Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft
File:                     03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft (raw, json)
Hash identifier:          Ao3hXOThqFk03hwm6LP1wVuPpUnUSTrRFcxOAqDybCE=
Subject key identifier:   02:8B:08:36:91:BE:12:6C:93:73:73:2C:B7:B2:F3:39:E6:BF:CB:80
Authority key identifier: 03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Certificate issuer:       /CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
Certificate serial:       08F6FD224A650DC58195FB30A0D65575B2D19686
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft
Manifest number:          19
Signing time:             Tue 11 Apr 2023 03:10:28 +0000
Manifest this update:     Tue 11 Apr 2023 03:05:28 +0000
Manifest next update:     Wed 12 Apr 2023 03:30:28 +0000
Files and hashes:         1: 3137302e3235342e3139322e302f32322d3332203d3e20323635313131.roa (hash: w1eI7IDgPNEe8JFZUi2iQGliGaf6Iui7LP2MVvSDwMQ=)
                          2: 03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl (hash: uHCwql/CjI4vkP19ZFtRPAWfw5QatPeEkpVcR6/HifY=)
                          3: 323830343a333330343a3a2f33322d313238203d3e20323635313131.roa (hash: YraB2FHojDjepgDIGziZwiQV8YYrwyTuMI46PwlS/ws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f6:fd:22:4a:65:0d:c5:81:95:fb:30:a0:d6:55:75:b2:d1:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Validity
            Not Before: Apr 11 03:05:28 2023 GMT
            Not After : Apr 12 03:30:28 2023 GMT
        Subject: CN=028B083691BE126C9373732CB7B2F339E6BFCB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:63:70:8a:56:77:8c:cd:80:12:ac:86:0f:
                    8a:47:d7:11:3e:72:03:c6:14:50:f8:d9:39:2b:16:
                    2e:95:e4:68:74:a6:cb:c1:dc:68:fa:c1:1d:03:3c:
                    a1:d5:31:20:69:16:d6:3e:d9:f5:5a:0f:07:7e:a1:
                    67:57:7b:25:55:a1:bc:e8:22:f7:90:47:96:0d:a1:
                    f0:5a:f3:de:9d:c4:b4:b4:9e:cb:4f:c3:6f:b5:aa:
                    22:7d:65:2f:3d:57:95:f2:c2:68:1e:fc:fb:d3:98:
                    1e:09:cc:48:70:de:be:1f:4f:42:f1:07:da:a8:fc:
                    b3:d4:17:b5:ca:b4:87:40:f0:95:aa:9b:9f:bc:7f:
                    86:ba:c0:f4:36:e3:bb:8b:9c:9c:a0:1d:57:36:42:
                    1b:42:26:b7:c1:23:69:5f:2b:84:f0:e1:3e:91:91:
                    85:42:b9:48:f2:a4:fd:cc:53:cb:18:76:9f:3e:5c:
                    fb:eb:3d:12:ec:da:80:52:55:2c:9e:c6:75:90:af:
                    72:89:82:49:60:f1:62:ab:24:bc:c7:c6:3e:b0:c1:
                    1c:7b:f0:27:d2:ff:52:f1:43:fc:08:d8:8e:17:3b:
                    e5:78:05:2d:75:3d:29:17:db:fb:b1:75:eb:10:d4:
                    7c:bf:3f:8a:17:cb:02:8f:74:09:8f:bb:d3:8d:22:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:08:36:91:BE:12:6C:93:73:73:2C:B7:B2:F3:39:E6:BF:CB:80
