Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.mft
File:                     38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.mft (raw, json)
Hash identifier:          DadwlWNO55lpQoSK4kLZT7ojeEl32WgD1yjsvq0b36Q=
Subject key identifier:   72:F9:08:2B:8D:8C:E3:C1:05:E3:38:A7:F8:82:66:C5:45:80:22:2F
Authority key identifier: 38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5
Certificate issuer:       /CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
Certificate serial:       5E9C6CDDF567F29FCFE2201CB5A0D790AD60C95B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.mft
Manifest number:          01D5
Signing time:             Mon 15 Apr 2024 07:48:03 +0000
Manifest this update:     Mon 15 Apr 2024 07:43:03 +0000
Manifest next update:     Tue 16 Apr 2024 11:32:03 +0000
Files and hashes:         1: 3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (hash: B6sKH5CdEQzhUJe9n2N4pJ3NWVf8y1uj6kdohOmZVvo=)
                          2: 323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (hash: PimxtXP55zZzmvA4KfVfXGFbFcsO6MLm2jqpDfqULbc=)
                          3: 38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.crl (hash: 902+4sofX8cUS3Wt7Z9q9nFKC71/YVaK3pQrRJxOXzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9c:6c:dd:f5:67:f2:9f:cf:e2:20:1c:b5:a0:d7:90:ad:60:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
        Validity
            Not Before: Apr 15 07:43:03 2024 GMT
            Not After : Apr 16 11:32:03 2024 GMT
        Subject: CN=72F9082B8D8CE3C105E338A7F88266C54580222F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:45:9d:e1:91:97:b8:81:fa:9f:95:98:73:
                    42:18:90:7e:0e:84:40:52:08:0a:47:d0:d0:26:88:
                    a6:1f:9a:9a:a5:ab:54:d6:03:fa:81:85:f2:bb:ec:
                    1c:6f:f3:0e:c8:56:62:6e:cf:74:2c:f2:ed:46:87:
                    d9:22:1a:3d:d5:4d:71:6e:7f:2b:8d:f2:ba:43:3f:
                    29:83:fc:55:b2:1e:ad:f0:97:7a:07:76:10:cf:6f:
                    a5:75:2b:a8:4a:ba:55:d5:a2:d5:e4:90:20:a8:34:
                    82:cd:b4:58:34:48:a3:1f:e3:64:e1:6a:6b:2f:5e:
                    73:10:65:bf:0d:c6:21:7a:83:3e:65:6d:dd:b6:7a:
                    88:76:5d:58:4e:45:e6:d8:17:3c:3a:41:bb:b5:6a:
                    f0:80:99:e4:32:29:93:c0:60:08:88:bc:21:98:31:
                    d5:f2:a6:d3:60:aa:4e:63:cf:a0:28:59:77:95:7f:
                    b3:72:e5:fd:53:fa:72:2c:74:03:c1:6b:e0:e8:99:
                    f4:31:46:b5:fb:21:8d:e6:84:ae:22:6b:8d:1c:b7:
                    9a:0b:15:76:ad:64:a7:d9:b6:59:6d:20:dc:f4:02:
                    ee:c5:56:ce:67:c0:ba:e9:4e:7b:b2:cb:47:12:1c:
                    06:e9:72:9d:22:fd:87:2c:6b:c2:64:68:8d:f5:e4:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F9:08:2B:8D:8C:E3:C1:05:E3:38:A7:F8:82:66:C5:45:80:22:2F
