         52:47:df:26:35:51:8c:89:d0:79:c3:d5:57:d4:2a:75:59:84:
         0b:3d:fa:22:47:e0:ef:d9:bd:d9:c0:6a:0f:cd:79:6e:e2:64:
         29:4f:9c:7f:c1:64:06:01:b4:82:aa:48:cf:79:f4:31:46:f2:
         32:08:34:12:6c:3b:a5:c5:22:ab:ac:43:a4:ee:1a:8a:8a:7e:
         28:4a:37:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF+bJuAr31/dReUHqzl/tOprRScYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREMkNCNjQ2RjQ4QkEyMTRBQTI4QTJEQjg5NEM0QUI3
NTAyMENFNzAeFw0yNTAxMzExMjU2NTBaFw0yNTAyMDExNTA5NTBaMDMxMTAvBgNV
BAMTKEIxOTkxRTUzMDJEQjdBQzczMEIwNTBERTgxQTYyODU5MDEwM0QwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBw8NV5axMSQW38r4Oz+GZ7Ko
Ui9ZxyYoEXnMIbrQA2wjnNhQ8C8Ntyc5L+nM6mkRpioH5mjOWde2stUZqYFQ1F5g
mRByykMYbbNCjqCaAUTKblRwAqDTYLFZjTij7Cf67Sd6Ct7Rr1Y7Z8uqGVAUaJLJ
lTpkGeaouzRLc898s3+cbWLLnLyjFa03iD64JyfvGPRVM4QpbNaG/siJ7XJ0odQV
n91I5oX0qtY5sVKm2IUkS0en2RIYqoZ1T/maf/t09MfOGzIuR8fxGgvj0nsKRysz
5CrNoU3s2nRqvSAM68gKo4sdYsrXJKuchPe9Tp6eJkz57zs+T91bkE4HKnqVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsZkeUwLbescwsFDegaYoWQED0P0wHwYDVR0j
BBgwFoAURNLLZG9IuiFKoootuJTEq3UCDOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMS80NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDJDQjY0NkY0OEJBMjE0
QUEyOEEyREI4OTRDNEFCNzUwMjBDRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRWeVovMS80
NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAro0CR3SVCu5VIbtE8R5eje9l286jWINsInk5sO+mvWLCVx75fps6J63Qfivu
Hy1NRN7oS5bAVQ0n+igVpZpioknug0yXv9cDorgiyb6mPrfzxm0zQt2Tgv/mkdju
E81mfojH9n1pyxkSngp0Qp8dhRNy6qSD9AlUeaIYLvBZhYrXdpZ4d/AmtlnkVoOX
BL7mwUgxOESJfAwyp4cWEzo3EhIMPO2BKzdUNKwltEIIPTEmadjiUkffJjVRjInQ
ecPVV9QqdVmECz36Ikfg79m92cBqD815buJkKU+cf8FkBgG0gqpIz3n0MUbyMgg0
Emw7pcUiq6xDpO4aiop+KEo3Jw==
-----END CERTIFICATE-----