Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.mft
File:                     A9A3C252799D2730C3442C567AFBA5F239A96E85.mft (raw, json)
Hash identifier:          Y3YpYOtJcsjM+2jXMXmV+G7Fb+39MOG6O+NwP2eAM4M=
Subject key identifier:   8D:39:38:44:C3:C4:C1:98:F0:5E:EB:C0:B6:32:4F:85:9D:26:CC:8D
Authority key identifier: A9:A3:C2:52:79:9D:27:30:C3:44:2C:56:7A:FB:A5:F2:39:A9:6E:85
Certificate issuer:       /CN=A9A3C252799D2730C3442C567AFBA5F239A96E85
Certificate serial:       18394FB45B720E27024EC2DB507343E7EB19197E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.mft
Manifest number:          0288
Signing time:             Sun 14 Apr 2024 22:31:35 +0000
Manifest this update:     Sun 14 Apr 2024 22:26:35 +0000
Manifest next update:     Tue 16 Apr 2024 01:31:35 +0000
Files and hashes:         1: A9A3C252799D2730C3442C567AFBA5F239A96E85.crl (hash: w+IyMa9RE/96PoUQFMv9w1Jq/q7EKpJZj5H317popQ0=)
                          2: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (hash: A+OziLx7XtDdnNhHkvCV1N2srHi3K8MGWcg4j8fOQbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:4f:b4:5b:72:0e:27:02:4e:c2:db:50:73:43:e7:eb:19:19:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A3C252799D2730C3442C567AFBA5F239A96E85
        Validity
            Not Before: Apr 14 22:26:35 2024 GMT
            Not After : Apr 16 01:31:35 2024 GMT
        Subject: CN=8D393844C3C4C198F05EEBC0B6324F859D26CC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:c8:23:29:33:c9:26:3f:fd:3b:55:0f:0d:
                    96:12:4d:3e:fc:ac:68:1a:84:f8:12:6b:9d:ab:26:
                    63:30:71:94:0b:64:cd:6c:3f:d7:f3:72:46:f7:a6:
                    c5:9b:40:c5:e6:95:b4:b4:8d:52:c7:e9:0e:5c:a4:
                    cd:0d:37:73:26:77:2a:4d:c0:a5:98:bd:e6:fa:ed:
                    43:34:74:92:e3:f1:17:ee:d7:ac:ba:50:36:d1:dd:
                    d1:b6:55:ca:fa:17:ce:48:e8:85:19:66:84:f3:f7:
                    03:9b:13:42:83:b4:11:58:d5:f7:54:a5:c0:f7:0b:
                    37:7d:57:f4:f6:b9:4f:62:9f:7b:2f:6e:be:84:58:
                    c0:b2:65:f0:10:c4:34:e1:63:e7:ce:97:99:9d:51:
                    ff:90:cd:3f:da:b8:78:46:ca:cc:6a:df:9e:04:1c:
                    27:09:7d:73:e4:fa:10:b2:c2:0a:9d:d5:6c:bc:f3:
                    3c:21:21:7e:27:59:5d:f9:ff:2e:f8:7e:b3:79:95:
                    5a:d8:35:77:33:40:a4:ca:f4:c8:7b:e9:78:54:5c:
                    e4:04:64:b9:8d:19:5c:06:4c:2a:5a:d3:da:16:df:
                    9f:cc:0e:4c:0f:c1:c2:1f:10:c3:fb:cb:ea:72:4b:
                    59:04:e3:62:d2:d6:eb:76:ba:a9:bf:d5:ca:9d:aa:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:38:44:C3:C4:C1:98:F0:5E:EB:C0:B6:32:4F:85:9D:26:CC:8D
            X509v3 Authority Key Identifier:
