Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft
File:                     3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft (raw, json)
Hash identifier:          /W4A5NrvNha8R5pTZRsmgt0B4lflc9YxGmHAah8xCSE=
Subject key identifier:   10:F9:20:53:81:1A:FD:C9:08:AA:4D:DF:F2:1A:FF:E4:F8:17:33:DC
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Certificate issuer:       /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial:       7793C42787152484F6BEABB5557C20434B9F2E7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft
Manifest number:          0225
Signing time:             Sun 14 Apr 2024 19:33:50 +0000
Manifest this update:     Sun 14 Apr 2024 19:28:50 +0000
Manifest next update:     Mon 15 Apr 2024 22:30:50 +0000
Files and hashes:         1: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: g3FptgzvOifhf1pzxmcinxrUR/oG31sCMvnWRV/6axE=)
                          2: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: mwMuqql78CWYanxmVCipil7guDvYdvHbs/C7I/n/By8=)
                          3: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: p51nJMtiMzrsIUeyHyFkWYM9p3l9KWCQTOFYKkS4iHA=)
                          4: 3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl (hash: SHb2yZKLxwDrX6QXFY29ortWu+WFIHEJEoy+Qlpq7Lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:c4:27:87:15:24:84:f6:be:ab:b5:55:7c:20:43:4b:9f:2e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
        Validity
            Not Before: Apr 14 19:28:50 2024 GMT
            Not After : Apr 15 22:30:50 2024 GMT
        Subject: CN=10F92053811AFDC908AA4DDFF21AFFE4F81733DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:2c:1c:fa:b8:76:77:50:9e:bf:c1:fd:b9:
                    b9:0c:10:f7:e1:78:72:46:1f:20:05:a2:1b:a0:4d:
                    9b:4e:38:7f:e7:17:22:1f:82:97:a8:ec:e8:15:0c:
                    1a:05:2e:ec:9b:31:fc:18:43:f1:81:ce:80:8f:e4:
                    50:10:18:fe:32:f9:00:d1:18:11:96:2f:54:4f:5d:
                    e8:ee:ed:22:74:ff:37:d2:1f:20:5b:1c:2a:4e:a8:
                    df:d4:53:1d:d3:39:1d:cf:91:8f:25:4d:0a:cc:c7:
                    47:86:16:99:6f:2b:9b:5c:d3:b9:b9:e0:09:a4:86:
                    c7:9e:b6:7a:cf:f3:cd:48:f6:95:47:dc:48:9b:3b:
                    68:1a:e3:a1:8e:1c:93:52:06:b5:fc:3b:81:4d:53:
                    87:1a:be:5b:c3:3a:e3:49:7b:fd:0b:d8:09:8d:27:
                    30:84:22:f6:0e:65:dd:26:59:a7:d8:7f:9d:31:21:
                    00:91:b6:61:5a:32:5f:2b:3d:e3:8d:e7:fc:42:f0:
                    7d:12:4e:6e:99:16:29:33:d5:fb:33:c4:60:b1:0a:
                    6c:17:bd:a0:17:a3:e2:c1:b4:e6:04:65:ac:fb:ff:
                    c3:0f:2c:8c:c3:d5:64:60:68:a6:a3:aa:4e:d1:c2:
                    a5:ab:c3:5c:70:ab:37:76:9e:1d:e8:48:0d:81:74:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:20:53:81:1A:FD:C9:08:AA:4D:DF:F2:1A:FF:E4:F8:17:33:DC
            X509v3 Authority Key Identifier:
                keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:a0:77:96:51:f6:53:dc:cc:e2:e7:c9:f8:1d:67:d2:d5:
         9c:5f:d4:0d:72:49:33:87:3f:41:89:34:9e:31:31:f5:1e:67:
         e6:c0:49:f1:04:f4:b7:9b:64:ed:da:a3:69:ab:e0:fc:9b:db:
         7e:11:d2:8e:7f:93:fa:48:05:0a:ff:f2:34:5d:a3:8a:d6:84:
         d1:47:a1:a2:78:0f:e8:ef:eb:9d:a0:0a:95:a0:9b:de:13:26:
         5b:a8:f0:d9:ed:78:1e:ea:27:22:ca:84:93:dc:61:26:53:1d:
         55:2d:7a:1d:99:14:e3:8d:29:82:50:56:d8:93:ad:09:40:f0:
         7d:6a:83:01:3d:1c:38:d6:43:01:b3:5b:f0:8b:d1:17:4f:71:
         e6:bd:f1:18:27:24:04:f9:9b:1e:52:5d:21:ec:ea:a1:f8:7d:
         f2:21:67:f3:f7:6d:ef:8b:36:0e:9f:ba:b8:4f:8c:8c:ca:2f:
         0f:f5:70:e7:c0:87:7b:84:7b:5c:fd:1f:18:01:f4:d7:59:55:
         e9:b3:02:15:cc:31:57:95:57:b0:61:dc:f3:0d:09:ef:76:b4:
         67:95:b2:d3:79:40:38:a8:62:67:12:d4:47:fe:e9:9e:b6:5a:
         38:eb:e7:6c:2f:07:96:64:11:b1:5c:28:77:3c:8b:37:e2:46:
         85:5d:c8:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd5PEJ4cVJIT2vqu1VXwgQ0ufLnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQTAyMDgzNkE3NzEyRUMwQzNDMTdGQzE2NEQzN0Y1
QUI1RTcwMzAeFw0yNDA0MTQxOTI4NTBaFw0yNDA0MTUyMjMwNTBaMDMxMTAvBgNV
BAMTKDEwRjkyMDUzODExQUZEQzkwOEFBNERERkYyMUFGRkU0RjgxNzMzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ySwc+rh2d1Cev8H9ubkMEPfh
eHJGHyAFohugTZtOOH/nFyIfgpeo7OgVDBoFLuybMfwYQ/GBzoCP5FAQGP4y+QDR
GBGWL1RPXeju7SJ0/zfSHyBbHCpOqN/UUx3TOR3PkY8lTQrMx0eGFplvK5tc07m5
4AmkhseetnrP881I9pVH3EibO2ga46GOHJNSBrX8O4FNU4cavlvDOuNJe/0L2AmN
JzCEIvYOZd0mWafYf50xIQCRtmFaMl8rPeON5/xC8H0STm6ZFikz1fszxGCxCmwX
vaAXo+LBtOYEZaz7/8MPLIzD1WRgaKajqk7RwqWrw1xwqzd2nh3oSA2BdDUDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEPkgU4Ea/ckIqk3f8hr/5PgXM9wwHwYDVR0j
BBgwFoAUPwoCCDancS7Aw8F/wWTTf1q15wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX
b2ovMS8zRjBBMDIwODM2QTc3MTJFQzBDM0MxN0ZDMTY0RDM3RjVBQjVFNzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMEEwMjA4MzZBNzcxMkVD
MEMzQzE3RkMxNjREMzdGNUFCNUU3MDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BXb2ovMS8z
RjBBMDIwODM2QTc3MTJFQzBDM0MxN0ZDMTY0RDM3RjVBQjVFNzAzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXdegd5ZR9lPczOLnyfgdZ9LVnF/UDXJJM4c/QYk0njEx9R5n5sBJ8QT0t5tk
7dqjaavg/JvbfhHSjn+T+kgFCv/yNF2jitaE0UehongP6O/rnaAKlaCb3hMmW6jw
2e14HuonIsqEk9xhJlMdVS16HZkU440pglBW2JOtCUDwfWqDAT0cONZDAbNb8IvR
F09x5r3xGCckBPmbHlJdIezqofh98iFn8/dt74s2Dp+6uE+MjMovD/Vw58CHe4R7
XP0fGAH011lV6bMCFcwxV5VXsGHc8w0J73a0Z5Wy03lAOKhiZxLUR/7pnrZaOOvn
bC8HlmQRsVwodzyLN+JGhV3ITQ==
-----END CERTIFICATE-----