Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.mft
File:                     374FF28757655832E796473386AA89E3873C9674.mft (raw, json)
Hash identifier:          +YY4f4uVveSxkFuG3Dr0h1E3bxEQGoxXJPPxsOOni5Y=
Subject key identifier:   90:AA:11:32:C4:61:BF:62:6A:98:5C:6B:4D:85:46:6A:D1:62:73:9F
Authority key identifier: 37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74
Certificate issuer:       /CN=374FF28757655832E796473386AA89E3873C9674
Certificate serial:       49E44E1348611E40C4E1770D51D309269F9BD144
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.mft
Manifest number:          9C
Signing time:             Wed 10 Jan 2024 17:32:43 +0000
Manifest this update:     Wed 10 Jan 2024 17:27:43 +0000
Manifest next update:     Thu 11 Jan 2024 19:46:43 +0000
Files and hashes:         1: 323830343a363733633a3a2f33322d3435203d3e20323639363135.roa (hash: ImsxWE7a+aYta+oBNqkn1ftdS5b/317XrmE2RajVhaE=)
                          2: 374FF28757655832E796473386AA89E3873C9674.crl (hash: GKxf4pRizICHrZSKjjw1msqmFSTp3BuvodTUVRJ71bY=)
                          3: 34352e3138392e3232302e302f32322d3234203d3e20323639363135.roa (hash: w0E4UyB5ilcW6fGckU5232W2YI8FfCyHVUZO4snRIVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:4e:13:48:61:1e:40:c4:e1:77:0d:51:d3:09:26:9f:9b:d1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374FF28757655832E796473386AA89E3873C9674
        Validity
            Not Before: Jan 10 17:27:43 2024 GMT
            Not After : Jan 11 19:46:43 2024 GMT
        Subject: CN=90AA1132C461BF626A985C6B4D85466AD162739F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:d8:aa:67:cc:69:32:c0:59:f2:70:ef:16:
                    d3:98:30:3b:03:77:ad:b0:84:d3:fd:4c:09:58:e0:
                    85:f3:18:b5:66:bd:ba:5d:86:87:c2:16:63:98:51:
                    a5:f6:1f:6f:26:5f:85:c4:5a:32:bf:8b:68:56:d9:
                    be:73:a2:91:61:ad:e2:0c:c1:67:44:41:2b:83:70:
                    ca:c0:d0:9b:9e:a4:ae:00:f3:e4:fd:e8:ce:8a:29:
                    8f:5e:7e:da:db:2c:f4:5f:4d:d1:84:68:85:a7:ef:
                    8a:c7:42:d4:67:3a:41:07:61:e8:56:3e:ea:a0:c4:
                    2e:c8:65:18:90:47:0d:d0:37:c5:21:33:05:41:22:
                    42:81:50:a0:9f:ee:20:0a:a1:1c:af:c1:b6:96:7c:
                    1a:0b:82:9b:42:46:dd:16:a2:d6:13:5f:4d:53:55:
                    c6:47:54:ab:ac:e2:12:49:08:09:8f:00:7c:be:7a:
                    6c:72:4a:8e:33:9b:b2:da:de:e1:8c:1e:69:11:7e:
                    17:0e:3f:b3:b2:b3:5d:52:f7:69:f0:05:cb:c4:b5:
                    10:28:47:78:5c:18:4d:17:27:47:57:60:d5:76:0f:
                    8f:26:0f:02:47:45:9a:4c:ce:d4:5b:ad:02:82:bb:
                    58:43:e3:69:9e:aa:95:6d:40:85:d9:64:39:51:9d:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:11:32:C4:61:BF:62:6A:98:5C:6B:4D:85:46:6A:D1:62:73:9F
            X509v3 Authority Key Identifier:
                keyid:37:4F:F2:87:57:65:58:32:E7:96:47:33:86:AA:89:E3:87:3C:96:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374FF28757655832E796473386AA89E3873C9674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/374FF28757655832E796473386AA89E3873C9674.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:b2:2f:d3:16:0c:72:0f:cb:65:5d:27:92:f9:2c:2d:7f:
         61:2f:9e:a7:9a:80:86:c7:16:a8:0e:76:a0:00:c3:b7:f5:c1:
         1d:7b:75:39:45:03:a9:28:46:ff:86:db:ca:9a:1f:94:8c:6a:
         a1:bd:90:46:b5:b0:6d:9b:9a:1d:6b:f5:f2:96:b0:9a:93:b1:
         9a:2e:77:87:cf:98:ca:56:c0:b5:e9:cf:32:ec:2e:1b:e5:60:
         fb:3d:91:bd:45:93:e0:0a:e9:fe:77:66:58:7f:91:b4:d1:1d:
         f9:cf:1a:78:20:ad:45:fc:87:68:42:a8:e2:28:cb:54:83:61:
         e2:c6:06:79:a7:88:04:84:d8:ed:25:a4:62:c0:f5:65:df:07:
         22:ec:bc:9f:3d:13:84:15:58:83:25:9d:54:67:39:0c:e1:93:
         56:82:80:75:0f:11:00:67:9a:b5:d0:cd:48:31:29:2f:a4:34:
         07:6e:a9:c0:e5:78:5d:23:a5:6a:99:f6:b7:c5:74:05:3b:27:
         65:6a:9c:ca:87:4c:c5:e4:13:40:fa:12:9c:69:f9:6d:81:aa:
         03:84:17:8c:34:28:43:3a:4a:71:7a:84:4e:a4:33:7c:97:50:
         f2:e0:2d:9a:b7:6e:ff:d4:ed:71:ee:0b:36:ea:7d:5a:32:94:
         9d:02:a5:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSeROE0hhHkDE4XcNUdMJJp+b0UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0RkYyODc1NzY1NTgzMkU3OTY0NzMzODZBQTg5RTM4
NzNDOTY3NDAeFw0yNDAxMTAxNzI3NDNaFw0yNDAxMTExOTQ2NDNaMDMxMTAvBgNV
BAMTKDkwQUExMTMyQzQ2MUJGNjI2QTk4NUM2QjREODU0NjZBRDE2MjczOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWtiqZ8xpMsBZ8nDvFtOYMDsD
d62whNP9TAlY4IXzGLVmvbpdhofCFmOYUaX2H28mX4XEWjK/i2hW2b5zopFhreIM
wWdEQSuDcMrA0JuepK4A8+T96M6KKY9eftrbLPRfTdGEaIWn74rHQtRnOkEHYehW
PuqgxC7IZRiQRw3QN8UhMwVBIkKBUKCf7iAKoRyvwbaWfBoLgptCRt0WotYTX01T
VcZHVKus4hJJCAmPAHy+emxySo4zm7La3uGMHmkRfhcOP7Oys11S92nwBcvEtRAo
R3hcGE0XJ0dXYNV2D48mDwJHRZpMztRbrQKCu1hD42meqpVtQIXZZDlRneWFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkKoRMsRhv2JqmFxrTYVGatFic58wHwYDVR0j
BBgwFoAUN0/yh1dlWDLnlkczhqqJ44c8lnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldGa3ZrZkR3NkNncEJUWXM2akNVR2tadlhoeFMxM2V2VGoxZmJnRHVZ
UHcvMC8zNzRGRjI4NzU3NjU1ODMyRTc5NjQ3MzM4NkFBODlFMzg3M0M5Njc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM3NEZGMjg3NTc2NTU4MzJF
Nzk2NDczMzg2QUE4OUUzODczQzk2NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QldGa3ZrZkR3NkNncEJUWXM2akNVR2tadlhoeFMxM2V2VGoxZmJnRHVZUHcvMC8z
NzRGRjI4NzU3NjU1ODMyRTc5NjQ3MzM4NkFBODlFMzg3M0M5Njc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvNWyL9MWDHIPy2VdJ5L5LC1/YS+ep5qAhscWqA52oADDt/XBHXt1OUUDqShG
/4bbypoflIxqob2QRrWwbZuaHWv18pawmpOxmi53h8+YylbAtenPMuwuG+Vg+z2R
vUWT4Arp/ndmWH+RtNEd+c8aeCCtRfyHaEKo4ijLVINh4sYGeaeIBITY7SWkYsD1
Zd8HIuy8nz0ThBVYgyWdVGc5DOGTVoKAdQ8RAGeatdDNSDEpL6Q0B26pwOV4XSOl
apn2t8V0BTsnZWqcyodMxeQTQPoSnGn5bYGqA4QXjDQoQzpKcXqETqQzfJdQ8uAt
mrdu/9Ttce4LNup9WjKUnQKl8Q==
-----END CERTIFICATE-----