Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.mft
File:                     358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.mft (raw, json)
Hash identifier:          nw4N1gfBJSywcmkqd/Hxwz5S+UNT3FziG2wUB0Uek08=
Subject key identifier:   6A:38:6B:99:3D:42:1C:BB:75:27:C7:EB:2D:C0:41:87:44:AA:73:08
Authority key identifier: 35:89:72:EA:5F:28:54:BF:4F:32:69:CE:4A:8C:F2:9D:5D:52:9B:8D
Certificate issuer:       /CN=358972EA5F2854BF4F3269CE4A8CF29D5D529B8D
Certificate serial:       1793840536D8CA80D5CE0943C043B6BED22D33D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.mft
Manifest number:          02AD
Signing time:             Mon 15 Apr 2024 05:46:10 +0000
Manifest this update:     Mon 15 Apr 2024 05:41:10 +0000
Manifest next update:     Tue 16 Apr 2024 07:07:10 +0000
Files and hashes:         1: 323830343a336363343a3a2f33322d3438203d3e20323636323333.roa (hash: 4ZfswHnyRMGxRK60arrnDFMV/FeLOFZwytdbiiY0MTo=)
                          2: 34352e362e3232382e302f32322d3234203d3e20323636323333.roa (hash: PZSZROIV/VYcX89XnGD2DYEpRvYoBzf7nKGatAMK+T4=)
                          3: 358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.crl (hash: HxXKuc0sPrBrGeOrh+67RMJHrBaoAH7NavteQt+Ghwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:93:84:05:36:d8:ca:80:d5:ce:09:43:c0:43:b6:be:d2:2d:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358972EA5F2854BF4F3269CE4A8CF29D5D529B8D
        Validity
            Not Before: Apr 15 05:41:10 2024 GMT
            Not After : Apr 16 07:07:10 2024 GMT
        Subject: CN=6A386B993D421CBB7527C7EB2DC0418744AA7308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:4b:0f:a8:17:ec:d2:74:8a:1f:b9:5a:9d:
                    96:d5:41:ba:6b:eb:93:2d:e8:34:5b:d9:2c:e3:3f:
                    00:fe:0d:36:c0:af:1c:91:2c:e1:28:d9:7d:bc:c0:
                    3c:5e:2c:c5:34:f1:80:ee:84:a2:95:3b:dd:0b:ef:
                    b8:79:12:42:9f:da:8d:a3:4d:ec:c0:c9:e6:c8:f8:
                    d0:44:e3:5c:7a:7d:14:48:6d:de:a7:00:67:18:c8:
                    ba:ae:a1:dd:c5:40:6a:80:57:26:1e:6c:d3:48:d8:
                    9a:9e:86:58:ca:f3:01:d6:61:83:a0:1e:66:82:3b:
                    22:05:8f:7c:4b:df:31:8b:03:a7:c1:7c:46:1e:00:
                    88:5e:a8:b2:cc:4e:98:af:f3:70:50:94:bc:08:5d:
                    46:63:03:3c:ad:69:e3:50:fc:da:15:3e:b5:64:fe:
                    5e:60:29:c9:18:0c:f1:86:2a:78:3f:d7:06:8e:90:
                    c6:52:a3:e0:9b:f5:ef:41:bd:81:b4:d2:15:22:77:
                    d3:33:32:4b:b4:fa:53:17:b2:2d:d4:fa:71:5b:e5:
                    39:9c:40:31:f2:fe:4b:dd:72:71:ef:9c:53:a4:73:
                    d0:58:00:97:33:d4:af:35:02:64:7e:cd:5f:a5:1f:
                    f5:4b:98:d1:49:cc:22:eb:1a:b1:ca:93:23:79:e6:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:38:6B:99:3D:42:1C:BB:75:27:C7:EB:2D:C0:41:87:44:AA:73:08
