Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.mft
File:                     4AAE15BAEA336D487DDC76FCB730547D5476527A.mft (raw, json)
Hash identifier:          KUAK+YkGbqJ5mSRWJKdqyUSGYUtCvHAoxKM5+OdbOQM=
Subject key identifier:   1D:69:DE:73:B6:4F:CE:7E:1F:27:90:BF:20:A2:E6:28:E2:53:CF:9A
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       30CB0B43B516D1E8393C474D0B4F7331DB469813
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.mft
Manifest number:          FE
Signing time:             Sun 14 Apr 2024 20:49:56 +0000
Manifest this update:     Sun 14 Apr 2024 20:44:56 +0000
Manifest next update:     Mon 15 Apr 2024 21:15:56 +0000
Files and hashes:         1: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (hash: jqLG8uVxZc760TCvK6TciD0N1UhvbudUSHPz7DJRjIk=)
                          2: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (hash: BfclluSfOuwI7YysQGgdjntgHtwPscD/5px/4DafryY=)
                          3: 3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (hash: G4spywcg5VRMwyQd4QNreXnGtRh7D0VBeDaJbz0DC5s=)
                          4: 4AAE15BAEA336D487DDC76FCB730547D5476527A.crl (hash: EKgfLj6tiSfkcQtRd3F60I/OxfnG61FVKRYT/I2DQbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cb:0b:43:b5:16:d1:e8:39:3c:47:4d:0b:4f:73:31:db:46:98:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Apr 14 20:44:56 2024 GMT
            Not After : Apr 15 21:15:56 2024 GMT
        Subject: CN=1D69DE73B64FCE7E1F2790BF20A2E628E253CF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:cf:f2:73:dc:02:25:23:7f:1d:8d:2b:b2:
                    35:2d:08:6f:57:da:8a:e2:4f:47:c7:4b:6b:fb:23:
                    1f:d2:80:ff:fd:c0:ed:33:b2:e3:0e:4f:fe:a2:fd:
                    55:24:98:54:13:42:42:b0:57:69:93:d6:9e:0f:2a:
                    76:12:6f:ff:f7:c8:d5:ab:64:24:4d:6f:2a:99:7b:
                    9f:95:9b:d6:89:01:f4:4d:c0:8b:b2:04:0e:0c:a3:
                    0f:53:97:e2:a9:2c:f2:1b:b9:99:9d:1c:dc:cc:4d:
                    f9:f8:52:c7:1b:83:57:5f:09:8d:00:e4:aa:7f:5e:
                    61:89:38:bf:af:9b:1e:79:ca:06:9b:2b:41:7e:8b:
                    2b:19:cb:27:fb:12:f2:d9:0d:f1:13:88:06:ef:ab:
                    a8:bc:a8:96:ef:61:04:96:b3:0e:1d:f0:c3:64:b6:
                    32:4c:69:c6:a9:d6:00:f9:0c:8f:81:bc:49:07:46:
                    5b:0b:0b:62:8a:93:96:50:e3:9f:87:d4:51:97:07:
                    53:3c:57:68:f2:8a:2f:be:bf:0d:34:42:ae:c7:54:
                    df:2a:97:fe:5a:76:20:07:a4:4e:c3:7f:53:ff:35:
                    ee:f0:c5:90:61:52:66:d5:00:75:62:45:ba:63:21:
