Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.mft
File:                     3133BF6AAE53BAFEA21E0049D95F837433471001.mft (raw, json)
Hash identifier:          oWBxtg53p8JVh8FjwliKXDGlMiCDx4lg0h9BO541lEo=
Subject key identifier:   FD:39:3A:4C:17:8A:D2:BC:69:70:5F:50:76:E8:21:E9:5D:E0:F9:AF
Authority key identifier: 31:33:BF:6A:AE:53:BA:FE:A2:1E:00:49:D9:5F:83:74:33:47:10:01
Certificate issuer:       /CN=3133BF6AAE53BAFEA21E0049D95F837433471001
Certificate serial:       1575FF6F4DCE0CDDE7A45E61796FFC5B73E48761
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3133BF6AAE53BAFEA21E0049D95F837433471001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.mft
Manifest number:          36
Signing time:             Sun 14 Apr 2024 21:28:00 +0000
Manifest this update:     Sun 14 Apr 2024 21:23:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:28:00 +0000
Files and hashes:         1: 3230302e3131302e3230342e302f32332d3233203d3e20323730323533.roa (hash: 8qRgAfNUjUj7jOaNoWeIy8nvavUyVo8mixW8QKJkGPs=)
                          2: 3133BF6AAE53BAFEA21E0049D95F837433471001.crl (hash: 5JeDhmBlNOVUdLTKhw6VezQHJ58yYE5RkQ8Ttixqq7E=)
                          3: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: WiB61ZdAS43jeZsVL3MNhDqDzZGS39rJVDIbhJWElOg=)
                          4: 3230302e3131302e3230362e302f32332d3233203d3e20323730323533.roa (hash: yPI3hI21rFw3wjceBVHoCczH9t4M3V8YNViou7cRtbU=)
                          5: 3230302e3131302e3230342e302f32322d3232203d3e20323730323533.roa (hash: TkayhNijPdI4yNaM04WCLpm3Os+4Ft+PABL9dFsoQAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:75:ff:6f:4d:ce:0c:dd:e7:a4:5e:61:79:6f:fc:5b:73:e4:87:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3133BF6AAE53BAFEA21E0049D95F837433471001
        Validity
            Not Before: Apr 14 21:23:00 2024 GMT
            Not After : Apr 21 21:28:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:46:7a:a4:7e:c8:8f:24:a1:0b:51:fb:68:
                    00:76:ca:1f:37:5d:ad:b7:95:3b:dd:da:8a:61:af:
                    d5:42:46:18:52:88:b4:83:00:b8:17:fe:b2:7b:06:
                    09:10:c8:39:89:bf:d3:cf:55:2e:bc:dd:84:00:7e:
                    f7:34:8f:cc:c3:87:2e:35:0d:c3:68:af:bd:27:ba:
                    11:80:32:38:a9:c5:85:16:65:61:ab:1d:76:b6:f1:
                    3b:95:29:c5:6f:48:b5:e7:51:95:30:cb:fc:22:41:
                    94:2c:e4:51:0e:13:28:f3:ba:9e:a5:35:d9:0e:0f:
                    08:3d:a7:27:0c:0f:71:46:d3:85:c3:e3:09:73:13:
                    74:f3:e8:3b:7c:9a:88:8d:be:25:c0:d4:ce:6e:67:
                    2c:81:41:0d:de:21:47:fa:87:82:93:9c:a0:a5:85:
                    4a:d7:12:ca:9b:4a:65:c8:f8:b3:1d:e0:b0:9a:b0:
                    99:2f:f8:a1:3f:18:a0:f4:86:8c:86:4c:7f:71:31:
                    2b:d4:94:5d:e2:fa:71:30:8f:5a:b0:d0:c5:b7:b1:
                    8b:e3:c1:58:23:60:10:81:a9:c1:fc:4d:a3:4e:bb:
                    e6:7c:30:31:f6:c2:ed:ed:d7:7c:78:af:fb:64:45:
                    0f:c1:ee:8b:6c:1c:97:4e:41:fd:ab:dc:79:4c:eb:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:3A:4C:17:8A:D2:BC:69:70:5F:50:76:E8:21:E9:5D:E0:F9:AF
            X509v3 Authority Key Identifier:
                keyid:31:33:BF:6A:AE:53:BA:FE:A2:1E:00:49:D9:5F:83:74:33:47:10:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3133BF6AAE53BAFEA21E0049D95F837433471001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3133BF6AAE53BAFEA21E0049D95F837433471001.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:be:23:84:85:78:31:fd:d8:4a:30:df:02:49:03:aa:a9:
         73:fc:8e:11:5e:4e:0f:f0:8a:55:13:f4:49:f4:49:dc:f3:53:
         f1:d7:65:f1:e3:15:f0:2d:75:86:f6:aa:23:3f:de:21:1c:31:
         f0:19:89:9b:c9:ee:c5:b0:55:e7:52:a9:13:d1:ff:87:a3:c1:
         ea:90:4b:80:7d:4a:cd:2c:6a:8a:08:60:ed:52:f1:5e:8b:3a:
         42:23:9e:40:2c:97:22:c2:5e:4b:7d:43:93:81:5f:68:31:09:
         0b:85:89:35:6a:c2:1d:f5:ce:3e:17:e2:dc:34:4f:d4:70:12:
         00:fc:9a:be:83:22:47:9c:c8:db:4e:53:c2:a7:a1:cd:2c:94:
         b5:d2:e9:30:47:dd:b1:3d:07:96:82:27:13:5e:4c:cc:0d:6c:
         d0:92:a0:47:fd:5d:24:6e:01:18:45:fe:a7:cc:63:20:71:a3:
         09:54:a5:f9:d2:c7:f6:f3:42:e9:4b:94:cc:82:24:f0:36:f0:
         f6:29:1a:13:3d:ba:35:c3:fc:1b:9d:72:1b:05:c1:91:78:62:
         59:1b:4a:1e:c9:d6:54:6c:f2:44:7d:bd:46:e8:78:51:9f:d5:
         25:10:a3:b0:d7:1c:42:43:84:ea:59:e1:4e:5c:be:9e:10:3a:
         00:42:28:10
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUFXX/b03ODN3npF5heW/8W3Pkh2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzM0JGNkFBRTUzQkFGRUEyMUUwMDQ5RDk1RjgzNzQz
MzQ3MTAwMTAeFw0yNDA0MTQyMTIzMDBaFw0yNDA0MjEyMTI4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJDMjQ2N0FBNDdFQzg4RjI0
QTEwQjUxRkI2ODAwNzZDQTFGMzc1REFEQjc5NTNCREREQThBNjFBRkQ1NDI0NjE4
NTI4OEI0ODMwMEI4MTdGRUIyN0IwNjA5MTBDODM5ODlCRkQzQ0Y1NTJFQkNERDg0
MDA3RUY3MzQ4RkNDQzM4NzJFMzUwREMzNjhBRkJEMjdCQTExODAzMjM4QTlDNTg1
MTY2NTYxQUIxRDc2QjZGMTNCOTUyOUM1NkY0OEI1RTc1MTk1MzBDQkZDMjI0MTk0
MkNFNDUxMEUxMzI4RjNCQTlFQTUzNUQ5MEUwRjA4M0RBNzI3MEMwRjcxNDZEMzg1
QzNFMzA5NzMxMzc0RjNFODNCN0M5QTg4OERCRTI1QzBENENFNkU2NzJDODE0MTBE
REUyMTQ3RkE4NzgyOTM5Q0EwQTU4NTRBRDcxMkNBOUI0QTY1QzhGOEIzMURFMEIw
OUFCMDk5MkZGOEExM0YxOEEwRjQ4NjhDODY0QzdGNzEzMTJCRDQ5NDVERTJGQTcx
MzA4RjVBQjBEMEM1QjdCMThCRTNDMTU4MjM2MDEwODFBOUMxRkM0REEzNEVCQkU2
N0MzMDMxRjZDMkVERURENzdDNzhBRkZCNjQ0NTBGQzFFRThCNkMxQzk3NEU0MUZE
QUJEQzc5NENFQjMyRUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwsJGeqR+yI8koQtR+2gAdsofN12tt5U73dqKYa/VQkYYUoi0gwC4
F/6yewYJEMg5ib/Tz1UuvN2EAH73NI/Mw4cuNQ3DaK+9J7oRgDI4qcWFFmVhqx12
tvE7lSnFb0i151GVMMv8IkGULORRDhMo87qepTXZDg8IPacnDA9xRtOFw+MJcxN0
8+g7fJqIjb4lwNTObmcsgUEN3iFH+oeCk5ygpYVK1xLKm0plyPizHeCwmrCZL/ih
Pxig9IaMhkx/cTEr1JRd4vpxMI9asNDFt7GL48FYI2AQganB/E2jTrvmfDAx9sLt
7dd8eK/7ZEUPwe6LbByXTkH9q9x5TOsy7QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FP05OkwXitK8aXBfUHboIeld4PmvMB8GA1UdIwQYMBaAFDEzv2quU7r+oh4ASdlf
g3QzRxABMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNiYzQ4NnRjeUJhdmFv
aFdmNjlvTDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvMzEzM0JGNkFBRTUzQkFG
RUEyMUUwMDQ5RDk1RjgzNzQzMzQ3MTAwMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zMTMzQkY2QUFFNTNCQUZFQTIxRTAwNDlEOTVGODM3NDMzNDcx
MDAxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNiYzQ4NnRjeUJhdmFvaFdmNjlv
TDhCdlgyQjlBVHg1WlBOTlRUUXAzOFJyLzAvMzEzM0JGNkFBRTUzQkFGRUEyMUUw
MDQ5RDk1RjgzNzQzMzQ3MTAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHFzviOEhXgx/dhKMN8CSQOq
qXP8jhFeTg/wilUT9En0SdzzU/HXZfHjFfAtdYb2qiM/3iEcMfAZiZvJ7sWwVedS
qRPR/4ejweqQS4B9Ss0saooIYO1S8V6LOkIjnkAslyLCXkt9Q5OBX2gxCQuFiTVq
wh31zj4X4tw0T9RwEgD8mr6DIkecyNtOU8Knoc0slLXS6TBH3bE9B5aCJxNeTMwN
bNCSoEf9XSRuARhF/qfMYyBxowlUpfnSx/bzQulLlMyCJPA28PYpGhM9ujXD/Bud
chsFwZF4YlkbSh7J1lRs8kR9vUboeFGf1SUQo7DXHEJDhOpZ4U5cvp4QOgBCKBA=
-----END CERTIFICATE-----