Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.mft
File:                     3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.mft (raw, json)
Hash identifier:          dbVxtr44nv7U/5vo5You2lKa/L5Q7BipXIZwz0qxCu0=
Subject key identifier:   A3:BA:C5:58:6F:0F:18:DF:76:27:B8:E9:AE:97:2C:E8:CA:BE:A9:4F
Authority key identifier: 3E:5F:BA:F8:1C:3A:51:F0:98:20:8C:27:66:BF:FC:34:98:DC:63:FF
Certificate issuer:       /CN=3E5FBAF81C3A51F098208C2766BFFC3498DC63FF
Certificate serial:       69065119E774950365B329009416074C0779FBB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.mft
Manifest number:          0198
Signing time:             Mon 15 Apr 2024 09:11:18 +0000
Manifest this update:     Mon 15 Apr 2024 09:06:18 +0000
Manifest next update:     Tue 16 Apr 2024 12:00:18 +0000
Files and hashes:         1: 3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.crl (hash: DGAY1vubXH5tMcgb3xQM37xrcENcY+6k/kzY7yhpi2c=)
                          2: 323830343a343962633a3a2f33322d313238203d3e20323637323030.roa (hash: 5RBsjHgagXQdhGngMB6F05h87k7HXMvk7A3fMi74zZQ=)
                          3: 34352e3233312e35362e302f32322d3332203d3e20323637323030.roa (hash: ejNpxwErJH83Z9U2NpWF7FD9W7Q3oadHYLkqIK+tjsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:06:51:19:e7:74:95:03:65:b3:29:00:94:16:07:4c:07:79:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5FBAF81C3A51F098208C2766BFFC3498DC63FF
        Validity
            Not Before: Apr 15 09:06:18 2024 GMT
            Not After : Apr 16 12:00:18 2024 GMT
        Subject: CN=A3BAC5586F0F18DF7627B8E9AE972CE8CABEA94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:59:3d:3f:1c:25:6f:5b:1a:cd:16:fe:ee:
                    e0:01:49:bb:53:12:47:74:5d:0c:50:c1:c0:e9:6c:
                    39:4a:b2:44:b2:f5:30:cb:5f:29:18:20:bb:b0:c5:
                    ea:69:db:32:a7:01:0c:83:4f:45:04:dd:13:ec:fb:
                    1d:36:4b:46:fc:36:a6:85:41:5e:af:75:5a:c3:10:
                    bc:d8:72:05:05:2d:3e:4b:cd:d4:a1:1c:1a:67:1e:
                    0b:74:db:fc:8f:08:c3:85:1a:50:cd:6c:76:22:0e:
                    89:3c:6c:84:b6:ac:27:91:25:2b:9c:bb:2e:b6:4b:
                    bc:d3:af:d3:4b:27:4e:c8:52:eb:79:f0:b5:14:9b:
                    d4:3d:8c:66:4f:c5:c5:e7:7b:a3:7f:8f:9a:4f:6d:
                    5b:76:6d:59:3e:03:cf:71:3e:95:04:3c:c9:7c:ac:
                    b6:95:c7:56:4a:08:13:c0:c3:21:54:43:7f:4f:ab:
                    4a:f1:82:d7:1b:50:7c:bc:77:70:52:5f:91:93:45:
                    8c:e0:09:5b:a4:d7:47:9a:a5:95:0b:b7:8a:ee:cc:
                    20:d1:26:ee:57:8d:1c:51:ae:c7:a7:8a:3e:85:0f:
                    4d:44:1e:bd:18:10:57:90:83:e8:2d:3a:50:c4:68:
                    18:98:fc:0a:86:d0:b1:9d:55:0a:71:4f:96:6e:2b:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:C5:58:6F:0F:18:DF:76:27:B8:E9:AE:97:2C:E8:CA:BE:A9:4F
