Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft
File:                     EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft (raw, json)
Hash identifier:          Fn4B1D/QxeqJZywyBrH31b4ItCYCyN2aRCowr/FIZ5g=
Subject key identifier:   01:2A:59:B2:FC:96:34:C6:98:A4:10:AD:5F:CE:DD:30:FF:49:0E:B8
Authority key identifier: EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4
Certificate issuer:       /CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
Certificate serial:       7628AC42B6ACC7B9A9A2025ECABBE020E9E65A2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft
Manifest number:          0263
Signing time:             Mon 15 Apr 2024 08:47:21 +0000
Manifest this update:     Mon 15 Apr 2024 08:42:21 +0000
Manifest next update:     Tue 16 Apr 2024 11:26:21 +0000
Files and hashes:         1: EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.crl (hash: +sGgMZgz0nQaccae6hh+jQp8FbaW2hlqA8cbJcanl5Y=)
                          2: 34352e3233342e3139322e302f32322d3234203d3e20323637333738.roa (hash: ecbtyq07jaaaW3q2wiEImyZ+wvj4qORu/b1E2xjyhaY=)
                          3: 323830343a346339303a3a2f33322d3438203d3e20323637333738.roa (hash: 2ZJgNbcZRACsR2eNwYJyCO/ndJUG/bm1kiKDUDoUbdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:ac:42:b6:ac:c7:b9:a9:a2:02:5e:ca:bb:e0:20:e9:e6:5a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
        Validity
            Not Before: Apr 15 08:42:21 2024 GMT
            Not After : Apr 16 11:26:21 2024 GMT
        Subject: CN=012A59B2FC9634C698A410AD5FCEDD30FF490EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:45:7b:8b:4a:ed:c0:89:9f:12:ab:51:6b:
                    8e:18:48:2a:5b:ea:11:e9:d8:8a:81:68:9e:37:3f:
                    60:68:e6:5c:50:f0:8f:72:c4:b9:c8:da:4e:d0:bc:
                    a4:e9:32:dc:14:70:d4:2f:ee:04:a7:8f:2f:e8:34:
                    66:6c:2e:b3:40:4c:dc:d2:ea:69:cc:b3:c0:1e:f8:
                    87:ba:09:fe:9e:23:53:88:4c:5c:a8:b3:5c:81:b1:
                    a9:56:b7:42:47:00:60:9d:d8:43:73:4c:fc:9d:bd:
                    7c:b1:b5:35:ae:ee:b9:57:05:0b:d8:b3:e5:04:8e:
                    4f:66:ff:80:bc:11:e4:60:3d:ad:f2:e9:eb:e3:e0:
                    47:03:6b:e7:c8:d5:d9:8c:60:33:03:90:ca:6d:02:
                    e2:2e:77:cc:62:a0:d1:3b:fc:44:4d:1e:db:cb:d8:
                    d8:41:e4:64:a5:be:4f:d4:0b:5d:80:e5:94:91:5a:
                    1f:24:3d:73:1c:42:b8:05:ee:38:b2:dc:01:f1:02:
                    4a:bc:aa:7e:44:ef:0d:80:e3:27:a6:1d:c9:39:86:
                    76:ca:38:ff:fa:b1:4c:72:29:85:68:03:81:bf:70:
                    31:60:b8:b3:87:ad:ce:b3:dd:9a:2a:1f:30:fd:38:
                    63:62:26:2c:6a:50:33:c9:4e:c0:0f:d7:e5:78:a9:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:59:B2:FC:96:34:C6:98:A4:10:AD:5F:CE:DD:30:FF:49:0E:B8
