Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft
File:                     273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft (raw, json)
Hash identifier:          ImObJUxypM0ntO6xQxbZ1WM4xPJTATArDjKk7bhtZN8=
Subject key identifier:   FB:64:9F:DC:76:5E:AB:A7:A4:04:72:CB:9F:5F:AA:0D:23:64:2D:2E
Authority key identifier: 27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
Certificate issuer:       /CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
Certificate serial:       4D67590BD3D63D648F73239AAA635C69A308313A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft
Manifest number:          35
Signing time:             Mon 15 Apr 2024 07:34:58 +0000
Manifest this update:     Mon 15 Apr 2024 07:29:58 +0000
Manifest next update:     Tue 16 Apr 2024 08:29:58 +0000
Files and hashes:         1: 3136382e3232372e3133322e302f32342d3234203d3e20323634303039.roa (hash: fDFT0L4L/7CyRrbJmrQn+M6gI/GvmMm3yfP6x6gk3pA=)
                          2: 3136382e3232372e3133342e302f32342d3234203d3e20323634303039.roa (hash: gE9numXqbmTqaTmWMJpa1tmgWpdyfSbToWSbjg7cPGc=)
                          3: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: SKuuHq+dVzWtD1JvVY6rMJ0PnNbJDhAmLnPasGfAGJI=)
                          4: 273A8E626DF2CB38BF17E437441A4BFFC2540F09.crl (hash: nEpYSKGQYmm7oNOKvGarChx5TBXivdFgumjks7SHhYU=)
                          5: 3136382e3232372e3133352e302f32342d3234203d3e20323634303039.roa (hash: 3o0S/o3FOt8PPEB9MHxWownmRc0b7fYtu6mjHu9cqPk=)
                          6: 3136382e3232372e3133332e302f32342d3234203d3e20323634303039.roa (hash: T4LXBoR+6Qr6krtDG/Ielivl7L3oBLSvM+Vqc0V8tqo=)
                          7: 3134332e302e3134302e302f32322d3234203d3e20323634303039.roa (hash: VDm2lBTpwyQ5q2PLYDxTeefAxcRiWPSKovUDZFbZ1vo=)
                          8: 323830343a323935343a3a2f33322d3438203d3e20323634303039.roa (hash: 9Y6R1JIFLHOHKUqCo/zHuJMrGuz5HZYQ+Xbq12T9owI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:59:0b:d3:d6:3d:64:8f:73:23:9a:aa:63:5c:69:a3:08:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
        Validity
            Not Before: Apr 15 07:29:58 2024 GMT
            Not After : Apr 16 08:29:58 2024 GMT
        Subject: CN=FB649FDC765EABA7A40472CB9F5FAA0D23642D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:3a:37:88:9c:17:5b:ba:96:e3:5f:1d:34:
                    b0:1b:d1:7b:11:59:99:f0:97:32:f8:5f:cc:e5:84:
                    95:7d:9a:eb:67:46:38:76:b3:9d:0a:43:dd:54:35:
                    8a:86:a0:85:18:63:4f:91:fe:51:e4:ff:82:02:bb:
                    53:c2:75:70:a6:83:21:f2:4a:b9:1c:91:0c:86:1c:
                    f8:ad:1c:4b:c9:51:d3:4e:84:1e:ae:51:c7:1b:12:
                    eb:86:45:17:cb:03:39:a9:fd:cf:20:17:6b:d7:a2:
                    d8:55:3d:ec:c0:5c:d8:32:e5:44:18:7d:24:64:65:
                    07:e3:07:f0:fd:21:2e:4a:54:10:20:a5:01:ff:7a:
                    26:f0:58:86:f2:82:35:7e:8a:c8:c1:7e:40:a6:03:
                    59:49:de:24:b5:8a:4a:10:b5:52:a2:4b:59:b3:85:
                    44:08:37:7a:9b:a8:16:90:d5:c6:a3:fa:83:e1:1d:
                    3a:e9:77:51:30:ee:84:ca:23:2c:46:27:b0:d8:a8:
                    51:6f:af:47:0d:6c:75:22:4e:d1:87:3f:c6:1a:9c:
                    77:4d:0a:66:6d:9d:fb:49:27:4a:c7:22:91:50:02:
                    2a:c3:12:32:60:58:d0:05:ee:97:64:f9:bc:91:5f:
                    c9:09:96:74:f7:28:2a:ae:c7:a6:d3:05:c4:96:99:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:9F:DC:76:5E:AB:A7:A4:04:72:CB:9F:5F:AA:0D:23:64:2D:2E
            X509v3 Authority Key Identifier:
                keyid:27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:9f:6d:39:0f:94:59:88:12:11:ac:cd:e4:d1:6b:6d:ce:
         84:6f:b1:53:ae:9f:f3:5b:f2:1c:d4:18:0e:a0:12:5c:62:19:
         50:d4:bb:8a:12:87:78:5a:d9:55:fb:31:25:d2:d8:bb:28:78:
         b7:c7:64:db:67:98:70:e1:8c:a9:44:99:64:c4:5d:11:48:9c:
         d5:fc:2b:f2:f7:e9:e6:dc:bd:9c:18:bd:2e:2f:95:ab:21:b1:
         ad:7b:86:fa:26:57:e6:67:c0:14:bf:a6:b1:4e:18:28:0c:9b:
         ad:2d:7e:c9:64:8c:4b:ff:80:e2:39:58:dc:23:52:b5:f7:c3:
         c7:6d:46:76:cd:bd:41:64:07:96:d6:5d:b6:4e:3d:04:de:c3:
         0c:a3:4c:6d:00:0a:ef:b1:87:35:ed:34:b7:81:9f:60:89:78:
         b4:87:f6:d0:33:75:b5:95:b4:c3:ab:82:e7:ad:bf:32:3e:74:
         f4:54:57:20:ee:0e:5f:f3:36:a6:c8:d4:c8:8a:f2:f8:cb:a3:
         ec:6d:73:31:56:82:36:11:cc:0a:76:68:37:cc:d8:98:ea:3e:
         f2:ee:29:1a:be:c9:ac:ee:da:60:82:89:45:5c:77:ef:e7:96:
         32:c8:56:07:9a:6f:a9:26:93:bd:43:64:91:26:1d:2f:43:a7:
         d2:ab:96:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTWdZC9PWPWSPcyOaqmNcaaMIMTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczQThFNjI2REYyQ0IzOEJGMTdFNDM3NDQxQTRCRkZD
MjU0MEYwOTAeFw0yNDA0MTUwNzI5NThaFw0yNDA0MTYwODI5NThaMDMxMTAvBgNV
BAMTKEZCNjQ5RkRDNzY1RUFCQTdBNDA0NzJDQjlGNUZBQTBEMjM2NDJEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02Do3iJwXW7qW418dNLAb0XsR
WZnwlzL4X8zlhJV9mutnRjh2s50KQ91UNYqGoIUYY0+R/lHk/4ICu1PCdXCmgyHy
SrkckQyGHPitHEvJUdNOhB6uUccbEuuGRRfLAzmp/c8gF2vXothVPezAXNgy5UQY
fSRkZQfjB/D9IS5KVBAgpQH/eibwWIbygjV+isjBfkCmA1lJ3iS1ikoQtVKiS1mz
hUQIN3qbqBaQ1caj+oPhHTrpd1Ew7oTKIyxGJ7DYqFFvr0cNbHUiTtGHP8YanHdN
CmZtnftJJ0rHIpFQAirDEjJgWNAF7pdk+byRX8kJlnT3KCqux6bTBcSWmWDvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+2Sf3HZeq6ekBHLLn1+qDSNkLS4wHwYDVR0j
BBgwFoAUJzqOYm3yyzi/F+Q3RBpL/8JUDwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3
dzMvMC8yNzNBOEU2MjZERjJDQjM4QkYxN0U0Mzc0NDFBNEJGRkMyNTQwRjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3M0E4RTYyNkRGMkNCMzhC
RjE3RTQzNzQ0MUE0QkZGQzI1NDBGMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3dzMvMC8y
NzNBOEU2MjZERjJDQjM4QkYxN0U0Mzc0NDFBNEJGRkMyNTQwRjA5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkO2fbTkPlFmIEhGszeTRa23OhG+xU66f81vyHNQYDqASXGIZUNS7ihKHeFrZ
VfsxJdLYuyh4t8dk22eYcOGMqUSZZMRdEUic1fwr8vfp5ty9nBi9Li+VqyGxrXuG
+iZX5mfAFL+msU4YKAybrS1+yWSMS/+A4jlY3CNStffDx21Gds29QWQHltZdtk49
BN7DDKNMbQAK77GHNe00t4GfYIl4tIf20DN1tZW0w6uC562/Mj509FRXIO4OX/M2
psjUyIry+Muj7G1zMVaCNhHMCnZoN8zYmOo+8u4pGr7JrO7aYIKJRVx37+eWMshW
B5pvqSaTvUNkkSYdL0On0quWLA==
-----END CERTIFICATE-----