Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.mft
File:                     696FC8A2C502940E2825B88248E05882327C131C.mft (raw, json)
Hash identifier:          it/Sy4d7VPDnPYnl4FuXCG5XV88K1GcMXaGtLPOC66g=
Subject key identifier:   BF:D9:DE:FA:EE:C8:4F:43:ED:79:C0:6C:59:48:01:0D:19:91:05:49
Authority key identifier: 69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C
Certificate issuer:       /CN=696FC8A2C502940E2825B88248E05882327C131C
Certificate serial:       4ACDDC551B5B228E00716FB689B8447350B07C78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696FC8A2C502940E2825B88248E05882327C131C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.mft
Manifest number:          1C
Signing time:             Tue 23 Apr 2024 04:46:06 +0000
Manifest this update:     Tue 23 Apr 2024 04:41:06 +0000
Manifest next update:     Wed 24 Apr 2024 04:55:06 +0000
Files and hashes:         1: 696FC8A2C502940E2825B88248E05882327C131C.crl (hash: BkBtLXM6sz6tP1gEZ85UN9yM/BbsR3EjS6YhyIbKlAE=)
                          2: 323830343a386134343a3a2f33322d3438203d3e20323733363538.roa (hash: gh+919aoa6afTEclASggG5wd34DRaLvbu1ZtxmSzj9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cd:dc:55:1b:5b:22:8e:00:71:6f:b6:89:b8:44:73:50:b0:7c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696FC8A2C502940E2825B88248E05882327C131C
        Validity
            Not Before: Apr 23 04:41:06 2024 GMT
            Not After : Apr 24 04:55:06 2024 GMT
        Subject: CN=BFD9DEFAEEC84F43ED79C06C5948010D19910549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0f:e9:a4:cf:46:ba:c8:11:3f:d2:af:f7:b8:
                    9b:d0:22:db:19:01:3b:83:08:4d:ed:ed:5c:e4:df:
                    3d:bf:f3:df:34:4b:95:6d:94:5d:af:74:5c:c1:2c:
                    dc:dc:39:7a:12:df:8f:e6:a3:62:4e:b3:27:c4:93:
                    00:cf:b4:ad:54:50:38:bb:28:5d:70:55:60:15:aa:
                    85:c9:1c:74:0c:0e:79:58:70:b8:26:63:03:a2:1c:
                    58:76:d9:3e:7a:71:46:95:4a:2c:94:91:ea:b4:e5:
                    62:55:3c:a2:07:61:a1:83:1d:b4:a5:44:9c:ae:28:
                    d9:97:4b:fb:65:07:55:71:af:93:91:de:75:18:b4:
                    fc:3c:64:85:10:f7:c5:4a:76:25:89:a4:85:c7:1b:
                    19:0c:ca:25:97:ea:c4:68:70:18:ee:fc:41:66:65:
                    59:92:b6:cf:ba:0c:ce:89:f5:fa:d6:40:a3:6b:88:
                    d8:c0:13:fb:e8:1e:0e:db:07:dd:3c:cf:b7:60:02:
                    69:a4:d6:55:3b:c1:4b:a9:47:03:fb:69:fc:5d:36:
                    fe:e5:0f:e5:b6:73:f3:d0:4e:9d:e6:dd:25:af:4c:
                    a1:b0:3e:e9:6b:1c:fc:0a:8a:25:e7:e7:8c:ee:1e:
                    a7:ad:3c:d0:1b:65:ac:82:7e:af:f0:49:a5:fb:85:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D9:DE:FA:EE:C8:4F:43:ED:79:C0:6C:59:48:01:0D:19:91:05:49
            X509v3 Authority Key Identifier:
                keyid:69:6F:C8:A2:C5:02:94:0E:28:25:B8:82:48:E0:58:82:32:7C:13:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696FC8A2C502940E2825B88248E05882327C131C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/1/696FC8A2C502940E2825B88248E05882327C131C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a5:25:4e:e0:47:8b:5b:8b:65:33:16:59:93:8d:d7:b7:15:
         05:d1:9a:73:7a:d5:d9:44:cc:b6:2d:4d:5f:ab:36:15:43:79:
         ac:d1:f1:30:bb:7c:98:5f:d0:71:84:e7:a6:a4:59:27:ee:2d:
         b9:e6:ed:18:71:39:11:e8:b7:84:9d:c8:00:38:33:7c:72:6d:
         28:73:ae:75:1b:b1:06:4b:00:5f:0d:00:0e:c1:94:85:3f:ca:
         b0:a2:40:65:68:43:6c:60:0f:50:73:bc:06:0d:03:da:e1:95:
         f4:76:b9:36:e3:7d:03:6f:f7:c1:91:8e:c4:e1:e7:5f:37:6c:
         2b:08:b5:25:ad:bb:5f:86:39:f8:6d:3b:7f:29:0d:d4:a5:20:
         50:58:0e:cb:7d:94:56:66:92:8e:ff:ce:81:c4:b6:12:4c:a1:
         24:1b:cf:32:7d:73:8b:fa:fa:6e:a4:7e:35:78:f8:d1:e3:8c:
         29:a0:08:69:95:48:b3:4b:29:29:d8:86:96:a3:85:1c:1a:c3:
         f7:35:7e:35:21:7f:dc:8b:09:25:32:31:6d:17:15:3f:b7:a7:
         9d:59:cd:81:66:03:dd:72:70:f9:a8:9a:eb:fc:c4:d2:8a:c2:
         42:c2:e0:89:03:74:35:db:85:67:88:f0:02:32:1c:a4:f7:84:
         74:f8:a5:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSs3cVRtbIo4AcW+2ibhEc1CwfHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2RkM4QTJDNTAyOTQwRTI4MjVCODgyNDhFMDU4ODIz
MjdDMTMxQzAeFw0yNDA0MjMwNDQxMDZaFw0yNDA0MjQwNDU1MDZaMDMxMTAvBgNV
BAMTKEJGRDlERUZBRUVDODRGNDNFRDc5QzA2QzU5NDgwMTBEMTk5MTA1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcD+mkz0a6yBE/0q/3uJvQItsZ
ATuDCE3t7Vzk3z2/8980S5VtlF2vdFzBLNzcOXoS34/mo2JOsyfEkwDPtK1UUDi7
KF1wVWAVqoXJHHQMDnlYcLgmYwOiHFh22T56cUaVSiyUkeq05WJVPKIHYaGDHbSl
RJyuKNmXS/tlB1Vxr5OR3nUYtPw8ZIUQ98VKdiWJpIXHGxkMyiWX6sRocBju/EFm
ZVmSts+6DM6J9frWQKNriNjAE/voHg7bB908z7dgAmmk1lU7wUupRwP7afxdNv7l
D+W2c/PQTp3m3SWvTKGwPulrHPwKiiXn54zuHqetPNAbZayCfq/wSaX7haYVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUv9ne+u7IT0PtecBsWUgBDRmRBUkwHwYDVR0j
BBgwFoAUaW/IosUClA4oJbiCSOBYgjJ8ExwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1
NEsvMS82OTZGQzhBMkM1MDI5NDBFMjgyNUI4ODI0OEUwNTg4MjMyN0MxMzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NkZDOEEyQzUwMjk0MEUy
ODI1Qjg4MjQ4RTA1ODgyMzI3QzEzMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzhIY2QxaW02aVM2ZzdpbjJDM2VoOXpzUnR0MXQ5RDJjYUxlZ2c5VHR1NEsvMS82
OTZGQzhBMkM1MDI5NDBFMjgyNUI4ODI0OEUwNTg4MjMyN0MxMzFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa6UlTuBHi1uLZTMWWZON17cVBdGac3rV2UTMti1NX6s2FUN5rNHxMLt8mF/Q
cYTnpqRZJ+4tuebtGHE5Eei3hJ3IADgzfHJtKHOudRuxBksAXw0ADsGUhT/KsKJA
ZWhDbGAPUHO8Bg0D2uGV9Ha5NuN9A2/3wZGOxOHnXzdsKwi1Ja27X4Y5+G07fykN
1KUgUFgOy32UVmaSjv/OgcS2EkyhJBvPMn1zi/r6bqR+NXj40eOMKaAIaZVIs0sp
KdiGlqOFHBrD9zV+NSF/3IsJJTIxbRcVP7ennVnNgWYD3XJw+aia6/zE0orCQsLg
iQN0NduFZ4jwAjIcpPeEdPilOA==
-----END CERTIFICATE-----