Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft
File:                     3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft (raw, json)
Hash identifier:          ljEeOaaKwMJqvRh+um2JwsAkLBRE10mQJHIvCxLXQhM=
Subject key identifier:   19:85:A6:23:02:AA:D3:DD:CA:CC:70:38:BF:28:66:86:C3:84:22:77
Authority key identifier: 3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8
Certificate issuer:       /CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
Certificate serial:       3001596A1806E26898F18735DF191F217E8E1D84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft
Manifest number:          DB
Signing time:             Mon 15 Apr 2024 12:00:32 +0000
Manifest this update:     Mon 15 Apr 2024 11:55:32 +0000
Manifest next update:     Tue 16 Apr 2024 13:55:32 +0000
Files and hashes:         1: 3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl (hash: REEKg77reUwiWHdUZlmzNtWtsqzGn0Ho7YDFOWPOhoY=)
                          2: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: yXdSsW3hx5SfLoS6TJhdBXiQdkIIYsjpYOliZGZ3Rfk=)
                          3: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: mdWRqFoWzO3ezaaqqzDDbma4V4EDj9pbzfPF/e1gKwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:01:59:6a:18:06:e2:68:98:f1:87:35:df:19:1f:21:7e:8e:1d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
        Validity
            Not Before: Apr 15 11:55:32 2024 GMT
            Not After : Apr 16 13:55:32 2024 GMT
        Subject: CN=1985A62302AAD3DDCACC7038BF286686C3842277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:69:4b:c4:af:39:57:76:24:6b:e0:6e:65:
                    60:50:a9:00:ea:b8:37:0b:65:5e:e4:8c:72:b0:ec:
                    d8:68:b2:1c:98:5a:a8:e0:1f:bf:67:e4:42:a4:17:
                    8c:73:3a:69:05:d6:fe:3b:b5:55:e5:e0:20:53:38:
                    60:22:f0:c5:8b:f1:2e:f9:af:ba:0b:8f:59:ed:e1:
                    8e:3e:39:60:ce:e1:99:3f:98:c9:c8:de:29:36:e4:
                    d7:91:9d:51:8d:95:17:45:b5:a5:d3:12:54:5c:4e:
                    aa:93:b6:22:3b:b2:bb:47:e0:89:62:3e:33:7b:66:
                    bd:48:82:a7:bf:94:4c:77:10:02:d4:cf:b6:df:3c:
                    4e:90:5c:ab:e0:7e:52:0a:46:0e:20:72:a1:12:b9:
                    46:2a:5f:37:e9:40:c3:8b:21:88:5a:b9:ff:9c:a4:
                    d9:93:78:d5:c7:3d:dd:6e:a3:35:82:a0:69:d8:a5:
                    92:d1:e8:8e:be:62:ab:a3:8b:3e:d5:df:a0:c0:10:
                    fa:ea:e3:40:98:d4:f1:8e:23:55:7f:b2:b1:f9:c2:
                    c8:d6:3c:bd:a4:49:b7:d8:da:fb:5d:02:46:72:10:
                    9d:82:65:62:46:d9:67:d0:5c:5c:90:eb:16:25:26:
                    01:f1:da:a5:d7:07:56:75:c2:e2:38:11:74:19:22:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:85:A6:23:02:AA:D3:DD:CA:CC:70:38:BF:28:66:86:C3:84:22:77
