Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft
File:                     F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft (raw, json)
Hash identifier:          Q2hXHXs+S8Vkazp/97P97HTDsKMWMarI0Y1l5ZxgP0A=
Subject key identifier:   43:2E:2B:3F:F4:3A:5F:96:C8:DC:F5:06:67:7C:04:C2:50:1F:28:28
Authority key identifier: F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9
Certificate issuer:       /CN=F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9
Certificate serial:       4C750B7D84AC4505C1E2C16B740C0344846C1372
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft
Manifest number:          1E
Signing time:             Sun 14 Apr 2024 22:52:53 +0000
Manifest this update:     Sun 14 Apr 2024 22:47:53 +0000
Manifest next update:     Tue 16 Apr 2024 00:49:53 +0000
Files and hashes:         1: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: WGJXSI3ljkZTRjOkzameYCr5pP5GP0iSDu3u3p8LVfI=)
                          2: F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.crl (hash: C55s2ysbgxRdUF/HcVIZKs8U54YJy6geUV51QIASL2Y=)
                          3: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: +CIgHe+OzkxrlzzBIEiMWnBq1tDcmETFeclk29rILa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:75:0b:7d:84:ac:45:05:c1:e2:c1:6b:74:0c:03:44:84:6c:13:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9
        Validity
            Not Before: Apr 14 22:47:53 2024 GMT
            Not After : Apr 16 00:49:53 2024 GMT
        Subject: CN=432E2B3FF43A5F96C8DCF506677C04C2501F2828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:a7:50:bf:d7:9e:11:99:ff:22:6b:a7:15:
                    90:b9:a7:8b:e3:95:8a:f3:96:00:c8:6b:08:53:2e:
                    e4:5d:cb:d1:ae:9d:36:ee:da:a1:0e:0f:9c:bf:ea:
                    6f:5c:fa:c8:e8:51:3a:72:e5:a4:d7:5d:9d:10:df:
                    5a:3b:9d:2d:25:f0:88:bd:ed:77:78:11:98:1b:6c:
                    fb:07:8f:66:62:d9:64:01:0a:bb:66:64:56:46:51:
                    ca:fc:e4:62:a7:18:03:55:7a:22:03:81:55:26:5b:
                    91:21:a6:e8:2c:5b:48:fa:21:09:86:45:bf:1c:c3:
                    2b:8f:9c:35:24:94:01:a1:44:7e:cc:65:9b:13:1f:
                    a8:9d:77:ab:3c:81:3c:04:02:87:af:5d:11:82:cc:
                    a5:2c:bc:d4:99:30:eb:87:52:bd:d9:01:98:96:d3:
                    f5:2a:93:ee:22:d5:5c:ad:80:5e:65:4d:2d:96:8a:
                    3c:cb:1b:50:a7:79:0b:e3:18:53:5a:dc:9d:a7:65:
                    c6:cc:02:d5:9b:55:08:bc:45:08:3e:8f:df:bf:01:
                    05:4d:73:0a:67:4c:68:91:f6:32:ce:1f:05:4d:8a:
                    02:36:f1:99:92:4c:ab:ae:a9:99:89:63:0a:a8:72:
                    83:9f:5d:09:3d:c1:1b:52:84:32:63:9c:40:e9:e1:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2E:2B:3F:F4:3A:5F:96:C8:DC:F5:06:67:7C:04:C2:50:1F:28:28
            X509v3 Authority Key Identifier:
                keyid:F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:83:9f:71:98:88:e4:32:7a:5d:54:6d:25:79:d8:7b:8f:
         e4:6d:28:3b:93:f8:c0:3c:68:78:1d:98:3b:f5:83:1a:88:d6:
         66:5d:65:b2:d2:c1:ca:c2:8f:c2:25:87:ed:3c:2e:a9:f7:a8:
         09:fd:2b:ab:47:a7:d7:d8:3c:26:ed:7c:a5:34:e0:e5:99:74:
         69:5b:e8:04:15:31:46:89:eb:14:3c:40:f4:1f:08:76:b3:31:
         91:91:67:6d:4a:48:98:0a:22:d6:49:cc:32:31:c5:05:f3:c7:
         ea:2a:9c:64:6d:ef:1c:3a:37:ba:11:b5:9d:2d:3e:41:96:32:
         b8:8a:ac:4e:e2:81:bc:2d:16:cd:30:a9:91:d0:ba:f4:df:79:
         08:97:b7:23:f5:0c:af:f4:ad:78:67:19:c8:aa:e0:07:19:58:
         00:2e:e7:2d:cf:79:e8:2b:08:d3:27:75:8e:ed:b5:35:c8:32:
         d7:60:53:a1:55:58:0b:8d:35:f6:58:ee:c6:50:6f:db:3d:a6:
         22:30:9f:c6:23:9b:a0:93:63:f2:05:ba:a3:69:bc:ea:30:33:
         c6:19:67:d7:b5:33:c0:8b:5d:bb:42:1c:f7:34:06:d5:92:93:
         82:13:e2:65:b7:5e:b7:32:69:21:14:c6:f0:e0:65:b7:62:32:
         aa:33:6d:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTHULfYSsRQXB4sFrdAwDRIRsE3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc0MDRGNUVCRDdFNUY3QzRDNDQxMDQ3RUVCQUUwMEND
MDZEODVCOTAeFw0yNDA0MTQyMjQ3NTNaFw0yNDA0MTYwMDQ5NTNaMDMxMTAvBgNV
BAMTKDQzMkUyQjNGRjQzQTVGOTZDOERDRjUwNjY3N0MwNEMyNTAxRjI4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDKdQv9eeEZn/ImunFZC5p4vj
lYrzlgDIawhTLuRdy9GunTbu2qEOD5y/6m9c+sjoUTpy5aTXXZ0Q31o7nS0l8Ii9
7Xd4EZgbbPsHj2Zi2WQBCrtmZFZGUcr85GKnGANVeiIDgVUmW5EhpugsW0j6IQmG
Rb8cwyuPnDUklAGhRH7MZZsTH6idd6s8gTwEAoevXRGCzKUsvNSZMOuHUr3ZAZiW
0/Uqk+4i1VytgF5lTS2WijzLG1CneQvjGFNa3J2nZcbMAtWbVQi8RQg+j9+/AQVN
cwpnTGiR9jLOHwVNigI28ZmSTKuuqZmJYwqocoOfXQk9wRtShDJjnEDp4fb/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQy4rP/Q6X5bI3PUGZ3wEwlAfKCgwHwYDVR0j
BBgwFoAU90BPXr1+X3xMRBBH7rrgDMBthbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMC9GNzQwNEY1RUJEN0U1RjdDNEM0NDEwNDdFRUJBRTAwQ0MwNkQ4NUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y3NDA0RjVFQkQ3RTVGN0M0
QzQ0MTA0N0VFQkFFMDBDQzA2RDg1QjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdCTDQvMC9G
NzQwNEY1RUJEN0U1RjdDNEM0NDEwNDdFRUJBRTAwQ0MwNkQ4NUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAutODn3GYiOQyel1UbSV52HuP5G0oO5P4wDxoeB2YO/WDGojWZl1lstLBysKP
wiWH7TwuqfeoCf0rq0en19g8Ju18pTTg5Zl0aVvoBBUxRonrFDxA9B8IdrMxkZFn
bUpImAoi1knMMjHFBfPH6iqcZG3vHDo3uhG1nS0+QZYyuIqsTuKBvC0WzTCpkdC6
9N95CJe3I/UMr/SteGcZyKrgBxlYAC7nLc956CsI0yd1ju21Ncgy12BToVVYC401
9ljuxlBv2z2mIjCfxiOboJNj8gW6o2m86jAzxhln17UzwItdu0Ic9zQG1ZKTghPi
ZbdetzJpIRTG8OBlt2IyqjNtAg==
-----END CERTIFICATE-----