Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.mft
File:                     49DBFB82F89F508D776B3DE618ECEE3C68EC372D.mft (raw, json)
Hash identifier:          mXDxqaa+B1eDinQ9QA5Rz6i4YDjTLaE4zStOw/SlLpY=
Subject key identifier:   11:DF:0E:2E:1E:1A:BB:6F:F0:7F:81:5F:F7:E8:1E:CA:43:D2:20:67
Authority key identifier: 49:DB:FB:82:F8:9F:50:8D:77:6B:3D:E6:18:EC:EE:3C:68:EC:37:2D
Certificate issuer:       /CN=49DBFB82F89F508D776B3DE618ECEE3C68EC372D
Certificate serial:       3E12C249E0070485A66A1249EDDA90B8D062C2B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.mft
Manifest number:          35
Signing time:             Mon 13 May 2024 09:31:16 +0000
Manifest this update:     Mon 13 May 2024 09:26:16 +0000
Manifest next update:     Tue 14 May 2024 11:00:16 +0000
Files and hashes:         1: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: 5pDXYeb9BJCrSzfhUmCDU3R10e7RwWtEInHeIMnBTMI=)
                          2: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: TFcLAEH0djQfJT0/iTUoxrE5LZKvjc7BgCfR80mozmI=)
                          3: 49DBFB82F89F508D776B3DE618ECEE3C68EC372D.crl (hash: AqDqLUMNYDGDxeQ63+lQvGroZWpgdhNJ/ggNAXvgbUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:c2:49:e0:07:04:85:a6:6a:12:49:ed:da:90:b8:d0:62:c2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBFB82F89F508D776B3DE618ECEE3C68EC372D
        Validity
            Not Before: May 13 09:26:16 2024 GMT
            Not After : May 14 11:00:16 2024 GMT
        Subject: CN=11DF0E2E1E1ABB6FF07F815FF7E81ECA43D22067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:e7:1d:cc:ea:92:b4:e1:9a:96:c5:40:2e:
                    b2:bd:b6:de:0b:4e:5e:5f:6b:94:25:bc:49:e6:21:
                    5e:11:e7:70:83:89:1b:a5:fb:f0:bf:42:d8:51:95:
                    c8:3d:49:8e:4e:e6:be:fb:a6:d4:16:ab:04:0d:a2:
                    21:cd:44:c5:41:a1:58:f2:7e:26:19:1e:1f:04:88:
                    a6:e5:37:a0:0b:82:47:ba:ce:d2:41:35:50:2c:16:
                    2b:72:88:94:31:e5:5a:d0:4c:6e:38:ff:34:79:88:
                    a0:12:d8:b8:cf:9d:cc:7c:8c:26:43:07:fb:0b:9d:
                    8a:7f:6b:e1:b2:92:4f:7c:39:41:a5:f2:17:a0:cb:
                    ed:8e:bc:10:24:fc:59:53:58:24:4d:28:92:78:af:
                    70:ef:fa:3c:4a:9e:27:fe:07:66:26:4f:e7:43:31:
                    a1:9f:19:2a:5b:40:ad:fe:c5:e4:6f:2b:74:06:5c:
                    8c:f8:2b:8e:4c:7f:bf:ca:a3:ae:65:48:25:b1:16:
                    66:66:e0:ef:bd:17:58:43:5c:c8:1c:59:68:f3:ef:
                    ca:de:9d:2e:5b:1b:07:24:4f:b7:a3:1a:0c:5f:20:
                    31:bd:9c:74:9f:c4:83:dc:a3:31:e8:54:55:d2:34:
                    56:c5:16:d6:8c:a9:ff:82:08:b6:8a:ed:dc:ec:03:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DF:0E:2E:1E:1A:BB:6F:F0:7F:81:5F:F7:E8:1E:CA:43:D2:20:67