            X509v3 Authority Key Identifier:
                keyid:3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:3c:b0:ea:eb:2d:98:d6:5f:8f:9e:93:b8:f8:2a:09:34:
         95:9a:2b:ec:0b:0d:7f:65:e1:5c:a5:fd:74:1d:80:8a:b2:93:
         82:dc:91:97:b8:80:88:df:e7:5a:e1:61:e5:08:0f:37:23:ec:
         39:52:21:30:f8:fe:06:0d:40:a8:03:90:fc:df:94:f7:59:7a:
         3b:71:ec:7c:19:a0:ec:b9:54:90:91:db:cb:31:51:dc:aa:41:
         4a:2c:7c:ca:62:29:22:c9:93:af:cb:e8:26:05:08:80:bd:cb:
         06:dd:c1:24:6b:3d:89:ed:eb:fc:0d:fc:9e:ba:11:d9:05:8f:
         27:82:a5:7a:db:07:75:87:4e:3c:e1:e1:b7:96:ba:12:9b:c1:
         cc:8e:df:57:2f:c2:28:a9:b5:f2:2a:cf:22:f2:fa:d0:30:ad:
         ca:ab:e0:57:c8:d6:c2:d1:ae:95:f4:f3:62:c0:cd:c7:8b:53:
         51:2f:1b:72:f1:68:1a:b1:df:72:f2:d7:44:c6:f8:88:31:06:
         1f:26:75:58:7c:25:58:da:aa:ea:a6:51:5e:42:d8:bd:3e:b4:
         e6:af:b5:b2:8a:df:4a:dd:6b:7a:14:52:00:45:b2:99:af:df:
         48:3d:e0:e8:8c:56:81:60:4b:81:12:6f:b2:d2:b1:5c:f2:10:
         db:3d:11:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMAFZahgG4miY8Yc13xkfIX6OHYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FENTUyOUNBMUJFREIwNjQxQkM3MTgyRTk3RTY2NEVB
RkVDMjJDODAeFw0yNDA0MTUxMTU1MzJaFw0yNDA0MTYxMzU1MzJaMDMxMTAvBgNV
BAMTKDE5ODVBNjIzMDJBQUQzRERDQUNDNzAzOEJGMjg2Njg2QzM4NDIyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrWlLxK85V3Yka+BuZWBQqQDq
uDcLZV7kjHKw7NhoshyYWqjgH79n5EKkF4xzOmkF1v47tVXl4CBTOGAi8MWL8S75
r7oLj1nt4Y4+OWDO4Zk/mMnI3ik25NeRnVGNlRdFtaXTElRcTqqTtiI7srtH4Ili
PjN7Zr1Igqe/lEx3EALUz7bfPE6QXKvgflIKRg4gcqESuUYqXzfpQMOLIYhauf+c
pNmTeNXHPd1uozWCoGnYpZLR6I6+Yqujiz7V36DAEPrq40CY1PGOI1V/srH5wsjW
PL2kSbfY2vtdAkZyEJ2CZWJG2WfQXFyQ6xYlJgHx2qXXB1Z1wuI4EXQZIo5RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGYWmIwKq093KzHA4vyhmhsOEIncwHwYDVR0j
BBgwFoAUOtVSnKG+2wZBvHGC6X5mTq/sIsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmV2cFU0amVTa2dxQ21YZnNadllZOER4Y0g3UlhkS21USlNnN3NTc293
V1AvMC8zQUQ1NTI5Q0ExQkVEQjA2NDFCQzcxODJFOTdFNjY0RUFGRUMyMkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBRDU1MjlDQTFCRURCMDY0
MUJDNzE4MkU5N0U2NjRFQUZFQzIyQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmV2cFU0amVTa2dxQ21YZnNadllZOER4Y0g3UlhkS21USlNnN3NTc293V1AvMC8z
QUQ1NTI5Q0ExQkVEQjA2NDFCQzcxODJFOTdFNjY0RUFGRUMyMkM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm7U8sOrrLZjWX4+ek7j4Kgk0lZor7AsNf2XhXKX9dB2AirKTgtyRl7iAiN/n
WuFh5QgPNyPsOVIhMPj+Bg1AqAOQ/N+U91l6O3HsfBmg7LlUkJHbyzFR3KpBSix8
ymIpIsmTr8voJgUIgL3LBt3BJGs9ie3r/A38nroR2QWPJ4KletsHdYdOPOHht5a6
EpvBzI7fVy/CKKm18irPIvL60DCtyqvgV8jWwtGulfTzYsDNx4tTUS8bcvFoGrHf
cvLXRMb4iDEGHyZ1WHwlWNqq6qZRXkLYvT605q+1sorfSt1rehRSAEWyma/fSD3g
6IxWgWBLgRJvstKxXPIQ2z0Rvg==
-----END CERTIFICATE-----