Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.mft
File:                     52F8111BF509CE4749E50167E62D9A46C4581780.mft (raw, json)
Hash identifier:          hYtJtOA58HsTNYmbRond6DWeq7OsoFAr+T3mOC3Vkro=
Subject key identifier:   CB:58:54:FD:CB:5E:36:96:54:BA:F7:3A:C2:4E:7C:58:28:36:23:13
Authority key identifier: 52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80
Certificate issuer:       /CN=52F8111BF509CE4749E50167E62D9A46C4581780
Certificate serial:       29FF1034FE270E3D699E7D2A4BA67C46C9A53BFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.mft
Manifest number:          0330
Signing time:             Mon 15 Apr 2024 02:23:31 +0000
Manifest this update:     Mon 15 Apr 2024 02:18:31 +0000
Manifest next update:     Tue 16 Apr 2024 04:17:31 +0000
Files and hashes:         1: 52F8111BF509CE4749E50167E62D9A46C4581780.crl (hash: 63ZPfQ308n2+YQEVYafuJ35yTG7PkKFVLZ2Ud4Pu9UY=)
                          2: 323830343a343432303a3a2f33322d3438203d3e20323637363034.roa (hash: /UB39gJFUX3X2kkbRWrPzBVpuRooXNFgZ2H7+6kH1aI=)
                          3: 34352e37312e3130342e302f32332d3234203d3e20323637363034.roa (hash: aaNETGDAYWbsjgTf6NnH0VzuF/tZBC1jj/q26Q6omJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ff:10:34:fe:27:0e:3d:69:9e:7d:2a:4b:a6:7c:46:c9:a5:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F8111BF509CE4749E50167E62D9A46C4581780
        Validity
            Not Before: Apr 15 02:18:31 2024 GMT
            Not After : Apr 16 04:17:31 2024 GMT
        Subject: CN=CB5854FDCB5E369654BAF73AC24E7C5828362313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cc:1b:8d:37:61:e9:18:1f:76:12:f3:64:92:
                    51:69:f6:59:7f:24:ae:73:18:09:b0:4d:07:6b:dd:
                    e0:83:98:b2:dd:aa:b7:65:4f:1f:d0:09:d7:4c:30:
                    a0:be:5a:66:c9:b4:f6:3d:98:bb:0a:be:09:d3:00:
                    8c:b0:a3:a1:7a:e3:c8:32:04:33:33:09:be:ff:60:
                    60:25:ba:5e:67:e2:62:e8:fa:b5:06:49:8e:5f:05:
                    43:64:0c:cd:0b:73:be:85:08:55:d7:4d:b8:cc:c5:
                    6b:d8:95:63:e8:ed:4a:bf:d0:e0:9c:01:0a:87:ad:
                    56:72:e2:08:d2:90:31:a1:7f:9a:02:31:34:f6:c0:
                    ad:d8:ae:67:d5:df:3f:e6:93:fe:a6:f2:63:8e:50:
                    9d:d1:f1:b2:1a:31:85:eb:2f:dc:c1:3e:e3:2a:89:
                    2c:47:26:2c:81:52:51:35:22:9a:bf:ee:0b:7c:ad:
                    75:62:75:79:56:b0:cd:dd:e4:1a:25:5f:7b:7b:fa:
                    10:9e:42:c6:b2:1a:7c:0e:a6:30:7a:3b:88:9e:19:
                    d6:28:59:c8:70:a2:8f:f2:0c:d7:a4:f5:3f:16:99:
                    0a:30:bb:e2:88:fd:70:3f:58:5c:3f:9f:51:65:88:
                    69:36:0f:c9:b5:91:b1:fb:eb:16:31:c1:76:e0:e6:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:54:FD:CB:5E:36:96:54:BA:F7:3A:C2:4E:7C:58:28:36:23:13
            X509v3 Authority Key Identifier:
                keyid:52:F8:11:1B:F5:09:CE:47:49:E5:01:67:E6:2D:9A:46:C4:58:17:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F8111BF509CE4749E50167E62D9A46C4581780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJuKfhS9a4erZEpGVrtYZMtX2hwAurQpN8MiYr7QZrJ3/0/52F8111BF509CE4749E50167E62D9A46C4581780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:86:31:e7:9d:ff:99:68:70:31:f6:f0:4a:09:f3:a0:dd:
         6f:cb:e4:0d:03:0f:fa:d4:b3:9e:68:b4:cb:49:0e:40:cd:14:
         f0:3c:71:d7:9c:f8:96:09:b2:3f:71:25:33:77:ed:4a:09:18:
         f1:79:dd:96:24:36:aa:ea:19:8f:31:19:b2:b1:d2:cd:58:ba:
         47:79:a8:62:c7:ef:7c:5b:63:8e:f7:2f:62:5b:17:6b:5b:a1:
         1b:2a:31:20:d4:46:b9:9c:5f:c3:50:f4:b9:1f:c2:a8:8d:01:
         8e:6a:bb:58:c0:1c:a4:e2:ae:23:02:7f:b1:83:29:cb:7a:8a:
         40:fa:2d:7a:2b:96:4c:8e:78:57:d6:6e:8c:f4:87:18:03:32:
         80:b2:f2:1d:50:d5:6b:a4:17:bf:1b:1b:b6:08:6f:c1:8b:6f:
         62:70:bf:b9:56:97:cc:bc:fa:e0:03:32:9d:b8:23:be:c3:b8:
         3c:cc:b6:10:6c:a3:d6:cd:34:40:62:7b:2b:a2:a6:60:8c:23:
         1c:5a:e6:f2:27:36:4e:f9:a6:64:c8:59:76:75:8c:23:b4:73:
         a7:b3:da:27:9d:a2:5e:d1:4a:40:16:60:dd:96:56:95:a3:e6:
         8e:1b:03:62:c1:f9:ab:da:98:35:70:ca:ae:24:2e:96:b2:e0:
         0b:b6:f9:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKf8QNP4nDj1pnn0qS6Z8RsmlO/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGODExMUJGNTA5Q0U0NzQ5RTUwMTY3RTYyRDlBNDZD
NDU4MTc4MDAeFw0yNDA0MTUwMjE4MzFaFw0yNDA0MTYwNDE3MzFaMDMxMTAvBgNV
BAMTKENCNTg1NEZEQ0I1RTM2OTY1NEJBRjczQUMyNEU3QzU4MjgzNjIzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2zBuNN2HpGB92EvNkklFp9ll/
JK5zGAmwTQdr3eCDmLLdqrdlTx/QCddMMKC+WmbJtPY9mLsKvgnTAIywo6F648gy
BDMzCb7/YGAlul5n4mLo+rUGSY5fBUNkDM0Lc76FCFXXTbjMxWvYlWPo7Uq/0OCc
AQqHrVZy4gjSkDGhf5oCMTT2wK3YrmfV3z/mk/6m8mOOUJ3R8bIaMYXrL9zBPuMq
iSxHJiyBUlE1Ipq/7gt8rXVidXlWsM3d5BolX3t7+hCeQsayGnwOpjB6O4ieGdYo
Wchwoo/yDNek9T8WmQowu+KI/XA/WFw/n1FliGk2D8m1kbH76xYxwXbg5q8JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUy1hU/cteNpZUuvc6wk58WCg2IxMwHwYDVR0j
BBgwFoAUUvgRG/UJzkdJ5QFn5i2aRsRYF4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUp1S2ZoUzlhNGVyWkVwR1ZydFlaTXRYMmh3QXVyUXBOOE1pWXI3UVpy
SjMvMC81MkY4MTExQkY1MDlDRTQ3NDlFNTAxNjdFNjJEOUE0NkM0NTgxNzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyRjgxMTFCRjUwOUNFNDc0
OUU1MDE2N0U2MkQ5QTQ2QzQ1ODE3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUp1S2ZoUzlhNGVyWkVwR1ZydFlaTXRYMmh3QXVyUXBOOE1pWXI3UVpySjMvMC81
MkY4MTExQkY1MDlDRTQ3NDlFNTAxNjdFNjJEOUE0NkM0NTgxNzgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf6+GMeed/5locDH28EoJ86Ddb8vkDQMP+tSznmi0y0kOQM0U8Dxx15z4lgmy
P3ElM3ftSgkY8XndliQ2quoZjzEZsrHSzVi6R3moYsfvfFtjjvcvYlsXa1uhGyox
INRGuZxfw1D0uR/CqI0Bjmq7WMAcpOKuIwJ/sYMpy3qKQPoteiuWTI54V9ZujPSH
GAMygLLyHVDVa6QXvxsbtghvwYtvYnC/uVaXzLz64AMynbgjvsO4PMy2EGyj1s00
QGJ7K6KmYIwjHFrm8ic2TvmmZMhZdnWMI7Rzp7PaJ52iXtFKQBZg3ZZWlaPmjhsD
YsH5q9qYNXDKriQulrLgC7b5OA==
-----END CERTIFICATE-----