Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.mft
File:                     3002C27FCE88C3AB86739D98FD94DA42E356CAE1.mft (raw, json)
Hash identifier:          mdycqQCXDfYTzaGxVLhnp9K5OH4s5m0P7bY2E35776s=
Subject key identifier:   87:8D:5F:07:4F:A0:12:2A:8E:24:C3:68:AA:E1:83:89:AA:8A:DC:26
Authority key identifier: 30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1
Certificate issuer:       /CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
Certificate serial:       663CB00CD4ECD71A9519532FFB05F2A328734EB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.mft
Manifest number:          1C
Signing time:             Sat 30 Dec 2023 07:40:22 +0000
Manifest this update:     Sat 30 Dec 2023 07:35:22 +0000
Manifest next update:     Sun 31 Dec 2023 11:27:22 +0000
Files and hashes:         1: 323830343a373033383a3a2f33322d313238203d3e20323730373133.roa (hash: WJckauDGfnXmWZqAsfLPYDAyjiEPmjTLd/5+N2VuvFI=)
                          2: 3138392e3132372e3137362e302f32322d3332203d3e20323730373133.roa (hash: J8LzCcDhYcAtc5AoahqiVi9nKHNcyJhigNMuRPVq8tY=)
                          3: 3002C27FCE88C3AB86739D98FD94DA42E356CAE1.crl (hash: 2/mrVM4j4EOYNXEDZtpwdENrB/CRM+y7AQoGrd7yTWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3c:b0:0c:d4:ec:d7:1a:95:19:53:2f:fb:05:f2:a3:28:73:4e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
        Validity
            Not Before: Dec 30 07:35:22 2023 GMT
            Not After : Dec 31 11:27:22 2023 GMT
        Subject: CN=878D5F074FA0122A8E24C368AAE18389AA8ADC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:af:5d:e9:8e:70:75:86:65:29:90:01:5e:
                    ec:52:8b:53:67:57:ed:cb:54:6b:d3:82:05:58:01:
                    e8:24:7e:df:33:14:da:7d:f0:f4:41:2e:44:e9:1b:
                    32:3b:28:7d:d7:75:9e:5c:e3:87:3c:1a:2a:a3:ac:
                    3e:28:b7:8d:d1:db:73:38:fc:28:69:3d:26:32:23:
                    0c:70:42:39:84:1a:fc:f1:27:2e:d8:2d:9e:9f:98:
                    40:8b:4a:6c:5f:44:3f:d4:09:4f:3e:9d:02:7f:59:
                    ab:21:7c:88:ed:f1:df:fb:06:87:d4:c7:c1:f3:ad:
                    0b:f1:3d:c9:54:fa:be:8c:da:ec:58:59:6e:69:d1:
                    41:1f:7f:38:65:08:8c:d0:96:21:fb:9a:9b:b2:53:
                    1e:21:ed:0f:a3:4d:01:b4:06:94:fe:13:05:a7:56:
                    30:2d:ed:40:19:74:91:f7:8e:49:d1:9f:fa:3b:be:
                    43:3f:13:d4:cd:2a:f7:52:d5:c7:22:c7:2d:e8:13:
                    6a:89:94:b3:0e:f8:8f:a7:de:9c:67:e7:c6:da:35:
                    53:f2:a2:66:c8:c0:8a:7a:b4:11:86:2b:18:ef:83:
                    03:81:d3:84:a9:84:24:94:6e:b5:0f:c1:ee:be:e5:
                    37:d0:a2:bc:7f:af:0b:59:e9:99:05:c0:bb:4c:ec:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:5F:07:4F:A0:12:2A:8E:24:C3:68:AA:E1:83:89:AA:8A:DC:26