            X509v3 Authority Key Identifier:
                keyid:49:DB:FB:82:F8:9F:50:8D:77:6B:3D:E6:18:EC:EE:3C:68:EC:37:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/1/49DBFB82F89F508D776B3DE618ECEE3C68EC372D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:14:71:cd:3a:af:33:a9:c9:00:10:04:f4:9c:24:1c:ef:8c:
         8e:74:12:c1:8c:a6:98:24:cd:5a:4b:3c:1f:bf:3a:34:88:b8:
         04:b6:e6:82:43:d9:c3:0b:44:6b:b8:8f:33:fa:8d:cf:99:84:
         40:c7:0c:ef:f6:21:47:b3:e7:74:5f:ff:84:f7:48:9b:53:15:
         0b:60:a7:29:33:d9:62:78:93:f9:a3:46:d2:30:e9:db:5f:3a:
         02:24:ea:29:45:ab:ff:35:0d:bc:9a:d6:5a:d5:3c:72:fd:54:
         90:8b:ac:fa:05:6b:ff:c0:c2:70:12:ab:ca:4a:61:f1:b5:22:
         0f:6c:a8:20:c3:22:6a:4a:bc:23:be:a4:95:ea:c9:c1:f4:ec:
         6a:bb:95:2b:91:0c:6c:5f:78:eb:fb:0c:36:74:ce:77:b0:be:
         1a:1f:cb:da:d4:2b:79:be:99:fe:1a:9b:7c:1a:4b:54:e2:2a:
         a5:71:75:e2:5d:fc:de:4c:28:f7:26:da:7c:fc:24:52:c9:fc:
         f5:a0:2e:3d:23:c9:a9:f0:b4:92:92:06:53:96:52:92:6b:37:
         9d:94:a2:43:b7:80:24:1a:ce:26:9e:92:cc:a9:4b:fa:4b:a3:
         2f:a1:78:52:96:74:61:eb:94:81:09:35:7f:31:da:30:57:2f:
         0a:24:19:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPhLCSeAHBIWmahJJ7dqQuNBiwrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlEQkZCODJGODlGNTA4RDc3NkIzREU2MThFQ0VFM0M2
OEVDMzcyRDAeFw0yNDA1MTMwOTI2MTZaFw0yNDA1MTQxMTAwMTZaMDMxMTAvBgNV
BAMTKDExREYwRTJFMUUxQUJCNkZGMDdGODE1RkY3RTgxRUNBNDNEMjIwNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZucdzOqStOGalsVALrK9tt4L
Tl5fa5QlvEnmIV4R53CDiRul+/C/QthRlcg9SY5O5r77ptQWqwQNoiHNRMVBoVjy
fiYZHh8EiKblN6ALgke6ztJBNVAsFityiJQx5VrQTG44/zR5iKAS2LjPncx8jCZD
B/sLnYp/a+Gykk98OUGl8hegy+2OvBAk/FlTWCRNKJJ4r3Dv+jxKnif+B2YmT+dD
MaGfGSpbQK3+xeRvK3QGXIz4K45Mf7/Ko65lSCWxFmZm4O+9F1hDXMgcWWjz78re
nS5bGwckT7ejGgxfIDG9nHSfxIPcozHoVFXSNFbFFtaMqf+CCLaK7dzsA0HPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEd8OLh4au2/wf4Ff9+geykPSIGcwHwYDVR0j
BBgwFoAUSdv7gvifUI13az3mGOzuPGjsNy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003
ZW0vMS80OURCRkI4MkY4OUY1MDhENzc2QjNERTYxOEVDRUUzQzY4RUMzNzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5REJGQjgyRjg5RjUwOEQ3
NzZCM0RFNjE4RUNFRTNDNjhFQzM3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003ZW0vMS80
OURCRkI4MkY4OUY1MDhENzc2QjNERTYxOEVDRUUzQzY4RUMzNzJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARRRxzTqvM6nJABAE9JwkHO+MjnQSwYymmCTNWks8H786NIi4BLbmgkPZwwtE
a7iPM/qNz5mEQMcM7/YhR7PndF//hPdIm1MVC2CnKTPZYniT+aNG0jDp2186AiTq
KUWr/zUNvJrWWtU8cv1UkIus+gVr/8DCcBKrykph8bUiD2yoIMMiakq8I76klerJ
wfTsaruVK5EMbF946/sMNnTOd7C+Gh/L2tQreb6Z/hqbfBpLVOIqpXF14l383kwo
9ybafPwkUsn89aAuPSPJqfC0kpIGU5ZSkms3nZSiQ7eAJBrOJp6SzKlL+kujL6F4
UpZ0YeuUgQk1fzHaMFcvCiQZ7w==
-----END CERTIFICATE-----