Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.mft
File:                     4FDD68DAA96562ED008416263830E4D1A7EC8827.mft (raw, json)
Hash identifier:          c+f1xoa2xwRX92jBJnZ3eC0N8L7c8P+FIcX6vo68Ffk=
Subject key identifier:   89:E8:08:30:BF:F6:58:CC:27:96:FD:C8:21:F3:7F:F6:9E:88:A3:40
Authority key identifier: 4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27
Certificate issuer:       /CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
Certificate serial:       30B81269E0BB44DC9384AB2CD5E0550C601A5B68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.mft
Manifest number:          02A1
Signing time:             Mon 15 Apr 2024 07:06:26 +0000
Manifest this update:     Mon 15 Apr 2024 07:01:26 +0000
Manifest next update:     Tue 16 Apr 2024 08:19:26 +0000
Files and hashes:         1: 34352e3233372e302e302f32322d3234203d3e20323638333330.roa (hash: p8pINdJbMX/oidwPitkoqG1uPSY+Szosj/bC0Owk6KQ=)
                          2: 323830343a346638303a3a2f33322d3438203d3e20323638333330.roa (hash: d27ooaLwDlTmr3i2HTp0ymxVuPHXIzV1tFuw9/01gNw=)
                          3: 4FDD68DAA96562ED008416263830E4D1A7EC8827.crl (hash: oenD5GU52KB7JZ2S2NpUf0Zm7oY5uZlDHiEz+ALL8N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b8:12:69:e0:bb:44:dc:93:84:ab:2c:d5:e0:55:0c:60:1a:5b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
        Validity
            Not Before: Apr 15 07:01:26 2024 GMT
            Not After : Apr 16 08:19:26 2024 GMT
        Subject: CN=89E80830BFF658CC2796FDC821F37FF69E88A340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:5a:98:94:40:cc:ee:63:01:89:45:39:17:
                    11:6b:17:8d:54:25:70:58:4a:b0:f2:1d:ee:11:de:
                    2f:ec:3a:4c:f0:b9:1f:f8:96:dc:0f:fa:32:82:9d:
                    0a:82:21:50:af:02:fc:9a:fe:1d:dd:99:4c:93:40:
                    f9:68:63:d8:3d:2d:be:22:1b:d0:e5:1f:24:bc:d3:
                    ac:13:dd:71:44:7f:22:df:fb:a3:63:0b:cd:47:b0:
                    b6:cf:18:48:6b:ae:32:3e:30:74:4c:0b:97:0c:02:
                    5e:cd:1a:80:11:34:ea:63:a1:4a:31:2e:3f:ad:53:
                    51:24:b9:0f:45:61:6c:69:49:16:3b:df:69:c1:33:
                    9c:da:77:6d:73:91:6c:b9:db:ac:d5:c2:7c:25:d5:
                    ba:35:b5:3a:2c:ff:bd:41:85:ac:0b:6e:46:2f:6f:
                    54:ef:15:43:6b:a8:fb:b0:1d:f2:e3:e6:9a:8b:b8:
                    d0:ab:87:61:1b:02:be:ce:f2:88:84:4e:0f:70:07:
                    97:94:92:2f:89:54:11:b3:e9:bf:67:bf:f3:69:7e:
                    15:12:70:00:71:4c:4e:24:a6:30:ef:62:95:db:af:
                    13:6d:93:29:c6:ae:4d:2e:37:0c:cc:9d:ce:4b:79:
                    10:41:29:af:39:f0:82:02:d8:eb:73:5c:99:c7:6a:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E8:08:30:BF:F6:58:CC:27:96:FD:C8:21:F3:7F:F6:9E:88:A3:40
