Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.mft
File:                     FEDE3D4062536781E5EF8F9E8CD862890EB9A688.mft (raw, json)
Hash identifier:          /PBV/7n3WNPcM1YyoUIB2uZW+JpxfpOT3HAfoq74zOo=
Subject key identifier:   A7:76:18:B1:B7:2C:43:3B:F7:BD:C4:D3:ED:3E:96:5A:7A:A3:1B:54
Authority key identifier: FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88
Certificate issuer:       /CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
Certificate serial:       7078095CFD36F1370BF2F6A16799159861B38B6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.mft
Manifest number:          30
Signing time:             Mon 15 Apr 2024 06:44:57 +0000
Manifest this update:     Mon 15 Apr 2024 06:39:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:54:57 +0000
Files and hashes:         1: 3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (hash: sMY02WPZtq/XGF68PofTjN49dvHjGSIhr0wNnMgDmDI=)
                          2: FEDE3D4062536781E5EF8F9E8CD862890EB9A688.crl (hash: eO/oe5pu4b+0joxFQxRpApAKrl6VOB1/FSWo/SfBWWE=)
                          3: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (hash: o6pIi3OaeZzYC0lA6kvpExhLBJBEIp5mWguGihT8duY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:09:5c:fd:36:f1:37:0b:f2:f6:a1:67:99:15:98:61:b3:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
        Validity
            Not Before: Apr 15 06:39:57 2024 GMT
            Not After : Apr 16 06:54:57 2024 GMT
        Subject: CN=A77618B1B72C433BF7BDC4D3ED3E965A7AA31B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:92:e4:ca:b0:66:73:55:94:29:b1:a5:1e:
                    ed:83:f9:18:96:e0:82:0e:cb:03:67:a5:10:55:50:
                    42:c6:bf:fe:08:4b:4e:0a:12:8d:8d:75:c4:ad:b1:
                    23:e5:f5:c7:86:29:44:8d:69:99:6a:94:3c:e2:c0:
                    c8:39:85:58:a8:60:19:70:92:a2:24:e0:15:1c:c3:
                    39:f0:d0:68:f9:a7:e3:b3:f3:4f:ee:f6:7b:9f:08:
                    68:ca:94:35:1c:43:3d:76:da:55:ec:92:79:20:53:
                    42:e5:19:e1:b7:43:69:49:80:39:d2:3a:c4:37:62:
                    9b:5c:cf:4f:14:80:33:42:51:a6:ca:3b:5a:40:da:
                    d6:9a:a6:94:12:f0:4b:67:b5:cc:a7:27:be:71:e1:
                    5d:71:56:18:ae:1c:b8:2a:a9:d6:04:8d:fc:e3:55:
                    0d:6f:73:2e:8c:80:8a:8c:0d:b1:13:af:f6:41:51:
                    6f:53:a3:6d:54:e2:13:cb:5e:b6:7f:11:05:af:dc:
                    11:99:48:53:98:22:9d:05:8a:c1:1d:1b:52:ba:9c:
                    97:5b:da:da:9c:0c:c4:78:98:77:b8:96:23:ca:2e:
                    b1:20:a7:4e:53:c0:88:2a:d2:5c:5d:1d:c4:c5:b5:
                    8c:e7:ce:f9:46:56:3b:b8:14:22:22:3d:e5:e2:29:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:18:B1:B7:2C:43:3B:F7:BD:C4:D3:ED:3E:96:5A:7A:A3:1B:54
