Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft
File:                     3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft (raw, json)
Hash identifier:          pFKkg/llP6bV58ClyQBaNsuM/lCiCe3O1OABpfCpwyc=
Subject key identifier:   C7:38:6F:8C:F3:D6:33:74:FA:17:FA:B9:F9:B1:39:AC:58:32:AA:01
Authority key identifier: 3E:22:53:7B:D7:B9:DC:BF:A4:9A:CB:D8:59:EC:4F:5C:C5:D9:2B:04
Certificate issuer:       /CN=3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04
Certificate serial:       1DFB85B93A8C62EE1D6C9424A215734C4346B60B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft
Manifest number:          5D
Signing time:             Mon 18 Mar 2024 01:48:25 +0000
Manifest this update:     Mon 18 Mar 2024 01:43:25 +0000
Manifest next update:     Tue 19 Mar 2024 03:42:25 +0000
Files and hashes:         1: 323830313a38303a323236303a3a2f34382d3438203d3e20323637363330.roa (hash: faXptBCOyoa5SXzf30S583aaZfxb2igZcOhK7C557iE=)
                          2: 3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.crl (hash: k21jd9+BppfOOMJHfUsfNI8p+ku/E2ksVrsjGGlwfZo=)
                          3: 34352e37312e362e302f32342d3234203d3e20323637363330.roa (hash: DoMU/GAfkvH//MttezFkYrR1aRke3GnmGUMmxxPt+cA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:85:b9:3a:8c:62:ee:1d:6c:94:24:a2:15:73:4c:43:46:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04
        Validity
            Not Before: Mar 18 01:43:25 2024 GMT
            Not After : Mar 19 03:42:25 2024 GMT
        Subject: CN=C7386F8CF3D63374FA17FAB9F9B139AC5832AA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:f7:4b:d3:91:b1:d9:66:53:81:f7:06:8f:
                    8c:70:bb:1a:d3:36:32:b2:8d:df:f1:9e:54:ef:23:
                    94:19:75:ed:5f:28:50:83:41:22:c6:09:db:24:e6:
                    98:11:0d:d1:ce:a8:83:b3:88:a3:35:a1:4e:89:7f:
                    bf:35:72:25:b0:d0:12:fa:bc:7a:76:3c:e4:31:d4:
                    5c:ea:aa:a5:60:d6:4b:70:b7:0d:33:aa:a4:3a:50:
                    ec:bc:3c:e1:56:3d:c3:09:87:f6:b0:49:72:da:35:
                    2b:5e:f1:96:30:e6:6b:db:ad:46:c7:b0:f8:09:49:
                    2d:54:43:55:e6:0c:e4:58:0d:d0:56:95:63:ef:5d:
                    1a:4e:43:8a:a7:01:04:e5:8c:ac:7a:a6:3b:7d:1e:
                    8d:fd:8b:5d:5d:a4:94:69:b7:4c:67:f8:af:38:37:
                    85:ad:77:c6:ad:82:96:7b:fc:1c:a1:1a:8a:71:c0:
                    ee:64:8a:ec:cd:45:98:84:44:90:f4:17:a1:2a:4a:
                    bc:ae:89:d6:c6:0e:57:be:df:55:23:4d:4e:d0:67:
                    b8:5e:5c:a1:69:28:b0:3b:27:75:bc:7a:b8:1c:7a:
                    fa:3a:28:8c:51:d2:cd:8f:fe:ac:53:80:41:5e:29:
                    1c:d9:5b:1f:77:31:ba:91:ce:04:cd:07:15:ed:d8:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:6F:8C:F3:D6:33:74:FA:17:FA:B9:F9:B1:39:AC:58:32:AA:01
