Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft
File:                     3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft (raw, json)
Hash identifier:          CSUE2N6alccRaK9ktiTSsJSxMUn1B9KaFlVp/jqoVwY=
Subject key identifier:   39:72:E8:CB:9E:B7:99:CE:D6:FD:48:3F:9E:1B:B6:58:42:95:E9:C0
Authority key identifier: 3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6
Certificate issuer:       /CN=3A16325DA076D0729C22B3F9C55ED3560488A0C6
Certificate serial:       7DD3A8DAD60CE2EEF34A886D554D28C6E7179040
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft
Manifest number:          0188
Signing time:             Sun 14 Apr 2024 18:47:06 +0000
Manifest this update:     Sun 14 Apr 2024 18:42:06 +0000
Manifest next update:     Mon 15 Apr 2024 21:08:06 +0000
Files and hashes:         1: 3A16325DA076D0729C22B3F9C55ED3560488A0C6.crl (hash: nSMT4udDq1oKrAPgvtFJ3wcsZ54hTLDy8wqhLqW3/6w=)
                          2: 34352e3138372e36302e302f32322d3332203d3e20323639343537.roa (hash: Qr7CR39oqeTL7+ZBfl3JRe34qFEmTSJFpT4/05EBVlQ=)
                          3: 323830343a363465383a3a2f33322d313238203d3e20323639343537.roa (hash: ZVoyWz6iDCk4ohl8esfuYUewj60QYI6ZB/ElBKesUy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:a8:da:d6:0c:e2:ee:f3:4a:88:6d:55:4d:28:c6:e7:17:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A16325DA076D0729C22B3F9C55ED3560488A0C6
        Validity
            Not Before: Apr 14 18:42:06 2024 GMT
            Not After : Apr 15 21:08:06 2024 GMT
        Subject: CN=3972E8CB9EB799CED6FD483F9E1BB6584295E9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:e8:5d:fc:5e:ad:97:e7:f6:56:75:31:ff:
                    16:e7:2a:b2:8d:91:87:5c:14:5d:ec:4f:51:5d:66:
                    a2:52:d7:f8:9f:ce:97:f3:db:ae:7f:d4:7b:e8:e2:
                    ac:3f:8c:32:94:70:a4:5e:50:fa:d8:13:90:73:be:
                    44:74:cf:c4:5d:c2:2d:5a:f8:81:d9:d5:29:29:2c:
                    e8:9a:76:60:b7:3a:18:d4:06:47:9e:86:99:fe:2a:
                    d9:b4:16:68:d4:8b:56:8b:2f:f6:89:83:c6:10:20:
                    25:00:ee:19:52:b6:bc:e5:1c:57:ce:e7:e8:f8:60:
                    25:fb:16:9c:a8:fe:e6:4a:23:06:ec:d3:31:ba:8c:
                    10:9c:04:7b:ab:36:02:80:40:60:ab:2d:a3:e0:03:
                    5d:a6:7f:2a:1c:22:36:3e:78:5d:9d:9d:72:eb:2c:
                    1a:ff:90:aa:36:45:a0:f7:e3:21:c0:5a:a8:01:a7:
                    c1:7d:b3:33:e7:d4:2b:17:98:20:12:a2:88:5f:88:
                    d0:b9:fb:54:c6:fc:24:8e:dc:45:26:7f:cb:0b:96:
                    75:51:ad:95:3b:c5:71:bf:56:a9:67:e8:62:ce:9e:
                    0c:db:c9:c8:11:62:77:da:c8:87:24:21:eb:d8:b0:
                    6c:e1:12:8b:61:c4:3b:1b:6e:30:35:16:40:38:d4:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:E8:CB:9E:B7:99:CE:D6:FD:48:3F:9E:1B:B6:58:42:95:E9:C0
            X509v3 Authority Key Identifier:
                keyid:3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:4f:0b:67:e3:6d:97:df:47:f1:c9:d0:a7:70:2e:34:d3:
         d9:e3:3c:a4:93:ae:1f:3e:da:18:4d:71:3d:9e:c9:14:88:81:
         87:47:04:dc:5e:a7:e6:87:bd:9f:eb:85:53:f6:d4:ac:fd:17:
         5d:78:a5:73:ce:55:c7:b1:0b:16:8f:31:53:ae:fb:4a:ae:27:
         35:f3:ab:3d:82:fc:e0:c7:45:85:13:52:02:f8:c1:fb:10:5e:
         cf:03:91:91:e8:56:7a:b8:ee:ba:1c:73:79:bd:db:4a:34:6e:
         16:62:e6:dd:3e:8c:85:93:c7:07:00:c1:e2:97:bd:90:3f:b3:
         37:02:95:86:cd:71:91:e4:f3:d8:9c:60:11:09:5f:ce:6f:3a:
         a4:5f:a3:ab:25:ba:e4:fb:a2:12:05:d0:bc:37:e6:12:95:7d:
         80:c0:c7:d7:8a:1f:33:e4:3a:3e:fc:a8:f0:83:50:5b:3b:41:
         8b:67:70:be:f7:75:e9:be:2c:b0:33:40:8f:55:ae:f4:98:0e:
         2c:77:3d:e2:26:e4:a0:47:6d:26:2f:9c:8e:63:d9:c2:3d:f3:
         93:82:53:89:b0:fb:e2:d3:b0:aa:cd:f4:ed:4e:37:7f:02:53:
         6b:86:89:0b:68:5d:11:9b:8c:03:c1:77:86:7d:4c:f6:e6:62:
         9d:b4:45:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfdOo2tYM4u7zSohtVU0oxucXkEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ExNjMyNURBMDc2RDA3MjlDMjJCM0Y5QzU1RUQzNTYw
NDg4QTBDNjAeFw0yNDA0MTQxODQyMDZaFw0yNDA0MTUyMTA4MDZaMDMxMTAvBgNV
BAMTKDM5NzJFOENCOUVCNzk5Q0VENkZENDgzRjlFMUJCNjU4NDI5NUU5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdk+hd/F6tl+f2VnUx/xbnKrKN
kYdcFF3sT1FdZqJS1/ifzpfz265/1Hvo4qw/jDKUcKReUPrYE5BzvkR0z8Rdwi1a
+IHZ1SkpLOiadmC3OhjUBkeehpn+Ktm0FmjUi1aLL/aJg8YQICUA7hlStrzlHFfO
5+j4YCX7Fpyo/uZKIwbs0zG6jBCcBHurNgKAQGCrLaPgA12mfyocIjY+eF2dnXLr
LBr/kKo2RaD34yHAWqgBp8F9szPn1CsXmCASoohfiNC5+1TG/CSO3EUmf8sLlnVR
rZU7xXG/Vqln6GLOngzbycgRYnfayIckIevYsGzhEothxDsbbjA1FkA41PvXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOXLoy563mc7W/Ug/nhu2WEKV6cAwHwYDVR0j
BBgwFoAUOhYyXaB20HKcIrP5xV7TVgSIoMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl
V0MvMC8zQTE2MzI1REEwNzZEMDcyOUMyMkIzRjlDNTVFRDM1NjA0ODhBMEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBMTYzMjVEQTA3NkQwNzI5
QzIyQjNGOUM1NUVEMzU2MDQ4OEEwQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dlV0MvMC8z
QTE2MzI1REEwNzZEMDcyOUMyMkIzRjlDNTVFRDM1NjA0ODhBMEM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnYZPC2fjbZffR/HJ0KdwLjTT2eM8pJOuHz7aGE1xPZ7JFIiBh0cE3F6n5oe9
n+uFU/bUrP0XXXilc85Vx7ELFo8xU677Sq4nNfOrPYL84MdFhRNSAvjB+xBezwOR
kehWerjuuhxzeb3bSjRuFmLm3T6MhZPHBwDB4pe9kD+zNwKVhs1xkeTz2JxgEQlf
zm86pF+jqyW65PuiEgXQvDfmEpV9gMDH14ofM+Q6Pvyo8INQWztBi2dwvvd16b4s
sDNAj1Wu9JgOLHc94ibkoEdtJi+cjmPZwj3zk4JTibD74tOwqs307U43fwJTa4aJ
C2hdEZuMA8F3hn1M9uZinbRFyA==
-----END CERTIFICATE-----