Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.mft
File:                     3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.mft (raw, json)
Hash identifier:          kIZFF7H+2XhmAa2UfmT3Q3UAOiBVBXoMcDMzSNk12dM=
Subject key identifier:   70:C1:FE:C5:4B:28:CF:22:9A:D3:1C:08:A3:78:AA:8A:B2:EB:79:8B
Authority key identifier: 3B:5B:DE:10:55:CD:53:83:A5:E9:77:7F:DF:AB:F4:A3:29:00:7C:0E
Certificate issuer:       /CN=3B5BDE1055CD5383A5E9777FDFABF4A329007C0E
Certificate serial:       21CDF46B6154D26DE658810CFC80E395C630FE67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.mft
Manifest number:          0107
Signing time:             Mon 19 Feb 2024 06:44:59 +0000
Manifest this update:     Mon 19 Feb 2024 06:39:59 +0000
Manifest next update:     Tue 20 Feb 2024 08:42:59 +0000
Files and hashes:         1: 3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.crl (hash: huvPw1EcYtSn/MYNNw7Qolf5nN54q/UUltI4CdG9cjo=)
                          2: 323830343a313033343a3a2f33322d3333203d3e20323633363234.roa (hash: hfylVKLpM7HTOE2yqGHznWXREAkDUS97AMPQSTQICxg=)
                          3: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: ofBkVCB2wLjDRAPGNbLyHFCQIzmbpI8P4U8yWB+VoBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:f4:6b:61:54:d2:6d:e6:58:81:0c:fc:80:e3:95:c6:30:fe:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BDE1055CD5383A5E9777FDFABF4A329007C0E
        Validity
            Not Before: Feb 19 06:39:59 2024 GMT
            Not After : Feb 20 08:42:59 2024 GMT
        Subject: CN=70C1FEC54B28CF229AD31C08A378AA8AB2EB798B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:57:a5:a1:d0:db:a4:73:13:07:37:e2:75:
                    fd:b5:d3:0b:ea:07:6d:fc:19:ad:36:21:5e:3d:b5:
                    59:62:ae:66:3c:3c:3e:f9:34:61:cc:c5:1d:3b:a5:
                    f0:88:b1:0f:3a:26:ec:09:ae:7e:39:8e:18:73:73:
                    3f:c4:9c:42:2f:d5:a8:53:8f:0c:1f:13:8d:01:ec:
                    ac:49:7f:82:5f:a7:1b:43:4b:fb:dd:b6:8a:7c:4c:
                    76:62:9c:5d:20:87:82:9f:b9:05:b3:08:8e:d6:51:
                    d6:ad:45:9b:44:b5:9a:f2:74:8f:50:44:17:d5:a5:
                    01:1c:06:3d:e3:5b:23:b6:82:28:e6:bf:bb:e0:b6:
                    fb:ed:50:8e:ee:ee:6a:17:01:f4:5b:b9:e1:94:d7:
                    aa:71:54:43:ef:de:9e:18:e6:8f:8f:51:6a:c9:3e:
                    20:89:64:f4:da:ff:31:ad:7d:9b:fe:9c:3b:ba:cd:
                    52:ba:0c:d0:40:07:8c:de:fd:d3:99:0b:d5:6e:d7:
                    9b:2c:2f:5d:4f:2f:58:0f:0b:3e:dd:eb:94:16:b7:
                    da:7b:cf:ad:5a:34:1d:8f:51:34:aa:7e:a7:12:74:
                    df:44:de:39:98:4b:23:0e:4a:13:46:17:01:4c:99:
                    4f:29:92:86:75:5e:92:61:74:6b:be:96:fe:81:d4:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:FE:C5:4B:28:CF:22:9A:D3:1C:08:A3:78:AA:8A:B2:EB:79:8B
