Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.mft
File:                     3C776B31532492FD7BCB413400F3F842372D17A0.mft (raw, json)
Hash identifier:          XAtoYVBhPFakq8+rp0VWrbbol4QDet5+HKc72N1WHtM=
Subject key identifier:   CD:14:C3:21:0B:30:2D:9E:FC:07:6B:B1:6B:B9:09:42:9C:33:D3:BF
Authority key identifier: 3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0
Certificate issuer:       /CN=3C776B31532492FD7BCB413400F3F842372D17A0
Certificate serial:       3F96A37D41FCE77A649556B1238ED8E07736CBF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C776B31532492FD7BCB413400F3F842372D17A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.mft
Manifest number:          01F0
Signing time:             Fri 16 Feb 2024 03:11:16 +0000
Manifest this update:     Fri 16 Feb 2024 03:06:15 +0000
Manifest next update:     Sat 17 Feb 2024 05:13:15 +0000
Files and hashes:         1: 34352e3139302e3134302e302f32322d3234203d3e20323639363631.roa (hash: VthMsAuf4a9ciLTalqCHfMjzHsMpUNJTB17aDtMoFXU=)
                          2: 323830343a363766343a3a2f33322d3438203d3e20323639363631.roa (hash: 2zazWhm6bxQ/D21zbFA4Z8pgC6M0WZZivfLm3I0ULW8=)
                          3: 3C776B31532492FD7BCB413400F3F842372D17A0.crl (hash: 9Kn/+HAvxSv8er+OhS7nKhYX1oAnQ9v58pWQh3xolXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:96:a3:7d:41:fc:e7:7a:64:95:56:b1:23:8e:d8:e0:77:36:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C776B31532492FD7BCB413400F3F842372D17A0
        Validity
            Not Before: Feb 16 03:06:15 2024 GMT
            Not After : Feb 17 05:13:15 2024 GMT
        Subject: CN=CD14C3210B302D9EFC076BB16BB909429C33D3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:84:0e:fd:83:48:c1:cc:71:0b:cf:1c:81:
                    f9:9f:11:9d:d7:fb:df:5e:06:8f:3c:bb:6f:e1:83:
                    2c:d7:1d:2c:96:e0:2c:f0:8a:63:aa:8d:ec:af:b2:
                    da:48:3b:ac:af:26:ae:ba:3f:26:42:3c:9f:9e:7d:
                    21:50:9a:b4:3d:32:26:92:19:ee:f9:1e:66:3d:f8:
                    4a:98:96:c4:0c:a0:f2:a3:27:40:1f:77:75:6e:39:
                    71:48:0b:e9:e2:ff:4c:c7:e4:d0:af:1d:b3:08:50:
                    a1:07:44:23:d8:52:f4:d7:f2:f1:13:d8:45:29:4f:
                    c8:a0:d0:c8:99:7c:67:6b:4c:d2:ff:ed:b4:66:20:
                    66:22:1b:8b:cd:8a:6b:14:c5:a3:18:79:27:46:90:
                    7c:cd:cb:87:18:2b:c7:b8:8d:c3:88:5f:13:e8:e7:
                    eb:65:04:21:da:26:e2:02:0b:f0:ae:41:65:8f:c1:
                    bd:ed:2b:e1:8d:06:21:fc:06:6e:10:da:97:1c:dc:
                    3b:7d:78:b8:be:b5:d5:b1:46:09:34:cf:83:c4:56:
                    de:4d:33:3e:ba:db:ed:8b:2c:a7:22:36:35:9f:61:
                    ce:4e:5c:f7:d6:27:9b:00:c5:83:ac:de:38:bf:00:
                    c7:22:4f:34:9d:55:19:83:89:02:02:85:d7:12:42:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:C3:21:0B:30:2D:9E:FC:07:6B:B1:6B:B9:09:42:9C:33:D3:BF