            X509v3 Authority Key Identifier:
                keyid:30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:5b:32:a2:dc:9c:58:d0:a8:5f:5c:7f:97:a8:cb:05:35:
         35:56:3b:e5:dc:a5:a2:5b:ed:06:17:b3:9e:ef:23:29:e7:f3:
         04:9c:dd:42:3e:e1:97:18:31:07:86:bb:c1:bd:04:21:f9:de:
         10:e4:53:6a:f5:0b:b1:0d:44:5d:d0:cf:de:da:32:2f:b9:ff:
         82:64:77:51:d3:5f:6a:49:ea:45:85:2b:eb:a0:e5:9a:b1:f2:
         8e:cb:ef:c7:08:09:33:19:64:fa:76:a0:c4:a9:4b:d7:b0:c5:
         be:3e:ed:64:2a:c8:1b:6e:f7:b7:b8:a7:c8:0f:d8:a9:58:40:
         f4:96:92:2d:25:52:36:bd:41:20:a4:1d:7f:9c:78:3b:6a:e0:
         04:26:f3:e7:88:2e:6d:7f:b9:10:64:58:ae:64:58:4d:7b:52:
         39:8b:65:97:a7:9b:76:85:b7:21:65:60:80:4b:9f:30:f4:8d:
         4c:ab:8d:68:82:6f:42:71:8c:11:00:a1:ea:f6:4e:de:dc:cd:
         83:22:73:17:05:2e:f5:38:12:14:90:0d:bf:9f:ab:4c:a7:74:
         11:42:30:b8:c8:1e:78:9e:cb:0e:18:fe:b1:9b:72:8a:89:14:
         ef:5c:39:e3:a9:a1:63:c2:b9:98:5b:0b:2a:61:4e:a3:3b:da:
         8d:9b:36:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZjywDNTs1xqVGVMv+wXyoyhzTrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwMkMyN0ZDRTg4QzNBQjg2NzM5RDk4RkQ5NERBNDJF
MzU2Q0FFMTAeFw0yMzEyMzAwNzM1MjJaFw0yMzEyMzExMTI3MjJaMDMxMTAvBgNV
BAMTKDg3OEQ1RjA3NEZBMDEyMkE4RTI0QzM2OEFBRTE4Mzg5QUE4QURDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRq9d6Y5wdYZlKZABXuxSi1Nn
V+3LVGvTggVYAegkft8zFNp98PRBLkTpGzI7KH3XdZ5c44c8GiqjrD4ot43R23M4
/ChpPSYyIwxwQjmEGvzxJy7YLZ6fmECLSmxfRD/UCU8+nQJ/WashfIjt8d/7BofU
x8HzrQvxPclU+r6M2uxYWW5p0UEffzhlCIzQliH7mpuyUx4h7Q+jTQG0BpT+EwWn
VjAt7UAZdJH3jknRn/o7vkM/E9TNKvdS1ccixy3oE2qJlLMO+I+n3pxn58baNVPy
ombIwIp6tBGGKxjvgwOB04SphCSUbrUPwe6+5TfQorx/rwtZ6ZkFwLtM7NlDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUh41fB0+gEiqOJMNoquGDiaqK3CYwHwYDVR0j
BBgwFoAUMALCf86Iw6uGc52Y/ZTaQuNWyuEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhpdVE2SHpaZVNWdE5yZzlUb1M1YWk2Z0tEdmFhYUFpTGRRa0V3UDE2
Mm0vMC8zMDAyQzI3RkNFODhDM0FCODY3MzlEOThGRDk0REE0MkUzNTZDQUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMDJDMjdGQ0U4OEMzQUI4
NjczOUQ5OEZEOTREQTQyRTM1NkNBRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjhpdVE2SHpaZVNWdE5yZzlUb1M1YWk2Z0tEdmFhYUFpTGRRa0V3UDE2Mm0vMC8z
MDAyQzI3RkNFODhDM0FCODY3MzlEOThGRDk0REE0MkUzNTZDQUUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHd1bMqLcnFjQqF9cf5eoywU1NVY75dylolvtBheznu8jKefzBJzdQj7hlxgx
B4a7wb0EIfneEORTavULsQ1EXdDP3toyL7n/gmR3UdNfaknqRYUr66DlmrHyjsvv
xwgJMxlk+nagxKlL17DFvj7tZCrIG273t7inyA/YqVhA9JaSLSVSNr1BIKQdf5x4
O2rgBCbz54gubX+5EGRYrmRYTXtSOYtll6ebdoW3IWVggEufMPSNTKuNaIJvQnGM
EQCh6vZO3tzNgyJzFwUu9TgSFJANv5+rTKd0EUIwuMgeeJ7LDhj+sZtyiokU71w5
46mhY8K5mFsLKmFOozvajZs2iQ==
-----END CERTIFICATE-----