Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.mft
File:                     9CE07227B64C2F59198FCE2411C0BEA59721B945.mft (raw, json)
Hash identifier:          IL4pnLnASSTaSbKksd6nKSYSVyop7G3QVU9hxNvbvQ8=
Subject key identifier:   DD:72:CE:6A:F6:44:71:D3:09:E1:B5:DC:D9:50:42:A7:9D:6F:99:45
Authority key identifier: 9C:E0:72:27:B6:4C:2F:59:19:8F:CE:24:11:C0:BE:A5:97:21:B9:45
Certificate issuer:       /CN=9CE07227B64C2F59198FCE2411C0BEA59721B945
Certificate serial:       54FACAB5CB9309C689849DF9D010C592B7E5C52D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.mft
Manifest number:          03AB
Signing time:             Mon 15 Apr 2024 09:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 09:00:00 +0000
Files and hashes:         1: 9CE07227B64C2F59198FCE2411C0BEA59721B945.crl (hash: 351D91aHuvQE4nizfnPuBFyUp2GXKPuBYOZ4v3D7Mu0=)
                          2: 323830343a383764303a3a2f33322d3334203d3e20323732373333.roa (hash: Uo6urjS1r73ESyCYJn5IIayIDwpIplTkNi3sE4zuNoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:ca:b5:cb:93:09:c6:89:84:9d:f9:d0:10:c5:92:b7:e5:c5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE07227B64C2F59198FCE2411C0BEA59721B945
        Validity
            Not Before: Apr 15 08:55:00 2024 GMT
            Not After : Apr 22 09:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:14:c8:b0:a3:6d:66:84:f6:96:e3:ec:68:
                    6f:77:88:04:96:e4:32:fc:d8:65:e2:53:97:71:ec:
                    8e:a4:a0:b5:d4:23:9a:e3:9f:9b:73:19:d2:ba:3b:
                    e8:a5:38:52:50:b5:22:7e:e7:8c:c2:d3:76:5a:b8:
                    bf:3f:d5:37:62:15:66:25:a6:30:f0:ab:f8:97:6c:
                    67:d8:68:e8:90:3c:e0:6f:1a:53:35:21:b2:a4:e3:
                    0d:e3:8a:4f:8a:56:3d:db:96:a1:16:ca:79:87:a8:
                    5f:b6:c8:2f:bf:31:6f:7b:22:e5:68:cc:0b:2f:7a:
                    cf:86:1f:91:83:f9:e7:b8:ac:83:24:a7:88:a4:20:
                    9d:c9:1e:f4:5a:f6:47:06:17:f8:9d:86:34:9b:d0:
                    c6:6b:e6:53:c8:be:79:e6:9b:a3:ab:86:3a:82:1c:
                    ce:b8:bf:49:6e:e0:ad:dc:49:e4:98:6b:b5:ad:2a:
                    9b:d5:8f:bc:b7:ba:26:ac:49:c9:d9:dd:2f:5d:24:
                    e1:91:4a:5e:51:92:14:e3:c5:40:bd:60:7f:36:56:
                    97:4f:91:e0:24:c5:1a:57:06:49:93:84:1b:df:ef:
                    ce:c3:93:31:11:f9:e3:1a:5c:76:14:30:b1:95:79:
                    ac:d5:52:24:ce:36:c5:25:98:96:01:36:10:03:a0:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:72:CE:6A:F6:44:71:D3:09:E1:B5:DC:D9:50:42:A7:9D:6F:99:45
            X509v3 Authority Key Identifier:
                keyid:9C:E0:72:27:B6:4C:2F:59:19:8F:CE:24:11:C0:BE:A5:97:21:B9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:26:10:92:4b:75:a4:a2:31:90:f8:ff:1f:48:ed:f5:80:
         80:54:a5:5d:eb:26:e3:09:94:31:fd:ea:ad:ea:8b:08:d8:31:
         fe:5c:c9:ff:47:c7:1e:42:1a:9d:f5:4a:2a:15:ad:85:be:08:
         36:2d:da:95:a3:ee:1f:e3:df:6d:68:d8:e8:66:2d:82:7d:10:
         9b:39:34:73:f2:96:ab:67:69:df:36:d6:3f:f2:d5:69:17:4a:
         03:c0:45:d6:d8:3a:05:1f:68:ec:5d:20:86:a1:b0:9d:fa:fe:
         0d:c3:93:1c:5c:6f:02:ea:09:e7:3e:d3:61:f7:80:34:31:f5:
         d9:91:91:7f:1e:75:2e:40:f5:2b:c5:b5:f5:24:c3:97:33:17:
         ff:28:fc:e0:94:2c:7c:f3:5c:8b:39:6d:56:fb:c3:5c:17:2b:
         ed:1c:91:7c:c8:e9:c7:a6:f1:71:f8:b1:da:d4:af:ff:25:95:
         f2:9b:85:86:3b:22:e3:ba:3c:f3:7d:98:b6:66:a4:a9:2a:8b:
         18:7e:03:e9:de:64:74:76:1e:cc:3c:4e:a8:10:2a:09:47:38:
         2e:1f:81:ba:76:2b:df:a9:6f:81:96:fa:b6:fa:df:b2:91:ac:
         8d:69:44:74:a8:37:01:e1:b5:bf:32:b3:67:8d:96:09:a6:d4:
         b7:4e:4a:cc
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUVPrKtcuTCcaJhJ350BDFkrflxS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNFMDcyMjdCNjRDMkY1OTE5OEZDRTI0MTFDMEJFQTU5
NzIxQjk0NTAeFw0yNDA0MTUwODU1MDBaFw0yNDA0MjIwOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdCQzE0QzhCMEEzNkQ2Njg0
RjY5NkUzRUM2ODZGNzc4ODA0OTZFNDMyRkNEODY1RTI1Mzk3NzFFQzhFQTRBMEI1
RDQyMzlBRTM5RjlCNzMxOUQyQkEzQkU4QTUzODUyNTBCNTIyN0VFNzhDQzJEMzc2
NUFCOEJGM0ZENTM3NjIxNTY2MjVBNjMwRjBBQkY4OTc2QzY3RDg2OEU4OTAzQ0Uw
NkYxQTUzMzUyMUIyQTRFMzBERTM4QTRGOEE1NjNEREI5NkExMTZDQTc5ODdBODVG
QjZDODJGQkYzMTZGN0IyMkU1NjhDQzBCMkY3QUNGODYxRjkxODNGOUU3QjhBQzgz
MjRBNzg4QTQyMDlEQzkxRUY0NUFGNjQ3MDYxN0Y4OUQ4NjM0OUJEMEM2NkJFNjUz
QzhCRTc5RTY5QkEzQUI4NjNBODIxQ0NFQjhCRjQ5NkVFMEFEREM0OUU0OTg2QkI1
QUQyQTlCRDU4RkJDQjdCQTI2QUM0OUM5RDlERDJGNUQyNEUxOTE0QTVFNTE5MjE0
RTNDNTQwQkQ2MDdGMzY1Njk3NEY5MUUwMjRDNTFBNTcwNjQ5OTM4NDFCREZFRkNF
QzM5MzMxMTFGOUUzMUE1Qzc2MTQzMEIxOTU3OUFDRDU1MjI0Q0UzNkM1MjU5ODk2
MDEzNjEwMDNBMDgyRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt7wUyLCjbWaE9pbj7Ghvd4gEluQy/Nhl4lOXceyOpKC11COa45+b
cxnSujvopThSULUifueMwtN2Wri/P9U3YhVmJaYw8Kv4l2xn2GjokDzgbxpTNSGy
pOMN44pPilY925ahFsp5h6hftsgvvzFveyLlaMwLL3rPhh+Rg/nnuKyDJKeIpCCd
yR70WvZHBhf4nYY0m9DGa+ZTyL555pujq4Y6ghzOuL9JbuCt3EnkmGu1rSqb1Y+8
t7omrEnJ2d0vXSThkUpeUZIU48VAvWB/NlaXT5HgJMUaVwZJk4Qb3+/Ow5MxEfnj
Glx2FDCxlXms1VIkzjbFJZiWATYQA6CC9QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FN1yzmr2RHHTCeG13NlQQqedb5lFMB8GA1UdIwQYMBaAFJzgcie2TC9ZGY/OJBHA
vqWXIblFMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNTeEYzV3R0a2d5cG85
djdZV29CY3hLWVdZZUhqUFN0WlhLeURrMzNUV1hHLzAvOUNFMDcyMjdCNjRDMkY1
OTE5OEZDRTI0MTFDMEJFQTU5NzIxQjk0NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Q0UwNzIyN0I2NEMyRjU5MTk4RkNFMjQxMUMwQkVBNTk3MjFC
OTQ1LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNTeEYzV3R0a2d5cG85djdZV29C
Y3hLWVdZZUhqUFN0WlhLeURrMzNUV1hHLzAvOUNFMDcyMjdCNjRDMkY1OTE5OEZD
RTI0MTFDMEJFQTU5NzIxQjk0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEheJhCSS3WkojGQ+P8fSO31
gIBUpV3rJuMJlDH96q3qiwjYMf5cyf9Hxx5CGp31SioVrYW+CDYt2pWj7h/j321o
2OhmLYJ9EJs5NHPylqtnad821j/y1WkXSgPARdbYOgUfaOxdIIahsJ36/g3Dkxxc
bwLqCec+02H3gDQx9dmRkX8edS5A9SvFtfUkw5czF/8o/OCULHzzXIs5bVb7w1wX
K+0ckXzI6cem8XH4sdrUr/8llfKbhYY7IuO6PPN9mLZmpKkqixh+A+neZHR2Hsw8
TqgQKglHOC4fgbp2K9+pb4GW+rb637KRrI1pRHSoNwHhtb8ys2eNlgmm1LdOSsw=
-----END CERTIFICATE-----