            X509v3 Authority Key Identifier:
                keyid:3E:5F:BA:F8:1C:3A:51:F0:98:20:8C:27:66:BF:FC:34:98:DC:63:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/0/3E5FBAF81C3A51F098208C2766BFFC3498DC63FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:26:e2:27:2b:a6:99:2d:70:d1:bc:d2:a8:f2:c4:1c:b1:
         b7:b7:96:30:c0:46:ff:19:ff:f6:2a:42:d3:2a:c6:a3:56:40:
         0f:78:02:50:31:82:ac:ec:c9:95:3b:4f:b9:90:5a:a7:23:40:
         4d:82:1b:6b:43:2c:04:c3:68:a7:a5:63:a9:90:c2:23:7e:be:
         6c:44:b7:bf:12:d6:87:d8:66:45:ca:a5:da:6c:dd:de:f9:51:
         48:ba:20:bf:f5:48:3f:a4:e8:79:13:ca:fc:da:46:ee:f3:01:
         8f:77:12:3e:e9:2a:22:28:a0:63:d9:97:6a:dd:58:85:bf:e0:
         20:54:63:f1:01:f5:b9:bf:a3:08:3d:af:23:23:79:cb:56:2c:
         87:76:9c:78:32:0f:7a:6b:b0:6d:fe:ed:61:0b:ea:e6:6e:47:
         a1:cd:ed:61:fa:ad:27:8a:69:58:4e:f7:ca:97:8a:4d:83:09:
         96:44:79:bb:97:ed:06:75:0a:c4:1a:70:52:58:08:93:02:24:
         30:f4:29:72:ae:e9:84:da:1c:11:ae:80:dd:2b:1c:b9:d2:06:
         1f:8f:8d:2a:68:e9:df:0b:48:42:c3:bb:74:db:3d:eb:99:02:
         f6:84:14:03:a5:93:c4:84:97:07:fa:9f:1b:27:82:4b:d3:31:
         d7:23:ba:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaQZRGed0lQNlsykAlBYHTAd5+7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U1RkJBRjgxQzNBNTFGMDk4MjA4QzI3NjZCRkZDMzQ5
OERDNjNGRjAeFw0yNDA0MTUwOTA2MThaFw0yNDA0MTYxMjAwMThaMDMxMTAvBgNV
BAMTKEEzQkFDNTU4NkYwRjE4REY3NjI3QjhFOUFFOTcyQ0U4Q0FCRUE5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVv1k9Pxwlb1sazRb+7uABSbtT
Ekd0XQxQwcDpbDlKskSy9TDLXykYILuwxepp2zKnAQyDT0UE3RPs+x02S0b8NqaF
QV6vdVrDELzYcgUFLT5LzdShHBpnHgt02/yPCMOFGlDNbHYiDok8bIS2rCeRJSuc
uy62S7zTr9NLJ07IUut58LUUm9Q9jGZPxcXne6N/j5pPbVt2bVk+A89xPpUEPMl8
rLaVx1ZKCBPAwyFUQ39Pq0rxgtcbUHy8d3BSX5GTRYzgCVuk10eapZULt4ruzCDR
Ju5XjRxRrsenij6FD01EHr0YEFeQg+gtOlDEaBiY/AqG0LGdVQpxT5ZuKxefAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo7rFWG8PGN92J7jprpcs6Mq+qU8wHwYDVR0j
BBgwFoAUPl+6+Bw6UfCYIIwnZr/8NJjcY/8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk55YmtTMUhNZFp5ODJ0d0REd3BKNGlBWkM1NUUzMVVHU0d4VWtIdnVL
VXcvMC8zRTVGQkFGODFDM0E1MUYwOTgyMDhDMjc2NkJGRkMzNDk4REM2M0ZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFNUZCQUY4MUMzQTUxRjA5
ODIwOEMyNzY2QkZGQzM0OThEQzYzRkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qk55YmtTMUhNZFp5ODJ0d0REd3BKNGlBWkM1NUUzMVVHU0d4VWtIdnVLVXcvMC8z
RTVGQkFGODFDM0E1MUYwOTgyMDhDMjc2NkJGRkMzNDk4REM2M0ZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmKgm4icrppktcNG80qjyxByxt7eWMMBG/xn/9ipC0yrGo1ZAD3gCUDGCrOzJ
lTtPuZBapyNATYIba0MsBMNop6VjqZDCI36+bES3vxLWh9hmRcql2mzd3vlRSLog
v/VIP6ToeRPK/NpG7vMBj3cSPukqIiigY9mXat1Yhb/gIFRj8QH1ub+jCD2vIyN5
y1Ysh3aceDIPemuwbf7tYQvq5m5Hoc3tYfqtJ4ppWE73ypeKTYMJlkR5u5ftBnUK
xBpwUlgIkwIkMPQpcq7phNocEa6A3SscudIGH4+NKmjp3wtIQsO7dNs965kC9oQU
A6WTxISXB/qfGyeCS9Mx1yO6pA==
-----END CERTIFICATE-----