Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft
File:                     3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft (raw, json)
Hash identifier:          XABm8uFxFWlMFHShs/2YujNiJ73gLJvwjIZTrtBbOgQ=
Subject key identifier:   DF:D3:85:C7:E0:37:BA:46:5C:1F:20:78:4B:C5:A6:CE:D7:88:83:B6
Authority key identifier: 3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09
Certificate issuer:       /CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
Certificate serial:       1D80BB6FC1BEEE9F2F09559AE643CCD512996843
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft
Manifest number:          03BA
Signing time:             Thu 19 Jan 2023 13:59:53 +0000
Manifest this update:     Thu 19 Jan 2023 13:54:53 +0000
Manifest next update:     Fri 20 Jan 2023 14:57:53 +0000
Files and hashes:         1: 323830343a333562633a3a2f33322d3438203d3e20323636333033.roa (hash: p2O/ruMifQfDXC63q9fiQvurhnYKVnevk70vBTBTcxM=)
                          2: 3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa (hash: qIzNL/bMAp7BLGAyS47wWYuYE6ZrUxab1DFZlRm38Rw=)
                          3: 3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl (hash: cB/HDkyTnP0OUxeCzqGo3YAztEGVYK8VITlPAnQppuQ=)
                          4: 3137302e37392e3137332e302f32342d3234203d3e20323636333033.roa (hash: 1Wp65TljlDXuBWWZqwOU9zHTeG1r5xMcSpKV/Lzs4HE=)
                          5: 3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa (hash: CIoMx2XtDlXee5AdUiCEFCMXUp8hkvvP1+gadbOFGgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:80:bb:6f:c1:be:ee:9f:2f:09:55:9a:e6:43:cc:d5:12:99:68:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
        Validity
            Not Before: Jan 19 13:54:53 2023 GMT
            Not After : Jan 20 14:57:53 2023 GMT
        Subject: CN=DFD385C7E037BA465C1F20784BC5A6CED78883B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:71:37:ab:43:41:02:84:dc:3b:ae:64:06:
                    88:40:44:7e:b1:4b:4e:73:48:f3:e7:22:64:39:bb:
                    09:83:cf:20:90:d6:4b:c1:20:87:fb:c6:c9:e2:75:
                    d5:29:c1:5d:94:3f:5c:ca:2c:12:96:f6:d1:07:d8:
                    ff:72:81:54:fa:6b:e5:15:16:6a:10:06:50:2c:de:
                    2c:b1:3f:eb:f9:d1:63:47:31:a2:3c:b5:0a:28:47:
                    39:77:1e:c3:c8:74:ba:77:99:b5:fc:aa:59:fc:57:
                    c6:1e:bd:6f:ee:d6:2b:a0:f8:27:39:6d:fb:aa:e0:
                    0e:a9:21:e0:cb:6c:81:fc:54:24:64:10:ac:15:a3:
                    4f:9c:46:9a:79:be:e7:55:93:dc:16:1c:98:bc:48:
                    1c:51:c7:4f:90:88:d8:5c:1e:53:ea:0c:0d:90:39:
                    2c:3a:27:35:1d:52:2e:9c:53:da:da:76:b5:d2:54:
                    2d:5f:c1:8b:bf:58:2d:57:81:5a:42:3c:51:66:1a:
                    c1:f8:43:05:70:ec:d6:7b:9f:39:e7:00:0d:6e:db:
                    83:10:c4:29:b1:26:1f:0c:df:77:8f:9b:5b:91:df:
                    43:16:85:28:5e:f2:a3:b3:6f:e3:50:f7:3b:76:43:
                    af:dd:c4:76:19:ee:02:13:35:67:b7:28:df:85:13:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:85:C7:E0:37:BA:46:5C:1F:20:78:4B:C5:A6:CE:D7:88:83:B6
            X509v3 Authority Key Identifier:
                keyid:3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:98:ac:e1:cb:9b:44:69:98:cd:08:15:87:4a:34:30:cf:c5:
         1c:28:12:a9:66:c3:2b:73:ea:d1:82:54:66:06:24:e0:de:f6:
         0e:7e:95:5d:5a:f6:a1:db:8a:0a:1f:e8:60:0e:cb:ff:a4:16:
         a2:d0:53:16:49:35:2a:89:4f:06:b1:be:5b:03:3a:89:f1:fb:
         67:1f:0b:1f:4e:45:a0:ab:54:e1:9a:ef:7b:50:03:02:fe:f4:
         3e:71:31:2c:9b:43:04:32:fa:54:c1:a2:e4:89:bd:02:01:e0:
         9b:f8:85:a7:e6:ca:30:d5:00:2e:c6:56:e1:85:aa:73:94:1f:
         f9:cd:bc:13:7d:14:5b:79:7a:38:b8:81:aa:bc:1c:4e:ed:c3:
         65:22:50:60:6e:55:ed:a2:6a:22:15:7b:1a:fe:f0:61:d4:98:
         75:34:4f:a4:aa:c3:b8:73:4a:ec:0b:ee:ae:0f:8b:86:c5:44:
         6d:ed:7b:5d:9a:1d:a7:25:31:94:cc:69:ab:4c:ec:1d:66:6c:
         21:3c:02:6e:8a:dc:b0:15:c0:09:1f:f2:30:e5:7d:0d:77:c2:
         e4:e1:dd:aa:f3:4a:d9:de:0d:59:7e:50:c7:8a:71:da:83:0a:
         04:ff:84:d3:2e:6c:4f:67:bb:e6:57:8c:a5:f8:bf:8d:07:71:
         be:8d:a2:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHYC7b8G+7p8vCVWa5kPM1RKZaEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QzRjMyQjJEMEI3NTkzNzkyMTIxREEwNjVGQ0E2N0ND
QjVBMTcwOTAeFw0yMzAxMTkxMzU0NTNaFw0yMzAxMjAxNDU3NTNaMDMxMTAvBgNV
BAMTKERGRDM4NUM3RTAzN0JBNDY1QzFGMjA3ODRCQzVBNkNFRDc4ODgzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvnE3q0NBAoTcO65kBohARH6x
S05zSPPnImQ5uwmDzyCQ1kvBIIf7xsniddUpwV2UP1zKLBKW9tEH2P9ygVT6a+UV
FmoQBlAs3iyxP+v50WNHMaI8tQooRzl3HsPIdLp3mbX8qln8V8YevW/u1iug+Cc5
bfuq4A6pIeDLbIH8VCRkEKwVo0+cRpp5vudVk9wWHJi8SBxRx0+QiNhcHlPqDA2Q
OSw6JzUdUi6cU9radrXSVC1fwYu/WC1XgVpCPFFmGsH4QwVw7NZ7nznnAA1u24MQ
xCmxJh8M33ePm1uR30MWhShe8qOzb+NQ9zt2Q6/dxHYZ7gITNWe3KN+FE4kfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU39OFx+A3ukZcHyB4S8WmzteIg7YwHwYDVR0j
BBgwFoAUPT8ystC3WTeSEh2gZfymfMtaFwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF
NFQvMC8zRDNGMzJCMkQwQjc1OTM3OTIxMjFEQTA2NUZDQTY3Q0NCNUExNzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNEM0YzMkIyRDBCNzU5Mzc5
MjEyMURBMDY1RkNBNjdDQ0I1QTE3MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8z
RDNGMzJCMkQwQjc1OTM3OTIxMjFEQTA2NUZDQTY3Q0NCNUExNzA5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyZis4cubRGmYzQgVh0o0MM/FHCgSqWbDK3Pq0YJUZgYk4N72Dn6VXVr2oduK
Ch/oYA7L/6QWotBTFkk1KolPBrG+WwM6ifH7Zx8LH05FoKtU4Zrve1ADAv70PnEx
LJtDBDL6VMGi5Im9AgHgm/iFp+bKMNUALsZW4YWqc5Qf+c28E30UW3l6OLiBqrwc
Tu3DZSJQYG5V7aJqIhV7Gv7wYdSYdTRPpKrDuHNK7Avurg+LhsVEbe17XZodpyUx
lMxpq0zsHWZsITwCborcsBXACR/yMOV9DXfC5OHdqvNK2d4NWX5Qx4px2oMKBP+E
0y5sT2e75leMpfi/jQdxvo2i6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org