Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.mft
File:                     30979F25B4E02B21D80B25D4A052E8CCB309E51C.mft (raw, json)
Hash identifier:          EDQ8OnUwpmT+dCI4WvnDUHmOf4CjQJ4fWIdu5ms8Guk=
Subject key identifier:   93:5D:4E:6B:F8:A0:35:4E:9C:81:B5:72:01:18:42:73:7C:C8:39:C8
Authority key identifier: 30:97:9F:25:B4:E0:2B:21:D8:0B:25:D4:A0:52:E8:CC:B3:09:E5:1C
Certificate issuer:       /CN=30979F25B4E02B21D80B25D4A052E8CCB309E51C
Certificate serial:       51F82B6099DA0B1B43DB8976020D2C69B164A45F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.mft
Manifest number:          01EC
Signing time:             Sat 22 Apr 2023 14:13:22 +0000
Manifest this update:     Sat 22 Apr 2023 14:08:22 +0000
Manifest next update:     Sun 23 Apr 2023 16:59:22 +0000
Files and hashes:         1: 323830343a346463383a3a2f33322d3438203d3e20323638323139.roa (hash: XLx0xNvqtm7iT76f66o2FBOKZrtNJukXcSp87IUbFXs=)
                          2: 34352e3233362e31322e302f32322d3234203d3e20323638323139.roa (hash: XJqG1nI+k4vxqxNdRLM2IKgP/n3mcM1bUjglGYAjF5c=)
                          3: 30979F25B4E02B21D80B25D4A052E8CCB309E51C.crl (hash: VJDRnbU5H7qb5pJVm0nvJbklNT+v6eMic9bsKCK1dUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:2b:60:99:da:0b:1b:43:db:89:76:02:0d:2c:69:b1:64:a4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30979F25B4E02B21D80B25D4A052E8CCB309E51C
        Validity
            Not Before: Apr 22 14:08:22 2023 GMT
            Not After : Apr 23 16:59:22 2023 GMT
        Subject: CN=935D4E6BF8A0354E9C81B572011842737CC839C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:39:b1:73:bc:e1:37:1b:45:af:9a:50:f4:
                    31:06:de:e2:97:60:b2:45:12:57:dd:56:98:bb:1e:
                    9c:9d:ce:ab:07:e9:62:95:9a:10:fb:89:de:00:51:
                    1d:3d:64:2a:e1:e2:66:7f:98:db:75:c7:c9:6e:ca:
                    41:23:05:85:54:b2:ce:d5:c8:d5:bc:6a:d3:68:fe:
                    18:3e:5c:32:77:b4:28:cd:ae:7a:1a:65:48:48:f2:
                    86:63:88:4e:88:5d:44:d2:4c:02:de:8c:73:04:3d:
                    d5:5b:a1:af:e8:14:ac:fd:06:b0:e3:5a:c8:a4:a2:
                    59:bf:c3:ec:08:86:70:36:ec:63:3a:44:4d:93:b7:
                    ec:63:ff:f5:ba:8c:79:da:02:01:c3:f6:63:18:aa:
                    26:46:d9:d7:3d:9c:8b:91:56:39:74:18:e1:e9:86:
                    cb:13:44:83:a2:65:28:7e:ff:b9:cc:f6:0a:3b:a4:
                    3a:0e:99:4a:cc:c2:ec:8a:a3:22:ae:45:06:ab:43:
                    b5:b9:b9:9c:23:b2:05:5c:5b:89:4c:50:49:36:a6:
                    e2:e9:c5:8b:1c:37:13:54:98:fd:00:fe:e2:0e:76:
                    d5:6b:a3:ae:37:e3:92:2d:cf:3b:9a:4d:65:06:b1:
                    bd:88:d1:8c:8f:d5:f9:c8:c2:49:45:c5:3c:83:84:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:4E:6B:F8:A0:35:4E:9C:81:B5:72:01:18:42:73:7C:C8:39:C8
