Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.mft
File:                     95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.mft (raw, json)
Hash identifier:          ZNhOtAZobpl3cssFreftnv8hNsWttvIADtXjwK2wr8g=
Subject key identifier:   9D:B2:B0:20:1B:4D:71:55:81:88:63:6E:B2:B4:83:06:88:B1:9C:55
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       744932F24A1A6A95323A87A5E41699449A6CE418
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.mft
Manifest number:          035C
Signing time:             Sun 14 Apr 2024 21:20:01 +0000
Manifest this update:     Sun 14 Apr 2024 21:15:01 +0000
Manifest next update:     Tue 16 Apr 2024 00:51:01 +0000
Files and hashes:         1: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: 6BiQ1CAC3oypPnSigkjPUyn1L8oVq0ONh3aDqY+YYNw=)
                          2: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: Q6YI9dBaRw3gjibtgHQ2w0HwlZzh0q1AfM6NKsnzmOg=)
                          3: 3138372e3131302e3136302e302f32302d3234203d3e203533313138.roa (hash: 6nb/iHQmFLddb3CNGMB4QDOZ2DcymKlYkBykW9gBV/0=)
                          4: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: eXY0OubRz1ypiYoI/Qw5miPN97e4bxdJMM4uDMMFNJo=)
                          5: 95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl (hash: Tf1AKSWDsIVeqUp0C2AleaU/bhmKXx9SIWXzruFA4ik=)
                          6: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: WaAv0T9fzH6bzueWdI1Uba+JuD4csqVCuNIUs5Pme/s=)
                          7: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: 3qf1b/I0npY168Hxi/92dnTJwzJVV85vXaXxbCjlvBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:49:32:f2:4a:1a:6a:95:32:3a:87:a5:e4:16:99:44:9a:6c:e4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Apr 14 21:15:01 2024 GMT
            Not After : Apr 16 00:51:01 2024 GMT
        Subject: CN=9DB2B0201B4D71558188636EB2B4830688B19C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:de:25:a1:b4:c7:9f:9f:54:db:be:cb:6d:
                    83:99:4f:ae:ac:87:98:bc:1c:31:64:ff:93:70:1d:
                    2e:56:46:2e:04:b0:07:ef:3b:e5:be:4f:d5:64:c6:
                    12:60:75:37:6c:d6:d6:3b:a9:a6:8e:30:ba:22:97:
                    f2:32:5d:77:8a:6a:3e:57:83:c6:d2:e3:8a:7b:2b:
                    1d:cf:98:1c:3b:e0:70:91:d2:84:51:03:0b:65:34:
                    70:e9:57:ce:82:fb:b4:88:e0:62:e8:a2:26:f0:f6:
                    6f:17:fd:48:e0:a1:94:0d:12:27:ad:3e:f7:4a:55:
                    44:87:ed:d8:0f:9e:73:48:71:ab:38:1b:ec:fb:01:
                    2b:bf:e5:00:88:c6:21:83:19:a0:bd:a5:8d:e8:43:
                    4f:9b:5d:ef:aa:0d:a3:76:58:f1:47:f5:37:97:e6:
