Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.mft
File:                     85CE4330E3308022DBE77EBC481C4AAF39692E70.mft (raw, json)
Hash identifier:          d5m4T0mPZtGMTbVG7GlUKXkyz07tjvlIiFznDjfB4LQ=
Subject key identifier:   9F:49:DF:A7:61:5B:00:6D:BF:A6:DC:92:26:97:22:22:FA:42:1E:83
Authority key identifier: 85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70
Certificate issuer:       /CN=85CE4330E3308022DBE77EBC481C4AAF39692E70
Certificate serial:       53F00E6C23A0EC76E070B456CF93431C0BD82E00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.mft
Manifest number:          03DC
Signing time:             Sun 24 Mar 2024 02:10:00 +0000
Manifest this update:     Sun 24 Mar 2024 02:05:00 +0000
Manifest next update:     Mon 25 Mar 2024 02:30:00 +0000
Files and hashes:         1: 323830343a373836383a3a2f33322d3332203d3e20323731323430.roa (hash: Bnwa5cT5n7B79E8oiGetL/2YjNKO8YUiOyZyFHjgSHk=)
                          2: 3137392e34382e34382e302f32322d3234203d3e20323731323430.roa (hash: Du8fXFTsHVPpE3RzxzhjEl2TODWd5fjin1Fx9VzptXI=)
                          3: 85CE4330E3308022DBE77EBC481C4AAF39692E70.crl (hash: j/jZ0cSfcNXZlyzQX4VYS9q9Ya8oswvXWOiY7ngbR9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f0:0e:6c:23:a0:ec:76:e0:70:b4:56:cf:93:43:1c:0b:d8:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CE4330E3308022DBE77EBC481C4AAF39692E70
        Validity
            Not Before: Mar 24 02:05:00 2024 GMT
            Not After : Mar 25 02:30:00 2024 GMT
        Subject: CN=9F49DFA7615B006DBFA6DC9226972222FA421E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d1:14:e9:16:0e:c4:96:5c:d9:29:22:3b:6a:
                    48:31:0f:69:bd:e4:67:3b:f5:71:7a:ef:91:1e:1f:
                    1f:6a:02:b2:59:3e:43:b2:8c:c8:bc:31:d2:d8:95:
                    a9:e9:ba:bc:1d:12:26:36:d9:34:d9:c5:67:9a:2d:
                    35:5e:ee:1d:94:ea:74:61:02:be:2e:aa:a9:8a:29:
                    04:7b:e3:42:8b:c4:10:76:2a:3d:29:31:04:83:3e:
                    60:de:59:d9:0e:55:d3:25:fc:a4:5a:61:5b:1a:13:
                    e3:cc:ce:ff:e9:4f:e2:a0:84:ba:e9:98:97:f3:c0:
                    0d:d3:2a:90:a5:96:bf:ce:15:46:7f:49:82:a6:7d:
                    df:f0:d9:3e:d2:7b:f3:3a:a9:6a:7c:b6:bc:55:60:
                    4f:44:98:74:7b:5d:92:ab:38:d3:81:66:e2:c1:08:
                    75:ab:87:b5:86:42:07:85:eb:bd:cb:9a:a3:e4:c6:
                    d0:51:c9:0d:b9:e8:b2:46:b0:89:1d:89:02:f0:be:
                    42:6a:2a:85:10:54:72:90:a0:7f:b8:40:ca:74:50:
                    1c:6a:80:17:59:95:67:ab:37:47:3c:62:87:d0:68:
                    54:3b:32:96:8b:fe:34:96:a5:72:af:81:27:6f:e7:
                    7d:38:85:1f:34:58:6a:b3:3c:0a:fc:ff:bf:3c:14:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:49:DF:A7:61:5B:00:6D:BF:A6:DC:92:26:97:22:22:FA:42:1E:83
            X509v3 Authority Key Identifier:
                keyid:85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:7c:d4:e3:16:94:41:ff:88:df:fd:f8:76:66:0d:0d:43:
         b5:d1:f7:6e:77:e4:e2:74:1c:7e:b2:01:10:40:ca:35:03:fe:
         9a:37:25:f9:9e:2a:84:08:dc:c6:cd:24:5f:1a:40:f3:b6:a3:
         93:2d:2f:f1:06:e3:8a:3c:d0:8d:3d:fb:7b:4f:b1:78:7d:43:
         c9:ca:c4:da:59:0e:2e:d6:75:7c:8e:23:d8:48:f8:42:cf:c6:
         bd:ea:a3:be:da:e2:53:0b:67:e3:b6:1a:05:35:ba:50:48:6e:
         0d:17:aa:70:4f:5b:42:0f:b3:1f:3b:cb:8b:ca:da:c6:6e:f3:
         64:f7:0a:7c:d9:ce:33:8c:f4:b6:26:62:c5:cc:ce:07:d5:4a:
         46:cd:34:39:b0:ce:61:66:85:09:7c:4e:c9:12:ef:c2:0a:29:
         9a:51:6d:e7:16:08:93:d1:9d:e2:7b:d9:ea:10:b1:d8:48:62:
         fd:44:90:a7:8a:47:f9:00:72:22:81:bb:82:5b:01:74:14:9f:
         e4:ac:63:c7:1c:15:83:3f:c9:76:87:71:90:2a:cf:11:b9:54:
         9d:22:a2:d1:cb:4c:78:3b:7d:97:f4:2e:bf:9a:8a:8c:3d:cc:
         1d:4f:44:ef:75:3d:0e:c1:6a:ea:83:86:02:b8:f7:24:87:3f:
         e0:75:00:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU/AObCOg7HbgcLRWz5NDHAvYLgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVDRTQzMzBFMzMwODAyMkRCRTc3RUJDNDgxQzRBQUYz
OTY5MkU3MDAeFw0yNDAzMjQwMjA1MDBaFw0yNDAzMjUwMjMwMDBaMDMxMTAvBgNV
BAMTKDlGNDlERkE3NjE1QjAwNkRCRkE2REM5MjI2OTcyMjIyRkE0MjFFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw0RTpFg7EllzZKSI7akgxD2m9
5Gc79XF675EeHx9qArJZPkOyjMi8MdLYlanpurwdEiY22TTZxWeaLTVe7h2U6nRh
Ar4uqqmKKQR740KLxBB2Kj0pMQSDPmDeWdkOVdMl/KRaYVsaE+PMzv/pT+KghLrp
mJfzwA3TKpCllr/OFUZ/SYKmfd/w2T7Se/M6qWp8trxVYE9EmHR7XZKrONOBZuLB
CHWrh7WGQgeF673LmqPkxtBRyQ256LJGsIkdiQLwvkJqKoUQVHKQoH+4QMp0UBxq
gBdZlWerN0c8YofQaFQ7MpaL/jSWpXKvgSdv5304hR80WGqzPAr8/788FPMtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn0nfp2FbAG2/ptySJpciIvpCHoMwHwYDVR0j
BBgwFoAUhc5DMOMwgCLb5368SBxKrzlpLnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1Q3VaVjNEVTho
b1QvMC84NUNFNDMzMEUzMzA4MDIyREJFNzdFQkM0ODFDNEFBRjM5NjkyRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1Q0U0MzMwRTMzMDgwMjJE
QkU3N0VCQzQ4MUM0QUFGMzk2OTJFNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1Q3VaVjNEVThob1QvMC84
NUNFNDMzMEUzMzA4MDIyREJFNzdFQkM0ODFDNEFBRjM5NjkyRTcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkq581OMWlEH/iN/9+HZmDQ1DtdH3bnfk4nQcfrIBEEDKNQP+mjcl+Z4qhAjc
xs0kXxpA87ajky0v8QbjijzQjT37e0+xeH1DycrE2lkOLtZ1fI4j2Ej4Qs/Gveqj
vtriUwtn47YaBTW6UEhuDReqcE9bQg+zHzvLi8raxm7zZPcKfNnOM4z0tiZixczO
B9VKRs00ObDOYWaFCXxOyRLvwgopmlFt5xYIk9Gd4nvZ6hCx2Ehi/USQp4pH+QBy
IoG7glsBdBSf5KxjxxwVgz/JdodxkCrPEblUnSKi0ctMeDt9l/Quv5qKjD3MHU9E
73U9DsFq6oOGArj3JIc/4HUAUA==
-----END CERTIFICATE-----