Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft
File:                     DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft (raw, json)
Hash identifier:          xoEWCoTcyYYxDxs84lg7G0/nF8eJH+7GT9cmCYRlrUw=
Subject key identifier:   47:81:60:89:CF:48:EE:43:69:1D:54:95:24:1D:EC:55:95:B1:AF:3E
Authority key identifier: DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD
Certificate issuer:       /CN=DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD
Certificate serial:       18EF93FFF3EDD5690F6C476A48CD798176AFB6E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft
Manifest number:          C1
Signing time:             Mon 15 Apr 2024 05:25:50 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:50 +0000
Manifest next update:     Tue 16 Apr 2024 07:25:50 +0000
Files and hashes:         1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: BTAtml2tZ49FwfHog9JMQmiJTr2RPmdB2ZGAvXqwJ9c=)
                          2: DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.crl (hash: 4lPxSBkw9LQ2w+IY/F4T1Af2xHZJDpNaZtgqmA1e0L0=)
                          3: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: s9ulpz3Ul2f51hzNOIQ1bTE6zTG39cWaeuUK0qIQCSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ef:93:ff:f3:ed:d5:69:0f:6c:47:6a:48:cd:79:81:76:af:b6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD
        Validity
            Not Before: Apr 15 05:20:50 2024 GMT
            Not After : Apr 16 07:25:50 2024 GMT
        Subject: CN=47816089CF48EE43691D5495241DEC5595B1AF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:05:b2:3d:b1:a8:b4:97:dc:c9:dc:98:0b:
                    8f:f8:79:ba:6b:1d:53:b9:a4:44:a0:92:52:bf:2c:
                    24:16:c0:30:0d:ab:97:0b:27:f0:26:80:46:5f:43:
                    44:1c:56:e3:23:08:25:b6:50:fc:91:1c:d3:85:88:
                    7c:91:8e:1c:f6:9e:da:f9:c2:46:ba:41:bb:01:fa:
                    76:ad:51:d6:c1:94:6e:dc:d9:dd:b5:23:fb:ee:8a:
                    0d:03:c5:ce:e7:61:ac:b8:2b:4f:e2:a7:ec:42:86:
                    14:39:ba:e1:cf:3c:7f:db:22:ed:dc:ec:30:1a:0d:
                    85:5c:95:47:a4:a6:8d:af:2d:fc:da:38:54:e9:ae:
                    fe:09:e7:b9:32:0d:51:43:74:0b:3d:9f:58:4c:2f:
                    cf:19:3c:65:52:61:af:8f:34:1b:dc:08:0d:c8:28:
                    bf:fb:73:98:c4:2b:77:ae:45:08:ca:e0:60:79:84:
                    01:4e:9e:47:a7:2a:b6:45:91:de:44:25:08:fd:20:
                    30:6d:f5:1f:d9:26:9b:c7:59:ff:81:4a:48:77:fe:
                    40:75:ad:31:96:f2:9f:a8:20:d4:0b:ea:25:9b:47:
                    36:17:bb:8d:66:15:81:41:0a:97:69:a5:47:2a:f1:
                    68:de:56:57:76:3e:e8:9d:3b:09:1d:d9:df:48:bb:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:60:89:CF:48:EE:43:69:1D:54:95:24:1D:EC:55:95:B1:AF:3E
            X509v3 Authority Key Identifier:
                keyid:DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:8c:e3:d9:a9:b8:57:39:28:1c:fe:13:3d:92:44:bb:a7:
         88:1b:f3:f8:e9:a0:6f:22:d3:f8:1b:7d:bf:d7:75:5a:61:2c:
         4e:d1:6c:2d:d8:e6:d0:67:95:a6:68:96:2b:02:5d:a8:61:4a:
         4f:9c:40:63:db:63:a7:4a:1c:ef:b4:14:8c:f0:85:44:2b:12:
         51:46:df:aa:ee:da:e7:ae:da:29:c8:dc:d9:e9:90:11:77:1d:
         ee:01:63:b9:1e:09:93:73:2c:d7:78:d4:d4:6e:df:66:ee:4b:
         28:5d:39:1e:a1:7d:11:48:a6:d1:57:76:39:12:27:d9:a9:33:
         57:db:52:f9:66:6f:e1:df:d1:d6:5f:94:ce:b3:28:0b:00:4f:
         10:56:eb:00:f5:c0:3c:29:f9:05:14:15:de:93:08:d4:60:cd:
         56:01:f4:fe:fd:3d:9d:88:aa:bc:71:99:e8:7b:9c:21:a1:1d:
         89:a2:8d:ca:79:c5:1a:6a:6c:48:02:43:bb:17:f2:74:25:7f:
         bc:f4:ec:3f:39:2b:f7:ae:40:ab:94:3e:40:13:db:8e:f4:26:
         ab:2a:ac:4a:7f:56:cb:cf:7d:df:66:71:4d:4a:9c:8f:a2:ae:
         36:95:0f:6d:72:dd:7c:70:cf:32:c3:e0:93:3f:74:2b:62:26:
         0d:ff:3d:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGO+T//Pt1WkPbEdqSM15gXavtuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDREY4NEVGRTExNTVGQTA1RkM1NEY5QjQwM0IwQzc2
MEVDNTdERDAeFw0yNDA0MTUwNTIwNTBaFw0yNDA0MTYwNzI1NTBaMDMxMTAvBgNV
BAMTKDQ3ODE2MDg5Q0Y0OEVFNDM2OTFENTQ5NTI0MURFQzU1OTVCMUFGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSAWyPbGotJfcydyYC4/4ebpr
HVO5pESgklK/LCQWwDANq5cLJ/AmgEZfQ0QcVuMjCCW2UPyRHNOFiHyRjhz2ntr5
wka6QbsB+natUdbBlG7c2d21I/vuig0Dxc7nYay4K0/ip+xChhQ5uuHPPH/bIu3c
7DAaDYVclUekpo2vLfzaOFTprv4J57kyDVFDdAs9n1hML88ZPGVSYa+PNBvcCA3I
KL/7c5jEK3euRQjK4GB5hAFOnkenKrZFkd5EJQj9IDBt9R/ZJpvHWf+BSkh3/kB1
rTGW8p+oINQL6iWbRzYXu41mFYFBCpdppUcq8WjeVld2PuidOwkd2d9Iu3eRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR4Fgic9I7kNpHVSVJB3sVZWxrz4wHwYDVR0j
BBgwFoAU3M34Tv4RVfoF/FT5tAOwx2DsV90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2
bksvMS9EQ0NERjg0RUZFMTE1NUZBMDVGQzU0RjlCNDAzQjBDNzYwRUM1N0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0RGODRFRkUxMTU1RkEw
NUZDNTRGOUI0MDNCMEM3NjBFQzU3REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMS9E
Q0NERjg0RUZFMTE1NUZBMDVGQzU0RjlCNDAzQjBDNzYwRUM1N0RELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGsCM49mpuFc5KBz+Ez2SRLuniBvz+OmgbyLT+Bt9v9d1WmEsTtFsLdjm0GeV
pmiWKwJdqGFKT5xAY9tjp0oc77QUjPCFRCsSUUbfqu7a567aKcjc2emQEXcd7gFj
uR4Jk3Ms13jU1G7fZu5LKF05HqF9EUim0Vd2ORIn2akzV9tS+WZv4d/R1l+UzrMo
CwBPEFbrAPXAPCn5BRQV3pMI1GDNVgH0/v09nYiqvHGZ6HucIaEdiaKNynnFGmps
SAJDuxfydCV/vPTsPzkr965Aq5Q+QBPbjvQmqyqsSn9Wy89932ZxTUqcj6KuNpUP
bXLdfHDPMsPgkz90K2ImDf89PQ==
-----END CERTIFICATE-----