Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft
File:                     B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft (raw, json)
Hash identifier:          D+Zg8ljEym4qzFdu/gCC7jDiTE7P3HvxJiI8fsqPAxA=
Subject key identifier:   79:0B:08:72:DD:F5:36:05:C9:1D:B9:A2:77:64:D9:80:F1:D5:BC:56
Authority key identifier: B4:2C:E3:FD:4D:95:D4:3B:D3:3F:13:2D:6D:4E:CB:F2:B8:61:20:12
Certificate issuer:       /CN=B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012
Certificate serial:       4C4360D7103C14FB66CF4B8C57AE90007ACE1D8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft
Manifest number:          015A
Signing time:             Mon 15 Apr 2024 08:49:48 +0000
Manifest this update:     Mon 15 Apr 2024 08:44:48 +0000
Manifest next update:     Tue 16 Apr 2024 11:04:48 +0000
Files and hashes:         1: B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.crl (hash: 65hWbU63K3KmHAJOQwHHwLD/6vgTdmwkGkD1VlwjiOY=)
                          2: 3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa (hash: sSzCAo2xncgsHq4fESlumUWH9SQZotC3X+xlx2Qm3rE=)
                          3: 323830343a326131303a3a2f33322d3438203d3e20323634303534.roa (hash: 7ZI2EMY+hTHxY2n1Ycufwy+4J9FGUBUPr7zkk2kia+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:60:d7:10:3c:14:fb:66:cf:4b:8c:57:ae:90:00:7a:ce:1d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012
        Validity
            Not Before: Apr 15 08:44:48 2024 GMT
            Not After : Apr 16 11:04:48 2024 GMT
        Subject: CN=790B0872DDF53605C91DB9A27764D980F1D5BC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:b0:f0:93:af:b9:09:c7:63:c1:0b:de:be:
                    fe:52:58:3c:d6:25:f8:4b:f7:c6:3b:1a:c6:1e:5d:
                    93:00:87:c8:d0:da:24:3b:8d:a9:c9:f3:ab:dc:91:
                    cc:30:cb:99:96:b8:e9:17:2b:2d:fa:98:08:f8:d8:
                    c6:00:a9:0c:4b:e6:58:63:41:16:92:43:d9:08:12:
                    b8:19:8e:25:0c:b2:dc:14:72:eb:1b:74:28:ce:3c:
                    cd:66:c0:df:e4:c9:6f:43:71:5b:92:c4:6b:ea:38:
                    37:b0:eb:9d:b3:02:52:25:56:ce:0d:37:55:6d:fa:
                    62:f2:9c:68:6a:31:33:00:e4:aa:8f:5b:78:e2:e5:
                    bc:55:03:d5:2e:3d:bf:4a:56:42:89:c9:8b:a6:1c:
                    a2:59:c5:57:a3:3a:b2:bd:8e:36:95:63:b0:02:ee:
                    a8:89:ee:b8:82:4a:1f:90:e3:f0:99:1c:c7:10:f2:
                    16:e6:4f:d3:62:e5:4e:12:d2:f0:0f:c7:94:f2:cc:
                    02:7d:43:f8:3e:df:4b:76:d0:4b:f3:c6:71:5e:2a:
                    62:38:b3:87:b3:8c:03:a4:66:4e:05:92:20:3f:a9:
                    d2:9e:20:76:de:3e:9e:b1:74:b2:5e:36:b7:79:91:
                    a0:0a:c2:7f:42:99:c7:13:9d:cf:17:46:ba:88:c9:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:08:72:DD:F5:36:05:C9:1D:B9:A2:77:64:D9:80:F1:D5:BC:56
            X509v3 Authority Key Identifier:
