Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.mft
File:                     D7357A5920DDE042D991790CBF01A42B93CC3D10.mft (raw, json)
Hash identifier:          0bFUN8yxh1tSzfd7CYl9vd6zrgYeN1gnaME1JI1vG4E=
Subject key identifier:   21:C3:E3:10:D5:F1:E5:BC:EC:E4:1B:C3:D9:A6:47:64:C2:6C:8A:9C
Authority key identifier: D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10
Certificate issuer:       /CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
Certificate serial:       0D879579588361C1953C861C47EBA13818B87D32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.mft
Manifest number:          43
Signing time:             Wed 22 May 2024 20:39:41 +0000
Manifest this update:     Wed 22 May 2024 20:34:41 +0000
Manifest next update:     Fri 24 May 2024 00:17:41 +0000
Files and hashes:         1: D7357A5920DDE042D991790CBF01A42B93CC3D10.crl (hash: fBJwygcCnEaiVnsZz0O4uwFvWFZOzRMYmljbTzVbDB0=)
                          2: 3137372e382e33322e302f32302d3332203d3e20323632383330.roa (hash: W9d8wFC3YiMo6Cl2gfD/OfWG0j0PDsccT3ug97cvuw0=)
                          3: 323830343a3261383a3a2f33322d313238203d3e20323632383330.roa (hash: P/Kfrrex+hgrd8pqUNnaRVQzkNCovjvWH2uSNYdQdEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:87:95:79:58:83:61:c1:95:3c:86:1c:47:eb:a1:38:18:b8:7d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
        Validity
            Not Before: May 22 20:34:41 2024 GMT
            Not After : May 24 00:17:41 2024 GMT
        Subject: CN=21C3E310D5F1E5BCECE41BC3D9A64764C26C8A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:0b:7e:44:9c:db:2f:d1:70:26:70:26:d2:
                    9a:ac:88:59:73:1f:68:29:a3:fc:71:44:9d:4b:62:
                    56:00:58:ed:0d:03:d4:ed:b7:d4:c6:b2:1d:b1:3b:
                    fe:bd:9c:5f:67:26:cf:f5:b3:44:f7:4c:06:e0:e2:
                    0c:22:22:79:a0:cc:b8:45:21:19:20:73:70:af:22:
                    59:f8:c6:39:c4:b6:24:cb:f0:9f:c9:ca:89:3c:e5:
                    19:77:be:08:83:a6:8c:a8:d0:db:6b:6a:d5:69:94:
                    7e:fa:63:03:00:31:15:d9:52:93:7f:61:ef:47:97:
                    05:d7:13:10:c6:63:a9:d9:85:62:6b:fb:13:ca:5d:
                    57:9a:f4:d8:0f:40:f7:6d:4b:28:4c:a0:16:7d:91:
                    88:96:2e:ca:00:4c:c0:a4:b2:11:76:47:e2:59:56:
                    02:b9:3f:ef:3e:cf:ac:4a:e0:c5:d5:3d:c1:00:75:
                    d7:d8:3c:6a:82:d1:e7:1d:35:58:fc:a5:91:e9:68:
                    c5:63:cd:1c:ef:8d:1b:9c:37:d9:fe:76:49:2d:70:
                    f2:c5:a2:57:a0:8e:97:07:47:bb:8a:a8:20:39:75:
                    ce:c4:02:02:72:86:d9:bb:2f:74:c4:c1:50:10:3f:
                    ac:2c:76:c0:93:7e:31:a6:0a:cb:86:73:64:29:e4:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:E3:10:D5:F1:E5:BC:EC:E4:1B:C3:D9:A6:47:64:C2:6C:8A:9C
