Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.mft
File:                     BDA99E980250933567E91C668F5C196B451AE8E0.mft (raw, json)
Hash identifier:          XlHPbHtQDiGI6dlbVS/6wIUGuVe+2ZenWCn7lNeQ3ZM=
Subject key identifier:   A3:69:A6:F9:95:5D:85:F2:82:EE:0D:DE:A1:86:BE:2D:D4:0D:FC:B2
Authority key identifier: BD:A9:9E:98:02:50:93:35:67:E9:1C:66:8F:5C:19:6B:45:1A:E8:E0
Certificate issuer:       /CN=BDA99E980250933567E91C668F5C196B451AE8E0
Certificate serial:       11F884A7917FECD3EDE4F260DF9CA5E4964A7DB7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA99E980250933567E91C668F5C196B451AE8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.mft
Manifest number:          28
Signing time:             Tue 26 Mar 2024 18:48:16 +0000
Manifest this update:     Tue 26 Mar 2024 18:43:16 +0000
Manifest next update:     Wed 27 Mar 2024 22:40:16 +0000
Files and hashes:         1: 323830343a363865383a3a2f33322d313238203d3e20323639373234.roa (hash: taZ5VFKdnlAsH2xy9t2eVUXMG/Ab0zTHOjOOCOKAHmI=)
                          2: BDA99E980250933567E91C668F5C196B451AE8E0.crl (hash: 1KdrEtg92fxSw0dWh3bNlWKLc8s5wcCAqoXvcnTH/Mk=)
                          3: 34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa (hash: 8fFlv9tbciNbCIEI6VL2g9irDCAXgMOzI6YpFEgP5w8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f8:84:a7:91:7f:ec:d3:ed:e4:f2:60:df:9c:a5:e4:96:4a:7d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA99E980250933567E91C668F5C196B451AE8E0
        Validity
            Not Before: Mar 26 18:43:16 2024 GMT
            Not After : Mar 27 22:40:16 2024 GMT
        Subject: CN=A369A6F9955D85F282EE0DDEA186BE2DD40DFCB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e6:13:b2:d3:15:47:22:03:21:44:85:ac:f9:
                    d5:36:87:49:ff:c0:72:67:34:4d:b3:d1:a0:1f:0e:
                    dc:95:76:e9:4a:7e:4b:0f:4d:22:55:b7:32:5f:89:
                    40:18:d4:c7:bb:a3:02:52:55:25:e5:6d:70:09:33:
                    f1:37:0a:44:df:51:48:57:68:c7:ba:11:20:e7:c4:
                    b2:20:90:dd:5e:67:ce:a0:26:1c:a7:9c:30:85:55:
                    c2:d6:ca:d0:11:f7:73:df:63:c4:22:ec:fe:ca:c2:
                    be:5d:39:85:5f:fb:0b:fa:7f:e9:0d:5c:7b:1c:b1:
                    64:97:28:c7:36:5e:8e:19:54:32:ca:a0:03:b5:dd:
                    96:59:7c:73:75:aa:2c:31:86:da:9a:de:4e:25:bd:
                    77:32:08:11:d8:76:67:ec:35:b4:8f:b4:32:8c:8a:
                    65:d7:05:4d:cd:e4:aa:ab:83:20:55:23:55:c0:4d:
                    79:7f:a5:07:59:66:ac:df:24:1b:26:9a:de:a5:b5:
                    4a:64:d4:ba:ab:bd:89:1d:9c:e6:bd:4d:61:b3:b5:
                    ca:f1:d7:d2:bf:71:25:dd:b6:06:41:92:33:d0:2e:
                    c9:15:a1:c9:ed:21:68:e7:fc:ab:4d:51:f2:3e:19:
                    7a:6e:cf:23:5a:46:bf:b1:97:1d:10:ec:6a:9d:0b:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:A6:F9:95:5D:85:F2:82:EE:0D:DE:A1:86:BE:2D:D4:0D:FC:B2
