Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft
File:                     48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft (raw, json)
Hash identifier:          fictOjZPdQ7yKI5291Wu1AfZ64wJsG9ds7MOfaessMs=
Subject key identifier:   FE:CB:0D:54:81:28:A9:68:FC:60:CE:8C:9A:E4:D3:71:B5:DB:DD:98
Authority key identifier: 48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F
Certificate issuer:       /CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
Certificate serial:       7EC4E0960F07FD2A64D2DAE881964D72ED548317
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft
Manifest number:          0334
Signing time:             Mon 15 Apr 2024 04:54:24 +0000
Manifest this update:     Mon 15 Apr 2024 04:49:24 +0000
Manifest next update:     Tue 16 Apr 2024 08:03:24 +0000
Files and hashes:         1: 3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa (hash: quaWmCIdjUrdblnWD0izXDq2Yom2O2Y9MWrjFDIQ14Y=)
                          2: 323830343a333731343a3a2f33322d3438203d3e20323636333838.roa (hash: aD/vqrAQgusXtEf3RZqQI9o41dufj/0VHFtnEJFB97A=)
                          3: 48A2894AA5501C96F790A8A2BBFD27CDFD55659F.crl (hash: eibWVXeKnZSCX9sk4sZaujHFyHExxmpyGxFNWfC8kB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:e0:96:0f:07:fd:2a:64:d2:da:e8:81:96:4d:72:ed:54:83:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
        Validity
            Not Before: Apr 15 04:49:24 2024 GMT
            Not After : Apr 16 08:03:24 2024 GMT
        Subject: CN=FECB0D548128A968FC60CE8C9AE4D371B5DBDD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:8d:2d:8d:55:5f:3a:e0:3b:e5:81:69:a1:
                    91:15:38:e3:8e:e3:8a:ce:c7:57:91:c6:e7:7c:62:
                    eb:33:97:f0:a5:d7:15:c2:db:22:11:ed:54:c6:52:
                    f7:4f:5a:9a:5e:43:d9:34:bf:d2:09:a2:58:50:db:
                    ca:94:6d:fd:6f:12:b5:88:06:da:63:04:60:d6:ee:
                    de:b6:34:ed:b1:b0:62:f2:91:32:a7:d3:0f:cb:5a:
                    bf:b7:14:8d:bc:7e:47:6f:c4:05:46:32:9e:e7:91:
                    44:ea:8f:ed:72:a2:84:20:2f:05:f5:51:85:d1:c5:
                    6c:37:e4:eb:02:ad:34:8e:82:cd:f9:a3:26:bf:b9:
                    88:4e:cc:9d:29:c8:59:64:d1:8c:cc:34:5b:4b:01:
                    92:5b:cf:f1:75:a5:f6:75:fc:e1:d3:ba:94:46:51:
                    88:6c:54:d8:16:22:bf:36:3a:3a:e9:cc:3c:ad:d5:
                    95:d1:1f:52:fd:75:a8:d1:1f:47:c9:c5:06:76:79:
                    b2:d0:cd:23:31:ae:0a:3c:52:a8:d5:15:5f:e2:74:
                    8d:bd:8c:77:29:9b:b9:e7:7b:04:b7:79:71:15:ce:
                    9f:0b:6e:00:b7:6d:64:90:98:e3:04:ba:2a:cb:06:
                    c7:cc:48:fc:f6:07:45:ca:a8:99:95:61:51:2b:cd:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CB:0D:54:81:28:A9:68:FC:60:CE:8C:9A:E4:D3:71:B5:DB:DD:98
