Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.mft
File:                     304178719B03E20B3C17F5C1B8305E7333D1087D.mft (raw, json)
Hash identifier:          Wi0YPUbfTv+gjs/3ufTgToQy8DUU8XsOBt9JpALHULs=
Subject key identifier:   1A:F2:19:4B:70:7E:F6:A4:90:48:E7:48:51:05:27:F5:59:8C:6B:49
Authority key identifier: 30:41:78:71:9B:03:E2:0B:3C:17:F5:C1:B8:30:5E:73:33:D1:08:7D
Certificate issuer:       /CN=304178719B03E20B3C17F5C1B8305E7333D1087D
Certificate serial:       6244994EC27ECDBEB8C2BEDFAA57F43534C1C2E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/304178719B03E20B3C17F5C1B8305E7333D1087D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.mft
Manifest number:          21
Signing time:             Mon 15 Apr 2024 11:01:47 +0000
Manifest this update:     Mon 15 Apr 2024 10:56:47 +0000
Manifest next update:     Tue 16 Apr 2024 14:21:47 +0000
Files and hashes:         1: 304178719B03E20B3C17F5C1B8305E7333D1087D.crl (hash: mBAoi4J/OXDlk4FHWvTld/vsxAEn7894ZvJ/yADnYHs=)
                          2: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (hash: KLeJP4MHPRjW8CFtRPug5mV3WfafXkLKZGahmr37SD8=)
                          3: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (hash: xM1FmX+9S2bIEV6QbEUYUXImQKwSR6n2jhL/ZQie4AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:44:99:4e:c2:7e:cd:be:b8:c2:be:df:aa:57:f4:35:34:c1:c2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304178719B03E20B3C17F5C1B8305E7333D1087D
        Validity
            Not Before: Apr 15 10:56:47 2024 GMT
            Not After : Apr 16 14:21:47 2024 GMT
        Subject: CN=1AF2194B707EF6A49048E748510527F5598C6B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:93:78:a6:68:9e:8f:f1:42:7e:b4:60:65:
                    66:73:6a:3f:58:f6:d8:ef:c3:0a:d9:fe:7d:93:0c:
                    76:50:6c:11:ac:44:5b:90:9a:08:a3:6c:1b:27:e4:
                    bc:3e:30:08:76:b8:cd:96:26:d5:21:e6:e3:80:c6:
                    0c:07:d2:92:b2:cc:b2:f1:05:b4:44:73:6d:ae:c5:
                    f2:ab:b2:7e:af:14:82:74:de:ac:22:3a:d1:f5:ed:
                    6b:a4:27:c9:38:0f:3d:b8:4e:96:64:fd:df:b1:bb:
                    db:c8:a8:28:62:b7:93:bc:5b:33:72:96:4a:0e:13:
                    6f:c3:91:15:70:26:57:56:58:b5:f5:96:3f:5e:4c:
                    97:24:04:ef:14:ee:86:33:69:91:c3:95:56:5e:68:
                    b0:1c:dc:70:04:5b:45:e5:2c:84:e8:6f:5c:6e:6c:
                    18:14:9e:07:95:b0:eb:70:84:db:dc:15:dc:a8:65:
                    62:84:fa:d1:60:94:23:48:d0:aa:a2:90:8c:e4:60:
                    23:67:e5:58:84:12:c6:ad:20:4d:5c:7b:ef:7b:a4:
                    26:c4:35:72:20:02:5c:ee:84:bd:23:4f:3a:d7:50:
                    0c:ac:38:cd:b3:57:ab:cd:ea:3f:6d:85:ea:6d:e2:
                    e7:62:ee:0d:3d:1a:b3:2b:50:72:4c:69:38:77:b6:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:19:4B:70:7E:F6:A4:90:48:E7:48:51:05:27:F5:59:8C:6B:49
