Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.mft
File:                     DDE07C11A82DA02165ECBCEE4DE1C444375895E4.mft (raw, json)
Hash identifier:          UnuZqaFhBHfdfjL2NMywPgDz06WIRgU8YEhCV5D709o=
Subject key identifier:   3F:3E:41:43:E5:B0:FC:7F:19:23:54:22:A5:DA:3C:2A:78:BB:36:DA
Authority key identifier: DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4
Certificate issuer:       /CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
Certificate serial:       4D12191960A5B4345DE27F3C06DBC626E24E8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.mft
Manifest number:          04DF
Signing time:             Sun 14 Apr 2024 19:56:02 +0000
Manifest this update:     Sun 14 Apr 2024 19:51:02 +0000
Manifest next update:     Mon 15 Apr 2024 22:23:02 +0000
Files and hashes:         1: DDE07C11A82DA02165ECBCEE4DE1C444375895E4.crl (hash: km9uOuHzcEyksgMVKRFPvcwWS+ZQKL30XzUyeypjANg=)
                          2: 3133382e33362e33362e302f32322d3234203d3e20323634353638.roa (hash: JIZGUnym+106/HZgRRTy9PAKnMFIyV6vBYMGUkfEHQ0=)
                          3: 323830343a323162343a3a2f33322d3438203d3e20323634353638.roa (hash: xxnuHbY5NtdHG+AAwVdj3bYCzL72uF4nM5LdL8Taujg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:12:19:19:60:a5:b4:34:5d:e2:7f:3c:06:db:c6:26:e2:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
        Validity
            Not Before: Apr 14 19:51:02 2024 GMT
            Not After : Apr 15 22:23:02 2024 GMT
        Subject: CN=3F3E4143E5B0FC7F19235422A5DA3C2A78BB36DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:02:b6:03:a1:0d:ab:80:b1:ed:55:66:ff:57:
                    cc:22:b3:79:36:84:3a:3c:f3:e1:57:d1:cd:f0:bb:
                    b9:06:73:86:92:cd:31:22:75:46:3d:f4:8c:66:27:
                    32:1e:76:73:b5:d9:d4:5e:cd:9a:7d:da:1a:ea:16:
                    1e:ce:35:da:a3:5a:f3:52:91:0f:4c:46:b9:b7:46:
                    c2:85:d1:b5:f6:9c:ba:7b:db:88:09:3c:fa:49:ec:
                    2b:8d:43:7e:06:1a:93:95:f9:b8:cf:85:6a:57:1d:
                    53:dc:15:03:47:76:6c:11:0e:38:18:d0:89:b6:08:
                    31:ac:8e:11:c2:bf:75:a0:87:32:00:87:b7:13:61:
                    a5:78:59:dd:ae:1f:dd:23:c3:28:4e:5f:96:69:8d:
                    4f:ab:47:a7:4b:a1:79:18:9c:31:97:9d:97:12:8f:
                    c8:ef:86:be:8a:34:dc:7b:74:15:c7:54:b2:12:ab:
                    ce:9e:14:f2:b6:83:4b:cb:6e:7f:ad:6e:92:75:0b:
                    b9:1c:82:b2:50:88:fc:52:18:e4:86:a6:df:de:3f:
                    85:79:fe:52:e9:12:be:65:78:1b:b3:73:6b:34:19:
                    4c:62:0d:f0:5c:15:9b:bf:88:b3:51:9c:31:34:00:
                    b8:9d:62:d6:4f:61:c3:df:f4:f6:97:6a:b8:af:c3:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:41:43:E5:B0:FC:7F:19:23:54:22:A5:DA:3C:2A:78:BB:36:DA
