Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.mft
File:                     A03737EEF4C272E61B261E28FA26376D626ED6ED.mft (raw, json)
Hash identifier:          EUWF7DE6Z/cvH4wJNAzpf9tQ2UFq6UcpgAah/TLJrDc=
Subject key identifier:   05:84:06:FE:11:F8:9D:9B:02:0F:13:C4:DC:3E:46:60:7F:F3:5E:39
Authority key identifier: A0:37:37:EE:F4:C2:72:E6:1B:26:1E:28:FA:26:37:6D:62:6E:D6:ED
Certificate issuer:       /CN=A03737EEF4C272E61B261E28FA26376D626ED6ED
Certificate serial:       4B65C8DF8C1287B706D15C70B7662653EBBC1941
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.mft
Manifest number:          02AA
Signing time:             Tue 13 Jun 2023 10:00:00 +0000
Manifest this update:     Tue 13 Jun 2023 09:55:00 +0000
Manifest next update:     Wed 14 Jun 2023 13:28:00 +0000
Files and hashes:         1: 3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (hash: +eS4IiX5syyLjI+lyfv8dwV7xH0+DILhUY8G1AmeSYw=)
                          2: A03737EEF4C272E61B261E28FA26376D626ED6ED.crl (hash: gG7XfpdF/PctsQUSc1DHNnqJNrekANnN5TzIU6k3fqc=)
                          3: 323830343a366261383a3a2f33322d3336203d3e20323730343135.roa (hash: lCukYt/Mw2HUgBqVqofkRzOq+Vxh8SlTA9Iw9xPItp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:c8:df:8c:12:87:b7:06:d1:5c:70:b7:66:26:53:eb:bc:19:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03737EEF4C272E61B261E28FA26376D626ED6ED
        Validity
            Not Before: Jun 13 09:55:00 2023 GMT
            Not After : Jun 14 13:28:00 2023 GMT
        Subject: CN=058406FE11F89D9B020F13C4DC3E46607FF35E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:28:24:f2:6c:f2:97:38:9e:26:d3:25:34:
                    37:98:30:41:48:a1:d7:3e:c1:ec:fc:fb:a3:ea:fa:
                    56:7a:a4:4c:22:af:d4:bf:85:af:4e:58:7c:4b:53:
                    bc:22:8f:84:35:a0:b7:f9:22:b5:50:c1:e9:68:54:
                    0a:38:d2:16:5b:a9:7f:c7:87:ef:9a:23:1d:db:d1:
                    35:c6:3f:e5:10:d8:27:9b:16:3a:97:f8:4c:40:88:
                    ac:59:62:dd:58:79:8e:74:55:b4:0d:30:16:69:f7:
                    77:3f:ae:57:0a:c0:43:a7:00:e3:26:0b:65:9c:8c:
                    ee:b9:b4:e8:8a:a5:21:37:ee:a8:df:89:dd:6a:4c:
                    07:85:a8:35:7e:3c:1a:ec:f2:1a:78:bc:71:38:1b:
                    e6:28:74:4b:24:f2:b8:73:3f:f1:96:96:78:c2:a2:
                    be:a9:43:c0:3a:3a:1e:49:bc:a7:33:34:98:e8:d9:
                    98:d8:b2:37:35:d6:aa:3b:68:ef:96:16:7b:95:4d:
                    2a:a2:d0:f1:87:8c:29:65:e4:5b:bf:7a:4c:1f:64:
                    91:27:35:fb:80:55:0f:7f:27:e9:0c:ff:5a:35:70:
                    b2:03:a4:62:5c:f9:16:b4:f2:36:f4:79:8e:e4:e2:
                    6a:83:df:64:de:29:24:c5:50:3f:af:8f:84:5f:4a:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:06:FE:11:F8:9D:9B:02:0F:13:C4:DC:3E:46:60:7F:F3:5E:39
