Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft
File:                     068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft (raw, json)
Hash identifier:          JtKXBixLLNhyZNLEdiSu4rQQX2RnlFyDAgsVYNI6Xvk=
Subject key identifier:   22:43:C2:12:02:59:A2:91:76:23:2E:19:76:16:CB:1A:23:B4:9E:82
Authority key identifier: 06:8E:5C:28:1A:77:E8:0F:64:79:45:C3:1F:9F:F3:AD:D8:36:C6:BF
Certificate issuer:       /CN=068E5C281A77E80F647945C31F9FF3ADD836C6BF
Certificate serial:       5F49080D77D7C4174F7034FFEC8052D044FC81E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft
Manifest number:          3A
Signing time:             Tue 28 Nov 2023 23:07:27 +0000
Manifest this update:     Tue 28 Nov 2023 23:02:27 +0000
Manifest next update:     Thu 30 Nov 2023 00:36:27 +0000
Files and hashes:         1: 068E5C281A77E80F647945C31F9FF3ADD836C6BF.crl (hash: 4iDJlYRlnpEHOb1aVHNuvnbZR4UMf2aNk5cR2wJV2Dg=)
                          2: 323830343a353637343a3a2f33322d313238203d3e20323637393939.roa (hash: vCFjTrJustHrHi9jkLyCbikGV2wg0WEKCXvHNrF0HYk=)
                          3: 34352e3136372e3130382e302f32322d3332203d3e20323637393939.roa (hash: YLZuKv1o0UdwjeoVS/Su0BOVMMf1sYrh4AiTOhpHcec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:08:0d:77:d7:c4:17:4f:70:34:ff:ec:80:52:d0:44:fc:81:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068E5C281A77E80F647945C31F9FF3ADD836C6BF
        Validity
            Not Before: Nov 28 23:02:27 2023 GMT
            Not After : Nov 30 00:36:27 2023 GMT
        Subject: CN=2243C2120259A29176232E197616CB1A23B49E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:d6:f4:61:a1:52:c5:6b:5c:7b:41:e5:83:
                    0d:5c:d4:91:85:a9:e1:77:97:1b:a8:9b:a4:5a:59:
                    67:dd:35:7b:ba:40:d3:5c:24:25:bb:d3:1a:4e:a8:
                    93:cc:51:17:94:05:03:d2:d6:4f:16:86:f5:35:fa:
                    2b:85:2e:8d:6c:99:99:b3:40:ae:1b:29:05:d4:f8:
                    31:26:6e:2f:10:85:10:c2:0f:17:4b:eb:1a:54:62:
                    47:6b:41:b5:e5:3b:8b:72:9e:5a:16:a7:8f:9d:1b:
                    0f:f6:ec:9e:ac:2d:a7:2d:8c:c9:7a:fb:ed:35:da:
                    27:5f:0c:8c:84:c4:d5:73:3c:f2:b9:dd:49:c3:4c:
                    78:61:87:04:7d:fd:0f:c8:d0:71:21:28:2d:0b:ab:
                    d7:88:c6:5b:ee:de:28:2e:8c:91:a8:fc:7c:dd:48:
                    27:74:e1:32:8e:94:74:5a:0c:bc:b8:8c:2f:b3:b4:
                    41:c3:b7:c6:45:13:96:aa:01:c8:f7:be:34:1d:e3:
                    fc:34:06:ee:1f:44:14:8d:fb:2d:5a:72:24:81:de:
                    6e:6d:98:52:52:01:43:93:a4:38:cc:ec:0f:e1:74:
                    00:6b:69:d5:58:d1:30:3b:e0:a4:2c:ef:12:e0:25:
                    73:d5:ba:56:f2:3b:fc:32:3f:af:4e:0f:ca:20:cd:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:C2:12:02:59:A2:91:76:23:2E:19:76:16:CB:1A:23:B4:9E:82
