Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft
File:                     3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft (raw, json)
Hash identifier:          nMvE0xKCvCaoOV2dhsebR3jOJBXNYItD3HwK1Gqd0qE=
Subject key identifier:   0B:F7:DE:2C:51:14:A3:7B:E8:2E:12:6E:43:9E:A4:D2:2B:A3:F5:64
Authority key identifier: 34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3
Certificate issuer:       /CN=3448D9FF68BAB6B32FD7182F798ABC05793ECCB3
Certificate serial:       793F42D7499CDB4B17C070D8E0362C9454FF85E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft
Manifest number:          0234
Signing time:             Mon 15 Apr 2024 00:03:28 +0000
Manifest this update:     Sun 14 Apr 2024 23:58:28 +0000
Manifest next update:     Tue 16 Apr 2024 02:25:28 +0000
Files and hashes:         1: 3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.crl (hash: HOKUb/3NlGgLt/EZCJbhkThjrTfnN6x7nB1qxmEQTmc=)
                          2: 323830343a313861303a3a2f33322d3334203d3e203631393434.roa (hash: T3KJl8AzJ0h6nHVGowrsmSJPeBmYNpnMS+z03Hr96h0=)
                          3: 3230312e3133312e39322e302f32322d3235203d3e203631393434.roa (hash: 12f6nEZGProVdmtYXusRVjKEHUTmtOuaHaWoUC+pZVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3f:42:d7:49:9c:db:4b:17:c0:70:d8:e0:36:2c:94:54:ff:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3448D9FF68BAB6B32FD7182F798ABC05793ECCB3
        Validity
            Not Before: Apr 14 23:58:28 2024 GMT
            Not After : Apr 16 02:25:28 2024 GMT
        Subject: CN=0BF7DE2C5114A37BE82E126E439EA4D22BA3F564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:a6:6e:81:56:f9:60:6c:07:0c:e3:8e:f7:
                    5a:92:d2:db:ef:e9:f7:f7:62:08:48:6a:83:61:54:
                    c2:af:6b:48:8a:8a:f0:6d:ef:d3:78:77:15:d2:fe:
                    32:1f:08:68:2b:b0:34:d1:0a:7d:08:ea:d8:87:39:
                    79:4d:fe:62:43:0e:9e:58:87:c7:35:36:be:b5:0c:
                    20:49:1e:bc:a9:5a:f3:49:25:b4:36:59:8b:cd:41:
                    85:2a:1b:43:5f:ca:7c:79:49:dd:74:01:aa:4c:fb:
                    f3:7c:81:ef:02:ff:7e:0f:87:37:0c:e4:aa:9a:e7:
                    a4:ae:40:32:ee:0b:b2:4a:cc:e2:4a:52:9d:d5:83:
                    c6:75:95:c3:90:d7:2a:5b:da:63:e3:1e:d9:68:b9:
                    48:6c:7c:d6:f0:c5:8d:27:15:22:66:54:e2:b1:7d:
                    55:97:c7:32:5e:2b:11:b2:d8:86:e2:05:19:75:c5:
                    83:d9:c8:4a:48:09:25:cc:de:07:e9:3a:f4:fb:c4:
                    46:3f:75:2d:01:13:8e:ac:52:b3:98:06:3f:c3:9c:
                    01:17:a6:7c:24:5e:9a:f5:64:a7:2a:28:48:bc:94:
                    1f:ed:bc:f0:4d:ea:45:85:91:ba:7c:96:55:6b:3e:
                    8a:41:05:a7:64:3c:58:89:25:26:2d:ae:23:20:ce:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F7:DE:2C:51:14:A3:7B:E8:2E:12:6E:43:9E:A4:D2:2B:A3:F5:64