                keyid:B4:2C:E3:FD:4D:95:D4:3B:D3:3F:13:2D:6D:4E:CB:F2:B8:61:20:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/1/B42CE3FD4D95D43BD33F132D6D4ECBF2B8612012.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:0c:25:7f:52:b2:2f:1a:d2:ee:ab:6e:5a:ec:53:dc:06:
         b5:43:73:55:f2:24:2f:fe:68:c9:5b:fc:17:3f:b4:63:d5:88:
         78:12:da:03:c1:74:52:69:f2:13:f9:a6:0f:ac:53:30:0e:07:
         b0:a2:8c:20:9d:a4:95:5b:4a:b2:db:4e:8e:3c:ac:52:57:ac:
         4f:9d:0c:d1:f7:ae:94:3b:83:b8:f8:5d:f5:cd:74:5c:a0:ac:
         52:5a:58:c1:47:85:85:92:0f:45:1a:48:f3:08:39:f0:19:6f:
         2f:91:b2:d9:ce:f7:f3:33:3d:db:88:73:21:26:9f:17:54:b5:
         96:03:24:89:77:dc:0c:8b:5e:06:44:34:fd:06:3f:c7:d1:55:
         ab:e6:4e:ab:0a:af:df:af:c5:5d:22:d4:34:a9:7e:b0:b7:90:
         08:bd:52:00:5c:ef:26:b2:fc:a1:05:c2:53:9b:9a:44:97:02:
         68:f2:d5:19:5a:ec:06:bb:59:18:3b:dd:6e:ec:e1:62:8c:56:
         1c:60:cb:0d:94:dc:c2:23:5e:0d:19:7c:35:ae:a6:ba:ba:37:
         4b:39:b0:0a:ba:e3:73:8f:36:d9:2d:b3:d7:fa:b4:54:ec:84:
         ff:d4:3d:e0:80:51:e7:4b:59:ca:4c:d6:5f:ae:8c:8b:c8:a5:
         dd:87:71:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTENg1xA8FPtmz0uMV66QAHrOHYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQyQ0UzRkQ0RDk1RDQzQkQzM0YxMzJENkQ0RUNCRjJC
ODYxMjAxMjAeFw0yNDA0MTUwODQ0NDhaFw0yNDA0MTYxMTA0NDhaMDMxMTAvBgNV
BAMTKDc5MEIwODcyRERGNTM2MDVDOTFEQjlBMjc3NjREOTgwRjFENUJDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjrDwk6+5CcdjwQvevv5SWDzW
JfhL98Y7GsYeXZMAh8jQ2iQ7janJ86vckcwwy5mWuOkXKy36mAj42MYAqQxL5lhj
QRaSQ9kIErgZjiUMstwUcusbdCjOPM1mwN/kyW9DcVuSxGvqODew652zAlIlVs4N
N1Vt+mLynGhqMTMA5KqPW3ji5bxVA9UuPb9KVkKJyYumHKJZxVejOrK9jjaVY7AC
7qiJ7riCSh+Q4/CZHMcQ8hbmT9Ni5U4S0vAPx5TyzAJ9Q/g+30t20EvzxnFeKmI4
s4ezjAOkZk4FkiA/qdKeIHbePp6xdLJeNrd5kaAKwn9CmccTnc8XRrqIycNdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeQsIct31NgXJHbmid2TZgPHVvFYwHwYDVR0j
BBgwFoAUtCzj/U2V1DvTPxMtbU7L8rhhIBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlVZ003V2tGZ0F3OXB0TkRuc3FvNW5kSFZTcFdDdVhUQW81QlJ6MzdI
akIvMS9CNDJDRTNGRDREOTVENDNCRDMzRjEzMkQ2RDRFQ0JGMkI4NjEyMDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0MkNFM0ZENEQ5NUQ0M0JE
MzNGMTMyRDZENEVDQkYyQjg2MTIwMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXlVZ003V2tGZ0F3OXB0TkRuc3FvNW5kSFZTcFdDdVhUQW81QlJ6MzdIakIvMS9C
NDJDRTNGRDREOTVENDNCRDMzRjEzMkQ2RDRFQ0JGMkI4NjEyMDEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFKgMJX9Ssi8a0u6rblrsU9wGtUNzVfIkL/5oyVv8Fz+0Y9WIeBLaA8F0Umny
E/mmD6xTMA4HsKKMIJ2klVtKsttOjjysUlesT50M0feulDuDuPhd9c10XKCsUlpY
wUeFhZIPRRpI8wg58BlvL5Gy2c738zM924hzISafF1S1lgMkiXfcDIteBkQ0/QY/
x9FVq+ZOqwqv36/FXSLUNKl+sLeQCL1SAFzvJrL8oQXCU5uaRJcCaPLVGVrsBrtZ
GDvdbuzhYoxWHGDLDZTcwiNeDRl8Na6muro3SzmwCrrjc4822S2z1/q0VOyE/9Q9
4IBR50tZykzWX66Mi8il3YdxBA==
-----END CERTIFICATE-----