            X509v3 Authority Key Identifier:
                keyid:06:8E:5C:28:1A:77:E8:0F:64:79:45:C3:1F:9F:F3:AD:D8:36:C6:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:39:4a:00:d7:80:3a:56:0c:b6:14:1c:2b:c3:ff:61:fc:38:
         94:ae:fa:ea:7b:c2:9d:c0:14:09:eb:a3:26:7f:7b:4b:51:35:
         68:df:aa:af:99:2d:43:7c:ef:d4:fe:0c:ca:f9:7a:03:7c:99:
         da:ba:96:81:18:bc:43:6b:9f:f9:85:ff:75:a3:55:b1:ba:fc:
         cc:91:4a:67:a2:cb:79:e7:f4:b2:ad:13:d9:e1:44:c7:aa:98:
         d6:64:bb:84:33:da:7e:9a:11:9e:ac:ab:b0:ea:31:00:08:b1:
         86:9c:6a:7d:a8:c1:70:9f:2c:ef:67:de:0a:b3:50:c7:46:cd:
         cd:5d:20:f2:90:76:12:3e:fc:a9:01:19:7a:4e:6a:b3:fa:fb:
         7b:25:ca:d8:79:32:1a:7c:70:ce:1f:2f:2f:36:55:f3:3b:41:
         29:42:45:15:98:f4:6d:c3:3a:49:7e:ca:f9:3d:4c:7e:d3:a7:
         48:37:85:e1:6e:ac:1c:40:4f:d7:ee:3b:61:23:60:21:61:d3:
         98:70:bc:16:26:74:39:ed:c5:bb:2b:36:e0:16:98:70:ce:c1:
         5d:74:e1:a8:48:0f:e8:ee:71:e5:8b:9f:2f:95:c2:77:e7:48:
         c8:f3:54:24:18:da:7a:0b:f1:46:f0:b4:3f:dc:06:55:58:0f:
         90:7e:ea:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX0kIDXfXxBdPcDT/7IBS0ET8geUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4RTVDMjgxQTc3RTgwRjY0Nzk0NUMzMUY5RkYzQURE
ODM2QzZCRjAeFw0yMzExMjgyMzAyMjdaFw0yMzExMzAwMDM2MjdaMDMxMTAvBgNV
BAMTKDIyNDNDMjEyMDI1OUEyOTE3NjIzMkUxOTc2MTZDQjFBMjNCNDlFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGdb0YaFSxWtce0Hlgw1c1JGF
qeF3lxuom6RaWWfdNXu6QNNcJCW70xpOqJPMUReUBQPS1k8WhvU1+iuFLo1smZmz
QK4bKQXU+DEmbi8QhRDCDxdL6xpUYkdrQbXlO4tynloWp4+dGw/27J6sLactjMl6
++012idfDIyExNVzPPK53UnDTHhhhwR9/Q/I0HEhKC0Lq9eIxlvu3igujJGo/Hzd
SCd04TKOlHRaDLy4jC+ztEHDt8ZFE5aqAcj3vjQd4/w0Bu4fRBSN+y1aciSB3m5t
mFJSAUOTpDjM7A/hdABradVY0TA74KQs7xLgJXPVulbyO/wyP69OD8ogzcetAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIkPCEgJZopF2Iy4ZdhbLGiO0noIwHwYDVR0j
BBgwFoAUBo5cKBp36A9keUXDH5/zrdg2xr8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy
S2QvMC8wNjhFNUMyODFBNzdFODBGNjQ3OTQ1QzMxRjlGRjNBREQ4MzZDNkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA2OEU1QzI4MUE3N0U4MEY2
NDc5NDVDMzFGOUZGM0FERDgzNkM2QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8w
NjhFNUMyODFBNzdFODBGNjQ3OTQ1QzMxRjlGRjNBREQ4MzZDNkJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuzlKANeAOlYMthQcK8P/Yfw4lK766nvCncAUCeujJn97S1E1aN+qr5ktQ3zv
1P4Myvl6A3yZ2rqWgRi8Q2uf+YX/daNVsbr8zJFKZ6LLeef0sq0T2eFEx6qY1mS7
hDPafpoRnqyrsOoxAAixhpxqfajBcJ8s72feCrNQx0bNzV0g8pB2Ej78qQEZek5q
s/r7eyXK2HkyGnxwzh8vLzZV8ztBKUJFFZj0bcM6SX7K+T1MftOnSDeF4W6sHEBP
1+47YSNgIWHTmHC8FiZ0Oe3Fuys24BaYcM7BXXThqEgP6O5x5YufL5XCd+dIyPNU
JBjaegvxRvC0P9wGVVgPkH7q0Q==
-----END CERTIFICATE-----