Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.mft
File:                     3BE2C14580F555875E86C70709C91B4FC1DBFFB0.mft (raw, json)
Hash identifier:          GCm4ESHFHrQUVs1jJnwvOIGBIJJy69taGKV5S4w8K7Q=
Subject key identifier:   85:20:4C:0E:1C:17:BC:4C:1C:47:87:EF:DA:B7:91:6D:54:0E:5D:57
Authority key identifier: 3B:E2:C1:45:80:F5:55:87:5E:86:C7:07:09:C9:1B:4F:C1:DB:FF:B0
Certificate issuer:       /CN=3BE2C14580F555875E86C70709C91B4FC1DBFFB0
Certificate serial:       52F2AF558978B922D2AF6FA246829D949A46FDA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.mft
Manifest number:          035C
Signing time:             Mon 15 Apr 2024 04:10:28 +0000
Manifest this update:     Mon 15 Apr 2024 04:05:28 +0000
Manifest next update:     Tue 16 Apr 2024 06:08:28 +0000
Files and hashes:         1: 34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (hash: jYRAqx9FWdTt5oM2kjOXKFOIEwEiUCd4ITDkc1DI8UM=)
                          2: 323830343a346633343a3a2f33322d3334203d3e20323638333131.roa (hash: sO+h9zNk/hKnrMYSkB+8dxk49qkxxravsZRM+aEGI3A=)
                          3: 3BE2C14580F555875E86C70709C91B4FC1DBFFB0.crl (hash: sCUPPRBwtZs8aMUiHVp3lVPKmXeFvEIq9PtXoCNVhVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f2:af:55:89:78:b9:22:d2:af:6f:a2:46:82:9d:94:9a:46:fd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE2C14580F555875E86C70709C91B4FC1DBFFB0
        Validity
            Not Before: Apr 15 04:05:28 2024 GMT
            Not After : Apr 16 06:08:28 2024 GMT
        Subject: CN=85204C0E1C17BC4C1C4787EFDAB7916D540E5D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:6e:49:5f:72:eb:82:af:07:a3:90:7b:d5:
                    ab:37:aa:ba:4b:4e:12:31:80:25:cb:a2:ee:e7:3d:
                    9c:1b:2d:13:5c:03:db:ad:ae:7b:16:a0:47:03:0c:
                    53:56:ac:c5:5c:68:aa:b8:ff:5b:53:cb:79:a6:90:
                    35:a6:5a:70:56:ed:74:d4:61:e4:25:45:7f:1e:46:
                    67:d8:1d:3f:5a:6c:82:19:13:39:12:d4:68:b8:41:
                    f7:56:b6:73:6f:0f:40:84:e9:f4:5a:91:e8:94:38:
                    e2:28:9d:87:a5:06:0e:25:0e:29:70:3c:58:95:60:
                    79:2c:71:90:78:8c:79:d1:ae:63:da:aa:2d:9d:e4:
                    ff:97:62:29:7d:28:8e:59:fa:7b:a6:99:7d:b8:bc:
                    d3:48:e8:49:81:4c:ff:dd:2a:ce:0c:a2:6e:6f:0a:
                    5a:83:1a:14:2f:f3:74:7c:9f:49:cf:29:89:b6:4f:
                    7b:27:86:7e:c6:f0:62:71:7c:f5:8b:0c:e1:70:f9:
                    50:ce:61:3d:61:cb:c7:d6:aa:fc:d6:84:89:cc:24:
                    31:40:47:cc:ec:34:eb:7e:87:1d:7c:c2:79:14:77:
                    41:63:0e:1f:14:3e:3e:e0:eb:61:61:e9:88:56:c6:
                    88:a7:93:95:f3:20:17:80:48:8d:4b:9b:b6:88:0c:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:4C:0E:1C:17:BC:4C:1C:47:87:EF:DA:B7:91:6D:54:0E:5D:57
            X509v3 Authority Key Identifier:
                keyid:3B:E2:C1:45:80:F5:55:87:5E:86:C7:07:09:C9:1B:4F:C1:DB:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/0/3BE2C14580F555875E86C70709C91B4FC1DBFFB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:8c:c6:81:08:ab:30:d4:e3:4f:a8:99:68:78:74:75:ee:
         d7:2c:88:64:5b:67:b3:e2:34:8f:16:88:85:00:c7:78:41:d5:
         e9:58:70:6a:67:40:51:4d:41:53:b8:fa:72:46:63:6b:c2:ec:
         30:24:1d:46:dd:51:16:f4:67:d4:a9:d5:6d:8f:d2:b9:df:36:
         2f:c2:01:e7:8b:6d:dc:22:92:2e:bf:9c:00:c1:14:37:fb:28:
         6f:75:04:99:3a:8d:51:a1:ff:c5:ee:e8:c4:6d:76:69:8e:1b:
         90:92:f2:46:09:73:f1:21:8a:ab:35:0a:1e:5a:d7:e7:d9:65:
         ab:5b:71:30:92:9d:0b:e7:a4:76:55:93:b1:84:b3:d7:00:d5:
         2a:a5:72:61:91:8c:2e:34:0b:88:64:c3:57:3f:5b:fa:70:5f:
         87:93:67:48:df:11:77:f7:34:d2:24:25:48:9e:4a:fd:e7:22:
         4d:22:5d:ec:26:cc:3f:5a:05:be:24:51:1e:a6:5d:5e:1f:39:
         93:ea:14:a9:a9:c5:22:ad:39:89:dd:df:bf:5c:8e:6a:78:46:
         ae:71:6b:73:13:30:5d:b5:15:27:ab:82:91:10:09:a2:1c:69:
         ec:09:6f:3c:23:09:e6:d7:c2:91:6a:5b:45:70:59:a9:0d:56:
         ff:9c:3a:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUvKvVYl4uSLSr2+iRoKdlJpG/agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JFMkMxNDU4MEY1NTU4NzVFODZDNzA3MDlDOTFCNEZD
MURCRkZCMDAeFw0yNDA0MTUwNDA1MjhaFw0yNDA0MTYwNjA4MjhaMDMxMTAvBgNV
BAMTKDg1MjA0QzBFMUMxN0JDNEMxQzQ3ODdFRkRBQjc5MTZENTQwRTVENTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yG5JX3Lrgq8Ho5B71as3qrpL
ThIxgCXLou7nPZwbLRNcA9utrnsWoEcDDFNWrMVcaKq4/1tTy3mmkDWmWnBW7XTU
YeQlRX8eRmfYHT9abIIZEzkS1Gi4QfdWtnNvD0CE6fRakeiUOOIonYelBg4lDilw
PFiVYHkscZB4jHnRrmPaqi2d5P+XYil9KI5Z+nummX24vNNI6EmBTP/dKs4Mom5v
ClqDGhQv83R8n0nPKYm2T3snhn7G8GJxfPWLDOFw+VDOYT1hy8fWqvzWhInMJDFA
R8zsNOt+hx18wnkUd0FjDh8UPj7g62Fh6YhWxoink5XzIBeASI1Lm7aIDNmXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhSBMDhwXvEwcR4fv2reRbVQOXVcwHwYDVR0j
BBgwFoAUO+LBRYD1VYdehscHCckbT8Hb/7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTRBQU1QUjFHWkF5UlRwdFRVSjJDbUhOSFRyR2lmbXREUUUyd0ZWYVI1
WWkvMC8zQkUyQzE0NTgwRjU1NTg3NUU4NkM3MDcwOUM5MUI0RkMxREJGRkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCRTJDMTQ1ODBGNTU1ODc1
RTg2QzcwNzA5QzkxQjRGQzFEQkZGQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MTRBQU1QUjFHWkF5UlRwdFRVSjJDbUhOSFRyR2lmbXREUUUyd0ZWYVI1WWkvMC8z
QkUyQzE0NTgwRjU1NTg3NUU4NkM3MDcwOUM5MUI0RkMxREJGRkIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPIuMxoEIqzDU40+omWh4dHXu1yyIZFtns+I0jxaIhQDHeEHV6VhwamdAUU1B
U7j6ckZja8LsMCQdRt1RFvRn1KnVbY/Sud82L8IB54tt3CKSLr+cAMEUN/sob3UE
mTqNUaH/xe7oxG12aY4bkJLyRglz8SGKqzUKHlrX59llq1txMJKdC+ekdlWTsYSz
1wDVKqVyYZGMLjQLiGTDVz9b+nBfh5NnSN8Rd/c00iQlSJ5K/eciTSJd7CbMP1oF
viRRHqZdXh85k+oUqanFIq05id3fv1yOanhGrnFrcxMwXbUVJ6uCkRAJohxp7Alv
PCMJ5tfCkWpbRXBZqQ1W/5w67w==
-----END CERTIFICATE-----