            X509v3 Authority Key Identifier:
                keyid:35:89:72:EA:5F:28:54:BF:4F:32:69:CE:4A:8C:F2:9D:5D:52:9B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:70:f0:a6:0c:35:08:19:97:1d:01:6e:50:ba:5d:9b:58:19:
         7b:5e:c7:bf:00:b5:7b:07:5a:f4:c2:84:13:f5:72:70:d8:d1:
         b3:5d:36:c6:3a:f4:58:eb:21:9e:9a:a0:e5:2e:e1:d6:9c:a3:
         97:44:74:c3:c7:8c:e1:47:58:2e:2b:06:08:c0:0e:86:ff:0b:
         37:7e:fa:17:53:c1:a0:88:22:bb:68:ad:65:6b:2c:1c:8e:c9:
         7c:ca:64:3c:d1:28:f9:48:a8:09:09:db:b2:af:ca:6d:9c:b1:
         a3:65:70:b3:1e:a8:fa:47:a0:0e:5c:8a:51:41:c0:1e:b8:43:
         9f:35:e8:11:8b:14:49:90:86:e4:8e:d7:6f:e3:15:05:34:9b:
         af:04:64:5f:52:7c:9c:4d:23:6d:6f:5d:de:35:8b:ca:0e:88:
         b1:11:96:c5:9f:23:01:68:81:84:6f:f1:fa:f3:dc:0f:2b:ae:
         c7:df:ea:30:e2:4e:ad:e5:75:21:23:cc:7c:e9:4b:b9:1f:8f:
         53:fe:98:b6:1b:e4:0e:f1:c2:2e:05:17:2b:2d:0d:7b:eb:65:
         91:6e:79:6f:47:c5:0b:4c:86:e0:17:02:60:03:e4:a5:1c:03:
         64:e6:8a:ba:cd:e9:a5:62:d6:76:5f:2b:22:d5:a9:31:1d:6e:
         d4:d0:c1:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF5OEBTbYyoDVzglDwEO2vtItM9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4OTcyRUE1RjI4NTRCRjRGMzI2OUNFNEE4Q0YyOUQ1
RDUyOUI4RDAeFw0yNDA0MTUwNTQxMTBaFw0yNDA0MTYwNzA3MTBaMDMxMTAvBgNV
BAMTKDZBMzg2Qjk5M0Q0MjFDQkI3NTI3QzdFQjJEQzA0MTg3NDRBQTczMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9EsPqBfs0nSKH7lanZbVQbpr
65Mt6DRb2SzjPwD+DTbArxyRLOEo2X28wDxeLMU08YDuhKKVO90L77h5EkKf2o2j
TezAyebI+NBE41x6fRRIbd6nAGcYyLquod3FQGqAVyYebNNI2JqehljK8wHWYYOg
HmaCOyIFj3xL3zGLA6fBfEYeAIheqLLMTpiv83BQlLwIXUZjAzytaeNQ/NoVPrVk
/l5gKckYDPGGKng/1waOkMZSo+Cb9e9BvYG00hUid9MzMku0+lMXsi3U+nFb5Tmc
QDHy/kvdcnHvnFOkc9BYAJcz1K81AmR+zV+lH/VLmNFJzCLrGrHKkyN55m8fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUajhrmT1CHLt1J8frLcBBh0SqcwgwHwYDVR0j
BBgwFoAUNYly6l8oVL9PMmnOSozynV1Sm40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VBM3BMajRrZG9xRkxqUG05S1A2TmJ5RHFVV2l0ZlpSVUNranYzR0d5
Q1cvMC8zNTg5NzJFQTVGMjg1NEJGNEYzMjY5Q0U0QThDRjI5RDVENTI5QjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1ODk3MkVBNUYyODU0QkY0
RjMyNjlDRTRBOENGMjlENUQ1MjlCOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2VBM3BMajRrZG9xRkxqUG05S1A2TmJ5RHFVV2l0ZlpSVUNranYzR0d5Q1cvMC8z
NTg5NzJFQTVGMjg1NEJGNEYzMjY5Q0U0QThDRjI5RDVENTI5QjhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAXDwpgw1CBmXHQFuULpdm1gZe17HvwC1ewda9MKEE/VycNjRs102xjr0WOsh
npqg5S7h1pyjl0R0w8eM4UdYLisGCMAOhv8LN376F1PBoIgiu2itZWssHI7JfMpk
PNEo+UioCQnbsq/KbZyxo2Vwsx6o+kegDlyKUUHAHrhDnzXoEYsUSZCG5I7Xb+MV
BTSbrwRkX1J8nE0jbW9d3jWLyg6IsRGWxZ8jAWiBhG/x+vPcDyuux9/qMOJOreV1
ISPMfOlLuR+PU/6YthvkDvHCLgUXKy0Ne+tlkW55b0fFC0yG4BcCYAPkpRwDZOaK
us3ppWLWdl8rItWpMR1u1NDBXg==
-----END CERTIFICATE-----