Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
File:                     5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft (raw, json)
Hash identifier:          AcG9PtVCWQesoVpTcd0ybBSlGlc09v8i+Z4tOEYgmu4=
Subject key identifier:   38:D7:85:07:1A:1C:41:FC:63:7A:9D:F1:11:F8:37:01:88:C7:84:A3
Authority key identifier: 58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
Certificate issuer:       /CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
Certificate serial:       0BBD336E548CBEC4F715B96F49680CD7DBAA4750
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft
Manifest number:          0439
Signing time:             Mon 26 Feb 2024 18:18:06 +0000
Manifest this update:     Mon 26 Feb 2024 18:13:06 +0000
Manifest next update:     Tue 27 Feb 2024 18:56:06 +0000
Files and hashes:         1: 5820A7350809BA171F6B4004D5F8AD4654AD3A9C.crl (hash: 11drlnU65QzZfE8wF3iyajIVLKGrQjsF1EtjOXJoD04=)
                          2: 34352e3138352e37362e302f32322d3234203d3e20323639333637.roa (hash: 4ra47giuA3baIVFAe5mJgLrLgTJrJU6liA+nRQbnZk0=)
                          3: 323830343a363338383a3a2f33322d3438203d3e20323639333637.roa (hash: Tn0I8mckZt/nPyo7W+1nHp7nsvOq1W0cHJJnZ46T++I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:33:6e:54:8c:be:c4:f7:15:b9:6f:49:68:0c:d7:db:aa:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
        Validity
            Not Before: Feb 26 18:13:06 2024 GMT
            Not After : Feb 27 18:56:06 2024 GMT
        Subject: CN=38D785071A1C41FC637A9DF111F8370188C784A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:86:2f:42:f1:e9:31:be:3f:1a:34:86:8a:
                    43:40:4f:ae:3c:22:72:4c:92:d5:b8:32:31:22:72:
                    0c:55:00:f5:da:3e:f0:38:eb:a1:1e:9e:e3:14:b4:
                    cf:fa:fe:c9:34:28:15:2a:a1:a0:09:93:f7:94:7f:
                    88:12:76:b7:6c:79:19:39:3b:f1:a2:dc:25:c3:c3:
                    be:85:63:a7:36:06:7a:e5:a6:43:8c:85:20:e2:99:
                    49:29:bb:cd:cd:04:24:e2:9e:36:6c:f8:e1:2c:86:
                    8f:56:16:47:5f:42:0a:75:a3:46:b5:a4:00:68:4e:
                    0b:bd:74:b3:cf:2b:a7:e8:8f:35:03:b4:dd:47:a5:
                    54:aa:98:f9:e4:ae:27:99:b7:eb:61:c3:1e:07:53:
                    36:4f:ff:9d:53:0d:3e:92:b2:fc:f1:c6:7a:72:b5:
                    c6:f9:65:da:63:a8:a3:20:24:ce:73:67:8a:48:9b:
                    f4:ef:87:54:e7:0d:5f:60:06:58:af:a9:b5:d0:ec:
                    0c:05:91:2e:14:6c:f1:ba:db:8c:4a:9e:b9:71:7e:
                    77:ef:3f:6a:e0:8c:6d:dd:0d:87:73:31:05:0e:c2:
                    d2:3e:99:cc:3d:c1:01:43:8e:de:8b:5b:b3:03:50:
                    f4:ae:b0:0c:1e:b1:2c:e8:ae:89:7b:16:4d:69:af:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:85:07:1A:1C:41:FC:63:7A:9D:F1:11:F8:37:01:88:C7:84:A3
            X509v3 Authority Key Identifier:
                keyid:58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:c1:c5:ad:61:8e:1c:44:f2:05:45:fb:36:86:03:92:a4:
         28:cd:3e:46:c8:11:dc:a3:11:0a:22:eb:0c:8a:b7:04:80:10:
         42:08:68:59:25:63:20:af:44:9b:37:7a:5b:a0:0a:cd:15:d0:
         50:11:8b:8d:ce:14:05:0b:06:72:e2:5a:4c:f9:f5:ce:73:f3:
         1e:35:aa:d5:49:fa:27:29:ea:37:cd:f7:cf:c8:68:dd:a2:2c:
         82:5e:5b:e7:82:62:14:16:5e:45:16:6a:5a:9c:2a:81:44:b0:
         e7:08:75:4f:5b:c0:bb:a0:2c:1a:9c:c8:f9:12:fe:69:3e:c2:
         b6:c7:15:df:6c:62:62:ef:4b:cc:22:b0:c1:2a:a3:95:b6:06:
         1f:67:f0:a9:77:9f:4a:1f:cd:2b:11:25:e4:7b:32:36:11:de:
         31:e3:fd:16:20:44:53:89:72:6c:fb:ec:4c:db:25:a0:78:68:
         8c:b4:c3:00:31:97:b5:3a:a6:f9:79:67:28:0a:10:8c:84:b9:
         2c:61:33:e2:84:f7:99:63:c1:36:c8:a9:b8:38:db:20:42:78:
         83:b9:f0:41:ba:7b:5e:61:85:32:ac:b3:2f:9d:ba:fd:99:7b:
         f6:80:84:b7:8d:75:f6:09:8c:8b:a2:3c:76:6a:36:96:8c:33:
         a4:dc:78:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC70zblSMvsT3FblvSWgM19uqR1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyMEE3MzUwODA5QkExNzFGNkI0MDA0RDVGOEFENDY1
NEFEM0E5QzAeFw0yNDAyMjYxODEzMDZaFw0yNDAyMjcxODU2MDZaMDMxMTAvBgNV
BAMTKDM4RDc4NTA3MUExQzQxRkM2MzdBOURGMTExRjgzNzAxODhDNzg0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAYYvQvHpMb4/GjSGikNAT648
InJMktW4MjEicgxVAPXaPvA466EenuMUtM/6/sk0KBUqoaAJk/eUf4gSdrdseRk5
O/Gi3CXDw76FY6c2BnrlpkOMhSDimUkpu83NBCTinjZs+OEsho9WFkdfQgp1o0a1
pABoTgu9dLPPK6fojzUDtN1HpVSqmPnkrieZt+thwx4HUzZP/51TDT6Ssvzxxnpy
tcb5ZdpjqKMgJM5zZ4pIm/Tvh1TnDV9gBlivqbXQ7AwFkS4UbPG624xKnrlxfnfv
P2rgjG3dDYdzMQUOwtI+mcw9wQFDjt6LW7MDUPSusAwesSzorol7Fk1przhXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUONeFBxocQfxjep3xEfg3AYjHhKMwHwYDVR0j
BBgwFoAUWCCnNQgJuhcfa0AE1fitRlStOpwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlO
cUgvMC81ODIwQTczNTA4MDlCQTE3MUY2QjQwMDRENUY4QUQ0NjU0QUQzQTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4MjBBNzM1MDgwOUJBMTcx
RjZCNDAwNEQ1RjhBRDQ2NTRBRDNBOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlOcUgvMC81
ODIwQTczNTA4MDlCQTE3MUY2QjQwMDRENUY4QUQ0NjU0QUQzQTlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASrLBxa1hjhxE8gVF+zaGA5KkKM0+RsgR3KMRCiLrDIq3BIAQQghoWSVjIK9E
mzd6W6AKzRXQUBGLjc4UBQsGcuJaTPn1znPzHjWq1Un6JynqN833z8ho3aIsgl5b
54JiFBZeRRZqWpwqgUSw5wh1T1vAu6AsGpzI+RL+aT7CtscV32xiYu9LzCKwwSqj
lbYGH2fwqXefSh/NKxEl5HsyNhHeMeP9FiBEU4lybPvsTNsloHhojLTDADGXtTqm
+XlnKAoQjIS5LGEz4oT3mWPBNsipuDjbIEJ4g7nwQbp7XmGFMqyzL526/Zl79oCE
t4119gmMi6I8dmo2lowzpNx4tw==
-----END CERTIFICATE-----