            X509v3 Authority Key Identifier:
                keyid:30:41:78:71:9B:03:E2:0B:3C:17:F5:C1:B8:30:5E:73:33:D1:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/304178719B03E20B3C17F5C1B8305E7333D1087D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:33:41:81:8f:27:31:89:24:40:fa:71:92:b5:d4:34:1f:
         ae:0d:65:a4:17:01:cf:84:39:40:dc:94:d2:1e:1e:a4:fd:fa:
         0b:d2:26:54:55:b2:06:48:78:10:e4:0f:c7:7d:b8:65:65:3f:
         47:68:64:7c:f7:b3:c1:09:05:b0:ac:82:15:8d:3c:8e:e7:c2:
         da:2c:96:01:70:f4:fa:fb:d4:9c:bc:90:07:bd:1e:f1:2b:ff:
         60:0f:c9:4d:90:13:04:ba:72:db:73:56:5f:46:bd:8d:d6:19:
         23:b9:f3:9b:23:6f:4e:53:8d:79:80:c9:08:44:6e:bd:cf:a3:
         b6:32:d5:bc:6f:00:4e:38:da:d3:b8:42:bf:32:0a:d1:bd:c6:
         1f:b9:38:8f:93:d4:78:c4:28:d3:eb:23:b8:50:72:ae:06:4b:
         6a:c9:35:04:f7:b2:81:9b:69:6a:01:86:0f:1b:5c:3c:64:50:
         c9:8c:97:5b:49:1f:47:94:90:d3:d4:50:c5:3c:54:db:88:16:
         24:4a:25:7d:81:6e:64:a4:dd:f6:26:5c:0f:c9:7f:9a:3e:1d:
         a3:1d:2e:85:50:24:af:88:78:36:fc:a1:f5:d0:62:a6:db:c4:
         ad:e3:34:9c:1c:ee:88:f2:1c:d4:d3:9c:90:1f:19:c1:82:81:
         c7:c3:84:46
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYkSZTsJ+zb64wr7fqlf0NTTBwukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA0MTc4NzE5QjAzRTIwQjNDMTdGNUMxQjgzMDVFNzMz
M0QxMDg3RDAeFw0yNDA0MTUxMDU2NDdaFw0yNDA0MTYxNDIxNDdaMDMxMTAvBgNV
BAMTKDFBRjIxOTRCNzA3RUY2QTQ5MDQ4RTc0ODUxMDUyN0Y1NTk4QzZCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHJN4pmiej/FCfrRgZWZzaj9Y
9tjvwwrZ/n2TDHZQbBGsRFuQmgijbBsn5Lw+MAh2uM2WJtUh5uOAxgwH0pKyzLLx
BbREc22uxfKrsn6vFIJ03qwiOtH17WukJ8k4Dz24TpZk/d+xu9vIqChit5O8WzNy
lkoOE2/DkRVwJldWWLX1lj9eTJckBO8U7oYzaZHDlVZeaLAc3HAEW0XlLITob1xu
bBgUngeVsOtwhNvcFdyoZWKE+tFglCNI0KqikIzkYCNn5ViEEsatIE1ce+97pCbE
NXIgAlzuhL0jTzrXUAysOM2zV6vN6j9thept4udi7g09GrMrUHJMaTh3tqQRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUGvIZS3B+9qSQSOdIUQUn9VmMa0kwHwYDVR0j
BBgwFoAUMEF4cZsD4gs8F/XBuDBeczPRCH0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFX
LzAvMzA0MTc4NzE5QjAzRTIwQjNDMTdGNUMxQjgzMDVFNzMzM0QxMDg3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8zMDQxNzg3MTlCMDNFMjBCM0Mx
N0Y1QzFCODMwNUU3MzMzRDEwODdELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzF0
VDFNOTk2amdIRnJRakJ3cXBSQmFzc2Q2RWhVRnJDZXBrWGljUzdwUVcvMC8zMDQx
Nzg3MTlCMDNFMjBCM0MxN0Y1QzFCODMwNUU3MzMzRDEwODdELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
CzozQYGPJzGJJED6cZK11DQfrg1lpBcBz4Q5QNyU0h4epP36C9ImVFWyBkh4EOQP
x324ZWU/R2hkfPezwQkFsKyCFY08jufC2iyWAXD0+vvUnLyQB70e8Sv/YA/JTZAT
BLpy23NWX0a9jdYZI7nzmyNvTlONeYDJCERuvc+jtjLVvG8ATjja07hCvzIK0b3G
H7k4j5PUeMQo0+sjuFByrgZLask1BPeygZtpagGGDxtcPGRQyYyXW0kfR5SQ09RQ
xTxU24gWJEolfYFuZKTd9iZcD8l/mj4dox0uhVAkr4h4Nvyh9dBiptvEreM0nBzu
iPIc1NOckB8ZwYKBx8OERg==
-----END CERTIFICATE-----