            X509v3 Authority Key Identifier:
                keyid:30:97:9F:25:B4:E0:2B:21:D8:0B:25:D4:A0:52:E8:CC:B3:09:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/30979F25B4E02B21D80B25D4A052E8CCB309E51C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:6d:af:3d:ec:80:93:fc:7f:be:71:dd:9e:86:62:53:0f:
         1d:2d:79:c1:bf:fe:40:ce:c5:b5:f3:46:22:9b:3e:27:5f:c1:
         dd:2b:a6:44:8f:89:7a:aa:a1:5e:23:90:4d:97:d0:0d:9e:c6:
         31:78:0d:58:bc:71:59:5a:3a:8f:fa:f4:54:da:cd:87:b5:4a:
         99:02:96:78:6c:d6:8b:ed:7b:a8:44:ca:07:20:3d:f8:1d:e1:
         3a:44:22:0c:5e:5b:f1:f8:fc:85:4c:d2:ae:12:33:7e:6e:6e:
         14:33:84:e1:b3:43:7a:49:7d:fe:32:b3:8e:b3:79:b3:18:a8:
         f1:50:ba:02:d0:35:43:df:21:bd:47:8f:10:dc:5d:c9:ee:dc:
         09:46:f0:f6:cb:b7:af:d9:da:68:30:1c:e3:e8:30:a1:26:71:
         2e:d0:98:f7:3b:d9:bc:9d:e6:3e:96:2a:05:37:ee:71:4c:f5:
         f8:1a:97:8b:bd:5f:f5:d0:df:21:0b:9c:b7:d0:96:51:6c:33:
         a9:97:3c:bb:ba:51:95:d9:1a:27:24:4c:d1:eb:f6:ec:52:be:
         db:b5:43:1c:95:e0:15:78:54:28:fb:f7:5a:10:82:04:79:5d:
         80:d4:39:14:df:7b:0d:23:30:ef:d1:d1:d7:ce:f8:0f:f4:69:
         4b:8b:f2:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUfgrYJnaCxtD24l2Ag0sabFkpF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5NzlGMjVCNEUwMkIyMUQ4MEIyNUQ0QTA1MkU4Q0NC
MzA5RTUxQzAeFw0yMzA0MjIxNDA4MjJaFw0yMzA0MjMxNjU5MjJaMDMxMTAvBgNV
BAMTKDkzNUQ0RTZCRjhBMDM1NEU5QzgxQjU3MjAxMTg0MjczN0NDODM5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLjmxc7zhNxtFr5pQ9DEG3uKX
YLJFElfdVpi7HpydzqsH6WKVmhD7id4AUR09ZCrh4mZ/mNt1x8luykEjBYVUss7V
yNW8atNo/hg+XDJ3tCjNrnoaZUhI8oZjiE6IXUTSTALejHMEPdVboa/oFKz9BrDj
Wsikolm/w+wIhnA27GM6RE2Tt+xj//W6jHnaAgHD9mMYqiZG2dc9nIuRVjl0GOHp
hssTRIOiZSh+/7nM9go7pDoOmUrMwuyKoyKuRQarQ7W5uZwjsgVcW4lMUEk2puLp
xYscNxNUmP0A/uIOdtVro64345ItzzuaTWUGsb2I0YyP1fnIwklFxTyDhEubAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk11Oa/igNU6cgbVyARhCc3zIOcgwHwYDVR0j
BBgwFoAUMJefJbTgKyHYCyXUoFLozLMJ5RwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFZcmNXSnYxVzZvYjNVWTNKdG9ZVXpTTEhpOWtObUI0clNLdjdXZ3Fa
VkcvMC8zMDk3OUYyNUI0RTAyQjIxRDgwQjI1RDRBMDUyRThDQ0IzMDlFNTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwOTc5RjI1QjRFMDJCMjFE
ODBCMjVENEEwNTJFOENDQjMwOUU1MUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnFZcmNXSnYxVzZvYjNVWTNKdG9ZVXpTTEhpOWtObUI0clNLdjdXZ3FaVkcvMC8z
MDk3OUYyNUI0RTAyQjIxRDgwQjI1RDRBMDUyRThDQ0IzMDlFNTFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAShptrz3sgJP8f75x3Z6GYlMPHS15wb/+QM7FtfNGIps+J1/B3SumRI+Jeqqh
XiOQTZfQDZ7GMXgNWLxxWVo6j/r0VNrNh7VKmQKWeGzWi+17qETKByA9+B3hOkQi
DF5b8fj8hUzSrhIzfm5uFDOE4bNDekl9/jKzjrN5sxio8VC6AtA1Q98hvUePENxd
ye7cCUbw9su3r9naaDAc4+gwoSZxLtCY9zvZvJ3mPpYqBTfucUz1+BqXi71f9dDf
IQuct9CWUWwzqZc8u7pRldkaJyRM0ev27FK+27VDHJXgFXhUKPv3WhCCBHldgNQ5
FN97DSMw79HR1874D/RpS4vysw==
-----END CERTIFICATE-----