Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft
File:                     305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft (raw, json)
Hash identifier:          05cnFNjxsAI6RDMWe6gv6t9e6UFYjS41zRFkSgOyLeE=
Subject key identifier:   BE:20:14:29:EE:B4:7A:42:D9:46:04:51:62:BF:56:33:2D:0F:FB:85
Authority key identifier: 30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8
Certificate issuer:       /CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
Certificate serial:       11825060A75681BF2C6087BD131197E50BF7E6CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft
Manifest number:          01DA
Signing time:             Mon 15 Apr 2024 01:36:23 +0000
Manifest this update:     Mon 15 Apr 2024 01:31:23 +0000
Manifest next update:     Tue 16 Apr 2024 04:21:23 +0000
Files and hashes:         1: 305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl (hash: V+LTql2fHYMDv4E+ihFZ/rS7oXgFNsqXFUwVRo9lQ4M=)
                          2: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: 65SHzrIsWR8W/Yo3KZ0weAnbPL1BVVeZUlE62pKfOYs=)
                          3: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: zP+LBYkMo3P07OiPzMS9y/C64YCD1xjlB61zKxY8QwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:82:50:60:a7:56:81:bf:2c:60:87:bd:13:11:97:e5:0b:f7:e6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305EE7370CB5E56FF8D0E01B37E786125925B0C8
        Validity
            Not Before: Apr 15 01:31:23 2024 GMT
            Not After : Apr 16 04:21:23 2024 GMT
        Subject: CN=BE201429EEB47A42D946045162BF56332D0FFB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:b5:a8:cd:a6:f4:8a:6b:4c:ce:13:cf:3f:
                    3b:7b:ae:b6:11:0e:b5:ab:e3:1a:c8:9c:58:b5:98:
                    ea:bd:46:20:c4:6e:5e:97:07:02:61:71:38:4e:33:
                    91:7a:86:0f:54:03:ba:57:a4:bb:96:d5:69:e8:bb:
                    c0:48:1b:5d:fe:d5:65:38:c9:89:8a:47:9b:6c:84:
                    97:57:a8:f6:61:70:d4:d9:85:ad:07:93:e4:4a:80:
                    80:4c:ce:d8:ce:da:c4:24:44:bc:93:35:ca:01:07:
                    54:14:eb:9a:a3:05:0a:0c:1f:94:16:b3:5a:03:d8:
                    29:76:8f:bc:f3:96:70:7a:3d:9a:17:21:09:af:6b:
                    46:78:c5:46:1d:d7:81:26:14:7f:8c:7a:bc:71:e8:
                    39:33:00:9f:bb:55:81:f1:bb:30:44:1b:72:56:6a:
                    e3:39:e2:50:52:66:92:f8:ad:85:b5:17:01:5f:bc:
                    27:bc:95:23:80:9d:28:f2:ae:e8:d4:a3:66:91:15:
                    0d:56:1e:34:f8:2e:32:a5:88:b5:c7:9e:a8:05:7c:
                    9c:d1:59:f2:a7:be:7e:52:7a:68:d4:bf:10:a8:c3:
                    8f:3a:87:e9:58:42:89:7f:b8:7c:4b:63:e9:6b:a1:
                    cd:1e:9c:70:ee:cd:d1:86:e8:37:2b:e4:07:a8:28:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:14:29:EE:B4:7A:42:D9:46:04:51:62:BF:56:33:2D:0F:FB:85
