Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.mft
File:                     103265AEADC9C654B97AC9BE28D364C7FE429A91.mft (raw, json)
Hash identifier:          Fewj1SuRwktt2kwIKBmdGHoxpEpHH2CGa7XO5l5WMyY=
Subject key identifier:   4D:06:8B:A2:2D:5E:E0:6F:66:88:41:69:F2:AF:13:01:C9:55:D3:19
Authority key identifier: 10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91
Certificate issuer:       /CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
Certificate serial:       2E04D96BDEC0F9FA8497AFE9BBC8951009EBD456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.mft
Manifest number:          011E
Signing time:             Mon 15 Apr 2024 04:33:02 +0000
Manifest this update:     Mon 15 Apr 2024 04:28:02 +0000
Manifest next update:     Tue 16 Apr 2024 06:33:02 +0000
Files and hashes:         1: 103265AEADC9C654B97AC9BE28D364C7FE429A91.crl (hash: 8+hWFCny0EnehBhSCjjluM69ydhGHPRdaHnY2lHh+sE=)
                          2: 323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (hash: y3i73BcUto+Bi/KqqdcoXZZ6/bHyx/K4mSJU2S1t/0Y=)
                          3: 3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa (hash: IRQbHzEvMHbuMKWdRkBK461+0rx95tgOS69AmSC6Zzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:d9:6b:de:c0:f9:fa:84:97:af:e9:bb:c8:95:10:09:eb:d4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103265AEADC9C654B97AC9BE28D364C7FE429A91
        Validity
            Not Before: Apr 15 04:28:02 2024 GMT
            Not After : Apr 16 06:33:02 2024 GMT
        Subject: CN=4D068BA22D5EE06F66884169F2AF1301C955D319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:00:a5:f5:8b:4f:84:7d:78:8a:71:73:d9:
                    e4:28:44:97:1d:c6:2b:c9:7f:e8:37:b3:85:68:ed:
                    02:2a:8a:cc:8b:8e:74:b3:c1:ab:29:20:bc:f2:99:
                    5b:87:7a:0e:de:c9:81:98:48:1e:46:0b:0e:75:0c:
                    92:19:e9:59:f4:2e:47:40:b7:33:3a:54:a8:06:6e:
                    62:e1:d1:84:69:0f:45:fd:e0:73:c7:aa:87:6e:19:
                    75:91:7d:eb:85:af:9f:f8:f5:9c:22:d9:d8:ad:e5:
                    32:35:0e:79:da:b1:68:82:af:73:75:c8:89:40:0e:
                    a8:6b:1c:61:ed:d2:4a:48:5a:43:0f:03:95:25:e3:
                    e5:f4:23:ce:84:53:95:00:09:78:4d:e9:fc:97:28:
                    e7:f6:df:e3:55:52:b1:90:fb:88:1a:51:40:17:71:
                    e2:06:68:c6:6c:3b:82:bf:54:98:e9:ef:1e:ff:b6:
                    b8:7f:50:e7:ca:47:a6:89:c8:d5:0b:77:14:ce:c8:
                    e1:4e:e5:b2:b0:c0:97:67:f1:66:e2:10:32:9b:1c:
                    ab:a3:3d:f6:1b:15:d9:ca:b4:8c:12:cc:59:5b:47:
                    92:2c:a3:81:2d:9b:52:54:cd:86:05:9d:8e:4c:c8:
                    5f:95:78:06:1c:72:e8:79:f8:c0:67:8e:46:dc:df:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:8B:A2:2D:5E:E0:6F:66:88:41:69:F2:AF:13:01:C9:55:D3:19
