Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
File:                     733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft (raw, json)
Hash identifier:          1H8TMImwWYsHWJaIWpD5pl01hinR5J/Iv+FpneL3Qy8=
Subject key identifier:   BC:41:89:43:2D:74:A7:7C:B3:02:B4:F4:6D:36:5F:48:68:6D:07:57
Authority key identifier: 73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39
Certificate issuer:       /CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
Certificate serial:       5B26FE9A35A941F5A9A41AFDCE0E60D43BC016A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
Manifest number:          013D
Signing time:             Thu 28 Nov 2024 01:18:45 +0000
Manifest this update:     Thu 28 Nov 2024 01:13:45 +0000
Manifest next update:     Fri 29 Nov 2024 05:03:45 +0000
Files and hashes:         1: 3138372e3130392e3131342e302f32332d3234203d3e20323732373533.roa (hash: SpAjs9lPlsDUdbeBlx39CajuSQ07yl9fWVsy1lsFis8=)
                          2: 733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl (hash: 7UVo4F3LaESguxyz6ZL2TQvAVUFTz6nMGF1S8jvBwDo=)
                          3: 323830343a383832343a3a2f33322d3438203d3e20323732373533.roa (hash: 7djiMLCU15vZfaUPc7n0qb3cEHDLJ8tej0PTlDdapY8=)
                          4: 3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa (hash: VbTuWLqndb/yiJBb/gHFLD9ke/W/V1fXO/S3jp7jvUk=)
                          5: 3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa (hash: 3IoTLhYodDZ2iwrB0TqBRm1Z8xJhWmNz19oRIng2hPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:fe:9a:35:a9:41:f5:a9:a4:1a:fd:ce:0e:60:d4:3b:c0:16:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
        Validity
            Not Before: Nov 28 01:13:45 2024 GMT
            Not After : Nov 29 05:03:45 2024 GMT
        Subject: CN=BC4189432D74A77CB302B4F46D365F48686D0757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:53:0a:36:ff:cb:0d:5e:da:b7:4b:4d:e6:
                    f3:3d:1b:a6:f2:ac:3b:f9:e3:24:45:1c:79:10:6e:
                    22:d4:c0:10:5a:ff:aa:f8:ea:64:8f:16:9a:b7:2f:
                    cf:a0:39:c1:b0:d9:7d:5c:9f:34:a0:ab:80:08:80:
                    cf:27:33:5b:ba:60:0e:9e:3e:af:6c:04:13:b2:8b:
                    b1:4f:d4:70:a2:c9:25:30:8e:17:16:c9:e0:2d:82:
                    2c:12:49:fa:4a:e7:a1:b9:51:3b:ab:e3:2e:6c:1a:
                    1b:a6:71:8e:7b:f6:37:3a:dc:07:b3:4e:ef:5c:0d:
                    99:c1:34:6e:c5:1f:f1:83:2f:e4:83:cf:60:63:7f:
                    d1:8b:65:19:b0:2a:a3:c2:62:c0:63:92:bc:95:a7:
                    62:71:5b:89:b0:42:82:d4:c1:5a:df:c7:a3:29:10:
                    b6:00:a9:8e:dd:62:69:1e:23:bd:0c:7c:62:fd:71:
                    32:1d:2d:cc:11:57:6c:7c:bf:51:a4:53:bb:cf:bf:
                    1b:2c:52:cd:48:ff:53:c7:2c:e7:b0:48:c3:ec:c7:
                    88:49:60:b5:13:97:87:48:0f:0b:85:d5:8d:68:1f:
                    2f:bd:f1:aa:6f:79:07:df:83:a5:6c:ad:ac:0a:25:
                    54:dd:6f:c6:5e:35:9c:65:56:b4:ca:0f:07:56:e7:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:41:89:43:2D:74:A7:7C:B3:02:B4:F4:6D:36:5F:48:68:6D:07:57
            X509v3 Authority Key Identifier:
                keyid:73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:af:05:a3:bd:21:5b:eb:61:dc:dd:52:11:84:9f:d5:d8:
         57:01:1f:5c:da:9c:9f:34:f7:50:72:19:93:43:18:27:a1:49:
         bf:a8:af:49:f7:e0:f3:85:2e:d3:1d:d7:c6:91:b1:56:62:e7:
         3e:24:2c:43:2f:c2:30:44:19:83:5c:07:f3:c5:3a:fd:c6:87:
         7c:18:b6:86:e2:d7:6e:18:c5:96:77:7e:9f:a2:16:db:5a:d7:
         52:4b:3e:3c:5c:7e:5e:27:a9:5c:16:7d:0f:71:24:75:fa:84:
         57:2c:56:c0:7c:6d:99:51:ed:d6:c4:e0:92:85:79:5e:6d:38:
         1a:82:59:0c:f5:27:86:aa:3e:d9:a6:b3:8f:c7:2b:32:45:bf:
         0e:e0:27:2b:45:91:91:b5:89:b9:c6:e6:c9:15:f2:cf:62:2d:
         dc:e3:d0:09:24:06:26:98:38:75:1d:58:eb:e1:c5:54:3c:21:
         93:20:a6:8c:5c:52:c2:42:23:72:42:fc:6b:a8:38:ff:ad:71:
         74:d8:83:d9:85:84:be:b2:f8:e6:e3:67:c3:1f:74:26:9a:02:
         c0:d2:35:a4:67:bc:d7:b9:3e:29:44:63:82:49:43:29:6b:52:
         ee:c3:0c:be:ca:8c:77:45:55:80:0b:5a:d0:76:da:22:6e:a3:
         e5:3a:75:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWyb+mjWpQfWppBr9zg5g1DvAFqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzRDBCMEZEREE0NUQ3MTYxRDVDRUNEQzBGQjdDMDE4
MkIwRTUzOTAeFw0yNDExMjgwMTEzNDVaFw0yNDExMjkwNTAzNDVaMDMxMTAvBgNV
BAMTKEJDNDE4OTQzMkQ3NEE3N0NCMzAyQjRGNDZEMzY1RjQ4Njg2RDA3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WVMKNv/LDV7at0tN5vM9G6by
rDv54yRFHHkQbiLUwBBa/6r46mSPFpq3L8+gOcGw2X1cnzSgq4AIgM8nM1u6YA6e
Pq9sBBOyi7FP1HCiySUwjhcWyeAtgiwSSfpK56G5UTur4y5sGhumcY579jc63Aez
Tu9cDZnBNG7FH/GDL+SDz2Bjf9GLZRmwKqPCYsBjkryVp2JxW4mwQoLUwVrfx6Mp
ELYAqY7dYmkeI70MfGL9cTIdLcwRV2x8v1GkU7vPvxssUs1I/1PHLOewSMPsx4hJ
YLUTl4dIDwuF1Y1oHy+98apveQffg6VsrawKJVTdb8ZeNZxlVrTKDwdW5005AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvEGJQy10p3yzArT0bTZfSGhtB1cwHwYDVR0j
BBgwFoAUcz0LD92kXXFh1c7NwPt8AYKw5TkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlq
RmIvMS83MzNEMEIwRkREQTQ1RDcxNjFENUNFQ0RDMEZCN0MwMTgyQjBFNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczM0QwQjBGRERBNDVENzE2
MUQ1Q0VDREMwRkI3QzAxODJCMEU1MzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlqRmIvMS83
MzNEMEIwRkREQTQ1RDcxNjFENUNFQ0RDMEZCN0MwMTgyQjBFNTM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAozqvBaO9IVvrYdzdUhGEn9XYVwEfXNqcnzT3UHIZk0MYJ6FJv6ivSffg84Uu
0x3XxpGxVmLnPiQsQy/CMEQZg1wH88U6/caHfBi2huLXbhjFlnd+n6IW21rXUks+
PFx+XiepXBZ9D3EkdfqEVyxWwHxtmVHt1sTgkoV5Xm04GoJZDPUnhqo+2aazj8cr
MkW/DuAnK0WRkbWJucbmyRXyz2It3OPQCSQGJpg4dR1Y6+HFVDwhkyCmjFxSwkIj
ckL8a6g4/61xdNiD2YWEvrL45uNnwx90JpoCwNI1pGe817k+KURjgklDKWtS7sMM
vsqMd0VVgAta0HbaIm6j5Tp1JA==
-----END CERTIFICATE-----