Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.mft
File:                     35EEC59508A5401DDACC50AEE85763BE780448EC.mft (raw, json)
Hash identifier:          1ybc1TZuwGG2pmZ2NoUyQUZT2MC5S3pjbCHO3s5miPM=
Subject key identifier:   9A:A5:39:85:34:C1:72:1C:BC:93:9F:5E:16:22:8E:06:C3:06:33:25
Authority key identifier: 35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC
Certificate issuer:       /CN=35EEC59508A5401DDACC50AEE85763BE780448EC
Certificate serial:       6CC05E77C096EFF40DBC04D6F5C42B17B2B2EF73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35EEC59508A5401DDACC50AEE85763BE780448EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.mft
Manifest number:          0183
Signing time:             Mon 15 Apr 2024 03:04:22 +0000
Manifest this update:     Mon 15 Apr 2024 02:59:22 +0000
Manifest next update:     Tue 16 Apr 2024 03:48:22 +0000
Files and hashes:         1: 35EEC59508A5401DDACC50AEE85763BE780448EC.crl (hash: PWcfNeCXXEuDoRkGSpBJJZoVmgI1pw7pXOuFcat6q/o=)
                          2: 3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa (hash: 4TmFmQvtFUSTbSKu7jgtrUvqgkDXiR5pHk7BKDccyWQ=)
                          3: 323830343a316533383a3a2f33322d313238203d3e20323634343135.roa (hash: BaRWIO3znlfetLL0Y96oYRThNEwxg22p5DlOdzhUMWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c0:5e:77:c0:96:ef:f4:0d:bc:04:d6:f5:c4:2b:17:b2:b2:ef:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35EEC59508A5401DDACC50AEE85763BE780448EC
        Validity
            Not Before: Apr 15 02:59:22 2024 GMT
            Not After : Apr 16 03:48:22 2024 GMT
        Subject: CN=9AA5398534C1721CBC939F5E16228E06C3063325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:36:56:b4:6f:df:43:2a:e3:34:f6:bd:86:
                    44:7d:f4:42:42:fc:ed:48:74:6b:1b:06:92:22:6e:
                    33:5e:8d:a9:59:1f:b3:4b:95:9f:86:7a:c6:16:10:
                    e0:75:0b:27:93:99:10:6b:ff:12:b4:ff:d3:f4:38:
                    03:0a:65:02:42:fe:96:c5:c0:5a:eb:00:ae:fc:55:
                    a1:6c:47:6d:fe:a2:19:ef:d6:88:a7:5f:f6:a6:1a:
                    24:16:92:1e:5e:46:d6:7a:9b:c7:44:39:91:1a:d9:
                    a2:23:76:82:2d:dd:3d:c0:90:7d:62:8c:4a:2b:6e:
                    08:27:78:4e:8b:0a:31:86:b8:a6:f2:2a:d7:f0:2f:
                    6f:9c:64:90:6b:13:67:67:55:2c:04:b2:f8:b5:65:
                    0e:63:3f:1b:52:60:a0:e5:f5:e4:4f:93:f5:b8:e6:
                    6b:b7:6e:00:25:d2:b2:98:10:68:00:01:de:54:2a:
                    49:09:36:49:4d:e2:fb:77:c4:a2:fe:78:55:1c:b5:
                    50:62:1e:4c:29:6b:ec:a0:63:7f:4c:1d:f5:5e:65:
                    26:c0:f4:2c:14:df:83:9a:dd:38:d9:c9:ce:5c:e1:
                    62:c3:e7:c5:f8:df:07:51:b4:7e:a0:8a:9b:bf:9d:
                    e4:a4:5d:30:9c:ce:b9:9e:b4:70:94:d0:a4:0c:21:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:39:85:34:C1:72:1C:BC:93:9F:5E:16:22:8E:06:C3:06:33:25
