Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft
File:                     9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft (raw, json)
Hash identifier:          QoFDLCGzZjZBKp3nGfFP3T6W7Zi3P8c0qDfCgysNj8w=
Subject key identifier:   48:24:F4:27:F3:84:9C:FA:B2:2D:C1:B9:D4:D4:1F:AA:A1:B3:A6:8C
Authority key identifier: 9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
Certificate issuer:       /CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
Certificate serial:       126B52E45467FB97B4887ADFECA8411FA4084500
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft
Manifest number:          020F
Signing time:             Mon 15 Apr 2024 10:35:55 +0000
Manifest this update:     Mon 15 Apr 2024 10:30:55 +0000
Manifest next update:     Tue 16 Apr 2024 11:58:55 +0000
Files and hashes:         1: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: L/l3OtSjfFmcNXdZTx5VvgEkGU22AAKcqTmguyjHAYM=)
                          2: 9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.crl (hash: P5/LIQYeh69/ezWU7OfMwTLJBMsdXE5MtmFRKOKNWsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:52:e4:54:67:fb:97:b4:88:7a:df:ec:a8:41:1f:a4:08:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
        Validity
            Not Before: Apr 15 10:30:55 2024 GMT
            Not After : Apr 16 11:58:55 2024 GMT
        Subject: CN=4824F427F3849CFAB22DC1B9D4D41FAAA1B3A68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:94:e7:3a:91:a3:56:5a:45:3d:6d:60:36:
                    58:b2:d0:b7:d0:2f:5c:c1:1d:1c:f3:04:38:a0:4d:
                    08:da:30:e5:f5:46:22:f0:26:66:a8:04:46:32:f0:
                    bc:94:88:80:f5:75:f7:1d:3f:83:a2:e9:97:19:bf:
                    da:f2:14:0c:52:41:b6:36:b5:da:3c:ae:d8:f6:9c:
                    c2:ea:c9:83:9f:f7:f1:93:38:e9:b0:01:c5:0e:57:
                    7c:c2:7d:05:3b:0d:0f:1c:f3:f3:37:79:5b:da:62:
                    4a:ce:b5:2f:69:ea:26:02:05:ab:d5:58:49:b3:e5:
                    1a:9a:14:36:21:a8:96:65:61:46:21:e8:ca:a2:02:
                    16:90:88:88:4f:1c:6e:c6:d2:93:a9:13:bd:23:0e:
                    2c:4a:9b:0c:17:79:cb:18:52:6d:8f:09:69:83:d3:
                    9c:b5:b1:56:81:ac:41:3b:6d:5d:43:29:b8:06:e7:
                    ed:4a:4d:5f:e1:2f:e0:d8:a3:d7:14:9d:66:b6:33:
                    07:a0:00:ad:18:94:c4:b5:f7:23:ea:7c:b4:44:a4:
                    75:a9:a2:51:5f:09:29:77:f6:66:0c:86:29:08:93:
                    b2:1a:81:4b:3e:be:c6:08:0e:97:cd:17:b4:fc:46:
                    68:74:97:b6:aa:99:6e:50:f5:df:a0:c7:fd:1b:f4:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:24:F4:27:F3:84:9C:FA:B2:2D:C1:B9:D4:D4:1F:AA:A1:B3:A6:8C
