Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.mft
File:                     CD6720E096E2B3B5875DEF1F65F6D97FBB565623.mft (raw, json)
Hash identifier:          CVYmAdx2K4ZmorWAdJrre99gK8/JwpCCXKk0L6G/QQc=
Subject key identifier:   45:65:17:13:6E:AD:73:A6:4D:D4:6D:CF:D2:29:CB:22:5B:2F:1B:62
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       09FC33B662045233F94E2D13470F627F715124D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.mft
Manifest number:          032E
Signing time:             Mon 15 Apr 2024 05:13:55 +0000
Manifest this update:     Mon 15 Apr 2024 05:08:55 +0000
Manifest next update:     Tue 16 Apr 2024 08:48:55 +0000
Files and hashes:         1: CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl (hash: IWcAwg/KJfNuTKSFahB9eA9tHHRal/yYAE9CNKUiNWQ=)
                          2: 323830343a343665633a3a2f33322d3430203d3e20323637303230.roa (hash: 0HQVL34y2Iuqc8GJ4bu3Be9zjIWxEsFLuPu+dYSbKmQ=)
                          3: 34352e3232362e39362e302f32322d3234203d3e20323637303230.roa (hash: ezbdYCeAo8gWHWFDuZK84raW+e9HbzuPOJnGykeOAm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:33:b6:62:04:52:33:f9:4e:2d:13:47:0f:62:7f:71:51:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Apr 15 05:08:55 2024 GMT
            Not After : Apr 16 08:48:55 2024 GMT
        Subject: CN=456517136EAD73A64DD46DCFD229CB225B2F1B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:e1:d1:e9:41:cd:d7:f4:b7:cb:7c:d0:17:
                    f7:16:4d:a6:0c:59:b5:c4:d9:67:8b:d2:04:4a:5b:
                    02:2f:69:9e:29:d1:e5:d1:03:4d:4c:38:92:96:5b:
                    58:6d:c3:e7:54:27:81:e0:47:bb:a0:a4:0c:37:a6:
                    63:9f:41:6c:4a:90:cf:c7:06:26:55:87:bb:e1:58:
                    67:08:b9:b5:76:68:d1:37:e8:b0:77:7f:2c:86:39:
                    b6:ac:21:c7:2d:56:f6:87:55:61:a8:29:c8:2e:fb:
                    96:b8:44:24:57:50:1d:fa:fc:b2:da:64:69:a6:c4:
                    f1:b1:84:a0:03:f1:9b:a0:34:1f:23:89:7e:19:3b:
                    f3:2f:ad:42:27:68:98:75:0b:2b:ca:63:10:1b:1d:
                    76:4c:0b:63:0a:f6:52:82:4d:f8:86:9c:75:97:99:
                    f7:9e:01:18:9f:28:af:53:6d:27:ed:74:bf:66:e5:
                    e1:4f:ed:84:fb:1c:47:cd:66:69:8f:8a:3c:57:43:
                    bd:e7:0b:2e:f4:c2:a9:0b:5c:42:22:6e:a4:dc:fc:
                    44:e6:5b:fc:4f:29:ab:39:a0:dd:a1:0b:40:7b:ab:
                    05:b4:f3:39:c5:8e:62:47:90:24:0e:ae:29:e7:be:
                    11:75:13:33:2d:4c:a2:82:7d:76:dd:24:9d:05:89:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:17:13:6E:AD:73:A6:4D:D4:6D:CF:D2:29:CB:22:5B:2F:1B:62
