Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/0/E10725E2F8420E6F157CA26B6B60229E764C7221.mft
File:                     E10725E2F8420E6F157CA26B6B60229E764C7221.mft (raw, json)
Hash identifier:          BEKA4OPlyCqDlVL61F8ZwWqaukO5MIWsbRi9jsem8O4=
Subject key identifier:   9F:E1:B7:95:42:DA:67:92:1E:2B:03:E3:1C:65:6C:1C:53:2D:79:9E
Authority key identifier: E1:07:25:E2:F8:42:0E:6F:15:7C:A2:6B:6B:60:22:9E:76:4C:72:21
Certificate issuer:       /CN=E10725E2F8420E6F157CA26B6B60229E764C7221
Certificate serial:       6DF9E391C31E5992E9A2669B167B0E9CFF313430
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E10725E2F8420E6F157CA26B6B60229E764C7221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/0/E10725E2F8420E6F157CA26B6B60229E764C7221.mft
Manifest number:          3B
Signing time:             Sun 14 Apr 2024 16:56:36 +0000
Manifest this update:     Sun 14 Apr 2024 16:51:36 +0000
Manifest next update:     Mon 15 Apr 2024 19:49:36 +0000
Files and hashes:         1: E10725E2F8420E6F157CA26B6B60229E764C7221.crl (hash: 33Ltjh8cp2DmIpv9w4QYTjIsjbZw/mjvziHc0r3iWQU=)
                          2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: pOtubBhtH4HCYswQMyeQ+ME7An60ahBOmu52C9IzMwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f9:e3:91:c3:1e:59:92:e9:a2:66:9b:16:7b:0e:9c:ff:31:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E10725E2F8420E6F157CA26B6B60229E764C7221
        Validity
            Not Before: Apr 14 16:51:36 2024 GMT
            Not After : Apr 15 19:49:36 2024 GMT
        Subject: CN=9FE1B79542DA67921E2B03E31C656C1C532D799E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:50:c0:03:89:47:cf:ca:ce:33:58:dd:93:
                    24:bf:66:93:72:ad:43:1f:0c:a4:01:f7:7f:5e:77:
                    cd:2e:f1:eb:ef:92:b3:92:b7:d0:22:b5:8f:01:22:
                    2d:7f:91:56:fd:15:29:91:70:2e:53:8b:c1:dc:78:
                    a3:7c:54:8d:4d:ff:24:94:98:e3:8c:0b:2e:43:82:
                    d5:dd:df:e3:8d:3f:86:93:b6:10:b7:95:10:d1:92:
                    00:07:fc:89:74:de:a6:05:85:7a:71:5d:ac:15:e8:
                    4c:d2:06:f5:e3:44:8d:30:99:b8:a1:c0:27:a6:b8:
                    1a:ad:3d:7f:7c:8d:81:70:e4:b2:55:d6:0e:11:bd:
                    79:97:d7:1f:e0:28:d6:9b:46:8e:b8:87:49:0a:f3:
                    44:b4:4a:99:95:27:f4:73:e3:ce:eb:9d:52:9e:f6:
                    f9:29:3d:eb:f7:91:91:49:b2:89:79:06:22:e6:55:
                    66:06:b2:f5:10:38:29:25:97:f1:f9:82:37:41:e8:
                    41:e0:7e:d3:e4:09:39:50:bb:0b:1a:a0:7d:ad:9a:
                    e4:ac:37:65:fb:74:25:df:d8:4b:71:52:a3:16:8c:
                    70:0f:b9:b6:ce:ab:4d:21:1c:31:98:9f:5d:30:12:
                    fc:ad:12:df:a9:c3:28:ab:6b:5e:f8:31:d9:b8:6a:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E1:B7:95:42:DA:67:92:1E:2B:03:E3:1C:65:6C:1C:53:2D:79:9E
            X509v3 Authority Key Identifier:
                keyid:E1:07:25:E2:F8:42:0E:6F:15:7C:A2:6B:6B:60:22:9E:76:4C:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/0/E10725E2F8420E6F157CA26B6B60229E764C7221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E10725E2F8420E6F157CA26B6B60229E764C7221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/0/E10725E2F8420E6F157CA26B6B60229E764C7221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:ba:47:23:78:63:9d:d3:30:67:eb:d1:9a:31:46:03:27:
         2c:e0:a7:e7:cf:a5:13:6d:74:c5:02:81:70:92:b2:bc:d8:d0:
         f0:f4:67:6f:c7:b0:a0:65:a2:a3:e0:11:f4:80:44:d1:fe:c4:
         a1:26:c8:09:6d:1e:e8:2c:ca:c0:b2:30:b7:41:62:08:7f:d2:
         42:e1:8b:9c:05:d9:7f:09:ba:b5:43:61:9a:1c:25:c2:b1:4c:
         c3:be:6b:c4:93:4b:81:48:5d:de:b6:dc:1a:2f:36:5e:ec:e4:
         4d:ba:51:7b:06:83:e7:5e:4c:40:d7:ea:eb:72:2e:22:41:26:
         64:6c:aa:3c:3c:92:68:b2:64:44:68:79:e5:bf:9a:1b:f8:3d:
         34:5e:59:3e:ec:1c:71:da:0f:8c:42:bc:9b:8c:14:78:4d:d6:
         0c:c6:6a:81:ba:84:33:d8:3a:ce:b6:28:93:b9:67:18:9a:14:
         81:d6:74:3c:17:8a:e9:ac:70:bb:29:9f:60:df:ba:4b:c2:4c:
         3c:36:cf:a4:b6:65:da:92:32:ca:8f:a9:ef:36:42:0d:ce:99:
         d0:91:75:3a:da:0d:7e:9f:da:77:41:4a:5f:ed:5d:84:01:a9:
         ed:8a:9b:d3:4d:5e:cb:0d:e7:05:7c:05:fd:45:a5:99:43:52:
         fd:13:33:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbfnjkcMeWZLpomabFnsOnP8xNDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEwNzI1RTJGODQyMEU2RjE1N0NBMjZCNkI2MDIyOUU3
NjRDNzIyMTAeFw0yNDA0MTQxNjUxMzZaFw0yNDA0MTUxOTQ5MzZaMDMxMTAvBgNV
BAMTKDlGRTFCNzk1NDJEQTY3OTIxRTJCMDNFMzFDNjU2QzFDNTMyRDc5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkclDAA4lHz8rOM1jdkyS/ZpNy
rUMfDKQB939ed80u8evvkrOSt9AitY8BIi1/kVb9FSmRcC5Ti8HceKN8VI1N/ySU
mOOMCy5DgtXd3+ONP4aTthC3lRDRkgAH/Il03qYFhXpxXawV6EzSBvXjRI0wmbih
wCemuBqtPX98jYFw5LJV1g4RvXmX1x/gKNabRo64h0kK80S0SpmVJ/Rz487rnVKe
9vkpPev3kZFJsol5BiLmVWYGsvUQOCkll/H5gjdB6EHgftPkCTlQuwsaoH2tmuSs
N2X7dCXf2EtxUqMWjHAPubbOq00hHDGYn10wEvytEt+pwyira174Mdm4agMJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn+G3lULaZ5IeKwPjHGVsHFMteZ4wHwYDVR0j
BBgwFoAU4Qcl4vhCDm8VfKJra2AinnZMciEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn
eGUvMC9FMTA3MjVFMkY4NDIwRTZGMTU3Q0EyNkI2QjYwMjI5RTc2NEM3MjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxMDcyNUUyRjg0MjBFNkYx
NTdDQTI2QjZCNjAyMjlFNzY0QzcyMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMC9F
MTA3MjVFMkY4NDIwRTZGMTU3Q0EyNkI2QjYwMjI5RTc2NEM3MjIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYcK6RyN4Y53TMGfr0ZoxRgMnLOCn58+lE210xQKBcJKyvNjQ8PRnb8ewoGWi
o+AR9IBE0f7EoSbICW0e6CzKwLIwt0FiCH/SQuGLnAXZfwm6tUNhmhwlwrFMw75r
xJNLgUhd3rbcGi82XuzkTbpRewaD515MQNfq63IuIkEmZGyqPDySaLJkRGh55b+a
G/g9NF5ZPuwccdoPjEK8m4wUeE3WDMZqgbqEM9g6zrYok7lnGJoUgdZ0PBeK6axw
uymfYN+6S8JMPDbPpLZl2pIyyo+p7zZCDc6Z0JF1OtoNfp/ad0FKX+1dhAGp7Yqb
001eyw3nBXwF/UWlmUNS/RMz3w==
-----END CERTIFICATE-----