Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.mft
File:                     3069BE596AE6FD99F15867B76663D73952007F4C.mft (raw, json)
Hash identifier:          xkUcPwJgsIwEv0TTcMkew2KojZ6UNJzKu4QTO1ZbCRk=
Subject key identifier:   9F:F4:BE:FD:7A:5C:A5:9E:DF:1A:11:23:00:B7:44:15:6F:08:D8:15
Authority key identifier: 30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C
Certificate issuer:       /CN=3069BE596AE6FD99F15867B76663D73952007F4C
Certificate serial:       57DA26EAF5C9DDE3370BA295B05668088C3017DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.mft
Manifest number:          48
Signing time:             Mon 15 Apr 2024 00:02:16 +0000
Manifest this update:     Sun 14 Apr 2024 23:57:16 +0000
Manifest next update:     Tue 16 Apr 2024 02:29:16 +0000
Files and hashes:         1: 34352e3137372e31322e302f32322d3234203d3e20323638393738.roa (hash: MkUGBKHmk1+hAREoDPyS9FaBgez6xIj6Obd4KPgZW3s=)
                          2: 3069BE596AE6FD99F15867B76663D73952007F4C.crl (hash: jus/kdUoPOLIAHoooWrH+Hg+XNGmZKLEsFZbcfJ8mYo=)
                          3: 323830343a356438383a3a2f33322d3438203d3e20323638393738.roa (hash: OConXPluBtN7pz02j1C5kPtYxg9DKT5gFUXSm+SC3zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:26:ea:f5:c9:dd:e3:37:0b:a2:95:b0:56:68:08:8c:30:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3069BE596AE6FD99F15867B76663D73952007F4C
        Validity
            Not Before: Apr 14 23:57:16 2024 GMT
            Not After : Apr 16 02:29:16 2024 GMT
        Subject: CN=9FF4BEFD7A5CA59EDF1A112300B744156F08D815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:29:a0:b5:d9:a1:18:ad:df:f0:34:08:65:
                    6d:aa:55:2d:6e:6d:c1:f9:7f:4c:50:58:56:e6:95:
                    9c:79:bf:a1:f1:1c:bd:35:65:fd:7b:23:1d:ba:89:
                    84:a6:4c:ef:55:ae:17:d5:19:74:0d:15:c3:c8:50:
                    c7:d9:b4:ba:e6:1b:f2:f1:2e:6a:25:45:f7:b9:bf:
                    8f:48:e2:f6:b4:d4:4a:dc:8b:a5:9e:07:cb:fb:30:
                    46:e3:d5:d5:67:f7:b1:c3:ff:82:99:79:10:8b:cf:
                    10:37:f0:0f:6a:6d:9a:27:1b:e2:72:2c:d7:8a:fe:
                    cc:3a:5a:2f:83:89:83:a5:70:4c:00:35:0b:9b:4f:
                    d7:58:8f:e7:f8:68:fd:f1:f4:74:28:b1:be:7d:dd:
                    1e:ae:62:5f:0a:c4:ff:b3:e5:df:42:58:f1:77:4e:
                    96:ef:8c:b3:7c:dd:a7:44:2f:ec:ed:44:58:0c:2e:
                    d7:ea:1e:56:45:0f:3d:3e:42:b3:0f:da:9f:6a:a5:
                    c6:e2:19:58:15:87:f5:2e:4d:02:be:29:3f:35:b2:
                    80:6a:a8:37:01:6e:1a:68:5a:2e:d3:17:a7:36:09:
                    9f:da:ae:a6:32:85:23:e3:fb:05:ea:8e:ba:4b:e8:
                    78:d9:30:7a:23:bd:46:55:8f:f9:c5:a9:48:db:0d:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:BE:FD:7A:5C:A5:9E:DF:1A:11:23:00:B7:44:15:6F:08:D8:15