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:92:d5:cf:98:1a:7b:b8:d4:90:ec:d1:80:dc:d6:96:68:
         3a:19:4e:d5:2f:0b:89:2a:99:25:14:47:36:31:3b:df:69:a2:
         ac:4f:a5:03:b9:68:35:f9:21:1c:69:63:cf:87:83:ed:31:4e:
         75:b5:a0:0c:fc:e6:7c:43:1c:04:a4:b5:b4:e7:ff:4e:80:de:
         dd:87:ba:32:38:81:cf:af:b4:f6:d7:9e:ee:c8:41:ee:df:5e:
         02:29:92:84:95:6f:3c:e2:1d:65:08:e5:19:19:21:8a:f1:fe:
         dc:aa:0b:95:93:a8:fc:f2:0d:3f:86:30:ac:74:47:3b:ff:9f:
         52:fb:b0:f2:fd:6f:c3:9a:34:cc:40:b8:b9:af:d1:6f:6f:dd:
         3c:ef:bf:eb:54:1b:fc:61:65:ca:75:2b:ea:a0:c8:38:97:28:
         3e:00:9b:aa:c4:2e:7e:1b:47:ad:e4:26:98:ea:c5:4f:41:5f:
         27:61:28:5e:86:b4:3e:b2:5d:97:68:53:7b:c8:40:6a:14:73:
         ae:91:25:4f:85:f3:82:8c:0e:e3:af:f9:07:77:36:46:b4:67:
         fa:59:93:9e:95:a9:09:c5:14:db:54:1b:af:87:5b:13:62:57:
         9e:c6:2c:c4:ea:e6:01:ce:6e:bf:65:7d:e7:03:84:23:20:a9:
         dc:46:ad:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCfwztmIEUjP5Ti0TRw9if3FRJNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2NzIwRTA5NkUyQjNCNTg3NURFRjFGNjVGNkQ5N0ZC
QjU2NTYyMzAeFw0yNDA0MTUwNTA4NTVaFw0yNDA0MTYwODQ4NTVaMDMxMTAvBgNV
BAMTKDQ1NjUxNzEzNkVBRDczQTY0REQ0NkRDRkQyMjlDQjIyNUIyRjFCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzeHR6UHN1/S3y3zQF/cWTaYM
WbXE2WeL0gRKWwIvaZ4p0eXRA01MOJKWW1htw+dUJ4HgR7ugpAw3pmOfQWxKkM/H
BiZVh7vhWGcIubV2aNE36LB3fyyGObasIcctVvaHVWGoKcgu+5a4RCRXUB36/LLa
ZGmmxPGxhKAD8ZugNB8jiX4ZO/MvrUInaJh1CyvKYxAbHXZMC2MK9lKCTfiGnHWX
mfeeARifKK9TbSftdL9m5eFP7YT7HEfNZmmPijxXQ73nCy70wqkLXEIibqTc/ETm
W/xPKas5oN2hC0B7qwW08znFjmJHkCQOrinnvhF1EzMtTKKCfXbdJJ0FieexAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURWUXE26tc6ZN1G3P0inLIlsvG2IwHwYDVR0j
BBgwFoAUzWcg4Jbis7WHXe8fZfbZf7tWViMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMC9DRDY3MjBFMDk2RTJCM0I1ODc1REVGMUY2NUY2RDk3RkJCNTY1NjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENjcyMEUwOTZFMkIzQjU4
NzVERUYxRjY1RjZEOTdGQkI1NjU2MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzltOEgvMC9D
RDY3MjBFMDk2RTJCM0I1ODc1REVGMUY2NUY2RDk3RkJCNTY1NjIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbleS1c+YGnu41JDs0YDc1pZoOhlO1S8LiSqZJRRHNjE732mirE+lA7loNfkh
HGljz4eD7TFOdbWgDPzmfEMcBKS1tOf/ToDe3Ye6MjiBz6+09tee7shB7t9eAimS
hJVvPOIdZQjlGRkhivH+3KoLlZOo/PINP4YwrHRHO/+fUvuw8v1vw5o0zEC4ua/R
b2/dPO+/61Qb/GFlynUr6qDIOJcoPgCbqsQufhtHreQmmOrFT0FfJ2EoXoa0PrJd
l2hTe8hAahRzrpElT4XzgowO46/5B3c2RrRn+lmTnpWpCcUU21Qbr4dbE2JXnsYs
xOrmAc5uv2V95wOEIyCp3EatNw==
-----END CERTIFICATE-----