            X509v3 Authority Key Identifier:
                keyid:03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:03:65:7c:65:e3:51:4b:a4:25:e5:4a:80:a9:0c:89:dd:32:
         29:ab:ce:48:14:f4:5e:af:de:ba:b2:9d:6b:92:5b:05:21:10:
         35:0d:03:5a:73:c5:8e:50:ab:f6:37:a2:a7:5a:12:b4:28:1a:
         69:9f:11:c2:1a:9a:12:f9:93:14:58:e6:44:a8:af:9f:2e:52:
         f9:a2:2d:d1:bc:5c:70:92:05:6c:b0:b4:8e:a6:d8:83:ef:f0:
         68:40:e6:24:93:93:a0:af:f9:99:06:a0:d7:d4:33:ef:2d:5a:
         f6:c9:c5:34:91:d1:53:d3:b5:aa:41:b1:9b:ab:30:b0:54:b9:
         18:b3:7f:20:22:a5:d0:09:0d:95:a7:5c:c5:19:93:3f:30:4e:
         0c:42:5e:d2:e7:7d:11:55:a7:39:b4:2e:99:60:49:f5:cf:11:
         55:99:85:bf:47:c0:e8:72:ed:d1:c8:07:ae:14:25:a4:99:1b:
         02:78:d5:e7:96:16:d6:64:96:e5:89:91:85:cf:1f:e6:8f:12:
         d5:6f:5d:a9:bd:9b:50:26:87:01:e5:6c:9a:3d:86:e6:16:2b:
         3c:f0:70:6c:b6:cd:aa:08:74:f0:bb:5f:4c:14:d4:2e:3d:04:
         c8:7e:4c:03:e9:d3:3f:d5:12:55:9a:2b:33:41:b4:7e:b6:04:
         41:91:3c:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCPb9IkplDcWBlfswoNZVdbLRloYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEMEJCMzE5NkZBMzg4MDZBOEUzMDFBMjA4QjkyMjJC
QUU2MUZEQjAeFw0yMzA0MTEwMzA1MjhaFw0yMzA0MTIwMzMwMjhaMDMxMTAvBgNV
BAMTKDAyOEIwODM2OTFCRTEyNkM5MzczNzMyQ0I3QjJGMzM5RTZCRkNCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaWNwilZ3jM2AEqyGD4pH1xE+
cgPGFFD42TkrFi6V5Gh0psvB3Gj6wR0DPKHVMSBpFtY+2fVaDwd+oWdXeyVVobzo
IveQR5YNofBa896dxLS0nstPw2+1qiJ9ZS89V5Xywmge/PvTmB4JzEhw3r4fT0Lx
B9qo/LPUF7XKtIdA8JWqm5+8f4a6wPQ247uLnJygHVc2QhtCJrfBI2lfK4Tw4T6R
kYVCuUjypP3MU8sYdp8+XPvrPRLs2oBSVSyexnWQr3KJgklg8WKrJLzHxj6wwRx7
8CfS/1LxQ/wI2I4XO+V4BS11PSkX2/uxdesQ1Hy/P4oXywKPdAmPu9ONImFvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAosINpG+EmyTc3Mst7LzOea/y4AwHwYDVR0j
BBgwFoAUA9C7MZb6OIBqjjAaIIuSIrrmH9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4S2N5ek5SRnN3azdxN0cxc3RwTDZMQ21LRDlyUlc1eUtlR29nSDZy
MjYvMC8wM0QwQkIzMTk2RkEzODgwNkE4RTMwMUEyMDhCOTIyMkJBRTYxRkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRDBCQjMxOTZGQTM4ODA2
QThFMzAxQTIwOEI5MjIyQkFFNjFGREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0V4S2N5ek5SRnN3azdxN0cxc3RwTDZMQ21LRDlyUlc1eUtlR29nSDZyMjYvMC8w
M0QwQkIzMTk2RkEzODgwNkE4RTMwMUEyMDhCOTIyMkJBRTYxRkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHwNlfGXjUUukJeVKgKkMid0yKavOSBT0Xq/eurKda5JbBSEQNQ0DWnPFjlCr
9jeip1oStCgaaZ8RwhqaEvmTFFjmRKivny5S+aIt0bxccJIFbLC0jqbYg+/waEDm
JJOToK/5mQag19Qz7y1a9snFNJHRU9O1qkGxm6swsFS5GLN/ICKl0AkNladcxRmT
PzBODEJe0ud9EVWnObQumWBJ9c8RVZmFv0fA6HLt0cgHrhQlpJkbAnjV55YW1mSW
5YmRhc8f5o8S1W9dqb2bUCaHAeVsmj2G5hYrPPBwbLbNqgh08LtfTBTULj0EyH5M
A+nTP9USVZorM0G0frYEQZE8qg==
-----END CERTIFICATE-----