            X509v3 Authority Key Identifier:
                keyid:FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:f7:68:ca:18:50:14:1b:07:f6:03:1a:b9:c1:27:0c:3e:
         e9:a5:1f:af:8a:3f:67:91:bc:5e:70:50:b2:5b:13:5d:8b:cf:
         52:39:a0:27:38:e8:a6:f1:3b:fe:24:fd:15:c6:3d:5f:c7:cb:
         89:72:24:ee:e4:0b:b1:52:a9:6c:fb:3f:fd:bd:3b:cc:62:43:
         f5:59:5a:3c:71:4b:06:79:63:9b:90:3d:19:f6:40:87:42:af:
         ae:fb:a3:dd:b2:93:74:bc:d5:24:f6:24:5d:5b:9e:75:3b:dd:
         b6:04:91:39:8e:7f:1f:0d:cc:50:3c:6e:f9:4b:78:99:1d:bb:
         02:62:20:71:88:ef:5b:5e:98:60:00:7d:f7:0a:d7:71:03:54:
         78:24:50:eb:77:0a:ae:76:16:96:40:1b:c1:fc:fb:36:83:dc:
         70:cf:ba:f8:99:b4:0c:9a:48:df:a5:f8:09:eb:3e:f9:6f:28:
         07:e4:6a:fb:2f:26:f3:e2:71:f2:09:33:ca:47:fd:f3:fc:93:
         36:12:5c:2b:98:02:90:64:a3:64:53:de:b0:c9:40:d8:ec:f6:
         6d:05:f1:83:a8:ba:30:2b:07:b4:27:b4:b9:ab:99:41:24:22:
         d5:73:80:9d:e8:9b:ed:54:85:bc:dc:b3:a4:28:c2:0f:d6:9e:
         31:c3:24:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcHgJXP028TcL8vahZ5kVmGGzi2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVERTNENDA2MjUzNjc4MUU1RUY4RjlFOENEODYyODkw
RUI5QTY4ODAeFw0yNDA0MTUwNjM5NTdaFw0yNDA0MTYwNjU0NTdaMDMxMTAvBgNV
BAMTKEE3NzYxOEIxQjcyQzQzM0JGN0JEQzREM0VEM0U5NjVBN0FBMzFCNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVZLkyrBmc1WUKbGlHu2D+RiW
4IIOywNnpRBVUELGv/4IS04KEo2NdcStsSPl9ceGKUSNaZlqlDziwMg5hVioYBlw
kqIk4BUcwznw0Gj5p+Oz80/u9nufCGjKlDUcQz122lXsknkgU0LlGeG3Q2lJgDnS
OsQ3Yptcz08UgDNCUabKO1pA2taappQS8EtntcynJ75x4V1xVhiuHLgqqdYEjfzj
VQ1vcy6MgIqMDbETr/ZBUW9To21U4hPLXrZ/EQWv3BGZSFOYIp0FisEdG1K6nJdb
2tqcDMR4mHe4liPKLrEgp05TwIgq0lxdHcTFtYznzvlGVju4FCIiPeXiKaQRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp3YYsbcsQzv3vcTT7T6WWnqjG1QwHwYDVR0j
BBgwFoAU/t49QGJTZ4Hl74+ejNhiiQ65pogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0
TWsvMC9GRURFM0Q0MDYyNTM2NzgxRTVFRjhGOUU4Q0Q4NjI4OTBFQjlBNjg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFREUzRDQwNjI1MzY3ODFF
NUVGOEY5RThDRDg2Mjg5MEVCOUE2ODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMC9G
RURFM0Q0MDYyNTM2NzgxRTVFRjhGOUU4Q0Q4NjI4OTBFQjlBNjg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACZr3aMoYUBQbB/YDGrnBJww+6aUfr4o/Z5G8XnBQslsTXYvPUjmgJzjopvE7
/iT9FcY9X8fLiXIk7uQLsVKpbPs//b07zGJD9VlaPHFLBnljm5A9GfZAh0Kvrvuj
3bKTdLzVJPYkXVuedTvdtgSROY5/Hw3MUDxu+Ut4mR27AmIgcYjvW16YYAB99wrX
cQNUeCRQ63cKrnYWlkAbwfz7NoPccM+6+Jm0DJpI36X4Ces++W8oB+Rq+y8m8+Jx
8gkzykf98/yTNhJcK5gCkGSjZFPesMlA2Oz2bQXxg6i6MCsHtCe0uauZQSQi1XOA
neib7VSFvNyzpCjCD9aeMcMkfg==
-----END CERTIFICATE-----