Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.mft
File:                     958CA8ED84492718A0B4CD9C04DA11CD173E4B17.mft (raw, json)
Hash identifier:          iBCakmp+Pq9h0SKa5PfdxwWRq6U7mcwVkf1Y2Ni2h3A=
Subject key identifier:   22:6B:BD:7E:12:D0:96:6D:CC:3A:39:22:3B:3B:62:0D:64:44:DD:2C
Authority key identifier: 95:8C:A8:ED:84:49:27:18:A0:B4:CD:9C:04:DA:11:CD:17:3E:4B:17
Certificate issuer:       /CN=958CA8ED84492718A0B4CD9C04DA11CD173E4B17
Certificate serial:       2AB551BF4B8E66F525FD64319D125F60DE59AF2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.mft
Manifest number:          020E
Signing time:             Sun 14 Apr 2024 23:49:04 +0000
Manifest this update:     Sun 14 Apr 2024 23:44:04 +0000
Manifest next update:     Tue 16 Apr 2024 01:52:04 +0000
Files and hashes:         1: 958CA8ED84492718A0B4CD9C04DA11CD173E4B17.crl (hash: Cy0cz/2l7bdZS7ioog3cL6JoZbLN1s7kY/IsTYlgZa0=)
                          2: 323830343a383161343a3a2f33322d3438203d3e20323732343637.roa (hash: 2ZzL7YFrBe9MEyDHF5XNOaZ1lPCC3Lh9AJhnn7Y7/7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:51:bf:4b:8e:66:f5:25:fd:64:31:9d:12:5f:60:de:59:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958CA8ED84492718A0B4CD9C04DA11CD173E4B17
        Validity
            Not Before: Apr 14 23:44:04 2024 GMT
            Not After : Apr 16 01:52:04 2024 GMT
        Subject: CN=226BBD7E12D0966DCC3A39223B3B620D6444DD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:a9:4d:8b:87:1c:36:a5:a5:f4:4b:d7:c8:
                    7a:dd:2a:c5:fc:f2:8e:93:a7:d0:09:f0:a9:56:05:
                    f2:ed:af:c5:16:f0:54:18:e7:d0:cd:ab:03:d2:97:
                    e3:dd:1a:7c:58:96:cd:a5:92:c0:58:d7:09:e1:a4:
                    78:72:ad:30:2c:57:72:47:2e:85:5d:52:13:f4:f0:
                    ec:5f:d9:71:37:a7:e1:0f:07:ca:9f:a6:90:a1:92:
                    0f:13:30:bf:cf:4c:05:04:32:94:8f:d0:22:98:b7:
                    f9:91:9c:47:f4:fd:9b:81:7b:75:b3:aa:f8:1d:c4:
                    d9:55:9f:fb:93:e8:43:33:1e:61:19:66:ec:c3:02:
                    28:4a:b0:fb:19:e7:d8:05:10:3d:50:7f:4d:89:8b:
                    3f:96:d1:c5:bb:e5:1b:2b:3b:e4:67:93:e6:66:c3:
                    1e:e7:fe:c1:3f:9d:44:de:fc:81:d3:7f:5b:1a:ff:
                    e2:25:d7:8d:3c:6d:ad:26:74:5b:51:d5:0c:88:be:
                    e8:1c:ac:20:d2:11:62:06:ff:a2:85:43:d1:3c:70:
                    c9:a5:9f:04:be:6b:cb:1e:2e:37:14:50:61:9d:21:
                    f1:ec:96:a7:75:5b:ed:6c:a5:6b:06:3c:8a:b4:1c:
                    95:47:ba:a1:22:59:32:34:b9:3e:6b:e7:45:2a:70:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:BD:7E:12:D0:96:6D:CC:3A:39:22:3B:3B:62:0D:64:44:DD:2C
            X509v3 Authority Key Identifier:
