Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft
File:                     E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft (raw, json)
Hash identifier:          0I/cDDD6hPo11eMcL66OQPyF+HodS6bwbZXgfas3lrY=
Subject key identifier:   0E:5E:B1:EE:9F:52:FD:AB:8C:FE:C3:52:BA:66:40:4D:57:D4:6D:13
Authority key identifier: E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB
Certificate issuer:       /CN=E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB
Certificate serial:       4AEF993B14C732DA1F2D2E062CC8488B2AB0CC83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft
Manifest number:          014C
Signing time:             Mon 15 Apr 2024 05:35:17 +0000
Manifest this update:     Mon 15 Apr 2024 05:30:17 +0000
Manifest next update:     Tue 16 Apr 2024 06:38:17 +0000
Files and hashes:         1: 323830343a353430343a3a2f33322d3437203d3e20323638363233.roa (hash: kJ557+FWcIHAzXZF1D0EJopLaaj8lEmIdRViyqPiD/I=)
                          2: E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.crl (hash: 1uh0a5efvAabGPOVDhba2VdwGb8ppMtrxx71F2XHnH0=)
                          3: 34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa (hash: 6YypHOK4HRxhGuPO+dY1qHMTHhigg9H106srL7pD1kg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:99:3b:14:c7:32:da:1f:2d:2e:06:2c:c8:48:8b:2a:b0:cc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB
        Validity
            Not Before: Apr 15 05:30:17 2024 GMT
            Not After : Apr 16 06:38:17 2024 GMT
        Subject: CN=0E5EB1EE9F52FDAB8CFEC352BA66404D57D46D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:4b:9a:07:74:54:d8:5a:2c:d7:d7:53:34:
                    a9:fa:08:eb:5e:95:e9:26:ad:af:a7:7f:93:87:31:
                    c4:28:1f:a4:07:c5:a3:18:87:5f:fc:36:31:90:cb:
                    d3:5e:4e:90:b4:06:09:a7:e8:53:f6:46:57:a1:21:
                    44:20:d8:9d:0c:6b:8e:0a:11:05:62:14:14:82:e3:
                    ab:9a:06:79:d8:e5:71:c2:5f:02:7a:b2:7d:f7:52:
                    85:1b:42:33:e3:76:b6:d3:7c:67:66:e7:c0:7b:74:
                    c9:d7:19:20:ec:ee:da:c6:a7:62:66:25:b3:c3:f7:
                    6d:a7:f2:ae:0b:8d:0f:43:81:42:db:bb:70:a3:58:
                    12:35:88:63:73:6a:d7:05:38:3f:5d:05:b8:98:71:
                    22:d0:59:6d:78:99:21:9e:7f:8d:de:85:ce:a6:2e:
                    e7:e1:8b:28:ab:c1:68:26:a0:7b:4a:b3:96:d3:fc:
                    86:d4:59:15:ac:3d:cf:44:44:9c:3e:b7:91:57:39:
                    73:54:a6:cd:16:97:dd:35:7f:9d:df:61:1b:9c:48:
                    40:dc:0f:a1:21:5e:ab:cc:ea:e9:8e:49:f8:97:88:
                    9a:83:ed:2a:bc:69:2b:b7:b9:da:ad:cb:92:c3:f1:
                    aa:0c:74:54:b5:85:72:35:10:08:91:3a:dc:52:f9:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5E:B1:EE:9F:52:FD:AB:8C:FE:C3:52:BA:66:40:4D:57:D4:6D:13
            X509v3 Authority Key Identifier:
                keyid:E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:ac:46:43:50:e9:df:1a:65:f9:98:28:dc:12:59:09:2f:
         73:a7:5a:20:6b:db:e8:46:b1:fb:f0:bb:f9:05:09:56:9b:d8:
         ee:4d:2b:4a:6c:0d:0f:f4:78:95:2a:77:22:71:81:e7:75:8d:
         20:70:71:37:6a:53:7f:f1:7c:5c:0b:ec:2a:e9:0d:77:e7:bc:
         64:a3:78:ba:4c:93:60:23:d5:89:c5:67:bc:d4:5f:12:fe:a1:
         2d:d0:35:db:fa:86:4c:55:fa:5d:4f:61:fe:7f:1c:d0:42:0f:
         69:7b:37:cf:f0:4b:22:36:c9:38:d9:6f:c8:cd:18:4b:69:0b:
         9d:e3:8a:b5:57:19:4d:82:05:d3:75:30:70:bd:29:37:49:ed:
         fc:b9:05:3f:82:6d:56:49:83:3c:f0:b9:4a:51:2b:e6:f0:c0:
         1d:3c:7e:c3:89:cb:2e:ac:b4:ba:91:9a:c8:8c:1d:db:6a:29:
         34:fe:1c:5d:fd:c0:7a:bf:66:7c:16:48:e5:92:7a:52:b4:f7:
         b6:14:c1:2f:a7:32:0c:84:9c:50:94:44:af:d4:5d:b5:0d:88:
         41:cb:14:89:91:dd:e1:ca:be:f7:e9:b3:5a:d4:7d:dc:cc:73:
         ab:38:2d:3e:98:0b:b2:e2:d3:e2:37:02:a3:8e:48:22:78:9b:
         b1:9d:27:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSu+ZOxTHMtofLS4GLMhIiyqwzIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU4QkVCNzEzN0M4QTg4MzgyRTVEM0I5N0QyQTBFMTEw
RDRDNTBCQjAeFw0yNDA0MTUwNTMwMTdaFw0yNDA0MTYwNjM4MTdaMDMxMTAvBgNV
BAMTKDBFNUVCMUVFOUY1MkZEQUI4Q0ZFQzM1MkJBNjY0MDRENTdENDZEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwUuaB3RU2Fos19dTNKn6COte
lekmra+nf5OHMcQoH6QHxaMYh1/8NjGQy9NeTpC0Bgmn6FP2RlehIUQg2J0Ma44K
EQViFBSC46uaBnnY5XHCXwJ6sn33UoUbQjPjdrbTfGdm58B7dMnXGSDs7trGp2Jm
JbPD922n8q4LjQ9DgULbu3CjWBI1iGNzatcFOD9dBbiYcSLQWW14mSGef43ehc6m
LufhiyirwWgmoHtKs5bT/IbUWRWsPc9ERJw+t5FXOXNUps0Wl901f53fYRucSEDc
D6EhXqvM6umOSfiXiJqD7Sq8aSu3udqty5LD8aoMdFS1hXI1EAiROtxS+eufAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDl6x7p9S/auM/sNSumZATVfUbRMwHwYDVR0j
BBgwFoAU5YvrcTfIqIOC5dO5fSoOEQ1MULswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxG
Y28vMC9FNThCRUI3MTM3QzhBODgzODJFNUQzQjk3RDJBMEUxMTBENEM1MEJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U1OEJFQjcxMzdDOEE4ODM4
MkU1RDNCOTdEMkEwRTExMEQ0QzUwQkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMC9F
NThCRUI3MTM3QzhBODgzODJFNUQzQjk3RDJBMEUxMTBENEM1MEJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa4CsRkNQ6d8aZfmYKNwSWQkvc6daIGvb6Eax+/C7+QUJVpvY7k0rSmwND/R4
lSp3InGB53WNIHBxN2pTf/F8XAvsKukNd+e8ZKN4ukyTYCPVicVnvNRfEv6hLdA1
2/qGTFX6XU9h/n8c0EIPaXs3z/BLIjbJONlvyM0YS2kLneOKtVcZTYIF03UwcL0p
N0nt/LkFP4JtVkmDPPC5SlEr5vDAHTx+w4nLLqy0upGayIwd22opNP4cXf3Aer9m
fBZI5ZJ6UrT3thTBL6cyDIScUJREr9RdtQ2IQcsUiZHd4cq+9+mzWtR93Mxzqzgt
PpgLsuLT4jcCo45IInibsZ0nGQ==
-----END CERTIFICATE-----