            X509v3 Authority Key Identifier:
                keyid:34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:6f:40:66:e2:23:12:51:13:87:b2:f7:f2:6a:88:07:53:
         bf:cb:ec:bd:83:ec:45:6f:55:d6:57:f7:52:29:ca:41:da:64:
         6a:2a:ba:e5:b8:2a:bf:d1:f8:e5:a0:88:d5:8b:15:b8:c6:4a:
         b2:c1:6d:1f:b9:9c:cf:dd:be:58:e6:6b:7d:d7:bd:fa:27:5d:
         70:45:5e:10:cc:11:99:29:40:37:09:2b:97:d2:f6:10:21:c8:
         a7:0b:07:b9:92:44:cd:a9:2c:2d:09:31:ed:a9:5d:7e:f4:37:
         6a:60:d7:1c:c4:c6:48:1c:17:27:ff:1b:95:5e:ba:00:7a:6f:
         48:d6:ea:d2:07:7f:f4:ad:7e:aa:92:37:82:f1:32:0b:1d:d7:
         a8:60:38:2d:ae:12:67:19:d5:31:76:20:0f:24:63:fc:15:16:
         e7:0e:af:0d:76:42:22:6f:a8:32:9c:28:a9:b6:43:87:e6:2b:
         9d:10:3e:3c:27:36:c5:70:fd:4b:bf:10:30:8f:72:94:f8:6d:
         ea:bf:fb:93:54:55:a5:28:80:c1:51:58:37:92:9e:7f:da:96:
         01:cf:32:fd:f8:8a:c4:b0:be:e4:89:0d:05:cc:1a:20:6c:fd:
         41:51:a7:eb:bc:0f:01:a7:e9:b9:70:3b:12:1e:e6:4f:15:cc:
         ca:6f:24:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeT9C10mc20sXwHDY4DYslFT/heQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0OEQ5RkY2OEJBQjZCMzJGRDcxODJGNzk4QUJDMDU3
OTNFQ0NCMzAeFw0yNDA0MTQyMzU4MjhaFw0yNDA0MTYwMjI1MjhaMDMxMTAvBgNV
BAMTKDBCRjdERTJDNTExNEEzN0JFODJFMTI2RTQzOUVBNEQyMkJBM0Y1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsKZugVb5YGwHDOOO91qS0tvv
6ff3YghIaoNhVMKva0iKivBt79N4dxXS/jIfCGgrsDTRCn0I6tiHOXlN/mJDDp5Y
h8c1Nr61DCBJHrypWvNJJbQ2WYvNQYUqG0Nfynx5Sd10AapM+/N8ge8C/34PhzcM
5Kqa56SuQDLuC7JKzOJKUp3Vg8Z1lcOQ1ypb2mPjHtlouUhsfNbwxY0nFSJmVOKx
fVWXxzJeKxGy2IbiBRl1xYPZyEpICSXM3gfpOvT7xEY/dS0BE46sUrOYBj/DnAEX
pnwkXpr1ZKcqKEi8lB/tvPBN6kWFkbp8llVrPopBBadkPFiJJSYtriMgzjqlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUC/feLFEUo3voLhJuQ56k0iuj9WQwHwYDVR0j
BBgwFoAUNEjZ/2i6trMv1xgveYq8BXk+zLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043UkhaaFIzanY4VEY5akQ5NXFoemtyMVJ1V3Q0MnZaRHI5amVFWTVU
ZEcvMC8zNDQ4RDlGRjY4QkFCNkIzMkZENzE4MkY3OThBQkMwNTc5M0VDQ0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0NDhEOUZGNjhCQUI2QjMy
RkQ3MTgyRjc5OEFCQzA1NzkzRUNDQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N043UkhaaFIzanY4VEY5akQ5NXFoemtyMVJ1V3Q0MnZaRHI5amVFWTVUZEcvMC8z
NDQ4RDlGRjY4QkFCNkIzMkZENzE4MkY3OThBQkMwNTc5M0VDQ0IzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArsVvQGbiIxJRE4ey9/JqiAdTv8vsvYPsRW9V1lf3UinKQdpkaiq65bgqv9H4
5aCI1YsVuMZKssFtH7mcz92+WOZrfde9+iddcEVeEMwRmSlANwkrl9L2ECHIpwsH
uZJEzaksLQkx7aldfvQ3amDXHMTGSBwXJ/8blV66AHpvSNbq0gd/9K1+qpI3gvEy
Cx3XqGA4La4SZxnVMXYgDyRj/BUW5w6vDXZCIm+oMpwoqbZDh+YrnRA+PCc2xXD9
S78QMI9ylPht6r/7k1RVpSiAwVFYN5Kef9qWAc8y/fiKxLC+5IkNBcwaIGz9QVGn
67wPAafpuXA7Eh7mTxXMym8kfg==
-----END CERTIFICATE-----