            X509v3 Authority Key Identifier:
                keyid:EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:ac:a2:99:dc:de:94:63:e2:be:a8:90:fa:2c:c8:c1:dc:
         a5:b8:08:27:27:c8:9c:d5:d5:d9:16:0f:a0:81:15:5a:c8:0c:
         84:72:6c:64:67:65:a2:61:5d:2e:13:01:29:8a:44:3f:3d:44:
         20:63:8a:e9:56:8e:79:27:f6:28:29:84:f0:f9:ba:72:01:01:
         50:1c:06:b5:7e:e3:b9:bd:be:8e:13:c5:53:5a:1f:4e:e6:33:
         7c:cb:16:b8:e4:ae:10:bc:ae:e7:05:51:b3:a3:cd:0f:35:8b:
         d1:e1:40:60:e8:8d:1c:a4:6a:35:3a:5a:6b:40:ca:41:a3:92:
         9c:31:0e:80:dd:09:1a:d4:e4:62:dc:70:65:cb:0b:1c:71:c3:
         6d:e8:4c:b2:ca:e6:c7:4e:89:9c:e0:e0:f6:63:c1:04:89:6d:
         22:6f:42:1f:c2:78:f1:8c:de:7b:fd:a3:59:7e:d2:0d:24:1f:
         a3:5e:1a:92:a1:b4:60:30:38:9e:99:c9:25:0e:2a:0a:79:3f:
         19:09:7d:e9:11:81:41:6b:ba:21:fa:fa:9e:0f:0b:95:da:30:
         e6:f1:0b:e9:bb:2c:48:b6:92:06:c4:05:86:3c:29:47:57:76:
         68:68:35:79:08:28:50:ce:84:f2:62:fd:f1:5f:a1:a0:1e:a8:
         36:81:b2:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdiisQrasx7mpogJeyrvgIOnmWi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzODlERTA4REZCMjdDMTUzN0IxNUVGMzRCOUJBQzA1
Rjk1MUVGNDAeFw0yNDA0MTUwODQyMjFaFw0yNDA0MTYxMTI2MjFaMDMxMTAvBgNV
BAMTKDAxMkE1OUIyRkM5NjM0QzY5OEE0MTBBRDVGQ0VERDMwRkY0OTBFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsj0V7i0rtwImfEqtRa44YSCpb
6hHp2IqBaJ43P2Bo5lxQ8I9yxLnI2k7QvKTpMtwUcNQv7gSnjy/oNGZsLrNATNzS
6mnMs8Ae+Ie6Cf6eI1OITFyos1yBsalWt0JHAGCd2ENzTPydvXyxtTWu7rlXBQvY
s+UEjk9m/4C8EeRgPa3y6evj4EcDa+fI1dmMYDMDkMptAuIud8xioNE7/ERNHtvL
2NhB5GSlvk/UC12A5ZSRWh8kPXMcQrgF7jiy3AHxAkq8qn5E7w2A4yemHck5hnbK
OP/6sUxyKYVoA4G/cDFguLOHrc6z3ZoqHzD9OGNiJixqUDPJTsAP1+V4qZfdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUASpZsvyWNMaYpBCtX87dMP9JDrgwHwYDVR0j
BBgwFoAU7Did4I37J8FTexXvNLm6wF+VHvQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNaWjFVN3FyQ1ZzVmtLclRuV3ppZTlHVHdFVG9LWWI2V0xCczY5OWFR
SHYvMC9FQzM4OURFMDhERkIyN0MxNTM3QjE1RUYzNEI5QkFDMDVGOTUxRUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDMzg5REUwOERGQjI3QzE1
MzdCMTVFRjM0QjlCQUMwNUY5NTFFRjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGNaWjFVN3FyQ1ZzVmtLclRuV3ppZTlHVHdFVG9LWWI2V0xCczY5OWFRSHYvMC9F
QzM4OURFMDhERkIyN0MxNTM3QjE1RUYzNEI5QkFDMDVGOTUxRUY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGyqsopnc3pRj4r6okPosyMHcpbgIJyfInNXV2RYPoIEVWsgMhHJsZGdlomFd
LhMBKYpEPz1EIGOK6VaOeSf2KCmE8Pm6cgEBUBwGtX7jub2+jhPFU1ofTuYzfMsW
uOSuELyu5wVRs6PNDzWL0eFAYOiNHKRqNTpaa0DKQaOSnDEOgN0JGtTkYtxwZcsL
HHHDbehMssrmx06JnODg9mPBBIltIm9CH8J48Yzee/2jWX7SDSQfo14akqG0YDA4
npnJJQ4qCnk/GQl96RGBQWu6Ifr6ng8Lldow5vEL6bssSLaSBsQFhjwpR1d2aGg1
eQgoUM6E8mL98V+hoB6oNoGydQ==
-----END CERTIFICATE-----