            X509v3 Authority Key Identifier:
                keyid:A0:37:37:EE:F4:C2:72:E6:1B:26:1E:28:FA:26:37:6D:62:6E:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:54:e9:61:de:30:93:52:1b:cc:a9:eb:4a:44:c3:12:5e:
         fd:ba:dd:f3:5b:b0:37:c7:06:85:fc:47:53:05:2a:63:98:0e:
         e2:cd:0b:b5:f4:aa:5e:8e:87:c2:f8:50:f0:ac:d6:f7:1a:04:
         3a:77:79:81:40:74:1d:04:22:bd:fe:aa:ea:7e:df:78:a6:44:
         e1:23:fd:71:f5:41:4f:90:0e:f7:22:2d:74:ab:b7:53:7b:7d:
         28:52:7e:8a:c4:5e:03:ae:5b:02:a1:78:c4:00:65:32:49:53:
         5b:09:8b:38:49:f2:f6:9d:8a:8c:a4:96:58:2a:13:5a:01:36:
         77:2b:ed:6c:5f:65:16:a5:10:9b:26:f8:aa:a9:3e:4b:44:36:
         64:f6:1d:b9:21:e4:24:35:2f:ce:39:4e:83:bb:71:d7:02:86:
         c0:33:70:ba:18:51:11:a8:3c:35:18:7f:45:a9:d0:4e:8c:4f:
         be:77:f8:cc:16:96:c8:c9:fb:0e:7c:16:61:08:bf:8f:a7:50:
         e0:a7:1a:6e:66:37:fe:64:99:7a:ee:cc:c6:d8:49:56:46:ba:
         6e:eb:74:94:44:0e:1b:e1:76:ca:f9:58:da:13:32:42:01:2e:
         6a:8b:15:9b:19:b5:f1:b6:b3:57:d0:6b:85:ea:22:dd:43:16:
         3c:f7:0e:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS2XI34wSh7cG0Vxwt2YmU+u8GUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAzNzM3RUVGNEMyNzJFNjFCMjYxRTI4RkEyNjM3NkQ2
MjZFRDZFRDAeFw0yMzA2MTMwOTU1MDBaFw0yMzA2MTQxMzI4MDBaMDMxMTAvBgNV
BAMTKDA1ODQwNkZFMTFGODlEOUIwMjBGMTNDNERDM0U0NjYwN0ZGMzVFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQygk8mzylzieJtMlNDeYMEFI
odc+wez8+6Pq+lZ6pEwir9S/ha9OWHxLU7wij4Q1oLf5IrVQweloVAo40hZbqX/H
h++aIx3b0TXGP+UQ2CebFjqX+ExAiKxZYt1YeY50VbQNMBZp93c/rlcKwEOnAOMm
C2WcjO65tOiKpSE37qjfid1qTAeFqDV+PBrs8hp4vHE4G+YodEsk8rhzP/GWlnjC
or6pQ8A6Oh5JvKczNJjo2ZjYsjc11qo7aO+WFnuVTSqi0PGHjCll5Fu/ekwfZJEn
NfuAVQ9/J+kM/1o1cLIDpGJc+Ra08jb0eY7k4mqD32TeKSTFUD+vj4RfSp61AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBYQG/hH4nZsCDxPE3D5GYH/zXjkwHwYDVR0j
BBgwFoAUoDc37vTCcuYbJh4o+iY3bWJu1u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBp
S2ovMC9BMDM3MzdFRUY0QzI3MkU2MUIyNjFFMjhGQTI2Mzc2RDYyNkVENkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwMzczN0VFRjRDMjcyRTYx
QjI2MUUyOEZBMjYzNzZENjI2RUQ2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBpS2ovMC9B
MDM3MzdFRUY0QzI3MkU2MUIyNjFFMjhGQTI2Mzc2RDYyNkVENkVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcchU6WHeMJNSG8yp60pEwxJe/brd81uwN8cGhfxHUwUqY5gO4s0LtfSqXo6H
wvhQ8KzW9xoEOnd5gUB0HQQivf6q6n7feKZE4SP9cfVBT5AO9yItdKu3U3t9KFJ+
isReA65bAqF4xABlMklTWwmLOEny9p2KjKSWWCoTWgE2dyvtbF9lFqUQmyb4qqk+
S0Q2ZPYduSHkJDUvzjlOg7tx1wKGwDNwuhhREag8NRh/RanQToxPvnf4zBaWyMn7
DnwWYQi/j6dQ4KcabmY3/mSZeu7MxthJVka6but0lEQOG+F2yvlY2hMyQgEuaosV
mxm18bazV9Brheoi3UMWPPcOag==
-----END CERTIFICATE-----