            X509v3 Authority Key Identifier:
                keyid:BD:A9:9E:98:02:50:93:35:67:E9:1C:66:8F:5C:19:6B:45:1A:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDA99E980250933567E91C668F5C196B451AE8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:0b:8b:4a:2f:6c:b4:b3:45:35:d5:bf:b5:16:23:c7:fe:
         c8:67:fd:19:7c:e6:d4:cd:4c:20:de:19:85:fd:48:ec:a6:32:
         72:a7:a1:b9:87:63:e6:49:0c:62:2a:e6:ac:3e:a2:fc:ce:db:
         85:44:58:16:f4:11:ae:59:33:26:59:39:13:8a:46:52:19:ff:
         b5:f1:83:bd:9e:d0:ba:12:82:6b:96:f5:fc:91:d9:9e:1d:5b:
         2b:20:f4:7c:95:d8:3d:ae:41:d3:98:42:b4:7e:10:48:ba:67:
         20:74:36:5f:e9:1a:82:32:10:6e:34:d7:49:94:cf:5f:19:e4:
         82:d1:8f:5b:ba:89:72:39:f3:75:23:b4:c3:75:80:b7:e0:47:
         99:65:ed:5f:41:e5:55:bf:4e:4a:42:5e:a4:69:15:fe:a3:a2:
         57:6c:12:c5:f7:cc:5e:6d:7c:ab:d9:03:e5:52:0d:0b:49:d2:
         fe:4b:74:65:b6:d4:30:bf:65:1d:f6:96:d9:97:53:1e:17:2a:
         16:ef:d4:76:b9:b5:34:bd:89:47:4c:3e:82:01:ae:b6:1f:75:
         65:b9:21:eb:9f:50:07:5e:84:b9:4c:09:93:14:30:11:ba:bd:
         17:44:88:a3:0f:6f:f7:23:64:08:9a:f5:85:d8:96:4d:de:ce:
         ad:8b:9c:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEfiEp5F/7NPt5PJg35yl5JZKfbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRBOTlFOTgwMjUwOTMzNTY3RTkxQzY2OEY1QzE5NkI0
NTFBRThFMDAeFw0yNDAzMjYxODQzMTZaFw0yNDAzMjcyMjQwMTZaMDMxMTAvBgNV
BAMTKEEzNjlBNkY5OTU1RDg1RjI4MkVFMERERUExODZCRTJERDQwREZDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5hOy0xVHIgMhRIWs+dU2h0n/
wHJnNE2z0aAfDtyVdulKfksPTSJVtzJfiUAY1Me7owJSVSXlbXAJM/E3CkTfUUhX
aMe6ESDnxLIgkN1eZ86gJhynnDCFVcLWytAR93PfY8Qi7P7Kwr5dOYVf+wv6f+kN
XHscsWSXKMc2Xo4ZVDLKoAO13ZZZfHN1qiwxhtqa3k4lvXcyCBHYdmfsNbSPtDKM
imXXBU3N5KqrgyBVI1XATXl/pQdZZqzfJBsmmt6ltUpk1LqrvYkdnOa9TWGztcrx
19K/cSXdtgZBkjPQLskVocntIWjn/KtNUfI+GXpuzyNaRr+xlx0Q7GqdCzZlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo2mm+ZVdhfKC7g3eoYa+LdQN/LIwHwYDVR0j
BBgwFoAUvamemAJQkzVn6Rxmj1wZa0Ua6OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3Zh
dlMvMC9CREE5OUU5ODAyNTA5MzM1NjdFOTFDNjY4RjVDMTk2QjQ1MUFFOEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JEQTk5RTk4MDI1MDkzMzU2
N0U5MUM2NjhGNUMxOTZCNDUxQUU4RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3ZhdlMvMC9C
REE5OUU5ODAyNTA5MzM1NjdFOTFDNjY4RjVDMTk2QjQ1MUFFOEUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArrkLi0ovbLSzRTXVv7UWI8f+yGf9GXzm1M1MIN4Zhf1I7KYycqehuYdj5kkM
YirmrD6i/M7bhURYFvQRrlkzJlk5E4pGUhn/tfGDvZ7QuhKCa5b1/JHZnh1bKyD0
fJXYPa5B05hCtH4QSLpnIHQ2X+kagjIQbjTXSZTPXxnkgtGPW7qJcjnzdSO0w3WA
t+BHmWXtX0HlVb9OSkJepGkV/qOiV2wSxffMXm18q9kD5VINC0nS/kt0ZbbUML9l
HfaW2ZdTHhcqFu/Udrm1NL2JR0w+ggGuth91Zbkh659QB16EuUwJkxQwEbq9F0SI
ow9v9yNkCJr1hdiWTd7OrYucIg==
-----END CERTIFICATE-----