            X509v3 Authority Key Identifier:
                keyid:4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:eb:20:f5:a1:d8:d2:f9:18:60:84:14:69:14:56:a9:db:
         3f:2a:1a:3c:9f:c8:d0:79:2e:d2:01:a0:66:0a:d6:5a:ff:91:
         0b:0d:7d:cf:03:75:8a:f5:52:9e:4a:46:ad:24:40:14:57:c3:
         9a:04:7a:45:6b:90:99:e4:01:31:fb:46:5c:1f:20:eb:78:be:
         38:dc:86:91:f3:67:83:ff:98:d7:2a:e1:63:00:a1:c3:a3:87:
         92:88:e8:f4:6a:c1:66:73:22:29:95:f3:18:f4:b3:93:95:b0:
         af:96:f0:f2:a3:ea:3f:3b:1d:3a:17:18:8a:7e:c3:cd:d9:50:
         e3:ae:9d:66:d9:c2:28:6c:5d:ff:86:a2:35:02:f2:8e:99:20:
         f3:47:fd:4f:b8:04:ca:58:18:d8:5a:66:02:71:6f:68:13:19:
         e0:47:02:6a:8c:cf:19:44:84:fa:7e:b5:dc:c6:51:a8:54:11:
         28:40:aa:29:1e:76:e5:08:ac:46:ca:0c:f5:8a:4e:82:1f:c1:
         10:11:9c:f5:f9:e8:da:4a:79:01:0c:51:8b:1d:8d:86:21:c4:
         18:88:eb:58:a8:5c:40:5f:5f:e2:a6:bf:76:74:b3:93:6f:63:
         0a:66:9d:9c:15:ca:99:3f:03:d3:ac:56:f1:60:b7:ce:fc:41:
         f1:c0:9a:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMLgSaeC7RNyThKss1eBVDGAaW2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZERDY4REFBOTY1NjJFRDAwODQxNjI2MzgzMEU0RDFB
N0VDODgyNzAeFw0yNDA0MTUwNzAxMjZaFw0yNDA0MTYwODE5MjZaMDMxMTAvBgNV
BAMTKDg5RTgwODMwQkZGNjU4Q0MyNzk2RkRDODIxRjM3RkY2OUU4OEEzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNFqYlEDM7mMBiUU5FxFrF41U
JXBYSrDyHe4R3i/sOkzwuR/4ltwP+jKCnQqCIVCvAvya/h3dmUyTQPloY9g9Lb4i
G9DlHyS806wT3XFEfyLf+6NjC81HsLbPGEhrrjI+MHRMC5cMAl7NGoARNOpjoUox
Lj+tU1EkuQ9FYWxpSRY732nBM5zad21zkWy526zVwnwl1bo1tTos/71BhawLbkYv
b1TvFUNrqPuwHfLj5pqLuNCrh2EbAr7O8oiETg9wB5eUki+JVBGz6b9nv/NpfhUS
cABxTE4kpjDvYpXbrxNtkynGrk0uNwzMnc5LeRBBKa858IIC2OtzXJnHaoIDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiegIML/2WMwnlv3IIfN/9p6Io0AwHwYDVR0j
BBgwFoAUT91o2qllYu0AhBYmODDk0afsiCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnN1dHNXaUFvR1J0VWZjakVHOGcyM05jTEtqYk1QVnJSZHhiR2tzanhH
TUsvMC80RkRENjhEQUE5NjU2MkVEMDA4NDE2MjYzODMwRTREMUE3RUM4ODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGREQ2OERBQTk2NTYyRUQw
MDg0MTYyNjM4MzBFNEQxQTdFQzg4MjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnN1dHNXaUFvR1J0VWZjakVHOGcyM05jTEtqYk1QVnJSZHhiR2tzanhHTUsvMC80
RkRENjhEQUE5NjU2MkVEMDA4NDE2MjYzODMwRTREMUE3RUM4ODI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsevrIPWh2NL5GGCEFGkUVqnbPyoaPJ/I0Hku0gGgZgrWWv+RCw19zwN1ivVS
nkpGrSRAFFfDmgR6RWuQmeQBMftGXB8g63i+ONyGkfNng/+Y1yrhYwChw6OHkojo
9GrBZnMiKZXzGPSzk5Wwr5bw8qPqPzsdOhcYin7DzdlQ466dZtnCKGxd/4aiNQLy
jpkg80f9T7gEylgY2FpmAnFvaBMZ4EcCaozPGUSE+n613MZRqFQRKECqKR525Qis
RsoM9YpOgh/BEBGc9fno2kp5AQxRix2NhiHEGIjrWKhcQF9f4qa/dnSzk29jCmad
nBXKmT8D06xW8WC3zvxB8cCaDg==
-----END CERTIFICATE-----