Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.mft
File:                     9EDB0501E421814D3BCB6680196107A93F0BE76B.mft (raw, json)
Hash identifier:          R1ZCwvXMor9Nw5IoJ9hjJPtbRR8yrhpuqHV5wOLe4f0=
Subject key identifier:   E0:DD:7B:CA:12:29:C3:DA:A0:D6:F2:34:4A:27:62:DE:D3:DE:9D:D7
Authority key identifier: 9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B
Certificate issuer:       /CN=9EDB0501E421814D3BCB6680196107A93F0BE76B
Certificate serial:       5C04C925818B7DE5F4A0BAC85A29D3E1BA5289A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EDB0501E421814D3BCB6680196107A93F0BE76B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.mft
Manifest number:          0132
Signing time:             Mon 15 Apr 2024 07:43:25 +0000
Manifest this update:     Mon 15 Apr 2024 07:38:25 +0000
Manifest next update:     Tue 16 Apr 2024 10:25:25 +0000
Files and hashes:         1: 9EDB0501E421814D3BCB6680196107A93F0BE76B.crl (hash: y8jhIH6NScxyQjWDVUxPhk8C1eCk+Yg+IqqnU+bd0pw=)
                          2: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: 2HmSMQSvUpTlBtPLE3tFgAWYdxVtGhfkdEW1CDQjCeo=)
                          3: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (hash: e42qa4ZirzmViW/mg4s2WzUMylsRuYScINGVfvZMrjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:04:c9:25:81:8b:7d:e5:f4:a0:ba:c8:5a:29:d3:e1:ba:52:89:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDB0501E421814D3BCB6680196107A93F0BE76B
        Validity
            Not Before: Apr 15 07:38:25 2024 GMT
            Not After : Apr 16 10:25:25 2024 GMT
        Subject: CN=E0DD7BCA1229C3DAA0D6F2344A2762DED3DE9DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:3a:ab:3f:f5:4c:7d:e2:65:54:31:03:63:
                    0f:c1:0d:dd:12:e6:23:13:c3:0b:00:22:e5:65:62:
                    35:7d:1c:08:7f:34:3a:62:cd:8d:6f:46:56:6c:9b:
                    6a:92:52:b8:0e:2f:f4:b6:29:b1:18:92:28:c2:4b:
                    ec:92:4d:09:9e:e0:c1:e6:40:f2:c6:77:95:1e:d3:
                    95:e8:9e:80:52:2d:49:4f:84:37:bd:7f:77:d3:e7:
                    66:63:f6:01:0a:93:a0:92:e1:06:31:05:a1:1b:6f:
                    3f:b0:77:68:25:cc:19:3c:5c:48:8d:79:c7:73:bb:
                    36:5e:9d:b3:61:79:98:29:e2:3f:a8:95:32:df:c3:
                    bb:68:f5:b7:e7:f3:53:3a:d0:4a:0b:6e:75:d8:7b:
                    0c:ba:e0:1e:71:4f:de:1b:56:da:d1:60:70:97:19:
                    bc:46:61:0d:ca:4d:fd:a2:0f:3d:8a:b3:d5:d0:2c:
                    a9:96:ab:b5:1c:4d:b1:23:51:d2:c5:97:b7:03:d2:
                    15:72:51:f0:6c:d9:e5:9e:e7:11:e9:57:a2:2c:68:
                    87:72:9f:10:63:59:50:b9:28:54:87:da:20:a3:23:
                    1b:5f:93:09:2b:0d:94:08:b2:93:26:18:62:6e:85:
                    e6:cb:67:08:4e:19:69:ce:96:73:b2:dd:46:87:6f:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DD:7B:CA:12:29:C3:DA:A0:D6:F2:34:4A:27:62:DE:D3:DE:9D:D7
            X509v3 Authority Key Identifier:
                keyid:9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EDB0501E421814D3BCB6680196107A93F0BE76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:69:e9:ec:ef:4e:53:b3:8a:55:00:36:4a:11:f1:3d:e5:83:
         6e:03:b6:70:3c:04:26:f7:c4:ba:66:8d:d7:ff:78:a2:76:f5:
         ec:af:17:f6:7b:f9:9c:ae:41:68:a0:e7:24:02:27:ad:31:52:
         83:3e:66:a0:9e:ef:b2:86:16:b3:eb:22:fd:d3:5a:ed:84:17:
         12:8c:43:44:3d:31:aa:78:95:d1:b4:e0:63:3f:ed:86:f2:fc:
         75:04:4b:dd:78:0c:e6:01:64:25:02:70:87:97:2d:ea:fa:00:
         28:73:e8:bd:c5:7d:c9:08:bb:89:38:92:10:5d:f2:fb:5b:1e:
         e6:96:72:40:bf:87:15:7e:e2:3d:1d:8d:d9:13:a1:a2:5a:06:
         94:72:38:4a:79:e9:32:f8:3d:0e:f3:f0:47:7f:fa:bc:b7:e7:
         e7:8d:a7:83:a3:18:24:c0:fa:25:08:e0:b9:47:4e:3a:5c:f9:
         1f:3f:7f:a6:e0:09:e9:3d:0c:c9:7a:0c:53:d8:4c:3d:09:d9:
         74:42:24:79:9a:d4:20:0b:4f:76:da:2e:d9:ed:41:b7:11:ac:
         a8:8f:1a:75:af:64:5a:e0:ea:6e:0b:f4:89:7c:c9:0d:74:8f:
         e7:66:0f:e4:d9:e4:e0:63:50:db:a5:18:bc:74:19:d4:31:94:
         a1:bf:9b:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXATJJYGLfeX0oLrIWinT4bpSiaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVEQjA1MDFFNDIxODE0RDNCQ0I2NjgwMTk2MTA3QTkz
RjBCRTc2QjAeFw0yNDA0MTUwNzM4MjVaFw0yNDA0MTYxMDI1MjVaMDMxMTAvBgNV
BAMTKEUwREQ3QkNBMTIyOUMzREFBMEQ2RjIzNDRBMjc2MkRFRDNERTlERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFDqrP/VMfeJlVDEDYw/BDd0S
5iMTwwsAIuVlYjV9HAh/NDpizY1vRlZsm2qSUrgOL/S2KbEYkijCS+ySTQme4MHm
QPLGd5Ue05XonoBSLUlPhDe9f3fT52Zj9gEKk6CS4QYxBaEbbz+wd2glzBk8XEiN
ecdzuzZenbNheZgp4j+olTLfw7to9bfn81M60EoLbnXYewy64B5xT94bVtrRYHCX
GbxGYQ3KTf2iDz2Ks9XQLKmWq7UcTbEjUdLFl7cD0hVyUfBs2eWe5xHpV6IsaIdy
nxBjWVC5KFSH2iCjIxtfkwkrDZQIspMmGGJuhebLZwhOGWnOlnOy3UaHbwM9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4N17yhIpw9qg1vI0Sidi3tPendcwHwYDVR0j
BBgwFoAUntsFAeQhgU07y2aAGWEHqT8L52swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU
SGMvMS85RURCMDUwMUU0MjE4MTREM0JDQjY2ODAxOTYxMDdBOTNGMEJFNzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFREIwNTAxRTQyMTgxNEQz
QkNCNjY4MDE5NjEwN0E5M0YwQkU3NkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFUSGMvMS85
RURCMDUwMUU0MjE4MTREM0JDQjY2ODAxOTYxMDdBOTNGMEJFNzZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGGnp7O9OU7OKVQA2ShHxPeWDbgO2cDwEJvfEumaN1/94onb17K8X9nv5nK5B
aKDnJAInrTFSgz5moJ7vsoYWs+si/dNa7YQXEoxDRD0xqniV0bTgYz/thvL8dQRL
3XgM5gFkJQJwh5ct6voAKHPovcV9yQi7iTiSEF3y+1se5pZyQL+HFX7iPR2N2ROh
oloGlHI4SnnpMvg9DvPwR3/6vLfn542ng6MYJMD6JQjguUdOOlz5Hz9/puAJ6T0M
yXoMU9hMPQnZdEIkeZrUIAtPdtou2e1BtxGsqI8ada9kWuDqbgv0iXzJDXSP52YP
5Nnk4GNQ26UYvHQZ1DGUob+bNA==
-----END CERTIFICATE-----