            X509v3 Authority Key Identifier:
                keyid:10:32:65:AE:AD:C9:C6:54:B9:7A:C9:BE:28:D3:64:C7:FE:42:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/103265AEADC9C654B97AC9BE28D364C7FE429A91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6f:84:3e:5b:8e:60:0b:54:21:fd:9c:35:56:6a:be:24:a6:
         cd:4e:df:79:94:fa:0e:97:6e:0d:63:4c:29:53:87:4a:6a:70:
         15:6f:2c:00:f6:66:51:4f:77:37:0f:ec:69:4d:8b:b4:b0:b2:
         1b:13:6e:b9:88:6c:e3:cb:02:02:d6:9b:3c:5c:aa:17:52:33:
         8b:28:04:e6:01:de:c2:76:09:38:90:7a:fa:89:49:6a:bf:7e:
         eb:52:b7:f0:8c:4b:72:c8:78:89:e7:5f:de:6f:9f:c1:cb:b6:
         36:a8:cb:66:25:c6:16:d5:fe:27:57:de:bf:23:37:68:12:37:
         a5:ab:f9:5c:88:04:c6:89:a4:8a:92:6b:53:82:f5:3a:ce:fc:
         65:de:4b:75:b7:13:d7:a8:31:d7:4d:67:95:20:3f:78:4c:0b:
         3b:dc:02:b0:d5:d7:0a:1c:73:b6:b7:18:de:2a:88:51:e0:c3:
         58:35:0c:e7:77:1c:6b:4b:af:98:b6:4f:7c:ec:ab:dd:b8:d0:
         98:a1:52:97:00:93:62:85:de:16:6b:ae:bf:53:0a:b0:14:7e:
         6c:18:8e:14:31:f6:3a:62:49:ae:d5:da:e7:fe:ec:c0:6f:97:
         d0:73:ad:31:65:d4:c1:52:63:c6:92:51:b2:84:69:dc:e8:f3:
         24:86:cc:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULgTZa97A+fqEl6/pu8iVEAnr1FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMjY1QUVBREM5QzY1NEI5N0FDOUJFMjhEMzY0QzdG
RTQyOUE5MTAeFw0yNDA0MTUwNDI4MDJaFw0yNDA0MTYwNjMzMDJaMDMxMTAvBgNV
BAMTKDREMDY4QkEyMkQ1RUUwNkY2Njg4NDE2OUYyQUYxMzAxQzk1NUQzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOQCl9YtPhH14inFz2eQoRJcd
xivJf+g3s4Vo7QIqisyLjnSzwaspILzymVuHeg7eyYGYSB5GCw51DJIZ6Vn0LkdA
tzM6VKgGbmLh0YRpD0X94HPHqoduGXWRfeuFr5/49Zwi2dit5TI1DnnasWiCr3N1
yIlADqhrHGHt0kpIWkMPA5Ul4+X0I86EU5UACXhN6fyXKOf23+NVUrGQ+4gaUUAX
ceIGaMZsO4K/VJjp7x7/trh/UOfKR6aJyNULdxTOyOFO5bKwwJdn8WbiEDKbHKuj
PfYbFdnKtIwSzFlbR5Iso4Etm1JUzYYFnY5MyF+VeAYccuh5+MBnjkbc32ZrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTQaLoi1e4G9miEFp8q8TAclV0xkwHwYDVR0j
BBgwFoAUEDJlrq3JxlS5esm+KNNkx/5CmpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVw
U1EvMC8xMDMyNjVBRUFEQzlDNjU0Qjk3QUM5QkUyOEQzNjRDN0ZFNDI5QTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwMzI2NUFFQURDOUM2NTRC
OTdBQzlCRTI4RDM2NEM3RkU0MjlBOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVwU1EvMC8x
MDMyNjVBRUFEQzlDNjU0Qjk3QUM5QkUyOEQzNjRDN0ZFNDI5QTkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsW+EPluOYAtUIf2cNVZqviSmzU7feZT6DpduDWNMKVOHSmpwFW8sAPZmUU93
Nw/saU2LtLCyGxNuuYhs48sCAtabPFyqF1IziygE5gHewnYJOJB6+olJar9+61K3
8IxLcsh4iedf3m+fwcu2NqjLZiXGFtX+J1fevyM3aBI3pav5XIgExomkipJrU4L1
Os78Zd5LdbcT16gx101nlSA/eEwLO9wCsNXXChxztrcY3iqIUeDDWDUM53cca0uv
mLZPfOyr3bjQmKFSlwCTYoXeFmuuv1MKsBR+bBiOFDH2OmJJrtXa5/7swG+X0HOt
MWXUwVJjxpJRsoRp3OjzJIbMVA==
-----END CERTIFICATE-----