            X509v3 Authority Key Identifier:
                keyid:3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C776B31532492FD7BCB413400F3F842372D17A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:a2:54:07:6c:28:fe:43:5a:91:41:36:c9:00:cf:d4:a1:
         e1:db:4c:01:a0:b6:e3:8b:69:7b:8e:43:a1:ff:09:45:24:76:
         73:d5:5d:35:76:0f:03:3c:a7:b2:81:b9:9c:c1:fe:2a:6b:ef:
         4c:4b:67:ae:d7:a4:c9:e3:33:6a:9c:dd:b3:8f:5d:bb:67:79:
         31:01:c3:6e:b8:d9:4a:a9:bb:ab:a1:88:83:5f:53:63:1b:0a:
         06:ab:02:b4:51:a1:1a:1b:15:16:69:95:52:bc:57:8e:ff:5c:
         56:8c:0c:7a:84:3b:8c:a8:eb:88:3f:29:d6:ed:28:bd:f5:45:
         27:74:08:f4:88:70:f3:7d:08:6b:2d:c7:2d:ac:ee:8a:1e:3c:
         8e:b6:09:16:5e:d5:3d:10:fc:7b:28:e1:35:47:4f:72:92:8d:
         77:ae:47:80:4c:c1:c4:c8:9d:79:e8:09:a2:96:49:8d:0e:73:
         5f:2b:03:2f:18:85:43:e4:ba:62:7e:ce:2a:7c:d3:62:1d:33:
         e4:1b:30:5b:a3:10:da:c8:d3:02:42:96:d3:4f:90:29:f4:76:
         5a:e6:8c:1b:85:b7:83:4f:4f:c8:50:f2:60:09:32:ba:ae:9a:
         d9:09:b6:8d:86:18:9f:63:86:08:98:af:c1:9e:12:43:10:fc:
         ab:48:7c:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP5ajfUH853pklVaxI47Y4Hc2y/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3NzZCMzE1MzI0OTJGRDdCQ0I0MTM0MDBGM0Y4NDIz
NzJEMTdBMDAeFw0yNDAyMTYwMzA2MTVaFw0yNDAyMTcwNTEzMTVaMDMxMTAvBgNV
BAMTKENEMTRDMzIxMEIzMDJEOUVGQzA3NkJCMTZCQjkwOTQyOUMzM0QzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoYQO/YNIwcxxC88cgfmfEZ3X
+99eBo88u2/hgyzXHSyW4CzwimOqjeyvstpIO6yvJq66PyZCPJ+efSFQmrQ9MiaS
Ge75HmY9+EqYlsQMoPKjJ0Afd3VuOXFIC+ni/0zH5NCvHbMIUKEHRCPYUvTX8vET
2EUpT8ig0MiZfGdrTNL/7bRmIGYiG4vNimsUxaMYeSdGkHzNy4cYK8e4jcOIXxPo
5+tlBCHaJuICC/CuQWWPwb3tK+GNBiH8Bm4Q2pcc3Dt9eLi+tdWxRgk0z4PEVt5N
Mz662+2LLKciNjWfYc5OXPfWJ5sAxYOs3ji/AMciTzSdVRmDiQIChdcSQoIbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzRTDIQswLZ78B2uxa7kJQpwz078wHwYDVR0j
BBgwFoAUPHdrMVMkkv17y0E0APP4QjctF6AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlVTM2JxbWhBV1phWENrUVR0ZDN6RjM5UlNRMjlHbnpoNndMaFlFZXRv
cW8vMC8zQzc3NkIzMTUzMjQ5MkZEN0JDQjQxMzQwMEYzRjg0MjM3MkQxN0EwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNzc2QjMxNTMyNDkyRkQ3
QkNCNDEzNDAwRjNGODQyMzcyRDE3QTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NlVTM2JxbWhBV1phWENrUVR0ZDN6RjM5UlNRMjlHbnpoNndMaFlFZXRvcW8vMC8z
Qzc3NkIzMTUzMjQ5MkZEN0JDQjQxMzQwMEYzRjg0MjM3MkQxN0EwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZWqiVAdsKP5DWpFBNskAz9Sh4dtMAaC244tpe45Dof8JRSR2c9VdNXYPAzyn
soG5nMH+KmvvTEtnrtekyeMzapzds49du2d5MQHDbrjZSqm7q6GIg19TYxsKBqsC
tFGhGhsVFmmVUrxXjv9cVowMeoQ7jKjriD8p1u0ovfVFJ3QI9Ihw830Iay3HLazu
ih48jrYJFl7VPRD8eyjhNUdPcpKNd65HgEzBxMideegJopZJjQ5zXysDLxiFQ+S6
Yn7OKnzTYh0z5BswW6MQ2sjTAkKW00+QKfR2WuaMG4W3g09PyFDyYAkyuq6a2Qm2
jYYYn2OGCJivwZ4SQxD8q0h8Jw==
-----END CERTIFICATE-----