Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.mft
File:                     4F3EB243264337757AE7C38836C74B2C1E84AFB3.mft (raw, json)
Hash identifier:          Uf3IVFsjnlmirpDTp0a2WRkvdI9is4ztER1Z0majV/M=
Subject key identifier:   36:1C:4F:14:CC:08:CA:E5:2A:32:24:CC:75:4D:71:6E:77:AC:F0:FC
Authority key identifier: 4F:3E:B2:43:26:43:37:75:7A:E7:C3:88:36:C7:4B:2C:1E:84:AF:B3
Certificate issuer:       /CN=4F3EB243264337757AE7C38836C74B2C1E84AFB3
Certificate serial:       40BA807107D1F754BFBD1CA40316A4F3081DE569
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.mft
Manifest number:          28
Signing time:             Sun 14 Apr 2024 17:49:02 +0000
Manifest this update:     Sun 14 Apr 2024 17:44:02 +0000
Manifest next update:     Mon 15 Apr 2024 20:32:02 +0000
Files and hashes:         1: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: AmfzMfHRht2JouoglSpE0II5wza6zMBBklNXpxDnU28=)
                          2: 4F3EB243264337757AE7C38836C74B2C1E84AFB3.crl (hash: 4jSX0B5ajE8dAJ1tCGA45AhKzqBrVgwZ6varEXyYBrA=)
                          3: 34352e3138322e33322e302f32322d3233203d3e20323639323635.roa (hash: LMpz7hTFREat7ywiu5pPr7Gb1/jwgnbQxFzGso/s040=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ba:80:71:07:d1:f7:54:bf:bd:1c:a4:03:16:a4:f3:08:1d:e5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3EB243264337757AE7C38836C74B2C1E84AFB3
        Validity
            Not Before: Apr 14 17:44:02 2024 GMT
            Not After : Apr 15 20:32:02 2024 GMT
        Subject: CN=361C4F14CC08CAE52A3224CC754D716E77ACF0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:78:73:0c:0d:e7:14:8e:2b:f3:df:c3:36:
                    1b:8e:ba:5b:3d:85:4a:9b:f4:45:0b:e4:43:67:11:
                    15:fc:62:6a:5b:46:f7:78:2c:5a:b4:ae:0e:4c:aa:
                    cf:c3:21:50:bc:c4:20:eb:5f:5b:0a:93:49:f3:1d:
                    8a:b2:0f:71:30:c1:30:b9:45:3a:29:07:78:f8:a9:
                    28:63:f9:73:ec:0a:4b:80:ed:b0:0e:22:be:12:dd:
                    f2:fb:6f:00:d7:47:5c:bc:2f:fe:c7:7f:65:82:d7:
                    fd:96:9d:b2:f4:ce:10:31:c5:2e:58:78:f9:85:42:
                    c2:6f:5a:79:fc:95:67:ce:70:66:34:e5:d8:2a:a5:
                    b4:ac:e9:0e:1b:2f:f8:c2:b9:16:0d:e9:31:30:91:
                    5c:23:9c:9f:b2:9b:dc:3b:09:8c:92:cc:01:0e:c4:
                    a6:40:f8:89:48:61:65:6f:19:bc:b3:35:52:81:26:
                    50:9e:85:dd:63:e6:bc:41:a6:22:80:ea:ce:8a:4b:
                    c1:19:96:0d:d8:f3:c7:b0:4c:d8:e2:bf:fd:a9:ba:
                    e6:e1:11:09:ab:4a:cc:f6:dc:e4:c5:f0:c9:b1:ec:
                    34:82:f1:59:1c:34:f8:23:02:85:fe:7b:fd:cf:55:
                    2f:14:2c:b1:29:3c:18:2a:08:4e:1d:2b:8d:33:7f:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:4F:14:CC:08:CA:E5:2A:32:24:CC:75:4D:71:6E:77:AC:F0:FC
            X509v3 Authority Key Identifier:
                keyid:4F:3E:B2:43:26:43:37:75:7A:E7:C3:88:36:C7:4B:2C:1E:84:AF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/4F3EB243264337757AE7C38836C74B2C1E84AFB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:47:da:4a:f0:97:ef:0e:db:56:71:14:52:21:43:2f:86:
         89:4c:61:57:88:f7:32:e3:b5:24:69:5b:1c:6d:ae:df:e1:3c:
         37:b4:92:15:64:d2:fe:1c:cb:2d:ee:5c:a1:fa:fa:2b:e4:17:
         69:3d:63:8a:37:58:95:6a:72:e4:55:29:9b:9c:50:10:4d:a7:
         c1:0f:cb:e9:b4:81:b4:37:5c:f2:12:1f:d2:a1:69:b0:ef:0c:
         7f:4f:bb:6e:bc:d3:c0:11:32:86:9b:e6:ba:a2:24:7b:25:ea:
         68:e5:5e:d5:b7:bc:1e:ac:92:96:f8:f6:6a:00:94:ce:e6:2b:
         ab:1b:ba:b1:88:ff:20:a3:2b:63:fa:5c:20:cd:94:df:91:c5:
         5b:e1:66:c8:d7:bb:26:7c:f2:93:88:a5:86:1e:98:02:1b:1b:
         88:d0:4f:67:b4:8a:ca:df:1f:26:43:51:8f:74:97:89:72:8a:
         e7:76:49:2f:16:f4:11:4d:5f:1e:cf:38:e8:aa:f2:22:ad:81:
         44:14:08:e7:fe:89:37:fb:fb:4e:b6:1a:24:ea:46:9c:ff:a6:
         99:41:0c:75:d7:9f:d7:ac:10:0c:12:99:d3:53:22:ae:5f:84:
         6c:93:d2:d6:dc:06:1c:01:99:12:04:57:e0:ff:6f:6d:b4:5d:
         f4:2e:0e:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQLqAcQfR91S/vRykAxak8wgd5WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYzRUIyNDMyNjQzMzc3NTdBRTdDMzg4MzZDNzRCMkMx
RTg0QUZCMzAeFw0yNDA0MTQxNzQ0MDJaFw0yNDA0MTUyMDMyMDJaMDMxMTAvBgNV
BAMTKDM2MUM0RjE0Q0MwOENBRTUyQTMyMjRDQzc1NEQ3MTZFNzdBQ0YwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWnhzDA3nFI4r89/DNhuOuls9
hUqb9EUL5ENnERX8YmpbRvd4LFq0rg5Mqs/DIVC8xCDrX1sKk0nzHYqyD3EwwTC5
RTopB3j4qShj+XPsCkuA7bAOIr4S3fL7bwDXR1y8L/7Hf2WC1/2WnbL0zhAxxS5Y
ePmFQsJvWnn8lWfOcGY05dgqpbSs6Q4bL/jCuRYN6TEwkVwjnJ+ym9w7CYySzAEO
xKZA+IlIYWVvGbyzNVKBJlCehd1j5rxBpiKA6s6KS8EZlg3Y88ewTNjiv/2puubh
EQmrSsz23OTF8Mmx7DSC8VkcNPgjAoX+e/3PVS8ULLEpPBgqCE4dK40zf9j7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNhxPFMwIyuUqMiTMdU1xbnes8PwwHwYDVR0j
BBgwFoAUTz6yQyZDN3V658OINsdLLB6Er7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpWSFE2R3BtTUE0UGR3YWNDV0pFb2t4aFUxVlF6a3lwY3lYNlE5RTY2
SkYvMC80RjNFQjI0MzI2NDMzNzc1N0FFN0MzODgzNkM3NEIyQzFFODRBRkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGM0VCMjQzMjY0MzM3NzU3
QUU3QzM4ODM2Qzc0QjJDMUU4NEFGQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUpWSFE2R3BtTUE0UGR3YWNDV0pFb2t4aFUxVlF6a3lwY3lYNlE5RTY2SkYvMC80
RjNFQjI0MzI2NDMzNzc1N0FFN0MzODgzNkM3NEIyQzFFODRBRkIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+BH2krwl+8O21ZxFFIhQy+GiUxhV4j3MuO1JGlbHG2u3+E8N7SSFWTS/hzL
Le5cofr6K+QXaT1jijdYlWpy5FUpm5xQEE2nwQ/L6bSBtDdc8hIf0qFpsO8Mf0+7
brzTwBEyhpvmuqIkeyXqaOVe1be8HqySlvj2agCUzuYrqxu6sYj/IKMrY/pcIM2U
35HFW+FmyNe7Jnzyk4ilhh6YAhsbiNBPZ7SKyt8fJkNRj3SXiXKK53ZJLxb0EU1f
Hs846KryIq2BRBQI5/6JN/v7TrYaJOpGnP+mmUEMddef16wQDBKZ01Mirl+EbJPS
1twGHAGZEgRX4P9vbbRd9C4OXg==
-----END CERTIFICATE-----