            X509v3 Authority Key Identifier:
                keyid:3E:22:53:7B:D7:B9:DC:BF:A4:9A:CB:D8:59:EC:4F:5C:C5:D9:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:fe:3f:8a:0b:92:01:82:7c:22:3a:12:75:cc:eb:ba:10:c6:
         6a:fb:bd:03:2a:b4:73:08:14:ff:8b:31:ee:b5:c4:6a:76:b8:
         10:df:b5:90:23:ea:13:a1:e3:82:c6:f5:b0:a9:8e:2b:5b:83:
         60:40:67:28:c0:95:e5:64:08:4f:f7:be:cf:8a:f3:25:80:69:
         d1:81:29:ec:62:2f:e1:51:5a:d5:7c:eb:d8:d1:c3:3d:b8:93:
         5e:16:c2:b8:e6:e3:d3:b2:5f:a2:c1:1f:71:9f:63:7c:5b:97:
         bd:c4:50:9a:74:e6:c4:75:1d:e5:af:81:d1:3d:87:c3:b2:f1:
         c8:1e:c0:b4:27:2e:0f:6d:7d:17:74:e1:3e:bf:ef:35:e7:e9:
         51:8c:62:76:96:7c:4d:cc:08:32:01:52:25:3d:8b:0a:14:69:
         ee:8a:f4:25:97:2b:45:eb:1a:3e:43:1e:0c:67:29:d7:05:7f:
         14:76:7f:18:df:4f:70:30:1c:f9:1c:5f:df:f0:42:af:25:61:
         cc:de:b5:d9:c5:f5:02:40:09:15:27:8c:b5:32:c6:2e:06:5d:
         ec:55:fd:f1:0c:82:5d:c6:3a:a5:8d:d1:63:38:c9:c1:57:a4:
         5f:9b:c7:28:5d:14:8a:4d:09:a7:89:3d:f4:45:74:78:fd:71:
         3c:9a:b9:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHfuFuTqMYu4dbJQkohVzTENGtgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMjUzN0JEN0I5RENCRkE0OUFDQkQ4NTlFQzRGNUND
NUQ5MkIwNDAeFw0yNDAzMTgwMTQzMjVaFw0yNDAzMTkwMzQyMjVaMDMxMTAvBgNV
BAMTKEM3Mzg2RjhDRjNENjMzNzRGQTE3RkFCOUY5QjEzOUFDNTgzMkFBMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx/dL05Gx2WZTgfcGj4xwuxrT
NjKyjd/xnlTvI5QZde1fKFCDQSLGCdsk5pgRDdHOqIOziKM1oU6Jf781ciWw0BL6
vHp2POQx1FzqqqVg1ktwtw0zqqQ6UOy8POFWPcMJh/awSXLaNSte8ZYw5mvbrUbH
sPgJSS1UQ1XmDORYDdBWlWPvXRpOQ4qnAQTljKx6pjt9Ho39i11dpJRpt0xn+K84
N4Wtd8atgpZ7/ByhGopxwO5kiuzNRZiERJD0F6EqSryuidbGDle+31UjTU7QZ7he
XKFpKLA7J3W8ergcevo6KIxR0s2P/qxTgEFeKRzZWx93MbqRzgTNBxXt2PDdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxzhvjPPWM3T6F/q5+bE5rFgyqgEwHwYDVR0j
BBgwFoAUPiJTe9e53L+kmsvYWexPXMXZKwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVkM0FFZHVYS1lvYlpDVTV1MnRYQWd2NGtnZHdrZ3docGtpekZEOVho
bUIvMC8zRTIyNTM3QkQ3QjlEQ0JGQTQ5QUNCRDg1OUVDNEY1Q0M1RDkyQjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFMjI1MzdCRDdCOURDQkZB
NDlBQ0JEODU5RUM0RjVDQzVEOTJCMDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXVkM0FFZHVYS1lvYlpDVTV1MnRYQWd2NGtnZHdrZ3docGtpekZEOVhobUIvMC8z
RTIyNTM3QkQ3QjlEQ0JGQTQ5QUNCRDg1OUVDNEY1Q0M1RDkyQjA0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuv4/iguSAYJ8IjoSdczruhDGavu9Ayq0cwgU/4sx7rXEana4EN+1kCPqE6Hj
gsb1sKmOK1uDYEBnKMCV5WQIT/e+z4rzJYBp0YEp7GIv4VFa1Xzr2NHDPbiTXhbC
uObj07JfosEfcZ9jfFuXvcRQmnTmxHUd5a+B0T2Hw7LxyB7AtCcuD219F3ThPr/v
NefpUYxidpZ8TcwIMgFSJT2LChRp7or0JZcrResaPkMeDGcp1wV/FHZ/GN9PcDAc
+Rxf3/BCryVhzN612cX1AkAJFSeMtTLGLgZd7FX98QyCXcY6pY3RYzjJwVekX5vH
KF0Uik0Jp4k99EV0eP1xPJq5kw==
-----END CERTIFICATE-----