Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft
File:                     303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft (raw, json)
Hash identifier:          bW7rPyvhcMynB4DMN0ep52P8iryPe2+sHpYDpqUD2is=
Subject key identifier:   F2:24:B4:A5:3C:73:DD:B6:35:65:F7:24:38:B1:2B:1C:85:8E:90:B2
Authority key identifier: 30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F
Certificate issuer:       /CN=303AE09FFD23B1162E3AF84CB43D7FCE33DF016F
Certificate serial:       1B440E7E9E291E3F9F4DAF85FD4DF745D0FFD3F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft
Manifest number:          12
Signing time:             Tue 12 Mar 2024 09:21:59 +0000
Manifest this update:     Tue 12 Mar 2024 09:16:59 +0000
Manifest next update:     Wed 13 Mar 2024 11:34:59 +0000
Files and hashes:         1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: ljUAK0HXQeV0ZW78THDaPfmoCw12kzd1ncVKYs7WcjI=)
                          2: 303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.crl (hash: ADpBVcrmz8M8F56MJRtCGObOjVeoZmDM9RwRwVeLc1o=)
                          3: 323830343a6331383a3a2f33322d3333203d3e203532363737.roa (hash: ZWC/o3h4+V/taCuxoY6ST+CVYOpMh39npKfLGvRDh4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:44:0e:7e:9e:29:1e:3f:9f:4d:af:85:fd:4d:f7:45:d0:ff:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303AE09FFD23B1162E3AF84CB43D7FCE33DF016F
        Validity
            Not Before: Mar 12 09:16:59 2024 GMT
            Not After : Mar 13 11:34:59 2024 GMT
        Subject: CN=F224B4A53C73DDB63565F72438B12B1C858E90B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:24:52:10:e1:ca:5b:32:36:e9:b7:fd:cf:ee:
                    79:f3:c3:47:dc:f8:ac:90:ae:86:92:ab:7e:9e:e9:
                    49:ee:10:93:0c:19:d0:95:af:d8:93:3d:db:d3:db:
                    6d:c8:ae:ca:7f:d1:09:e8:7d:2c:ef:3b:67:c6:2e:
                    d5:f7:c5:85:27:b8:26:34:93:6a:4b:03:ab:1d:32:
                    2b:69:99:05:17:c2:34:86:08:d8:86:ca:59:7e:cc:
                    e6:5b:45:2b:63:38:8d:24:53:b7:31:6b:41:b8:86:
                    39:5c:12:07:b6:35:d9:62:8e:16:e7:02:f1:b2:cc:
                    a2:f6:1e:11:90:e6:ca:d4:1d:81:1c:58:7a:9b:3d:
                    1c:47:a1:23:8c:40:ed:86:fa:1c:51:6b:3c:0f:e1:
                    ea:10:62:85:73:4c:fa:9f:c3:11:15:8d:89:f1:2b:
                    98:6c:b7:ac:db:13:95:e8:20:05:d3:1a:be:e2:bd:
                    83:aa:a2:cb:ee:4c:7d:09:47:3c:4a:41:06:dd:3b:
                    72:16:f1:b8:cf:98:8a:9b:52:82:4d:81:04:23:3c:
                    0f:32:cf:9c:13:a0:01:c9:0e:1e:a3:7a:c5:db:90:
                    6c:18:8d:06:be:f5:d1:4c:4a:62:f8:90:c3:8a:3b:
                    ee:bf:71:7d:38:a6:91:16:a8:49:00:2a:37:8a:f7:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:24:B4:A5:3C:73:DD:B6:35:65:F7:24:38:B1:2B:1C:85:8E:90:B2
            X509v3 Authority Key Identifier:
                keyid:30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:84:be:43:8f:1b:5f:20:3a:43:aa:30:11:3d:5c:eb:29:8c:
         37:6c:15:4c:c1:83:8a:49:39:a4:54:66:a8:60:d2:df:17:02:
         b6:a1:b7:3d:b4:ed:e0:7d:58:a0:49:c0:19:0e:e8:14:8d:e0:
         88:64:73:0d:04:d0:62:e5:fe:af:44:e3:de:19:d9:91:33:7f:
         9b:ed:82:93:f6:ca:ea:ae:6b:fb:09:0a:4d:98:6b:25:e9:2b:
         7f:04:b0:35:47:05:79:11:34:74:e2:d6:f3:24:50:08:a2:05:
         21:7a:fd:fb:17:72:00:c5:a6:13:e5:11:29:9e:bb:54:b0:c1:
         52:9e:e4:15:dc:a4:38:13:a4:25:9b:e4:e5:38:c1:97:93:00:
         9c:a6:3e:0f:5c:72:61:5f:2c:ba:1b:22:4d:19:4d:26:c1:6a:
         f4:cf:e5:6e:40:07:df:9e:90:2b:ec:d8:7a:5d:46:3f:8d:46:
         56:be:0c:78:6b:9d:8f:dd:c5:ac:8a:ce:97:a3:bf:5d:c9:1f:
         23:6d:05:8a:60:70:c2:ce:d6:a0:be:50:d4:bc:9e:65:8a:e8:
         cc:01:25:1f:48:54:71:01:68:e5:94:c9:d8:db:be:08:04:85:
         e6:86:3f:0b:28:bc:45:62:b9:55:9b:47:38:f2:0b:e6:26:07:
         9b:e2:aa:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG0QOfp4pHj+fTa+F/U33RdD/0/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzQUUwOUZGRDIzQjExNjJFM0FGODRDQjQzRDdGQ0Uz
M0RGMDE2RjAeFw0yNDAzMTIwOTE2NTlaFw0yNDAzMTMxMTM0NTlaMDMxMTAvBgNV
BAMTKEYyMjRCNEE1M0M3M0REQjYzNTY1RjcyNDM4QjEyQjFDODU4RTkwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6JFIQ4cpbMjbpt/3P7nnzw0fc
+KyQroaSq36e6UnuEJMMGdCVr9iTPdvT223Irsp/0QnofSzvO2fGLtX3xYUnuCY0
k2pLA6sdMitpmQUXwjSGCNiGyll+zOZbRStjOI0kU7cxa0G4hjlcEge2Ndlijhbn
AvGyzKL2HhGQ5srUHYEcWHqbPRxHoSOMQO2G+hxRazwP4eoQYoVzTPqfwxEVjYnx
K5hst6zbE5XoIAXTGr7ivYOqosvuTH0JRzxKQQbdO3IW8bjPmIqbUoJNgQQjPA8y
z5wToAHJDh6jesXbkGwYjQa+9dFMSmL4kMOKO+6/cX04ppEWqEkAKjeK93fpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8iS0pTxz3bY1ZfckOLErHIWOkLIwHwYDVR0j
BBgwFoAUMDrgn/0jsRYuOvhMtD1/zjPfAW8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMC8zMDNBRTA5RkZEMjNCMTE2MkUzQUY4NENCNDNEN0ZDRTMzREYwMTZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwM0FFMDlGRkQyM0IxMTYy
RTNBRjg0Q0I0M0Q3RkNFMzNERjAxNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC8z
MDNBRTA5RkZEMjNCMTE2MkUzQUY4NENCNDNEN0ZDRTMzREYwMTZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV4S+Q48bXyA6Q6owET1c6ymMN2wVTMGDikk5pFRmqGDS3xcCtqG3PbTt4H1Y
oEnAGQ7oFI3giGRzDQTQYuX+r0Tj3hnZkTN/m+2Ck/bK6q5r+wkKTZhrJekrfwSw
NUcFeRE0dOLW8yRQCKIFIXr9+xdyAMWmE+URKZ67VLDBUp7kFdykOBOkJZvk5TjB
l5MAnKY+D1xyYV8suhsiTRlNJsFq9M/lbkAH356QK+zYel1GP41GVr4MeGudj93F
rIrOl6O/XckfI20FimBwws7WoL5Q1LyeZYrozAElH0hUcQFo5ZTJ2Nu+CASF5oY/
Cyi8RWK5VZtHOPIL5iYHm+KqnQ==
-----END CERTIFICATE-----