            X509v3 Authority Key Identifier:
                keyid:9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:df:3c:68:64:ff:bf:28:03:b4:d1:04:f5:a6:34:30:da:dd:
         ed:1e:1e:04:c2:7e:65:7a:e4:95:ea:bc:4a:7f:2a:7b:dc:0e:
         91:bf:65:21:fe:bb:20:fe:15:b0:12:f4:ec:53:7c:f1:18:b9:
         9c:4c:14:e8:ff:b1:7e:e5:97:74:88:52:9b:a0:0d:54:27:96:
         86:38:89:84:7a:84:a4:53:50:46:11:47:2e:d7:71:4c:5a:40:
         8b:39:b2:37:64:83:37:5f:87:ff:b6:28:a0:46:4f:64:8d:5f:
         5a:9f:4c:08:23:d0:fb:f4:73:0e:dd:a2:48:49:b4:bf:99:ee:
         e7:66:9c:30:5e:d0:fd:52:97:ee:d5:d2:af:58:cf:26:22:74:
         46:13:82:52:ff:04:26:a9:f8:9c:a1:7d:9f:f3:60:16:87:d9:
         b2:f3:3e:3b:b5:76:52:37:91:a7:d7:df:02:df:4e:11:3c:e3:
         f5:79:16:52:07:12:d9:cd:f4:24:e8:52:a0:86:ee:24:b2:1c:
         02:67:68:ee:78:25:d4:8b:28:0d:e3:d5:17:3f:5e:ea:6f:22:
         7f:4e:5e:69:0f:5d:67:12:4c:cc:6e:61:8f:1e:37:a6:8a:ec:
         86:10:c1:ed:8e:9d:3c:e3:7d:91:bb:bf:f6:b5:ff:e2:f5:c4:
         59:c9:a6:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEmtS5FRn+5e0iHrf7KhBH6QIRQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNFOENFQkRDNEUwM0FBQjQ0NDAxNzRGMUVCMEQwNjQ0
MUVEQTk4NzAeFw0yNDA0MTUxMDMwNTVaFw0yNDA0MTYxMTU4NTVaMDMxMTAvBgNV
BAMTKDQ4MjRGNDI3RjM4NDlDRkFCMjJEQzFCOUQ0RDQxRkFBQTFCM0E2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4JTnOpGjVlpFPW1gNliy0LfQ
L1zBHRzzBDigTQjaMOX1RiLwJmaoBEYy8LyUiID1dfcdP4Oi6ZcZv9ryFAxSQbY2
tdo8rtj2nMLqyYOf9/GTOOmwAcUOV3zCfQU7DQ8c8/M3eVvaYkrOtS9p6iYCBavV
WEmz5RqaFDYhqJZlYUYh6MqiAhaQiIhPHG7G0pOpE70jDixKmwwXecsYUm2PCWmD
05y1sVaBrEE7bV1DKbgG5+1KTV/hL+DYo9cUnWa2MwegAK0YlMS19yPqfLREpHWp
olFfCSl39mYMhikIk7IagUs+vsYIDpfNF7T8Rmh0l7aqmW5Q9d+gx/0b9CrHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSCT0J/OEnPqyLcG51NQfqqGzpowwHwYDVR0j
BBgwFoAUnOjOvcTgOqtEQBdPHrDQZEHtqYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF
OWUvMC85Q0U4Q0VCREM0RTAzQUFCNDQ0MDE3NEYxRUIwRDA2NDQxRURBOTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDRThDRUJEQzRFMDNBQUI0
NDQwMTc0RjFFQjBEMDY0NDFFREE5ODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMC85
Q0U4Q0VCREM0RTAzQUFCNDQ0MDE3NEYxRUIwRDA2NDQxRURBOTg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh988aGT/vygDtNEE9aY0MNrd7R4eBMJ+ZXrkleq8Sn8qe9wOkb9lIf67IP4V
sBL07FN88Ri5nEwU6P+xfuWXdIhSm6ANVCeWhjiJhHqEpFNQRhFHLtdxTFpAizmy
N2SDN1+H/7YooEZPZI1fWp9MCCPQ+/RzDt2iSEm0v5nu52acMF7Q/VKX7tXSr1jP
JiJ0RhOCUv8EJqn4nKF9n/NgFofZsvM+O7V2UjeRp9ffAt9OETzj9XkWUgcS2c30
JOhSoIbuJLIcAmdo7ngl1IsoDePVFz9e6m8if05eaQ9dZxJMzG5hjx43porshhDB
7Y6dPON9kbu/9rX/4vXEWcmmqQ==
-----END CERTIFICATE-----