            X509v3 Authority Key Identifier:
                keyid:30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:b2:14:21:3b:ce:a2:97:a3:05:82:26:ea:0f:e5:2a:e2:
         47:0d:0a:e1:28:35:f8:d6:8c:8e:90:24:e8:51:b9:2f:9e:67:
         63:5a:4e:73:45:9b:d8:29:fb:72:dd:3b:35:77:11:81:0e:9f:
         27:75:ce:da:2c:81:5c:07:5c:03:c5:9d:ff:cf:b5:c5:56:ef:
         2c:c2:d3:5b:26:61:56:68:02:d0:39:58:5e:30:99:30:ee:97:
         65:66:8c:96:71:40:95:00:ff:d0:19:21:f2:db:4d:8f:4c:12:
         d7:b1:dc:ca:d1:f3:70:61:b1:ba:b2:94:7b:9b:95:84:d3:45:
         47:89:f2:de:1e:68:2c:9b:8e:bf:67:78:97:62:4d:f6:4a:96:
         6f:14:01:b0:e2:e2:59:e0:a7:98:8a:22:9b:2e:f1:57:4d:a7:
         b5:59:6c:7b:e6:d0:55:2f:cf:b3:24:71:2f:8f:3f:ec:30:7e:
         6a:3b:a5:69:a7:e7:11:ea:59:0c:7d:ae:f9:05:6f:da:31:70:
         8e:85:73:47:3e:c5:42:43:f4:bb:a1:30:63:23:9d:1a:c6:e8:
         36:df:bd:f8:05:0f:9b:c9:bc:ba:03:73:e2:b0:76:1f:96:99:
         78:3c:f5:7d:b4:81:65:4d:44:aa:c0:3b:eb:7a:93:e3:28:1f:
         6f:04:30:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV9om6vXJ3eM3C6KVsFZoCIwwF9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA2OUJFNTk2QUU2RkQ5OUYxNTg2N0I3NjY2M0Q3Mzk1
MjAwN0Y0QzAeFw0yNDA0MTQyMzU3MTZaFw0yNDA0MTYwMjI5MTZaMDMxMTAvBgNV
BAMTKDlGRjRCRUZEN0E1Q0E1OUVERjFBMTEyMzAwQjc0NDE1NkYwOEQ4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xymgtdmhGK3f8DQIZW2qVS1u
bcH5f0xQWFbmlZx5v6HxHL01Zf17Ix26iYSmTO9VrhfVGXQNFcPIUMfZtLrmG/Lx
LmolRfe5v49I4va01Erci6WeB8v7MEbj1dVn97HD/4KZeRCLzxA38A9qbZonG+Jy
LNeK/sw6Wi+DiYOlcEwANQubT9dYj+f4aP3x9HQosb593R6uYl8KxP+z5d9CWPF3
TpbvjLN83adEL+ztRFgMLtfqHlZFDz0+QrMP2p9qpcbiGVgVh/UuTQK+KT81soBq
qDcBbhpoWi7TF6c2CZ/arqYyhSPj+wXqjrpL6HjZMHojvUZVj/nFqUjbDS3tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn/S+/XpcpZ7fGhEjALdEFW8I2BUwHwYDVR0j
BBgwFoAUMGm+WWrm/ZnxWGe3ZmPXOVIAf0wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hUckZqYUxSQ3pjdEI0YVMzMk01ZHdOYms1c2dqelZUdUNES0E3VDZz
ekUvMC8zMDY5QkU1OTZBRTZGRDk5RjE1ODY3Qjc2NjYzRDczOTUyMDA3RjRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwNjlCRTU5NkFFNkZEOTlG
MTU4NjdCNzY2NjNENzM5NTIwMDdGNEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1hUckZqYUxSQ3pjdEI0YVMzMk01ZHdOYms1c2dqelZUdUNES0E3VDZzekUvMC8z
MDY5QkU1OTZBRTZGRDk5RjE1ODY3Qjc2NjYzRDczOTUyMDA3RjRDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAi6yFCE7zqKXowWCJuoP5SriRw0K4Sg1+NaMjpAk6FG5L55nY1pOc0Wb2Cn7
ct07NXcRgQ6fJ3XO2iyBXAdcA8Wd/8+1xVbvLMLTWyZhVmgC0DlYXjCZMO6XZWaM
lnFAlQD/0Bkh8ttNj0wS17HcytHzcGGxurKUe5uVhNNFR4ny3h5oLJuOv2d4l2JN
9kqWbxQBsOLiWeCnmIoimy7xV02ntVlse+bQVS/PsyRxL48/7DB+ajulaafnEepZ
DH2u+QVv2jFwjoVzRz7FQkP0u6EwYyOdGsboNt+9+AUPm8m8ugNz4rB2H5aZeDz1
fbSBZU1EqsA763qT4ygfbwQwzg==
-----END CERTIFICATE-----