                    5b:12:da:c0:42:82:9e:19:3f:45:1e:f6:f5:cb:e3:
                    22:89:67:29:d1:cf:28:65:92:54:d1:ce:00:53:4b:
                    ba:d0:a5:ff:d7:c4:e8:cb:f4:9a:9c:27:59:9d:a3:
                    f7:e0:2a:73:89:7c:75:4b:ca:c3:57:95:32:1d:94:
                    46:16:4c:3a:a9:7c:af:02:9b:09:6c:b0:2f:b4:9e:
                    6e:02:31:0e:a4:0b:2b:63:50:30:d5:09:ed:2c:4f:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:B0:20:1B:4D:71:55:81:88:63:6E:B2:B4:83:06:88:B1:9C:55
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:44:38:2e:7c:b4:99:f2:d0:7b:eb:6b:fc:0d:f6:1f:b6:68:
         fc:3b:1a:01:5d:16:20:21:e0:64:a8:f0:23:a4:62:68:c7:f8:
         61:c4:e5:82:1a:9e:ff:80:8f:e8:bc:fa:80:70:7a:88:13:c3:
         38:e1:2d:e1:52:e0:f2:22:77:56:b1:be:16:e5:0e:92:0c:32:
         2c:e2:45:fc:5b:2e:f1:45:a5:81:5b:cf:2b:0d:d7:86:51:13:
         f9:b2:a8:29:a1:e5:1b:eb:06:9f:94:c0:be:66:10:4f:e4:8b:
         24:84:b0:63:c4:8b:9a:b5:21:fe:a9:9b:1b:81:0a:61:bf:b6:
         19:1e:f0:93:c3:44:bd:ec:6e:ab:d4:7b:31:e7:47:0c:77:3f:
         d8:0e:5a:b9:43:81:53:de:5c:ff:3a:82:13:0d:38:eb:d8:fc:
         cf:56:ab:dc:b0:6c:4a:9a:68:8b:8c:0a:da:dc:47:a5:24:12:
         e4:fe:2a:bc:7a:0e:ae:f0:fd:0a:f0:90:d5:36:42:83:37:4d:
         ab:49:0c:1f:25:60:b8:0d:33:45:ba:e8:b0:a2:f0:fe:a7:12:
         93:95:12:16:d9:86:1b:0b:da:09:68:e8:ee:75:87:e1:6f:c4:
         ab:56:41:e2:bf:db:c3:65:ca:7f:c8:5c:19:89:39:e4:83:b3:
         d5:c4:a0:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdEky8koaapUyOoel5BaZRJps5BgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yNDA0MTQyMTE1MDFaFw0yNDA0MTYwMDUxMDFaMDMxMTAvBgNV
BAMTKDlEQjJCMDIwMUI0RDcxNTU4MTg4NjM2RUIyQjQ4MzA2ODhCMTlDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYBt4lobTHn59U277LbYOZT66s
h5i8HDFk/5NwHS5WRi4EsAfvO+W+T9VkxhJgdTds1tY7qaaOMLoil/IyXXeKaj5X
g8bS44p7Kx3PmBw74HCR0oRRAwtlNHDpV86C+7SI4GLooibw9m8X/UjgoZQNEiet
PvdKVUSH7dgPnnNIcas4G+z7ASu/5QCIxiGDGaC9pY3oQ0+bXe+qDaN2WPFH9TeX
5lsS2sBCgp4ZP0Ue9vXL4yKJZynRzyhlklTRzgBTS7rQpf/XxOjL9JqcJ1mdo/fg
KnOJfHVLysNXlTIdlEYWTDqpfK8CmwlssC+0nm4CMQ6kCytjUDDVCe0sT3YrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnbKwIBtNcVWBiGNusrSDBoixnFUwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMC85
NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOUQ4Lny0mfLQe+tr/A32H7Zo/DsaAV0WICHgZKjwI6RiaMf4YcTlghqe/4CP
6Lz6gHB6iBPDOOEt4VLg8iJ3VrG+FuUOkgwyLOJF/Fsu8UWlgVvPKw3XhlET+bKo
KaHlG+sGn5TAvmYQT+SLJISwY8SLmrUh/qmbG4EKYb+2GR7wk8NEvexuq9R7MedH
DHc/2A5auUOBU95c/zqCEw0469j8z1ar3LBsSppoi4wK2txHpSQS5P4qvHoOrvD9
CvCQ1TZCgzdNq0kMHyVguA0zRbrosKLw/qcSk5USFtmGGwvaCWjo7nWH4W/Eq1ZB
4r/bw2XKf8hcGYk55IOz1cSgnw==
-----END CERTIFICATE-----