            X509v3 Authority Key Identifier:
                keyid:D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:cb:62:9e:c2:64:cf:78:74:fa:e4:fc:de:3b:0a:f5:c7:
         69:5b:0f:c6:a0:ae:02:52:01:4a:17:5b:8a:13:ff:a6:91:b4:
         9f:1f:aa:04:1e:82:ef:ac:44:00:dc:b3:98:89:48:f9:39:8b:
         8e:c6:6b:fc:00:3d:7e:14:c1:f2:90:54:f0:77:96:a8:d8:df:
         48:3f:07:0c:34:f9:8f:13:18:4f:ce:5b:76:2f:62:a1:24:dd:
         9e:ce:c6:30:4b:1d:5b:14:e6:9b:b9:68:c1:33:d9:6b:ab:8e:
         b0:c9:06:11:e5:e2:77:2b:4a:0d:ad:38:f8:9c:99:1b:65:d4:
         6a:0b:12:79:1b:c3:c3:1c:ce:f5:41:0e:2a:34:5a:d1:81:c7:
         05:1d:8e:f1:61:d4:8b:c6:a6:46:38:3c:61:70:97:9c:42:a4:
         81:15:ed:b8:92:3d:a3:4a:b1:d3:a8:00:24:62:e4:c9:f7:88:
         c6:de:3b:ca:d5:e1:df:4f:c5:c5:55:48:80:55:8a:ff:e0:d6:
         b4:06:c4:c5:73:07:9a:3a:9c:fc:16:fc:80:68:f6:68:c0:30:
         99:75:54:7d:64:a9:ee:00:34:0b:88:4d:3b:b5:78:cf:bf:24:
         ec:9b:1c:28:c3:0e:a9:42:c7:76:3c:a9:a7:27:f7:83:37:80:
         a2:3a:ad:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDYeVeViDYcGVPIYcR+uhOBi4fTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNTdBNTkyMERERTA0MkQ5OTE3OTBDQkYwMUE0MkI5
M0NDM0QxMDAeFw0yNDA1MjIyMDM0NDFaFw0yNDA1MjQwMDE3NDFaMDMxMTAvBgNV
BAMTKDIxQzNFMzEwRDVGMUU1QkNFQ0U0MUJDM0Q5QTY0NzY0QzI2QzhBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Xwt+RJzbL9FwJnAm0pqsiFlz
H2gpo/xxRJ1LYlYAWO0NA9Ttt9TGsh2xO/69nF9nJs/1s0T3TAbg4gwiInmgzLhF
IRkgc3CvIln4xjnEtiTL8J/Jyok85Rl3vgiDpoyo0NtratVplH76YwMAMRXZUpN/
Ye9HlwXXExDGY6nZhWJr+xPKXVea9NgPQPdtSyhMoBZ9kYiWLsoATMCkshF2R+JZ
VgK5P+8+z6xK4MXVPcEAddfYPGqC0ecdNVj8pZHpaMVjzRzvjRucN9n+dkktcPLF
olegjpcHR7uKqCA5dc7EAgJyhtm7L3TEwVAQP6wsdsCTfjGmCsuGc2Qp5Cu9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIcPjENXx5bzs5BvD2aZHZMJsipwwHwYDVR0j
BBgwFoAU1zV6WSDd4ELZkXkMvwGkK5PMPRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVZuOGpQdHk5clppR2ZOanc2WmlmR041ZXBHYTRlQlk0dTZaZXM3akpk
enQvMS9ENzM1N0E1OTIwRERFMDQyRDk5MTc5MENCRjAxQTQyQjkzQ0MzRDEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MzU3QTU5MjBEREUwNDJE
OTkxNzkwQ0JGMDFBNDJCOTNDQzNEMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVZuOGpQdHk5clppR2ZOanc2WmlmR041ZXBHYTRlQlk0dTZaZXM3akpkenQvMS9E
NzM1N0E1OTIwRERFMDQyRDk5MTc5MENCRjAxQTQyQjkzQ0MzRDEwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAki7LYp7CZM94dPrk/N47CvXHaVsPxqCuAlIBShdbihP/ppG0nx+qBB6C76xE
ANyzmIlI+TmLjsZr/AA9fhTB8pBU8HeWqNjfSD8HDDT5jxMYT85bdi9ioSTdns7G
MEsdWxTmm7lowTPZa6uOsMkGEeXidytKDa04+JyZG2XUagsSeRvDwxzO9UEOKjRa
0YHHBR2O8WHUi8amRjg8YXCXnEKkgRXtuJI9o0qx06gAJGLkyfeIxt47ytXh30/F
xVVIgFWK/+DWtAbExXMHmjqc/Bb8gGj2aMAwmXVUfWSp7gA0C4hNO7V4z78k7Jsc
KMMOqULHdjyppyf3gzeAojqtVQ==
-----END CERTIFICATE-----