            X509v3 Authority Key Identifier:
                keyid:30:5E:E7:37:0C:B5:E5:6F:F8:D0:E0:1B:37:E7:86:12:59:25:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/0/305EE7370CB5E56FF8D0E01B37E786125925B0C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cb:14:46:92:6e:b2:aa:1d:0f:7e:72:84:4e:ba:a5:e0:a4:
         46:af:38:02:28:b3:56:cc:5b:83:f6:38:60:48:d5:9d:85:f9:
         e2:aa:8e:d0:38:7b:7f:2d:06:fc:40:44:76:1a:5d:0a:2c:eb:
         54:f4:82:5f:34:71:09:f3:c4:a6:3e:ee:71:62:d6:70:36:06:
         b2:8c:e8:23:ea:9d:36:9f:a5:f3:55:2c:92:d4:f2:0d:44:7f:
         f1:b6:63:4b:26:9a:65:01:a8:cf:75:63:08:fa:09:9f:a1:8a:
         e1:75:f5:f5:25:54:20:a6:b7:2c:a4:27:93:df:ca:8c:f2:27:
         62:e9:af:9c:63:05:b4:60:18:7f:3a:f6:59:d2:81:e4:95:1c:
         32:c8:74:97:8f:d0:ff:a5:42:44:1f:5c:36:63:0e:5a:83:4e:
         02:5b:9f:cb:33:2b:0d:d3:eb:c2:91:99:b0:40:2e:e3:3e:94:
         dd:75:c7:7b:18:6c:57:61:b0:3e:e7:cd:0d:8e:25:46:fb:a5:
         7d:af:8b:65:49:f9:0c:d2:75:8f:39:56:ce:3d:be:0b:28:21:
         14:26:25:a6:d7:ca:e6:ad:4b:69:f2:1b:0a:5e:63:c1:b5:ac:
         a7:08:90:9f:66:dc:cb:50:b7:d7:c8:5f:4c:35:ba:95:9f:3c:
         60:93:d1:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEYJQYKdWgb8sYIe9ExGX5Qv35s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1RUU3MzcwQ0I1RTU2RkY4RDBFMDFCMzdFNzg2MTI1
OTI1QjBDODAeFw0yNDA0MTUwMTMxMjNaFw0yNDA0MTYwNDIxMjNaMDMxMTAvBgNV
BAMTKEJFMjAxNDI5RUVCNDdBNDJEOTQ2MDQ1MTYyQkY1NjMzMkQwRkZCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH37Wozab0imtMzhPPPzt7rrYR
DrWr4xrInFi1mOq9RiDEbl6XBwJhcThOM5F6hg9UA7pXpLuW1Wnou8BIG13+1WU4
yYmKR5tshJdXqPZhcNTZha0Hk+RKgIBMztjO2sQkRLyTNcoBB1QU65qjBQoMH5QW
s1oD2Cl2j7zzlnB6PZoXIQmva0Z4xUYd14EmFH+Merxx6DkzAJ+7VYHxuzBEG3JW
auM54lBSZpL4rYW1FwFfvCe8lSOAnSjyrujUo2aRFQ1WHjT4LjKliLXHnqgFfJzR
WfKnvn5SemjUvxCow486h+lYQol/uHxLY+lroc0enHDuzdGG6Dcr5AeoKLMjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUviAUKe60ekLZRgRRYr9WMy0P+4UwHwYDVR0j
BBgwFoAUMF7nNwy15W/40OAbN+eGElklsMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo
aTIvMC8zMDVFRTczNzBDQjVFNTZGRjhEMEUwMUIzN0U3ODYxMjU5MjVCMEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwNUVFNzM3MENCNUU1NkZG
OEQwRTAxQjM3RTc4NjEyNTkyNUIwQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURoaTIvMC8z
MDVFRTczNzBDQjVFNTZGRjhEMEUwMUIzN0U3ODYxMjU5MjVCMEM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvcsURpJusqodD35yhE66peCkRq84AiizVsxbg/Y4YEjVnYX54qqO0Dh7fy0G
/EBEdhpdCizrVPSCXzRxCfPEpj7ucWLWcDYGsozoI+qdNp+l81UsktTyDUR/8bZj
SyaaZQGoz3VjCPoJn6GK4XX19SVUIKa3LKQnk9/KjPInYumvnGMFtGAYfzr2WdKB
5JUcMsh0l4/Q/6VCRB9cNmMOWoNOAlufyzMrDdPrwpGZsEAu4z6U3XXHexhsV2Gw
PufNDY4lRvulfa+LZUn5DNJ1jzlWzj2+CyghFCYlptfK5q1LafIbCl5jwbWspwiQ
n2bcy1C318hfTDW6lZ88YJPR2w==
-----END CERTIFICATE-----