                keyid:95:8C:A8:ED:84:49:27:18:A0:B4:CD:9C:04:DA:11:CD:17:3E:4B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/958CA8ED84492718A0B4CD9C04DA11CD173E4B17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:77:da:c5:ff:bd:0e:da:63:05:73:5a:d8:07:e0:ba:a3:
         6e:2f:4a:e0:54:8e:8a:04:e3:65:0c:61:c4:e5:6c:14:3d:12:
         aa:6b:e8:97:99:e9:f9:52:a0:14:81:a2:7a:69:aa:37:41:e7:
         c0:cf:1c:95:12:cf:83:69:e1:e1:2c:2a:e0:eb:31:97:49:b5:
         54:28:2b:17:ad:a4:61:f9:b3:7b:0f:aa:4b:55:b7:79:6e:51:
         23:c3:a7:5e:88:72:3e:8a:b9:ad:af:bc:cc:7e:a6:d7:8c:4e:
         9b:27:0e:41:d3:f6:f1:09:f2:d8:8c:d2:52:1e:ae:8d:92:05:
         7a:2b:a7:ff:be:4c:32:ab:50:79:d3:c9:5e:51:06:14:10:a6:
         cb:82:82:71:76:f1:4f:41:44:4d:09:47:73:8d:52:0e:e0:fd:
         c7:58:99:90:dc:f0:cd:65:ae:4d:b9:a1:bf:d2:95:16:c4:ec:
         e8:4f:96:3a:22:80:16:2a:9b:ff:12:fd:37:25:c8:44:4d:43:
         ff:5d:4d:90:6d:01:e0:8d:eb:f0:2d:93:81:d6:27:1e:b3:45:
         eb:6e:2f:04:4a:f4:aa:94:96:16:63:dd:25:83:cd:b6:5a:4d:
         1a:df:8e:23:31:7c:39:a6:76:79:28:f3:65:28:d2:4a:61:e1:
         63:41:0f:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKrVRv0uOZvUl/WQxnRJfYN5ZryowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4Q0E4RUQ4NDQ5MjcxOEEwQjRDRDlDMDREQTExQ0Qx
NzNFNEIxNzAeFw0yNDA0MTQyMzQ0MDRaFw0yNDA0MTYwMTUyMDRaMDMxMTAvBgNV
BAMTKDIyNkJCRDdFMTJEMDk2NkRDQzNBMzkyMjNCM0I2MjBENjQ0NEREMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbKlNi4ccNqWl9EvXyHrdKsX8
8o6Tp9AJ8KlWBfLtr8UW8FQY59DNqwPSl+PdGnxYls2lksBY1wnhpHhyrTAsV3JH
LoVdUhP08Oxf2XE3p+EPB8qfppChkg8TML/PTAUEMpSP0CKYt/mRnEf0/ZuBe3Wz
qvgdxNlVn/uT6EMzHmEZZuzDAihKsPsZ59gFED1Qf02Jiz+W0cW75RsrO+Rnk+Zm
wx7n/sE/nUTe/IHTf1sa/+Il1408ba0mdFtR1QyIvugcrCDSEWIG/6KFQ9E8cMml
nwS+a8seLjcUUGGdIfHslqd1W+1spWsGPIq0HJVHuqEiWTI0uT5r50UqcPi/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUImu9fhLQlm3MOjkiOztiDWRE3SwwHwYDVR0j
BBgwFoAUlYyo7YRJJxigtM2cBNoRzRc+SxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVTam1CcW45eTg3aDZHaWJkNXp6M2tmWE5LV2VkOWRxd3c3Njl0UFU4
UVUvMC85NThDQThFRDg0NDkyNzE4QTBCNENEOUMwNERBMTFDRDE3M0U0QjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1OENBOEVEODQ0OTI3MThB
MEI0Q0Q5QzA0REExMUNEMTczRTRCMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXVTam1CcW45eTg3aDZHaWJkNXp6M2tmWE5LV2VkOWRxd3c3Njl0UFU4UVUvMC85
NThDQThFRDg0NDkyNzE4QTBCNENEOUMwNERBMTFDRDE3M0U0QjE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBd32sX/vQ7aYwVzWtgH4Lqjbi9K4FSOigTjZQxhxOVsFD0Sqmvol5np+VKg
FIGiemmqN0HnwM8clRLPg2nh4Swq4Osxl0m1VCgrF62kYfmzew+qS1W3eW5RI8On
XohyPoq5ra+8zH6m14xOmycOQdP28Qny2IzSUh6ujZIFeiun/75MMqtQedPJXlEG
FBCmy4KCcXbxT0FETQlHc41SDuD9x1iZkNzwzWWuTbmhv9KVFsTs6E+WOiKAFiqb
/xL9NyXIRE1D/11NkG0B4I3r8C2TgdYnHrNF624vBEr0qpSWFmPdJYPNtlpNGt+O
IzF8OaZ2eSjzZSjSSmHhY0EPMQ==
-----END CERTIFICATE-----