Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/888F367D35D0302637BEF9594895A9727E9E36B6.mft
File:                     888F367D35D0302637BEF9594895A9727E9E36B6.mft (raw, json)
Hash identifier:          9Io/6wN0zhiL+/Qwn7dKl6NS1yxj3D/kCytUssUzFXQ=
Subject key identifier:   08:74:7F:30:A4:6F:AA:DC:25:5E:DD:E9:C7:7C:AF:CF:D3:83:09:FF
Authority key identifier: 88:8F:36:7D:35:D0:30:26:37:BE:F9:59:48:95:A9:72:7E:9E:36:B6
Certificate issuer:       /CN=888F367D35D0302637BEF9594895A9727E9E36B6
Certificate serial:       46BD780143AAE79E23AF860A32ED98B517FF6007
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/888F367D35D0302637BEF9594895A9727E9E36B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/888F367D35D0302637BEF9594895A9727E9E36B6.mft
Manifest number:          02CF
Signing time:             Sun 14 Apr 2024 16:30:58 +0000
Manifest this update:     Sun 14 Apr 2024 16:25:58 +0000
Manifest next update:     Mon 15 Apr 2024 20:03:58 +0000
Files and hashes:         1: 3137392e34392e3138302e302f32322d3234203d3e20323731313937.roa (hash: uJpGNI+Tve8/LQqtdETQLZrdfe+mCDoSpq7VQnt9wig=)
                          2: 888F367D35D0302637BEF9594895A9727E9E36B6.crl (hash: +hHpCg2bjOlgoppW0mfWwinHYY2DQ6A7sP0CM+7dVHw=)
                          3: 323830343a373763303a3a2f33322d3438203d3e20323731313937.roa (hash: s5Gwpd7nfOWz6xUbXjGSg5QzmdxIOiibwPh7eIF3paw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bd:78:01:43:aa:e7:9e:23:af:86:0a:32:ed:98:b5:17:ff:60:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888F367D35D0302637BEF9594895A9727E9E36B6
        Validity
            Not Before: Apr 14 16:25:58 2024 GMT
            Not After : Apr 15 20:03:58 2024 GMT
        Subject: CN=08747F30A46FAADC255EDDE9C77CAFCFD38309FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ab:78:8e:2c:8a:ea:6f:3c:94:7d:b9:e7:77:
                    45:91:d4:00:32:49:79:86:c3:b0:b1:75:b5:05:a6:
                    89:29:48:ea:d3:88:9d:7a:7d:60:4f:ad:10:6f:dc:
                    46:1e:b6:10:45:3a:4e:1e:86:92:ac:f4:c3:5d:30:
                    9d:f0:8d:77:e4:94:b9:9e:7d:e9:34:c5:bd:64:8c:
                    b5:02:d0:65:18:8b:6c:a3:ca:b2:1a:90:9e:d3:75:
                    09:b0:cb:e2:23:72:8c:98:cd:09:8d:48:fd:82:f6:
                    e9:c1:ed:f4:40:b3:21:e2:93:a6:b2:1c:8d:8e:0a:
                    2c:a7:6b:1b:ec:6f:96:f3:12:ac:b7:93:99:aa:1c:
                    fc:4c:7a:82:8e:50:06:b4:b4:24:ae:c7:dc:5f:a5:
                    98:9e:1a:28:63:2e:3c:b3:e9:3e:29:1c:fb:99:7f:
                    c3:a9:22:f8:44:39:09:40:52:fd:51:6f:f4:98:db:
                    11:6b:59:cc:fb:ef:48:a0:dc:04:81:36:87:c2:d8:
                    69:e3:45:fe:91:f7:60:23:89:3d:b3:66:a3:50:40:
                    72:fd:5f:aa:38:18:2f:83:0e:37:4c:0c:aa:c0:4e:
                    2d:f4:ce:ce:12:9a:27:52:8e:2b:03:79:18:97:ab:
                    bc:65:78:9c:e4:e1:9f:c2:17:f2:01:4e:84:5b:41:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:7F:30:A4:6F:AA:DC:25:5E:DD:E9:C7:7C:AF:CF:D3:83:09:FF
            X509v3 Authority Key Identifier:
                keyid:88:8F:36:7D:35:D0:30:26:37:BE:F9:59:48:95:A9:72:7E:9E:36:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/888F367D35D0302637BEF9594895A9727E9E36B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/888F367D35D0302637BEF9594895A9727E9E36B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/0/888F367D35D0302637BEF9594895A9727E9E36B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:42:67:ec:1d:e0:31:37:84:5d:41:b3:2f:0a:ad:d3:40:
         6b:8a:49:c0:8c:c5:1f:c7:ef:09:bc:e5:17:dd:0f:8f:ef:b0:
         f9:79:fc:7d:8e:df:1e:71:a4:12:3f:81:6d:8b:e7:8f:09:27:
         43:28:0f:32:c0:01:72:7d:18:06:b4:d8:53:9a:a4:4f:f5:f0:
         2e:4f:9b:8c:9c:12:54:5c:7b:9f:d9:9a:20:18:f3:82:8d:5c:
         7c:14:a7:50:13:ce:e2:44:6f:0e:5d:98:40:bb:b6:0e:3f:1e:
         a5:ac:99:eb:9f:99:d2:1c:79:bb:9b:b1:1e:94:38:e2:ce:5d:
         c5:38:4f:83:7b:0a:f1:86:d6:8d:d4:a0:5e:9d:6a:ad:fd:82:
         b4:54:00:74:61:75:7b:18:0e:2e:6b:c0:e9:20:60:f1:9a:66:
         3c:ad:53:11:7f:f8:a2:c2:01:2b:fb:70:db:d8:98:1f:40:a4:
         2c:50:08:af:5d:df:2d:01:c2:3d:6f:e0:34:c1:84:a4:9f:7a:
         73:6a:e2:0d:fe:09:0a:df:df:58:2a:16:b4:dc:b3:05:03:72:
         6f:13:b7:29:eb:6e:81:2e:23:95:65:5a:07:66:ed:14:a9:ca:
         9c:5e:34:c7:3f:e9:f6:a1:f4:95:f8:f7:f9:4d:4b:43:ec:6b:
         bf:07:b0:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURr14AUOq554jr4YKMu2YtRf/YAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg4RjM2N0QzNUQwMzAyNjM3QkVGOTU5NDg5NUE5NzI3
RTlFMzZCNjAeFw0yNDA0MTQxNjI1NThaFw0yNDA0MTUyMDAzNThaMDMxMTAvBgNV
BAMTKDA4NzQ3RjMwQTQ2RkFBREMyNTVFRERFOUM3N0NBRkNGRDM4MzA5RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq3iOLIrqbzyUfbnnd0WR1AAy
SXmGw7CxdbUFpokpSOrTiJ16fWBPrRBv3EYethBFOk4ehpKs9MNdMJ3wjXfklLme
fek0xb1kjLUC0GUYi2yjyrIakJ7TdQmwy+IjcoyYzQmNSP2C9unB7fRAsyHik6ay
HI2OCiynaxvsb5bzEqy3k5mqHPxMeoKOUAa0tCSux9xfpZieGihjLjyz6T4pHPuZ
f8OpIvhEOQlAUv1Rb/SY2xFrWcz770ig3ASBNofC2GnjRf6R92AjiT2zZqNQQHL9
X6o4GC+DDjdMDKrATi30zs4SmidSjisDeRiXq7xleJzk4Z/CF/IBToRbQZMXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCHR/MKRvqtwlXt3px3yvz9ODCf8wHwYDVR0j
BBgwFoAUiI82fTXQMCY3vvlZSJWpcn6eNrYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXN1OXZwQ3FVZlJqUTVZM0VMeFZQUmQ1OUxFNzRaOG9FTmRXYWpwN2J3
ajEvMC84ODhGMzY3RDM1RDAzMDI2MzdCRUY5NTk0ODk1QTk3MjdFOUUzNkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4OEYzNjdEMzVEMDMwMjYz
N0JFRjk1OTQ4OTVBOTcyN0U5RTM2QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXN1OXZwQ3FVZlJqUTVZM0VMeFZQUmQ1OUxFNzRaOG9FTmRXYWpwN2J3ajEvMC84
ODhGMzY3RDM1RDAzMDI2MzdCRUY5NTk0ODk1QTk3MjdFOUUzNkI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgqlCZ+wd4DE3hF1Bsy8KrdNAa4pJwIzFH8fvCbzlF90Pj++w+Xn8fY7fHnGk
Ej+BbYvnjwknQygPMsABcn0YBrTYU5qkT/XwLk+bjJwSVFx7n9maIBjzgo1cfBSn
UBPO4kRvDl2YQLu2Dj8epayZ65+Z0hx5u5uxHpQ44s5dxThPg3sK8YbWjdSgXp1q
rf2CtFQAdGF1exgOLmvA6SBg8ZpmPK1TEX/4osIBK/tw29iYH0CkLFAIr13fLQHC
PW/gNMGEpJ96c2riDf4JCt/fWCoWtNyzBQNybxO3KetugS4jlWVaB2btFKnKnF40
xz/p9qH0lfj3+U1LQ+xrvwewbw==
-----END CERTIFICATE-----