Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft
File:                     2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft (raw, json)
Hash identifier:          09GcicJN0DmzGEcVl7twf2sSryk2sgD2Au13uaHU9JU=
Subject key identifier:   1D:EF:AB:AA:0D:8D:14:74:83:60:31:82:65:9F:4E:42:0B:4B:14:6F
Authority key identifier: 2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E
Certificate issuer:       /CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
Certificate serial:       2628FEAB3AEC53249ED083933C332BAB46259D13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft
Manifest number:          03D9
Signing time:             Mon 15 Apr 2024 00:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 03:17:00 +0000
Files and hashes:         1: 2FF599B83A0FDC1744A3B48099E107CF659AB46E.crl (hash: BgEZWD/psq0aXJ/uy7iMvNy3vUgK/jOsxhSVvLGuZ9k=)
                          2: 323830343a6531343a3a2f33322d3334203d3e203532353433.roa (hash: X0m40K72btSx7J4YpmUFHGEnt25QV2QAiTbOybTTEOE=)
                          3: 3137392e3130372e36342e302f32302d3234203d3e203532353433.roa (hash: 1h+OqwWHWXN9P6jn35Yvqn1yO8YzkFct9f7prlcnSo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:28:fe:ab:3a:ec:53:24:9e:d0:83:93:3c:33:2b:ab:46:25:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
        Validity
            Not Before: Apr 15 00:35:00 2024 GMT
            Not After : Apr 16 03:17:00 2024 GMT
        Subject: CN=1DEFABAA0D8D147483603182659F4E420B4B146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:4a:3a:a6:38:6e:ff:83:a4:94:c6:4f:ba:
                    1b:3c:97:9f:1e:f0:e2:db:f9:90:ec:d6:fb:e9:dc:
                    06:02:9f:ff:01:82:d9:6d:a9:d2:20:44:9f:33:e5:
                    36:dc:44:7e:e5:82:f2:7f:b5:44:7c:55:20:cf:e5:
                    82:11:66:30:b8:39:91:27:9e:96:b2:13:18:7d:35:
                    9b:8a:51:36:e0:92:ce:7a:8d:2e:38:6e:3f:6b:3a:
                    78:6d:cb:de:d9:1c:5c:15:fe:cb:7b:6e:6b:23:49:
                    c3:7e:a5:4e:ff:d9:17:11:67:bc:1b:53:e1:fb:fa:
                    cf:17:7b:91:73:14:f9:e3:f2:c2:bf:f5:9c:97:44:
                    21:02:3b:7d:a8:ff:f2:d6:c6:4a:96:f1:16:4d:25:
                    1e:60:46:b4:15:b0:cf:29:62:54:bd:7d:30:2b:ae:
                    1f:ac:aa:b0:71:1b:02:e1:71:81:cf:71:6e:cc:f8:
                    05:c8:ea:83:69:8c:f7:29:0a:d4:2c:18:17:60:8e:
                    24:22:aa:a8:f1:9e:4d:3b:e8:6a:8d:56:97:40:5d:
                    2c:65:13:58:0d:61:33:d9:f0:ca:1c:a0:91:e6:68:
                    4c:08:23:91:19:a9:d6:4c:b0:cf:79:f1:7a:9e:ea:
                    e2:21:7d:54:a1:d9:81:93:cf:6b:68:19:7d:b6:d8:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:AB:AA:0D:8D:14:74:83:60:31:82:65:9F:4E:42:0B:4B:14:6F