                    c2:1e:69:9b:81:5e:fc:3b:5c:22:6b:32:b8:5e:c9:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:DE:73:B6:4F:CE:7E:1F:27:90:BF:20:A2:E6:28:E2:53:CF:9A
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:8a:17:77:90:92:21:ef:46:61:59:83:3e:7b:f7:47:fd:
         f2:98:1a:d8:80:de:aa:96:15:56:ab:2b:91:ac:66:52:bb:7a:
         7f:ee:ba:84:df:12:38:65:83:3d:60:1b:1b:4d:e2:1c:dd:95:
         57:a9:26:d7:ed:9f:7b:56:18:be:bb:03:ca:e0:7d:20:45:e9:
         cd:47:c7:eb:b5:6a:50:7e:7f:8a:45:78:6e:53:1a:fa:e5:87:
         ce:02:0e:b6:0e:3f:f3:97:55:53:c0:e2:45:3a:9c:3e:4f:46:
         4c:45:ff:51:b2:36:6a:c7:61:4f:0d:11:b0:d6:67:fa:d5:ca:
         b9:d1:11:b6:6a:55:c2:92:05:f8:43:c4:23:e1:a3:e2:cf:3c:
         f0:d1:73:8b:9a:60:22:c8:49:af:f3:01:1b:f7:f0:e1:e6:37:
         f8:1d:bf:96:86:ed:8d:d7:5a:c0:a5:71:a9:cd:b9:d3:85:47:
         3e:6a:0c:f6:17:77:5c:9d:f1:aa:e1:91:d1:50:b0:f5:27:88:
         33:3e:bc:b5:eb:b7:0a:b8:84:af:38:57:9e:c0:fb:3f:d2:a0:
         93:c4:b6:db:46:a5:0a:48:6e:6c:80:1f:3f:a4:31:22:f5:80:
         f1:d4:d9:75:a0:56:31:ed:dd:cd:98:86:fe:f5:e4:7e:6f:a3:
         8e:99:2e:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMMsLQ7UW0eg5PEdNC09zMdtGmBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBRTE1QkFFQTMzNkQ0ODdEREM3NkZDQjczMDU0N0Q1
NDc2NTI3QTAeFw0yNDA0MTQyMDQ0NTZaFw0yNDA0MTUyMTE1NTZaMDMxMTAvBgNV
BAMTKDFENjlERTczQjY0RkNFN0UxRjI3OTBCRjIwQTJFNjI4RTI1M0NGOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTf8/yc9wCJSN/HY0rsjUtCG9X
2oriT0fHS2v7Ix/SgP/9wO0zsuMOT/6i/VUkmFQTQkKwV2mT1p4PKnYSb//3yNWr
ZCRNbyqZe5+Vm9aJAfRNwIuyBA4Mow9Tl+KpLPIbuZmdHNzMTfn4Uscbg1dfCY0A
5Kp/XmGJOL+vmx55ygabK0F+iysZyyf7EvLZDfETiAbvq6i8qJbvYQSWsw4d8MNk
tjJMacap1gD5DI+BvEkHRlsLC2KKk5ZQ45+H1FGXB1M8V2jyii++vw00Qq7HVN8q
l/5adiAHpE7Df1P/Ne7wxZBhUmbVAHViRbpjIcIeaZuBXvw7XCJrMrheyTkhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHWnec7ZPzn4fJ5C/IKLmKOJTz5owHwYDVR0j
BBgwFoAUSq4VuuozbUh93Hb8tzBUfVR2UnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt
eVQvMC80QUFFMTVCQUVBMzM2RDQ4N0REQzc2RkNCNzMwNTQ3RDU0NzY1MjdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQUUxNUJBRUEzMzZENDg3
RERDNzZGQ0I3MzA1NDdENTQ3NjUyN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMC80
QUFFMTVCQUVBMzM2RDQ4N0REQzc2RkNCNzMwNTQ3RDU0NzY1MjdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAakWKF3eQkiHvRmFZgz5790f98pga2IDeqpYVVqsrkaxmUrt6f+66hN8SOGWD
PWAbG03iHN2VV6km1+2fe1YYvrsDyuB9IEXpzUfH67VqUH5/ikV4blMa+uWHzgIO
tg4/85dVU8DiRTqcPk9GTEX/UbI2asdhTw0RsNZn+tXKudERtmpVwpIF+EPEI+Gj
4s888NFzi5pgIshJr/MBG/fw4eY3+B2/lobtjddawKVxqc2504VHPmoM9hd3XJ3x
quGR0VCw9SeIMz68teu3CriErzhXnsD7P9Kgk8S220alCkhubIAfP6QxIvWA8dTZ
daBWMe3dzZiG/vXkfm+jjpku1g==
-----END CERTIFICATE-----