Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.mft
File:                     E391D45BA9D3292DBFB22F4152439B03F59996F3.mft (raw, json)
Hash identifier:          1DGm0DBRRjujuIJXIMtjrJ8V6A2X0ibdNwSj/uVnCjI=
Subject key identifier:   99:4B:64:BF:EF:80:94:BE:E8:50:70:BD:90:02:99:66:98:9B:74:DA
Authority key identifier: E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
Certificate issuer:       /CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
Certificate serial:       44C782619E5E57D5F574587B8FD40D713A5C377F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.mft
Manifest number:          1D
Signing time:             Sun 14 Apr 2024 23:23:38 +0000
Manifest this update:     Sun 14 Apr 2024 23:18:38 +0000
Manifest next update:     Mon 15 Apr 2024 23:30:38 +0000
Files and hashes:         1: 34352e3138382e3138322e302f32332d3233203d3e20323639353239.roa (hash: sIfGd8AHgJ0cEGBXurfmNruNIFrmU/SGiEBGGpD/ptw=)
                          2: 323830343a363630383a3a2f33322d3332203d3e20323639353239.roa (hash: 6cQKHiYUju/v4HUyJZ9IsYahChZpvdP0hzNQSTcguaQ=)
                          3: E391D45BA9D3292DBFB22F4152439B03F59996F3.crl (hash: 6orFy9dqPW1Hn3AWGwiAhZtm6L1Vv1uyt5bG8d3mcKQ=)
                          4: 34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa (hash: DWYHKZS55NwhYmdod8PfLl3NBFP4UaMa3Y5PXdBkmnQ=)
                          5: 34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa (hash: gBs4CtRVEWd63OtmmhJQgNc/Uo5KFyHVrkZPenv4Lwg=)
                          6: 34352e3138382e3138322e302f32342d3234203d3e20323639353239.roa (hash: r7aJT0DRNAgKY+GAN50fkHvAFWGQI2vouauimn7UNPA=)
                          7: 34352e3138382e3138332e302f32342d3234203d3e20323639353239.roa (hash: w2HSbAs4NWdAUrMHQR/+3DV8X1xoRn7bT2WE8+pcub4=)
                          8: 34352e3138382e3138302e302f32322d3232203d3e20323639353239.roa (hash: lH1m9evbieGkzKV4qXN68F3fohy9BS5m7KwMVUgaFp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:82:61:9e:5e:57:d5:f5:74:58:7b:8f:d4:0d:71:3a:5c:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
        Validity
            Not Before: Apr 14 23:18:38 2024 GMT
            Not After : Apr 15 23:30:38 2024 GMT
        Subject: CN=994B64BFEF8094BEE85070BD90029966989B74DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:1c:2d:46:f0:02:d0:c0:9d:99:5a:4e:a3:
                    31:ba:59:a1:71:40:70:e4:cc:21:e1:ab:71:9c:2d:
                    9c:3d:e7:e7:00:23:a6:65:26:26:fc:c8:21:c3:a4:
                    b5:04:ab:bf:5d:69:fa:94:07:11:03:c5:a6:5d:ac:
                    92:bb:e5:ab:01:c3:3e:8e:50:0a:3e:2d:7f:95:66:
                    a5:f9:5a:35:11:72:e1:be:25:4c:aa:ee:33:a9:36:
                    e1:c3:9b:86:ea:1f:3b:e8:da:a8:63:4c:00:ed:7d:
                    94:26:66:3e:2c:83:f6:d9:e4:d5:88:a1:b7:13:40:
                    21:47:a9:56:38:86:b4:ca:bc:4e:e1:3c:22:b5:f6:
                    5a:d7:5f:1c:2e:21:64:e4:56:75:cd:8d:30:6a:73:
                    ea:4d:9f:24:62:39:05:17:d2:5e:28:a8:4d:ae:e9:
                    f4:d8:32:54:ff:ad:3e:dd:47:d2:63:08:ba:43:19:
                    c4:b5:51:d7:15:fe:2a:eb:29:ce:dd:ab:83:ba:f7:
                    81:b1:9a:29:11:9f:a5:3c:05:fc:23:a4:c2:c0:a1:
                    95:81:fe:26:69:30:cf:b6:6f:49:78:31:4a:3e:fc:
                    0c:21:68:cd:33:f3:5e:97:22:de:d5:88:bb:2d:23:
                    86:99:ff:cd:f4:ff:90:7c:87:ca:e8:33:d4:bc:ac:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4B:64:BF:EF:80:94:BE:E8:50:70:BD:90:02:99:66:98:9B:74:DA
            X509v3 Authority Key Identifier:
                keyid:E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:06:28:6f:da:1d:25:7b:9a:7e:8d:4a:0b:45:60:02:db:
         2f:6b:79:87:88:64:10:b2:36:cf:e4:5e:cb:4f:ee:e4:29:bb:
         05:9e:e2:48:be:98:b1:ca:51:d8:98:dc:ca:da:dd:e7:6c:79:
         fe:7d:74:d5:a5:d3:28:f9:e0:1d:c7:2e:6b:e2:55:94:c9:bf:
         b7:d5:64:c7:e3:8d:ae:b3:fa:89:8c:e9:a6:98:a3:b1:dc:c0:
         d9:04:06:80:7b:34:d2:24:ee:3d:48:68:7a:4d:5f:95:77:13:
         45:8a:12:64:fd:7b:63:55:3c:cd:73:12:70:13:11:3f:13:b3:
         36:37:4a:47:5a:bf:98:ba:ce:9a:ac:a4:08:1d:c0:41:dc:c4:
         18:4a:5f:23:64:cf:77:4d:f3:15:ca:33:1e:44:52:1b:3f:0a:
         f8:d6:87:fd:61:52:42:10:e8:69:7f:c2:cd:73:c4:21:f4:27:
         b6:92:1b:ba:f2:ff:bd:ce:9e:25:3a:00:f5:cc:db:ad:1b:19:
         74:82:24:dd:6f:3a:0a:f2:1b:b2:b8:6b:e0:f6:5a:9f:a4:a6:
         3d:41:9c:73:b0:5d:46:82:41:3a:bd:6f:5e:a4:3d:f5:f4:3f:
         8b:43:c6:ce:e0:99:87:e2:df:f0:dc:21:9a:d2:86:7e:ae:b2:
         a9:ad:2f:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURMeCYZ5eV9X1dFh7j9QNcTpcN38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM5MUQ0NUJBOUQzMjkyREJGQjIyRjQxNTI0MzlCMDNG
NTk5OTZGMzAeFw0yNDA0MTQyMzE4MzhaFw0yNDA0MTUyMzMwMzhaMDMxMTAvBgNV
BAMTKDk5NEI2NEJGRUY4MDk0QkVFODUwNzBCRDkwMDI5OTY2OTg5Qjc0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41hwtRvAC0MCdmVpOozG6WaFx
QHDkzCHhq3GcLZw95+cAI6ZlJib8yCHDpLUEq79dafqUBxEDxaZdrJK75asBwz6O
UAo+LX+VZqX5WjURcuG+JUyq7jOpNuHDm4bqHzvo2qhjTADtfZQmZj4sg/bZ5NWI
obcTQCFHqVY4hrTKvE7hPCK19lrXXxwuIWTkVnXNjTBqc+pNnyRiOQUX0l4oqE2u
6fTYMlT/rT7dR9JjCLpDGcS1UdcV/irrKc7dq4O694GxmikRn6U8BfwjpMLAoZWB
/iZpMM+2b0l4MUo+/AwhaM0z816XIt7ViLstI4aZ/830/5B8h8roM9S8rFEFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmUtkv++AlL7oUHC9kAKZZpibdNowHwYDVR0j
BBgwFoAU45HUW6nTKS2/si9BUkObA/WZlvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRn
alEvMC9FMzkxRDQ1QkE5RDMyOTJEQkZCMjJGNDE1MjQzOUIwM0Y1OTk5NkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzOTFENDVCQTlEMzI5MkRC
RkIyMkY0MTUyNDM5QjAzRjU5OTk2RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRnalEvMC9F
MzkxRDQ1QkE5RDMyOTJEQkZCMjJGNDE1MjQzOUIwM0Y1OTk5NkYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM44GKG/aHSV7mn6NSgtFYALbL2t5h4hkELI2z+Rey0/u5Cm7BZ7iSL6YscpR
2Jjcytrd52x5/n101aXTKPngHccua+JVlMm/t9Vkx+ONrrP6iYzpppijsdzA2QQG
gHs00iTuPUhoek1flXcTRYoSZP17Y1U8zXMScBMRPxOzNjdKR1q/mLrOmqykCB3A
QdzEGEpfI2TPd03zFcozHkRSGz8K+NaH/WFSQhDoaX/CzXPEIfQntpIbuvL/vc6e
JToA9czbrRsZdIIk3W86CvIbsrhr4PZan6SmPUGcc7BdRoJBOr1vXqQ99fQ/i0PG
zuCZh+Lf8NwhmtKGfq6yqa0vkw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org