Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft
File:                     714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft (raw, json)
Hash identifier:          wG+ZUz4chbJBPBtO6OoLTe+FqlfJPYk+j81AJUGkJf0=
Subject key identifier:   8C:09:8B:17:89:06:F6:9A:8B:BF:A8:FE:0E:34:36:57:27:0A:44:41
Authority key identifier: 71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9
Certificate issuer:       /CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
Certificate serial:       2A0AA9006C8AD77F07F8C187214CDBC74F69B700
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft
Manifest number:          017C
Signing time:             Fri 31 Jan 2025 15:30:00 +0000
Manifest this update:     Fri 31 Jan 2025 15:25:00 +0000
Manifest next update:     Sat 01 Feb 2025 19:14:00 +0000
Files and hashes:         1: 323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (hash: PbvUByJm9H/0rYm80dTkilsYf6mPF1/ZI7d1lw8aUGI=)
                          2: 3138372e36322e37362e302f32322d3234203d3e20323639373133.roa (hash: r0WJYkMe+0PpBuWkfXU06GvOae+CYSkCspiWq8Eo2Zw=)
                          3: 714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl (hash: 7zSOnF5EhrXjnpNNExAghVr7pJTO3tzmDx741NdQ1wQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:a9:00:6c:8a:d7:7f:07:f8:c1:87:21:4c:db:c7:4f:69:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
        Validity
            Not Before: Jan 31 15:25:00 2025 GMT
            Not After : Feb  1 19:14:00 2025 GMT
        Subject: CN=8C098B178906F69A8BBFA8FE0E343657270A4441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:2f:2d:3f:65:ae:82:c0:64:d0:8a:d8:d1:
                    38:87:b9:ab:5d:46:0b:38:21:f7:c8:a4:3d:30:98:
                    9d:a2:5a:16:e8:ab:42:24:df:2d:f5:2c:34:ba:32:
                    3a:f9:e5:59:86:6c:cd:3c:50:84:87:fc:9f:e1:41:
                    3e:f0:95:e8:f3:c0:77:a1:4a:36:37:8b:d8:48:43:
                    50:b1:44:00:e5:f0:7f:75:65:60:ea:57:10:21:11:
                    bd:85:9f:a7:74:a3:d9:43:74:0d:a0:87:d5:fb:a4:
                    e6:2f:92:61:59:98:75:1b:01:92:1e:f5:ae:c9:5e:
                    57:eb:8b:3c:17:1e:92:e6:32:4b:85:01:c8:48:13:
                    52:94:60:44:75:fc:30:08:53:78:e9:2e:c8:bd:e9:
                    2b:8b:3f:cc:3d:f9:b1:c7:25:03:a8:65:c0:fd:4d:
                    94:7e:87:e6:72:5c:d6:bb:b8:11:6e:95:e9:73:b9:
                    6f:38:60:cf:51:77:93:26:cb:70:67:dc:eb:02:69:
                    04:10:7b:ea:f5:df:3c:a5:60:7d:06:2a:dc:3e:4c:
                    86:e8:fc:57:91:60:ac:11:fd:7d:67:6f:45:dd:b5:
                    bc:c6:9a:fc:1d:0e:65:c5:54:6a:69:4e:f6:42:29:
                    20:f6:97:16:9d:a7:22:f0:fa:8b:1e:87:ff:95:29:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:8B:17:89:06:F6:9A:8B:BF:A8:FE:0E:34:36:57:27:0A:44:41
            X509v3 Authority Key Identifier:
                keyid:71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:88:35:5e:52:eb:67:a8:b0:fd:01:c5:1b:e0:46:bb:bf:
         25:7d:fd:83:a6:76:60:b2:ee:e8:3e:86:86:06:ce:97:10:58:
         ee:52:11:61:4a:a0:59:8c:5a:be:f0:87:e5:8e:91:31:d4:bc:
         15:b1:f9:95:f6:17:18:18:3d:e1:f7:b9:7e:96:fe:af:a9:49:
         6b:bb:02:4b:85:1d:27:35:60:16:1e:0c:d4:9f:cf:36:3c:76:
         b7:4f:22:2f:8e:aa:48:71:e0:f7:8b:ed:73:62:0c:c0:4d:87:
         60:99:4c:68:5f:ff:cc:d9:bc:8e:54:95:3b:d4:81:4c:2b:33:
         2f:ab:af:96:89:a0:10:69:11:22:2a:09:ee:3b:6f:b9:ce:cf:
         6f:3b:1e:86:ed:52:03:df:7a:45:54:ba:14:e6:5c:9a:15:29:
         16:a2:f1:b2:77:2b:5c:77:6c:91:ce:43:21:c5:98:1b:77:d2:
         b0:74:2b:c7:f8:5d:75:7d:96:cf:7e:04:bc:c8:f8:b3:cb:6f:
         e8:eb:64:d0:ed:88:3b:e6:e1:17:71:70:e2:ac:12:da:e4:29:
         48:6d:85:39:19:e1:f9:28:b9:f4:06:db:84:fa:97:40:a4:09:
         53:5f:20:c7:9a:7a:0f:0b:af:41:93:67:f2:11:44:37:09:40:
         9a:78:46:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKgqpAGyK138H+MGHIUzbx09ptwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE0REJBNEFCQ0IxREU0Qjk3NjI3MTI1RjIxMDI3QzAw
MTkzRTVEOTAeFw0yNTAxMzExNTI1MDBaFw0yNTAyMDExOTE0MDBaMDMxMTAvBgNV
BAMTKDhDMDk4QjE3ODkwNkY2OUE4QkJGQThGRTBFMzQzNjU3MjcwQTQ0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06i8tP2WugsBk0IrY0TiHuatd
Rgs4IffIpD0wmJ2iWhboq0Ik3y31LDS6Mjr55VmGbM08UISH/J/hQT7wlejzwHeh
SjY3i9hIQ1CxRADl8H91ZWDqVxAhEb2Fn6d0o9lDdA2gh9X7pOYvkmFZmHUbAZIe
9a7JXlfrizwXHpLmMkuFAchIE1KUYER1/DAIU3jpLsi96SuLP8w9+bHHJQOoZcD9
TZR+h+ZyXNa7uBFulelzuW84YM9Rd5Mmy3Bn3OsCaQQQe+r13zylYH0GKtw+TIbo
/FeRYKwR/X1nb0XdtbzGmvwdDmXFVGppTvZCKSD2lxadpyLw+oseh/+VKX3rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjAmLF4kG9pqLv6j+DjQ2VycKREEwHwYDVR0j
BBgwFoAUcU26Sryx3kuXYnEl8hAnwAGT5dkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVR
Q1AvMi83MTREQkE0QUJDQjFERTRCOTc2MjcxMjVGMjEwMjdDMDAxOTNFNUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNERCQTRBQkNCMURFNEI5
NzYyNzEyNUYyMTAyN0MwMDE5M0U1RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVRQ1AvMi83
MTREQkE0QUJDQjFERTRCOTc2MjcxMjVGMjEwMjdDMDAxOTNFNUQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOiSINV5S62eosP0BxRvgRru/JX39g6Z2YLLu6D6GhgbOlxBY7lIRYUqgWYxa
vvCH5Y6RMdS8FbH5lfYXGBg94fe5fpb+r6lJa7sCS4UdJzVgFh4M1J/PNjx2t08i
L46qSHHg94vtc2IMwE2HYJlMaF//zNm8jlSVO9SBTCszL6uvlomgEGkRIioJ7jtv
uc7Pbzsehu1SA996RVS6FOZcmhUpFqLxsncrXHdskc5DIcWYG3fSsHQrx/hddX2W
z34EvMj4s8tv6Otk0O2IO+bhF3Fw4qwS2uQpSG2FORnh+Si59AbbhPqXQKQJU18g
x5p6DwuvQZNn8hFENwlAmnhGBQ==
-----END CERTIFICATE-----