Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft
File:                     7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft (raw, json)
Hash identifier:          p0tz/7URv25a1GzXTmeoT0L6Zaii6Xc/QfOxFmW29Y8=
Subject key identifier:   4C:2F:2B:A7:45:7A:C7:A9:23:7D:08:81:CC:C5:81:B8:A1:88:97:4A
Authority key identifier: 7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Certificate issuer:       /CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Certificate serial:       3D101DBDFA9E97CFF63729898C14B96038656C97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft
Manifest number:          E4
Signing time:             Sun 14 Apr 2024 19:58:14 +0000
Manifest this update:     Sun 14 Apr 2024 19:53:14 +0000
Manifest next update:     Mon 15 Apr 2024 22:58:14 +0000
Files and hashes:         1: 7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl (hash: Xb1OANhZqRaT6hqZC/RdGI4Cteu6L0lC7S+Z/xlwyKE=)
                          2: 34352e372e3231382e302f32342d3234203d3e20323732363730.roa (hash: ybjLnNT58SYy+i7zNk7OZ7MskD27Vk7/R/ObLfKxj+E=)
                          3: 34352e372e3231392e302f32342d3234203d3e20323636363139.roa (hash: JdaImlgflJbgsxKui2j0+13UI5UpGbUFb7yaZ4psnto=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:10:1d:bd:fa:9e:97:cf:f6:37:29:89:8c:14:b9:60:38:65:6c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
        Validity
            Not Before: Apr 14 19:53:14 2024 GMT
            Not After : Apr 15 22:58:14 2024 GMT
        Subject: CN=4C2F2BA7457AC7A9237D0881CCC581B8A188974A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:5d:3a:08:26:54:b5:cf:3e:5e:0d:be:dc:
                    93:b1:e0:0b:24:3d:00:1d:04:f9:ea:39:ef:26:84:
                    0a:bf:cb:6f:c3:fc:97:68:7d:30:5d:6c:21:58:14:
                    28:1e:53:46:d9:30:9e:9d:db:f2:a5:9e:52:95:c9:
                    8f:b9:91:a4:a3:d3:ca:55:cc:aa:10:ee:f3:bd:57:
                    79:e7:4b:d3:36:2d:e0:92:f1:63:2d:47:8f:d5:f2:
                    cf:c1:a1:43:3f:e0:4b:8c:06:17:2b:78:d8:26:f7:
                    5d:b1:6a:29:6f:47:b7:38:ab:c1:9d:71:43:22:0f:
                    7f:b2:8d:ac:c1:a7:5b:9a:95:ed:11:b5:24:bd:ff:
                    0f:b3:ee:63:59:49:17:36:91:09:92:62:c1:ea:17:
                    ee:31:c4:ef:80:5f:00:ae:ed:f4:9d:b6:5e:69:46:
                    d4:6c:9d:bd:03:da:a4:7d:f1:6b:ef:94:1f:f4:10:
                    57:6a:db:0b:f5:f4:5b:cd:58:6f:02:5c:12:ff:c1:
                    ef:3c:35:20:07:f8:93:1b:4e:87:93:f0:fb:cf:7e:
                    4a:21:3e:b5:83:af:55:69:e4:07:43:d8:e3:14:fc:
                    31:fe:dc:7a:c7:5e:ca:a5:af:2a:c8:33:a2:46:1d:
                    a0:0b:73:cd:a4:65:51:3a:35:64:2b:32:0a:d1:20:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:2B:A7:45:7A:C7:A9:23:7D:08:81:CC:C5:81:B8:A1:88:97:4A
            X509v3 Authority Key Identifier:
                keyid:7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:36:ab:42:f8:4e:e9:49:70:b5:15:50:91:61:44:71:58:
         89:ad:16:72:25:72:fa:7a:7f:36:a9:b4:07:8c:9d:f2:b4:db:
         f9:94:1a:43:1b:19:6f:2e:72:9a:1b:c7:17:a3:4d:30:49:85:
         b3:f7:da:9b:3e:9d:f8:a3:81:f4:1f:e0:9a:54:9d:83:a6:66:
         0c:7e:2a:bc:80:09:a5:a6:72:17:97:a8:51:91:3d:49:8d:0d:
         9f:73:7d:c9:a6:82:79:45:a7:6d:79:f0:e8:1a:68:30:e1:a4:
         f1:2a:37:ed:ac:1d:e2:24:81:76:36:bf:95:21:a2:b8:d7:29:
         40:5b:1f:0a:4d:2d:b9:d4:6f:90:b1:50:aa:85:8d:b3:52:b2:
         11:c6:b8:d0:60:af:40:f9:92:dd:f9:0a:79:c8:38:83:e1:72:
         69:8c:c0:a2:21:a9:eb:8e:24:e7:c3:38:6c:29:0d:7b:9e:f3:
         e6:cb:3c:d6:19:57:49:0c:7b:46:cc:37:4d:2f:30:3a:4e:e5:
         6b:0c:34:c6:85:c8:93:b7:29:87:17:9b:87:c2:27:4c:95:7c:
         6f:2a:c3:a2:00:76:6e:15:d1:96:2f:4d:23:98:af:1d:e3:8f:
         aa:5e:fd:30:c3:7a:a0:3a:80:94:00:08:5c:1a:74:1c:3d:f9:
         96:22:05:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPRAdvfqel8/2NymJjBS5YDhlbJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFNTcyRTY1RjNCREMzREQ1Nzg2QkM5NjNBQUIyRTJE
MUUzNUM0NzAeFw0yNDA0MTQxOTUzMTRaFw0yNDA0MTUyMjU4MTRaMDMxMTAvBgNV
BAMTKDRDMkYyQkE3NDU3QUM3QTkyMzdEMDg4MUNDQzU4MUI4QTE4ODk3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLV06CCZUtc8+Xg2+3JOx4Ask
PQAdBPnqOe8mhAq/y2/D/JdofTBdbCFYFCgeU0bZMJ6d2/KlnlKVyY+5kaSj08pV
zKoQ7vO9V3nnS9M2LeCS8WMtR4/V8s/BoUM/4EuMBhcreNgm912xailvR7c4q8Gd
cUMiD3+yjazBp1uale0RtSS9/w+z7mNZSRc2kQmSYsHqF+4xxO+AXwCu7fSdtl5p
RtRsnb0D2qR98WvvlB/0EFdq2wv19FvNWG8CXBL/we88NSAH+JMbToeT8PvPfkoh
PrWDr1Vp5AdD2OMU/DH+3HrHXsqlryrIM6JGHaALc82kZVE6NWQrMgrRIEKPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTC8rp0V6x6kjfQiBzMWBuKGIl0owHwYDVR0j
BBgwFoAUfOVy5l873D3VeGvJY6qy4tHjXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4
MlYvMC83Q0U1NzJFNjVGM0JEQzNERDU3ODZCQzk2M0FBQjJFMkQxRTM1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDRTU3MkU2NUYzQkRDM0RE
NTc4NkJDOTYzQUFCMkUyRDFFMzVDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4MlYvMC83
Q0U1NzJFNjVGM0JEQzNERDU3ODZCQzk2M0FBQjJFMkQxRTM1QzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdE42q0L4TulJcLUVUJFhRHFYia0WciVy+np/Nqm0B4yd8rTb+ZQaQxsZby5y
mhvHF6NNMEmFs/famz6d+KOB9B/gmlSdg6ZmDH4qvIAJpaZyF5eoUZE9SY0Nn3N9
yaaCeUWnbXnw6BpoMOGk8So37awd4iSBdja/lSGiuNcpQFsfCk0tudRvkLFQqoWN
s1KyEca40GCvQPmS3fkKecg4g+FyaYzAoiGp644k58M4bCkNe57z5ss81hlXSQx7
Rsw3TS8wOk7laww0xoXIk7cphxebh8InTJV8byrDogB2bhXRli9NI5ivHeOPql79
MMN6oDqAlAAIXBp0HD35liIFXQ==
-----END CERTIFICATE-----