Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.mft
File:                     40F84FEE57C4E5B280E9D442848B43902C736360.mft (raw, json)
Hash identifier:          q4Zth1mYeUlS+wtieEFejSLuOV0ZAeNqtRuRd+/Gem0=
Subject key identifier:   2E:47:4A:27:CA:9E:E5:35:08:E4:A0:FA:6F:4F:AE:01:88:B5:0C:29
Authority key identifier: 40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60
Certificate issuer:       /CN=40F84FEE57C4E5B280E9D442848B43902C736360
Certificate serial:       3658AAAA7E28314E577B0C224FA8B71A34BD68E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.mft
Manifest number:          82
Signing time:             Sun 14 Apr 2024 20:24:31 +0000
Manifest this update:     Sun 14 Apr 2024 20:19:31 +0000
Manifest next update:     Mon 15 Apr 2024 21:39:31 +0000
Files and hashes:         1: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: mIphSVzmZ4W00sdvxmBEkkjLTlWkFaFd9CMfNRmiqh0=)
                          2: 40F84FEE57C4E5B280E9D442848B43902C736360.crl (hash: RmhqbGbi+Pnb+Rzk4IPBdlZFCxEFhssrnCvf41HbVPc=)
                          3: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: 6DsKWo9xVXw0IbmZnLSa88wC1DmditAZQXxASz0J0lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:58:aa:aa:7e:28:31:4e:57:7b:0c:22:4f:a8:b7:1a:34:bd:68:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F84FEE57C4E5B280E9D442848B43902C736360
        Validity
            Not Before: Apr 14 20:19:31 2024 GMT
            Not After : Apr 15 21:39:31 2024 GMT
        Subject: CN=2E474A27CA9EE53508E4A0FA6F4FAE0188B50C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:1b:ca:a4:8d:92:c1:19:9d:6d:d9:73:d3:
                    cc:a5:b9:ca:f1:45:31:82:7f:c0:fe:a8:86:73:3e:
                    94:33:fd:a8:bc:be:7f:82:e8:5c:55:63:a9:74:d3:
                    b9:a6:39:76:5f:79:17:f1:22:9b:48:44:07:2e:3e:
                    21:be:95:74:1a:61:6d:b2:87:fe:33:2f:9a:82:80:
                    61:2e:42:23:f2:7c:5f:d0:2f:66:e5:11:b9:1b:1d:
                    c0:f1:10:24:c0:3f:c7:c1:d0:6b:e4:b2:d4:e2:0d:
                    95:1f:5b:6a:34:de:e3:ef:00:21:1e:05:4c:cb:59:
                    04:e2:bf:a2:82:58:df:e0:66:e4:4f:1a:1d:2d:d9:
                    d4:ea:37:81:38:b7:32:cb:10:41:1d:7c:77:06:46:
                    e5:2d:6a:70:9e:53:9b:00:35:46:9b:e1:56:f6:ce:
                    71:72:cb:eb:a5:ea:72:6e:6a:73:70:a8:33:35:10:
                    51:01:6b:50:e5:13:6c:91:db:36:2b:bb:d1:89:49:
                    64:d7:e2:ba:eb:46:9e:39:66:7d:0b:82:7e:fd:57:
                    f8:63:3f:4b:ca:8a:b2:12:b1:89:53:04:1f:34:8a:
                    e4:7d:e8:ca:aa:2a:ee:1f:0a:97:46:e9:8f:a8:9f:
                    5d:bb:e2:97:fa:1f:17:7d:73:87:cc:5b:94:ab:ba:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:47:4A:27:CA:9E:E5:35:08:E4:A0:FA:6F:4F:AE:01:88:B5:0C:29
            X509v3 Authority Key Identifier:
                keyid:40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:7d:b2:6f:f3:82:de:3c:d7:2a:3f:04:fe:45:fe:01:3d:
         13:68:0f:9b:83:1a:8a:a5:03:22:a0:c6:27:f4:8e:90:42:3a:
         2b:47:40:c2:ab:c0:8b:72:62:62:dc:bb:3b:cb:ac:85:82:58:
         0d:ab:41:16:90:b6:e7:77:2a:fb:bf:09:ce:ef:dd:a8:53:aa:
         90:49:7b:11:64:71:5e:f1:d4:3a:06:39:ca:bd:a4:2c:e6:90:
         40:8e:3c:24:f9:03:74:34:64:43:d9:af:e0:fa:39:ed:6b:cc:
         6b:ea:29:77:b9:9f:0f:b5:c0:8f:b4:b3:c9:a5:bc:a6:05:94:
         8a:0d:7e:45:71:bf:7a:28:19:f6:52:86:bc:af:ee:13:2b:6a:
         36:6d:4e:77:d0:ad:16:4d:7f:ab:dd:90:cc:28:c8:9e:3d:8b:
         af:e5:6d:51:85:14:4b:f0:41:ce:35:78:4b:fd:9c:1b:40:21:
         31:19:c8:2c:cb:c4:bc:f7:a4:a2:2b:0b:63:79:27:9a:21:3f:
         e4:7c:4a:45:01:db:ef:e8:2b:1b:ed:56:66:ae:d3:bd:8b:68:
         b5:1a:9c:15:c8:80:d8:af:c6:28:ee:3d:61:2d:41:bf:28:8d:
         03:16:da:c3:9b:7a:52:48:ec:a1:fa:55:4c:65:54:7b:52:53:
         23:11:a2:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNliqqn4oMU5XewwiT6i3GjS9aOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBGODRGRUU1N0M0RTVCMjgwRTlENDQyODQ4QjQzOTAy
QzczNjM2MDAeFw0yNDA0MTQyMDE5MzFaFw0yNDA0MTUyMTM5MzFaMDMxMTAvBgNV
BAMTKDJFNDc0QTI3Q0E5RUU1MzUwOEU0QTBGQTZGNEZBRTAxODhCNTBDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7hvKpI2SwRmdbdlz08ylucrx
RTGCf8D+qIZzPpQz/ai8vn+C6FxVY6l007mmOXZfeRfxIptIRAcuPiG+lXQaYW2y
h/4zL5qCgGEuQiPyfF/QL2blEbkbHcDxECTAP8fB0GvkstTiDZUfW2o03uPvACEe
BUzLWQTiv6KCWN/gZuRPGh0t2dTqN4E4tzLLEEEdfHcGRuUtanCeU5sANUab4Vb2
znFyy+ul6nJuanNwqDM1EFEBa1DlE2yR2zYru9GJSWTX4rrrRp45Zn0Lgn79V/hj
P0vKirISsYlTBB80iuR96MqqKu4fCpdG6Y+on1274pf6Hxd9c4fMW5Sruof3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULkdKJ8qe5TUI5KD6b0+uAYi1DCkwHwYDVR0j
BBgwFoAUQPhP7lfE5bKA6dRChItDkCxzY2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG
WW8vMC80MEY4NEZFRTU3QzRFNUIyODBFOUQ0NDI4NDhCNDM5MDJDNzM2MzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwRjg0RkVFNTdDNEU1QjI4
MEU5RDQ0Mjg0OEI0MzkwMkM3MzYzNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMC80
MEY4NEZFRTU3QzRFNUIyODBFOUQ0NDI4NDhCNDM5MDJDNzM2MzYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKKB9sm/zgt481yo/BP5F/gE9E2gPm4MaiqUDIqDGJ/SOkEI6K0dAwqvAi3Ji
Yty7O8ushYJYDatBFpC253cq+78Jzu/dqFOqkEl7EWRxXvHUOgY5yr2kLOaQQI48
JPkDdDRkQ9mv4Po57WvMa+opd7mfD7XAj7SzyaW8pgWUig1+RXG/eigZ9lKGvK/u
EytqNm1Od9CtFk1/q92QzCjInj2Lr+VtUYUUS/BBzjV4S/2cG0AhMRnILMvEvPek
oisLY3knmiE/5HxKRQHb7+grG+1WZq7TvYtotRqcFciA2K/GKO49YS1BvyiNAxba
w5t6UkjsofpVTGVUe1JTIxGigg==
-----END CERTIFICATE-----