            X509v3 Authority Key Identifier:
                keyid:38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:c6:dd:dd:43:38:42:f5:16:93:66:c8:e0:3a:5c:84:08:
         b0:fc:2c:e4:23:cf:54:71:6e:97:d6:f5:38:a7:61:c3:57:22:
         bb:1d:a6:32:a9:1a:1a:d4:db:c9:08:9f:eb:06:79:eb:a7:ce:
         79:a1:28:d6:7c:d7:32:79:bf:9d:56:95:5a:a3:46:8d:29:a7:
         6b:91:5c:68:d7:d9:e8:96:49:fa:44:e0:5a:04:30:3d:c4:d8:
         de:fa:61:ed:b8:d6:aa:f6:57:b6:ab:e6:23:fd:b6:49:cb:4d:
         15:d5:0f:c2:32:90:c3:4f:d4:47:47:65:4f:54:ab:71:b2:8a:
         f6:2c:35:6a:a1:bb:c2:78:e9:cf:a6:96:8d:83:e3:c2:9c:77:
         db:d0:79:0b:81:41:5f:98:96:b5:08:7e:a3:e9:21:dd:c3:2b:
         96:54:ae:1d:75:a9:82:55:eb:0c:b2:75:15:24:85:29:a6:f9:
         28:79:c3:59:27:71:c9:d8:11:db:96:93:ce:88:65:5d:d1:37:
         49:33:b4:de:07:a4:28:e5:4d:d8:12:a6:cb:a2:ee:79:92:1a:
         a7:02:7e:ab:10:f2:82:0c:52:76:ea:5f:bf:98:92:35:4f:3c:
         64:ee:c7:da:0d:a6:1e:c7:3f:cb:bb:2d:b3:c2:fa:63:8b:8f:
         2b:01:81:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXpxs3fVn8p/P4iActaDXkK1gyVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBRTNGNkU4RjlCNTAwMkUzNUFCQjY0MkI4NTNDQUYy
MUZENTNENTAeFw0yNDA0MTUwNzQzMDNaFw0yNDA0MTYxMTMyMDNaMDMxMTAvBgNV
BAMTKDcyRjkwODJCOEQ4Q0UzQzEwNUUzMzhBN0Y4ODI2NkM1NDU4MDIyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCew0Wd4ZGXuIH6n5WYc0IYkH4O
hEBSCApH0NAmiKYfmpqlq1TWA/qBhfK77Bxv8w7IVmJuz3Qs8u1Gh9kiGj3VTXFu
fyuN8rpDPymD/FWyHq3wl3oHdhDPb6V1K6hKulXVotXkkCCoNILNtFg0SKMf42Th
amsvXnMQZb8NxiF6gz5lbd22eoh2XVhORebYFzw6Qbu1avCAmeQyKZPAYAiIvCGY
MdXyptNgqk5jz6AoWXeVf7Ny5f1T+nIsdAPBa+DomfQxRrX7IY3mhK4ia40ct5oL
FXatZKfZtlltINz0Au7FVs5nwLrpTnuyy0cSHAbpcp0i/Ycsa8JkaI315Kt9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcvkIK42M48EF4zin+IJmxUWAIi8wHwYDVR0j
BBgwFoAUOK4/bo+bUALjWrtkK4U8ryH9U9UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFi
OEovMC8zOEFFM0Y2RThGOUI1MDAyRTM1QUJCNjQyQjg1M0NBRjIxRkQ1M0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4QUUzRjZFOEY5QjUwMDJF
MzVBQkI2NDJCODUzQ0FGMjFGRDUzRDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R25TeDlzaUYxWDRSenRDWTFINVlqR0hDWUVtOEF0aVhNNTZ1OGl0YmFiOEovMC8z
OEFFM0Y2RThGOUI1MDAyRTM1QUJCNjQyQjg1M0NBRjIxRkQ1M0Q1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADvPG3d1DOEL1FpNmyOA6XIQIsPws5CPPVHFul9b1OKdhw1ciux2mMqkaGtTb
yQif6wZ566fOeaEo1nzXMnm/nVaVWqNGjSmna5FcaNfZ6JZJ+kTgWgQwPcTY3vph
7bjWqvZXtqvmI/22SctNFdUPwjKQw0/UR0dlT1SrcbKK9iw1aqG7wnjpz6aWjYPj
wpx329B5C4FBX5iWtQh+o+kh3cMrllSuHXWpglXrDLJ1FSSFKab5KHnDWSdxydgR
25aTzohlXdE3STO03gekKOVN2BKmy6LueZIapwJ+qxDyggxSdupfv5iSNU88ZO7H
2g2mHsc/y7sts8L6Y4uPKwGBzg==
-----END CERTIFICATE-----