            X509v3 Authority Key Identifier:
                keyid:3B:5B:DE:10:55:CD:53:83:A5:E9:77:7F:DF:AB:F4:A3:29:00:7C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/3B5BDE1055CD5383A5E9777FDFABF4A329007C0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:2f:a4:e6:b6:3e:c0:2f:8a:16:75:f3:7e:38:6d:fc:98:
         c4:5b:18:f8:6c:ab:a8:91:d6:d2:1f:cd:ed:f6:d6:54:5e:73:
         58:5f:35:d8:31:0c:b1:67:c9:0e:40:c7:95:67:a6:38:b6:d7:
         e7:2c:8c:e1:27:40:c0:f7:89:cb:0b:6b:f2:1e:01:b6:ba:be:
         b9:7b:e9:fa:7e:e2:2f:a7:b7:95:75:56:c6:11:c7:63:09:a5:
         ca:22:61:c9:28:17:79:c5:9d:b0:b6:f7:d4:69:e6:88:6c:65:
         9a:52:46:e6:10:77:ad:3d:22:2d:21:03:c0:20:d2:bb:67:dc:
         82:2c:02:1d:b7:3b:6b:2b:5c:d1:32:a5:9c:26:d4:ad:72:fd:
         8d:af:b2:66:62:94:92:b8:b6:84:8f:b3:34:85:94:12:27:54:
         92:8c:d6:3e:ee:b9:21:ad:19:46:0c:d1:de:04:5d:d6:8b:63:
         9a:65:72:4b:c8:e0:6f:65:47:81:a7:76:10:83:fe:42:2b:3c:
         1c:5b:18:81:a4:3a:41:de:70:df:e0:07:ad:a5:29:54:31:01:
         9c:91:f0:62:fa:65:57:1a:40:83:c2:36:e5:5d:6a:88:4a:8a:
         ef:1d:a4:f8:58:f2:c9:ab:75:6d:77:05:7b:99:16:79:60:75:
         c1:3b:e5:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIc30a2FU0m3mWIEM/IDjlcYw/mcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I1QkRFMTA1NUNENTM4M0E1RTk3NzdGREZBQkY0QTMy
OTAwN0MwRTAeFw0yNDAyMTkwNjM5NTlaFw0yNDAyMjAwODQyNTlaMDMxMTAvBgNV
BAMTKDcwQzFGRUM1NEIyOENGMjI5QUQzMUMwOEEzNzhBQThBQjJFQjc5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LVelodDbpHMTBzfidf210wvq
B238Ga02IV49tVlirmY8PD75NGHMxR07pfCIsQ86JuwJrn45jhhzcz/EnEIv1ahT
jwwfE40B7KxJf4JfpxtDS/vdtop8THZinF0gh4KfuQWzCI7WUdatRZtEtZrydI9Q
RBfVpQEcBj3jWyO2gijmv7vgtvvtUI7u7moXAfRbueGU16pxVEPv3p4Y5o+PUWrJ
PiCJZPTa/zGtfZv+nDu6zVK6DNBAB4ze/dOZC9Vu15ssL11PL1gPCz7d65QWt9p7
z61aNB2PUTSqfqcSdN9E3jmYSyMOShNGFwFMmU8pkoZ1XpJhdGu+lv6B1Bz5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcMH+xUsozyKa0xwIo3iqirLreYswHwYDVR0j
BBgwFoAUO1veEFXNU4Ol6Xd/36v0oykAfA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZB
aWcvMC8zQjVCREUxMDU1Q0Q1MzgzQTVFOTc3N0ZERkFCRjRBMzI5MDA3QzBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCNUJERTEwNTVDRDUzODNB
NUU5Nzc3RkRGQUJGNEEzMjkwMDdDMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZBaWcvMC8z
QjVCREUxMDU1Q0Q1MzgzQTVFOTc3N0ZERkFCRjRBMzI5MDA3QzBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeAgvpOa2PsAvihZ18344bfyYxFsY+GyrqJHW0h/N7fbWVF5zWF812DEMsWfJ
DkDHlWemOLbX5yyM4SdAwPeJywtr8h4Btrq+uXvp+n7iL6e3lXVWxhHHYwmlyiJh
ySgXecWdsLb31GnmiGxlmlJG5hB3rT0iLSEDwCDSu2fcgiwCHbc7aytc0TKlnCbU
rXL9ja+yZmKUkri2hI+zNIWUEidUkozWPu65Ia0ZRgzR3gRd1otjmmVyS8jgb2VH
gad2EIP+Qis8HFsYgaQ6Qd5w3+AHraUpVDEBnJHwYvplVxpAg8I25V1qiEqK7x2k
+Fjyyat1bXcFe5kWeWB1wTvldg==
-----END CERTIFICATE-----