            X509v3 Authority Key Identifier:
                keyid:48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:66:39:4c:7b:a9:b4:0e:85:4a:7e:c4:b9:46:ff:4b:f9:42:
         cc:c0:c7:71:f6:7e:16:85:6d:15:e0:64:76:34:e2:a5:d2:73:
         d6:38:fd:44:3e:97:73:ce:12:24:74:bb:21:2c:50:f7:d9:46:
         5c:1f:f0:e5:9e:1f:8d:0c:33:70:2c:e5:d3:66:da:ad:b3:cc:
         87:39:7b:93:80:29:97:d9:4c:89:6b:de:78:1d:ff:77:b1:04:
         bd:a2:85:fe:94:2c:06:01:a8:05:d9:fc:8f:b6:94:7c:cf:8d:
         be:10:4f:4d:c1:bc:a0:69:ed:10:bb:2b:4f:65:e1:26:1b:9e:
         f0:bf:6f:7c:b0:d4:c7:2f:9c:29:33:42:7b:e4:be:5b:0d:ff:
         94:58:1f:13:5b:52:b9:8e:2d:e3:3d:3b:29:b6:2f:00:e3:e5:
         9d:86:ff:77:5c:87:da:1e:0f:14:3f:40:68:07:5e:6c:b6:cc:
         1a:12:7a:37:79:4a:dd:a5:f8:3a:1a:44:7a:89:61:ff:c0:92:
         37:2d:09:08:e3:8b:e4:6a:ad:e8:34:c0:6a:53:c1:bd:73:d1:
         01:4d:3c:cf:bb:10:70:19:ef:8e:ae:ac:bc:a9:1e:a8:01:fe:
         5b:a9:5a:fc:91:be:0a:dd:0b:fd:aa:56:3d:5f:49:78:87:28:
         41:a4:ea:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfsTglg8H/Spk0trogZZNcu1UgxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhBMjg5NEFBNTUwMUM5NkY3OTBBOEEyQkJGRDI3Q0RG
RDU1NjU5RjAeFw0yNDA0MTUwNDQ5MjRaFw0yNDA0MTYwODAzMjRaMDMxMTAvBgNV
BAMTKEZFQ0IwRDU0ODEyOEE5NjhGQzYwQ0U4QzlBRTREMzcxQjVEQkREOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0Y0tjVVfOuA75YFpoZEVOOOO
44rOx1eRxud8Yuszl/Cl1xXC2yIR7VTGUvdPWppeQ9k0v9IJolhQ28qUbf1vErWI
BtpjBGDW7t62NO2xsGLykTKn0w/LWr+3FI28fkdvxAVGMp7nkUTqj+1yooQgLwX1
UYXRxWw35OsCrTSOgs35oya/uYhOzJ0pyFlk0YzMNFtLAZJbz/F1pfZ1/OHTupRG
UYhsVNgWIr82OjrpzDyt1ZXRH1L9dajRH0fJxQZ2ebLQzSMxrgo8UqjVFV/idI29
jHcpm7nnewS3eXEVzp8LbgC3bWSQmOMEuirLBsfMSPz2B0XKqJmVYVErzdvDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/ssNVIEoqWj8YM6MmuTTcbXb3ZgwHwYDVR0j
BBgwFoAUSKKJSqVQHJb3kKiiu/0nzf1VZZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hpUHBuWUVRYTNEYVEzSG5VWVlXNlY1WWhTR1pHdVRQNzNDQnczUnd1
N0MvMC80OEEyODk0QUE1NTAxQzk2Rjc5MEE4QTJCQkZEMjdDREZENTU2NTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4QTI4OTRBQTU1MDFDOTZG
NzkwQThBMkJCRkQyN0NERkQ1NTY1OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3hpUHBuWUVRYTNEYVEzSG5VWVlXNlY1WWhTR1pHdVRQNzNDQnczUnd1N0MvMC80
OEEyODk0QUE1NTAxQzk2Rjc5MEE4QTJCQkZEMjdDREZENTU2NTlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYGY5THuptA6FSn7EuUb/S/lCzMDHcfZ+FoVtFeBkdjTipdJz1jj9RD6Xc84S
JHS7ISxQ99lGXB/w5Z4fjQwzcCzl02barbPMhzl7k4Apl9lMiWveeB3/d7EEvaKF
/pQsBgGoBdn8j7aUfM+NvhBPTcG8oGntELsrT2XhJhue8L9vfLDUxy+cKTNCe+S+
Ww3/lFgfE1tSuY4t4z07KbYvAOPlnYb/d1yH2h4PFD9AaAdebLbMGhJ6N3lK3aX4
OhpEeolh/8CSNy0JCOOL5Gqt6DTAalPBvXPRAU08z7sQcBnvjq6svKkeqAH+W6la
/JG+Ct0L/apWPV9JeIcoQaTqQw==
-----END CERTIFICATE-----