            X509v3 Authority Key Identifier:
                keyid:DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:47:32:26:22:a8:11:79:f7:41:6e:74:90:69:54:af:12:
         4e:f3:44:e3:10:b0:d7:3c:7a:fa:13:13:1b:0d:12:c3:66:9e:
         29:89:76:61:32:66:c6:82:54:74:09:db:42:a6:dc:3a:89:99:
         65:26:ad:bc:c2:ef:3f:a1:a9:4f:4e:8e:60:6c:53:de:8b:1a:
         c0:ff:9a:ed:5a:38:6f:a9:bb:bb:06:c5:26:6b:8b:c2:c9:2a:
         52:6c:3b:52:d5:97:76:8b:5d:dc:5f:e8:66:fb:12:31:f6:ca:
         95:ca:e1:df:3d:96:06:58:d8:8f:85:29:a6:f9:b9:f4:12:6f:
         3b:68:1e:bd:1b:c5:a6:33:99:05:01:91:58:f4:79:c6:0d:bc:
         60:d1:93:df:e6:1d:25:4a:d2:c0:3d:de:9f:12:e1:a9:a4:62:
         42:fb:d0:04:46:df:3f:05:e3:64:02:82:7f:6a:9a:33:1d:b3:
         95:3a:b0:56:f4:3e:da:35:0a:8f:b7:ea:52:6c:74:14:2d:4a:
         6d:e4:1b:ae:54:02:4c:b6:f2:03:fd:05:67:27:1b:49:0e:17:
         78:3d:ea:92:b2:91:e3:27:42:72:aa:f9:41:61:86:57:b2:f1:
         68:1e:05:a2:ce:45:92:38:35:3b:01:86:41:f8:75:ca:ce:d3:
         ca:38:e6:51
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgITTRIZGWCltDRd4n88BtvGJuJOizANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhEREUwN0MxMUE4MkRBMDIxNjVFQ0JDRUU0REUxQzQ0NDM3
NTg5NUU0MB4XDTI0MDQxNDE5NTEwMloXDTI0MDQxNTIyMjMwMlowMzExMC8GA1UE
AxMoM0YzRTQxNDNFNUIwRkM3RjE5MjM1NDIyQTVEQTNDMkE3OEJCMzZEQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPgCtgOhDauAse1VZv9XzCKzeTaE
Ojzz4VfRzfC7uQZzhpLNMSJ1Rj30jGYnMh52c7XZ1F7Nmn3aGuoWHs412qNa81KR
D0xGubdGwoXRtfacunvbiAk8+knsK41DfgYak5X5uM+FalcdU9wVA0d2bBEOOBjQ
ibYIMayOEcK/daCHMgCHtxNhpXhZ3a4f3SPDKE5flmmNT6tHp0uheRicMZedlxKP
yO+Gvoo03Ht0FcdUshKrzp4U8raDS8tuf61uknULuRyCslCI/FIY5Iam394/hXn+
UukSvmV4G7NzazQZTGIN8FwVm7+Is1GcMTQAuJ1i1k9hw9/09pdquK/DfecCAwEA
AaOCAlkwggJVMB0GA1UdDgQWBBQ/PkFD5bD8fxkjVCKl2jwqeLs22jAfBgNVHSME
GDAWgBTd4HwRqC2gIWXsvO5N4cREN1iV5DAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84SDgxbmMxRlhScm0zN202SGp0REJIQkNGSzZEN3VObUVkdGVtUE1jNVBw
by8wL0RERTA3QzExQTgyREEwMjE2NUVDQkNFRTRERTFDNDQ0Mzc1ODk1RTQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRERFMDdDMTFBODJEQTAyMTY1
RUNCQ0VFNERFMUM0NDQzNzU4OTVFNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK
BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
SDgxbmMxRlhScm0zN202SGp0REJIQkNGSzZEN3VObUVkdGVtUE1jNVBwby8wL0RE
RTA3QzExQTgyREEwMjE2NUVDQkNFRTRERTFDNDQ0Mzc1ODk1RTQubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqXEcyJiKoEXn3QW50kGlUrxJO80TjELDXPHr6ExMbDRLDZp4piXZhMmbGglR0
CdtCptw6iZllJq28wu8/oalPTo5gbFPeixrA/5rtWjhvqbu7BsUma4vCySpSbDtS
1Zd2i13cX+hm+xIx9sqVyuHfPZYGWNiPhSmm+bn0Em87aB69G8WmM5kFAZFY9HnG
Dbxg0ZPf5h0lStLAPd6fEuGppGJC+9AERt8/BeNkAoJ/apozHbOVOrBW9D7aNQqP
t+pSbHQULUpt5BuuVAJMtvID/QVnJxtJDhd4PeqSspHjJ0JyqvlBYYZXsvFoHgWi
zkWSODU7AYZB+HXKztPKOOZR
-----END CERTIFICATE-----