                keyid:A9:A3:C2:52:79:9D:27:30:C3:44:2C:56:7A:FB:A5:F2:39:A9:6E:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/A9A3C252799D2730C3442C567AFBA5F239A96E85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:a7:a5:38:3d:bf:6d:bf:27:91:e1:5a:60:7f:ab:17:cd:
         03:95:ff:8b:9a:e6:36:c0:1e:cc:b8:88:1b:1f:26:5a:8a:af:
         a7:81:d4:15:c9:70:99:31:7c:40:9d:66:3f:88:13:0b:1c:90:
         64:98:18:37:47:9d:9f:57:1e:81:b5:63:73:bf:ad:eb:7d:2f:
         15:7c:76:e0:85:58:f3:c5:20:36:ba:ba:51:f1:b8:08:97:36:
         b3:d4:d8:a8:ff:48:cf:3d:68:8a:cf:e1:b8:58:42:30:e4:b6:
         28:cf:b5:bd:43:e3:92:6a:8a:0e:ad:6d:2f:4e:24:0b:40:a6:
         2c:5b:61:4a:d8:bb:90:98:c8:0b:67:03:79:5a:88:b8:41:21:
         89:7a:7b:66:5b:d8:f2:a3:24:18:45:41:d3:59:d6:e0:55:5f:
         d9:5c:47:bf:78:a2:a9:48:c6:58:f7:5e:e3:9d:ed:fb:41:fd:
         3f:18:d3:8f:ee:8e:dd:29:ad:e1:35:ad:9a:45:cc:77:fb:83:
         77:ff:03:bc:c9:e9:6e:6e:2d:40:94:14:d2:ff:50:41:59:a4:
         d1:cf:2c:e0:bf:45:c9:c4:31:59:10:7b:c8:f5:36:98:33:e9:
         c0:90:b0:d1:3d:d1:d6:bd:f1:30:88:ed:ed:7c:97:96:0d:55:
         ca:fb:7c:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGDlPtFtyDicCTsLbUHND5+sZGX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlBM0MyNTI3OTlEMjczMEMzNDQyQzU2N0FGQkE1RjIz
OUE5NkU4NTAeFw0yNDA0MTQyMjI2MzVaFw0yNDA0MTYwMTMxMzVaMDMxMTAvBgNV
BAMTKDhEMzkzODQ0QzNDNEMxOThGMDVFRUJDMEI2MzI0Rjg1OUQyNkNDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fcgjKTPJJj/9O1UPDZYSTT78
rGgahPgSa52rJmMwcZQLZM1sP9fzckb3psWbQMXmlbS0jVLH6Q5cpM0NN3MmdypN
wKWYveb67UM0dJLj8Rfu16y6UDbR3dG2Vcr6F85I6IUZZoTz9wObE0KDtBFY1fdU
pcD3Czd9V/T2uU9in3svbr6EWMCyZfAQxDThY+fOl5mdUf+QzT/auHhGysxq354E
HCcJfXPk+hCywgqd1Wy88zwhIX4nWV35/y74frN5lVrYNXczQKTK9Mh76XhUXOQE
ZLmNGVwGTCpa09oW35/MDkwPwcIfEMP7y+pyS1kE42LS1ut2uqm/1cqdqjLbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjTk4RMPEwZjwXuvAtjJPhZ0mzI0wHwYDVR0j
BBgwFoAUqaPCUnmdJzDDRCxWevul8jmpboUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6
azcvMC9BOUEzQzI1Mjc5OUQyNzMwQzM0NDJDNTY3QUZCQTVGMjM5QTk2RTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5QTNDMjUyNzk5RDI3MzBD
MzQ0MkM1NjdBRkJBNUYyMzlBOTZFODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMC9B
OUEzQzI1Mjc5OUQyNzMwQzM0NDJDNTY3QUZCQTVGMjM5QTk2RTg1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApESnpTg9v22/J5HhWmB/qxfNA5X/i5rmNsAezLiIGx8mWoqvp4HUFclwmTF8
QJ1mP4gTCxyQZJgYN0edn1cegbVjc7+t630vFXx24IVY88UgNrq6UfG4CJc2s9TY
qP9Izz1ois/huFhCMOS2KM+1vUPjkmqKDq1tL04kC0CmLFthSti7kJjIC2cDeVqI
uEEhiXp7ZlvY8qMkGEVB01nW4FVf2VxHv3iiqUjGWPde453t+0H9PxjTj+6O3Smt
4TWtmkXMd/uDd/8DvMnpbm4tQJQU0v9QQVmk0c8s4L9FycQxWRB7yPU2mDPpwJCw
0T3R1r3xMIjt7XyXlg1Vyvt8SA==
-----END CERTIFICATE-----