            X509v3 Authority Key Identifier:
                keyid:35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35EEC59508A5401DDACC50AEE85763BE780448EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:b4:38:9f:ad:88:90:c6:80:ca:78:19:02:43:08:59:51:
         c4:4d:f9:4e:f3:07:6a:91:d8:e6:13:80:68:c0:26:ea:33:74:
         07:68:03:0f:b3:0c:81:3f:69:39:c9:8c:31:b6:31:6d:43:40:
         33:84:13:b2:ae:77:6d:8c:f7:b4:f6:62:1d:24:c7:10:19:f2:
         16:b6:2f:18:cc:43:9e:ea:60:9a:ef:d1:ec:81:cd:22:72:4e:
         02:87:c4:89:1a:b1:27:e4:90:9a:81:bf:cf:25:1f:af:7b:83:
         f2:8c:48:51:e9:03:3b:ac:1e:da:de:ff:db:dc:66:a4:97:4c:
         73:c3:09:59:97:b5:e3:4c:0d:6c:94:f4:de:b4:d8:d7:fe:7d:
         93:af:1f:35:15:d0:18:83:3c:73:d1:d3:07:52:da:1f:90:96:
         c6:54:4d:ce:b5:a4:22:c2:3b:ac:d6:f0:6c:ea:15:2f:71:cb:
         b5:95:45:b4:5a:20:31:d1:63:3c:b7:5a:9b:17:00:36:18:d8:
         53:f0:02:2d:c4:3a:d5:48:00:5c:eb:37:44:b2:30:01:81:07:
         d0:19:01:a3:0e:e6:6c:5a:be:b6:de:6b:8a:13:fd:eb:b4:62:
         72:35:e4:f9:96:52:f1:d7:c1:dc:c6:17:0f:70:e0:d5:c1:32:
         46:2a:ff:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbMBed8CW7/QNvATW9cQrF7Ky73MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVFRUM1OTUwOEE1NDAxRERBQ0M1MEFFRTg1NzYzQkU3
ODA0NDhFQzAeFw0yNDA0MTUwMjU5MjJaFw0yNDA0MTYwMzQ4MjJaMDMxMTAvBgNV
BAMTKDlBQTUzOTg1MzRDMTcyMUNCQzkzOUY1RTE2MjI4RTA2QzMwNjMzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5TZWtG/fQyrjNPa9hkR99EJC
/O1IdGsbBpIibjNejalZH7NLlZ+GesYWEOB1CyeTmRBr/xK0/9P0OAMKZQJC/pbF
wFrrAK78VaFsR23+ohnv1oinX/amGiQWkh5eRtZ6m8dEOZEa2aIjdoIt3T3AkH1i
jEorbggneE6LCjGGuKbyKtfwL2+cZJBrE2dnVSwEsvi1ZQ5jPxtSYKDl9eRPk/W4
5mu3bgAl0rKYEGgAAd5UKkkJNklN4vt3xKL+eFUctVBiHkwpa+ygY39MHfVeZSbA
9CwU34Oa3TjZyc5c4WLD58X43wdRtH6gipu/neSkXTCczrmetHCU0KQMIUYdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmqU5hTTBchy8k59eFiKOBsMGMyUwHwYDVR0j
BBgwFoAUNe7FlQilQB3azFCu6FdjvngESOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU44QUJ3MjlxVEJtNTVKVWc5M0pzTDZUMWFxOVJMREtod0JNd3l5a25k
QU4vMC8zNUVFQzU5NTA4QTU0MDFEREFDQzUwQUVFODU3NjNCRTc4MDQ0OEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1RUVDNTk1MDhBNTQwMURE
QUNDNTBBRUU4NTc2M0JFNzgwNDQ4RUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU44QUJ3MjlxVEJtNTVKVWc5M0pzTDZUMWFxOVJMREtod0JNd3l5a25kQU4vMC8z
NUVFQzU5NTA4QTU0MDFEREFDQzUwQUVFODU3NjNCRTc4MDQ0OEVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUby0OJ+tiJDGgMp4GQJDCFlRxE35TvMHapHY5hOAaMAm6jN0B2gDD7MMgT9p
OcmMMbYxbUNAM4QTsq53bYz3tPZiHSTHEBnyFrYvGMxDnupgmu/R7IHNInJOAofE
iRqxJ+SQmoG/zyUfr3uD8oxIUekDO6we2t7/29xmpJdMc8MJWZe140wNbJT03rTY
1/59k68fNRXQGIM8c9HTB1LaH5CWxlRNzrWkIsI7rNbwbOoVL3HLtZVFtFogMdFj
PLdamxcANhjYU/ACLcQ61UgAXOs3RLIwAYEH0BkBow7mbFq+tt5rihP967RicjXk
+ZZS8dfB3MYXD3Dg1cEyRir/3g==
-----END CERTIFICATE-----