Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
File:                     AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft (raw, json)
Hash identifier:          vxMEvNT8LDUHoh8ir4whPt003GQHJkrGVElUj2/vy/M=
Subject key identifier:   2B:B4:1F:8D:B8:90:CC:3D:B5:6B:FB:B9:F2:B3:04:69:40:A0:A2:D1
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Certificate issuer:       /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial:       71444E0DBB466465A5F2ACBD7CE2EBD973AC2B7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
Manifest number:          4B
Signing time:             Sun 14 Apr 2024 15:49:55 +0000
Manifest this update:     Sun 14 Apr 2024 15:44:55 +0000
Manifest next update:     Mon 15 Apr 2024 19:42:55 +0000
Files and hashes:         1: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: 0KUTXNgpxOk42MbtBHoHJUSo9wacb+pUT/drXEmeJuA=)
                          2: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: grquM0etDMv6Swf8SSxpXwmjnIcSVxqWpcP1bqm/ks0=)
                          3: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: D66J2ZSbcKjsJfSeJ7CxCPTndvslU6KhPqCQ8nJPICs=)
                          4: AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl (hash: 6mjRbBpKgFpohfCh8uJkdqZ5Plokn1Vk4wUs1yxwDIQ=)
                          5: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: DSczuPL5JzyCjpisTZJ0cls6AyAcw7SOsltR0aEoDQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:44:4e:0d:bb:46:64:65:a5:f2:ac:bd:7c:e2:eb:d9:73:ac:2b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
        Validity
            Not Before: Apr 14 15:44:55 2024 GMT
            Not After : Apr 15 19:42:55 2024 GMT
        Subject: CN=2BB41F8DB890CC3DB56BFBB9F2B3046940A0A2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:a2:c7:7c:61:dc:a0:c6:c8:08:bf:36:ce:
                    c8:bb:56:2b:d0:c9:0d:c1:86:0c:25:55:d6:e4:c2:
                    78:c0:3f:b0:6e:8c:e3:1c:7a:b8:c6:7f:78:89:14:
                    0c:00:d1:60:ab:83:e6:f4:96:9b:07:2a:cd:46:c8:
                    5f:30:f9:4a:2e:8d:81:5c:7d:2f:8f:c8:9d:70:eb:
                    84:3c:8a:b7:0b:5a:3b:31:36:1b:52:0b:b6:0d:7f:
                    2f:65:8a:c4:5e:e5:15:fb:ee:cb:48:c8:65:08:e9:
                    48:c8:e8:1a:17:f6:91:f6:f4:b6:71:0e:5f:dc:45:
                    9a:f1:46:b8:0a:03:05:8f:95:8e:af:f1:f1:0b:78:
                    a5:d9:21:17:16:05:49:cf:19:bc:1e:66:fc:de:fb:
                    bd:cc:22:38:7e:9b:f2:a4:a2:ff:47:44:2f:d9:7a:
                    25:23:06:9c:24:09:95:f9:54:7a:93:60:bb:30:d2:
                    54:ba:75:e0:e5:03:d8:ce:9f:dc:1d:17:4d:7b:e0:
                    31:23:ae:3e:8f:c0:43:45:cd:68:6b:7f:44:7c:54:
                    47:0f:39:15:30:ce:5e:a9:f1:54:ed:2a:7d:cf:dd:
                    a6:10:dc:70:bf:ef:c0:70:f3:17:0f:d7:3d:e9:44:
                    eb:5e:d3:6e:41:68:05:5d:85:fa:be:68:79:25:e2:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B4:1F:8D:B8:90:CC:3D:B5:6B:FB:B9:F2:B3:04:69:40:A0:A2:D1
            X509v3 Authority Key Identifier:
                keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5d:42:de:73:05:c8:4b:17:8c:2f:ef:97:55:b8:e4:24:a2:
         7b:02:a5:06:59:2f:a3:fc:c6:ab:b5:a0:2f:e0:89:10:0f:70:
         0f:31:6e:10:9e:b5:f2:f2:27:f9:b1:04:30:40:f8:37:52:98:
         0c:d5:24:4d:c9:b1:69:42:cf:9b:bf:d2:3b:ac:59:4f:f8:3c:
         5d:61:28:0a:3e:b6:6a:1a:df:5c:61:b9:1c:97:3b:f5:5c:6f:
         1a:bb:e3:25:31:35:8a:44:79:f9:28:94:09:98:c3:0e:62:34:
         ba:22:03:a1:07:09:a5:3c:99:68:fd:ee:2f:3f:19:ad:14:0b:
         ee:48:ac:e0:8b:23:77:b0:14:af:53:81:d1:ab:02:e3:f6:db:
         cf:39:11:12:85:c4:45:99:55:a8:e7:25:9d:fe:ae:43:4f:be:
         74:06:31:17:ce:b5:61:2f:78:f6:a2:e4:82:99:8e:79:01:c5:
         e6:c2:d3:78:64:71:b7:04:b6:e7:d9:f6:e8:76:a6:2d:f4:b4:
         fd:1f:46:2b:40:cf:c5:07:77:89:42:aa:f0:a4:8b:18:5d:b6:
         97:30:c7:50:66:26:51:ce:15:b4:93:36:10:12:0e:23:73:c0:
         c8:c0:3e:3b:44:b2:24:7e:d7:61:c6:8b:2b:81:b9:da:18:db:
         66:38:21:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcURODbtGZGWl8qy9fOLr2XOsK38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUzNDM5QTE0RUZFOThEQjc3NUFDRUMyQTFFNEY1QTdG
N0MzMUM4MDAeFw0yNDA0MTQxNTQ0NTVaFw0yNDA0MTUxOTQyNTVaMDMxMTAvBgNV
BAMTKDJCQjQxRjhEQjg5MENDM0RCNTZCRkJCOUYyQjMwNDY5NDBBMEEyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcaLHfGHcoMbICL82zsi7VivQ
yQ3BhgwlVdbkwnjAP7BujOMcerjGf3iJFAwA0WCrg+b0lpsHKs1GyF8w+UoujYFc
fS+PyJ1w64Q8ircLWjsxNhtSC7YNfy9lisRe5RX77stIyGUI6UjI6BoX9pH29LZx
Dl/cRZrxRrgKAwWPlY6v8fELeKXZIRcWBUnPGbweZvze+73MIjh+m/Kkov9HRC/Z
eiUjBpwkCZX5VHqTYLsw0lS6deDlA9jOn9wdF0174DEjrj6PwENFzWhrf0R8VEcP
ORUwzl6p8VTtKn3P3aYQ3HC/78Bw8xcP1z3pROte025BaAVdhfq+aHkl4i5RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK7QfjbiQzD21a/u58rMEaUCgotEwHwYDVR0j
BBgwFoAUrjQ5oU7+mNt3Ws7CoeT1p/fDHIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl
bncvMC9BRTM0MzlBMTRFRkU5OERCNzc1QUNFQzJBMUU0RjVBN0Y3QzMxQzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFMzQzOUExNEVGRTk4REI3
NzVBQ0VDMkExRTRGNUE3RjdDMzFDODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMC9B
RTM0MzlBMTRFRkU5OERCNzc1QUNFQzJBMUU0RjVBN0Y3QzMxQzgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXV1C3nMFyEsXjC/vl1W45CSiewKlBlkvo/zGq7WgL+CJEA9wDzFuEJ618vIn
+bEEMED4N1KYDNUkTcmxaULPm7/SO6xZT/g8XWEoCj62ahrfXGG5HJc79VxvGrvj
JTE1ikR5+SiUCZjDDmI0uiIDoQcJpTyZaP3uLz8ZrRQL7kis4Isjd7AUr1OB0asC
4/bbzzkREoXERZlVqOclnf6uQ0++dAYxF861YS949qLkgpmOeQHF5sLTeGRxtwS2
59n26HamLfS0/R9GK0DPxQd3iUKq8KSLGF22lzDHUGYmUc4VtJM2EBIOI3PAyMA+
O0SyJH7XYcaLK4G52hjbZjghzw==
-----END CERTIFICATE-----