            X509v3 Authority Key Identifier:
                keyid:2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:b3:56:e8:90:e5:98:1c:9d:3f:76:aa:a7:5e:32:51:aa:
         c1:bf:a3:24:49:59:9b:50:67:b5:df:a1:4e:27:e5:61:92:37:
         8a:a1:97:10:f6:6f:ee:57:1d:81:fe:79:0b:c2:2f:4d:52:db:
         84:0a:e1:03:d1:72:33:59:a2:58:f5:37:95:e3:00:42:e5:f6:
         38:2d:08:b0:c2:89:e2:c0:9f:37:a1:2f:b8:26:37:1c:de:bf:
         20:75:fb:37:20:a7:5e:26:01:17:fe:bb:4f:78:3e:fc:d0:d4:
         d0:fa:0d:c8:45:28:b9:a9:06:8b:40:f9:a3:5d:7c:31:79:80:
         b1:6f:e0:ef:14:65:33:1f:f2:64:d0:ef:4b:f4:2a:e8:66:c9:
         60:10:9f:8b:b0:1a:f0:c7:5f:6c:7c:68:5a:f2:f6:f1:2e:cb:
         5c:27:ce:76:aa:47:58:13:28:72:2e:40:38:fa:cd:a4:35:d9:
         a4:08:3f:93:6b:c8:59:3b:86:44:c4:ed:6e:31:df:0e:4f:02:
         e5:17:95:e4:4c:f7:bf:c8:b2:a9:27:10:b1:6c:9d:19:29:b6:
         ff:06:62:9b:98:b9:82:b9:4a:05:8b:1d:a9:e4:1b:a9:a3:5f:
         4e:07:44:f9:d4:af:c4:f4:fc:9d:f0:5f:33:df:ad:74:22:48:
         69:dc:60:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJij+qzrsUySe0IOTPDMrq0YlnRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZGNTk5QjgzQTBGREMxNzQ0QTNCNDgwOTlFMTA3Q0Y2
NTlBQjQ2RTAeFw0yNDA0MTUwMDM1MDBaFw0yNDA0MTYwMzE3MDBaMDMxMTAvBgNV
BAMTKDFERUZBQkFBMEQ4RDE0NzQ4MzYwMzE4MjY1OUY0RTQyMEI0QjE0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwUo6pjhu/4OklMZPuhs8l58e
8OLb+ZDs1vvp3AYCn/8BgtltqdIgRJ8z5TbcRH7lgvJ/tUR8VSDP5YIRZjC4OZEn
npayExh9NZuKUTbgks56jS44bj9rOnhty97ZHFwV/st7bmsjScN+pU7/2RcRZ7wb
U+H7+s8Xe5FzFPnj8sK/9ZyXRCECO32o//LWxkqW8RZNJR5gRrQVsM8pYlS9fTAr
rh+sqrBxGwLhcYHPcW7M+AXI6oNpjPcpCtQsGBdgjiQiqqjxnk076GqNVpdAXSxl
E1gNYTPZ8MocoJHmaEwII5EZqdZMsM958Xqe6uIhfVSh2YGTz2toGX222M/TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHe+rqg2NFHSDYDGCZZ9OQgtLFG8wHwYDVR0j
BBgwFoAUL/WZuDoP3BdEo7SAmeEHz2WatG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZIdG1RaTI5U3FRazh2dDdSNmhKOTc3VFBYQUNXbjRCdVhFY2FjRGpw
cTkvMC8yRkY1OTlCODNBMEZEQzE3NDRBM0I0ODA5OUUxMDdDRjY1OUFCNDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGRjU5OUI4M0EwRkRDMTc0
NEEzQjQ4MDk5RTEwN0NGNjU5QUI0NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTZIdG1RaTI5U3FRazh2dDdSNmhKOTc3VFBYQUNXbjRCdVhFY2FjRGpwcTkvMC8y
RkY1OTlCODNBMEZEQzE3NDRBM0I0ODA5OUUxMDdDRjY1OUFCNDZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQfizVuiQ5ZgcnT92qqdeMlGqwb+jJElZm1Bntd+hTiflYZI3iqGXEPZv7lcd
gf55C8IvTVLbhArhA9FyM1miWPU3leMAQuX2OC0IsMKJ4sCfN6EvuCY3HN6/IHX7
NyCnXiYBF/67T3g+/NDU0PoNyEUouakGi0D5o118MXmAsW/g7xRlMx/yZNDvS/Qq
6GbJYBCfi7Aa8MdfbHxoWvL28S7LXCfOdqpHWBMoci5AOPrNpDXZpAg/k2vIWTuG
RMTtbjHfDk8C5ReV5Ez3v8iyqScQsWydGSm2/wZim5i5grlKBYsdqeQbqaNfTgdE
+dSvxPT8nfBfM9+tdCJIadxg7A==
-----END CERTIFICATE-----