Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.mft
File:                     3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.mft (raw, json)
Hash identifier:          DwHutoPyvDoFMm6VlnRlPHzCYTw6ngEBjF9RB5mQ/Ec=
Subject key identifier:   DE:C8:E1:88:15:1B:9F:99:4C:CB:03:7D:35:D9:8A:B9:D0:8D:C5:DB
Authority key identifier: 3C:43:DD:2B:D3:F6:88:66:AD:B7:8F:A7:B1:A4:32:A1:39:53:AD:B8
Certificate issuer:       /CN=3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8
Certificate serial:       3829C903FA1CE1C0762AC155355CF04EB70A586B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.mft
Manifest number:          01F0
Signing time:             Mon 15 Apr 2024 09:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:41 +0000
Manifest next update:     Tue 16 Apr 2024 10:36:41 +0000
Files and hashes:         1: 323830343a383762343a3a2f33322d313238203d3e20323732373237.roa (hash: N3NB2fnankypEndX18sHlOC1O/4NUtgiE4Ic99KtGFY=)
                          2: 3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.crl (hash: 6J75PWv8OWaUjGYc4IPl1G6r6/vaaWdem/UbtmXAmls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:29:c9:03:fa:1c:e1:c0:76:2a:c1:55:35:5c:f0:4e:b7:0a:58:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8
        Validity
            Not Before: Apr 15 09:16:41 2024 GMT
            Not After : Apr 16 10:36:41 2024 GMT
        Subject: CN=DEC8E188151B9F994CCB037D35D98AB9D08DC5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:75:30:48:70:4b:92:39:4c:30:67:47:23:
                    2e:6e:a7:4e:65:1e:aa:8f:a5:2f:c1:ae:52:dd:75:
                    66:f2:f6:a6:71:09:31:56:53:d5:ce:9a:fe:50:01:
                    28:b5:5a:8f:97:b5:de:c4:ea:a6:69:fe:3f:bf:14:
                    0e:53:b6:c5:74:ea:82:66:1b:62:08:7a:bb:8b:f3:
                    de:63:5d:54:3b:16:c8:11:06:16:de:d7:2f:0f:c0:
                    c4:60:f9:bf:a9:3e:c8:0c:a7:2a:64:90:ad:34:ad:
                    25:2e:63:09:06:df:0d:35:12:a9:71:4d:d4:d7:b6:
                    28:32:41:b4:c8:91:0b:72:07:19:4d:39:de:28:ff:
                    c2:7f:69:ac:d0:5a:1d:4e:66:85:d2:e1:d4:65:d1:
                    1d:ed:38:e1:0e:2f:cf:6f:89:ff:77:21:b9:84:e3:
                    8a:83:52:80:97:d0:c4:b5:24:a6:64:c3:7b:55:44:
                    90:6a:6d:fb:dd:83:df:3c:38:21:68:a7:3e:ed:71:
                    79:79:35:41:70:65:49:73:91:fe:08:6c:e0:46:8c:
                    10:31:8e:05:66:5e:f2:22:4b:d2:f5:1e:cc:26:72:
                    37:ae:80:94:2d:09:5c:22:99:2f:c9:52:71:1d:ff:
                    0a:85:ae:4f:f1:ba:33:fa:3f:2d:44:93:c3:e6:f0:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C8:E1:88:15:1B:9F:99:4C:CB:03:7D:35:D9:8A:B9:D0:8D:C5:DB
            X509v3 Authority Key Identifier:
                keyid:3C:43:DD:2B:D3:F6:88:66:AD:B7:8F:A7:B1:A4:32:A1:39:53:AD:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/3C43DD2BD3F68866ADB78FA7B1A432A13953ADB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:24:80:9e:ec:50:ef:05:32:1e:93:38:e8:60:47:b0:80:57:
         42:e2:17:e0:32:5a:19:0e:5c:d0:5e:7f:ce:b5:a1:77:2e:fa:
         12:00:07:d2:a0:c3:c1:b7:ba:f7:9a:8a:0c:a6:70:5f:80:4d:
         23:a8:d8:35:d1:6b:9b:7e:5f:d6:d0:c7:de:65:8d:ad:86:74:
         44:60:09:ae:5f:1d:fb:1d:57:6f:de:39:56:0f:22:6b:1c:a7:
         9e:b6:c3:8f:6c:88:8b:d1:1b:5c:d3:bf:75:05:fe:38:54:37:
         78:97:5d:11:ca:f4:fd:d5:d4:5f:1f:9c:74:00:bf:11:bc:ed:
         bf:b9:68:58:5c:8e:c9:98:20:e0:73:f4:7b:99:a9:ea:d3:c4:
         23:00:ae:af:d6:48:62:41:81:5a:fa:4d:a5:e8:e5:ab:39:64:
         11:61:e2:d8:dc:a4:9b:39:51:c0:d9:4b:29:3e:1e:75:23:d5:
         65:d1:86:5f:28:9c:21:28:65:5f:bf:5d:fb:34:ac:96:ef:62:
         36:73:9f:a9:29:ff:04:92:70:68:cd:1e:c9:33:28:9e:00:8a:
         a6:00:13:55:95:13:ff:7b:24:78:8c:14:27:3a:7e:ed:23:64:
         a7:32:65:b2:6f:30:88:9b:f0:48:df:f7:b6:7f:cf:a3:b3:e5:
         86:d9:fe:e2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOCnJA/oc4cB2KsFVNVzwTrcKWGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M0M0REMkJEM0Y2ODg2NkFEQjc4RkE3QjFBNDMyQTEz
OTUzQURCODAeFw0yNDA0MTUwOTE2NDFaFw0yNDA0MTYxMDM2NDFaMDMxMTAvBgNV
BAMTKERFQzhFMTg4MTUxQjlGOTk0Q0NCMDM3RDM1RDk4QUI5RDA4REM1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgXUwSHBLkjlMMGdHIy5up05l
HqqPpS/BrlLddWby9qZxCTFWU9XOmv5QASi1Wo+Xtd7E6qZp/j+/FA5TtsV06oJm
G2IIeruL895jXVQ7FsgRBhbe1y8PwMRg+b+pPsgMpypkkK00rSUuYwkG3w01Eqlx
TdTXtigyQbTIkQtyBxlNOd4o/8J/aazQWh1OZoXS4dRl0R3tOOEOL89vif93IbmE
44qDUoCX0MS1JKZkw3tVRJBqbfvdg988OCFopz7tcXl5NUFwZUlzkf4IbOBGjBAx
jgVmXvIiS9L1HswmcjeugJQtCVwimS/JUnEd/wqFrk/xujP6Py1Ek8Pm8EhJAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU3sjhiBUbn5lMywN9NdmKudCNxdswHwYDVR0j
BBgwFoAUPEPdK9P2iGatt4+nsaQyoTlTrbgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9tdlF4VGdSWXhVbUFUS2NnQ3FlNjRNZERDS0dOazNraVZMcDFVS053aFJO
LzAvM0M0M0REMkJEM0Y2ODg2NkFEQjc4RkE3QjFBNDMyQTEzOTUzQURCOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8zQzQzREQyQkQzRjY4ODY2QURC
NzhGQTdCMUE0MzJBMTM5NTNBREI4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL212
UXhUZ1JZeFVtQVRLY2dDcWU2NE1kRENLR05rM2tpVkxwMVVLTndoUk4vMC8zQzQz
REQyQkQzRjY4ODY2QURCNzhGQTdCMUE0MzJBMTM5NTNBREI4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
piSAnuxQ7wUyHpM46GBHsIBXQuIX4DJaGQ5c0F5/zrWhdy76EgAH0qDDwbe695qK
DKZwX4BNI6jYNdFrm35f1tDH3mWNrYZ0RGAJrl8d+x1Xb945Vg8iaxynnrbDj2yI
i9EbXNO/dQX+OFQ3eJddEcr0/dXUXx+cdAC/Ebztv7loWFyOyZgg4HP0e5mp6tPE
IwCur9ZIYkGBWvpNpejlqzlkEWHi2NykmzlRwNlLKT4edSPVZdGGXyicIShlX79d
+zSslu9iNnOfqSn/BJJwaM0eyTMongCKpgATVZUT/3skeIwUJzp+7SNkpzJlsm8w
iJvwSN/3tn/Po7Plhtn+4g==
-----END CERTIFICATE-----