Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft
File:                     3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft (raw, json)
Hash identifier:          mcnmr0ThmaIjpiT+OkJGm4CpEeE7ZpcqxDjNV8SnETs=
Subject key identifier:   F6:4F:3F:CB:7D:D8:40:03:66:61:86:4D:CA:31:AC:F4:8C:13:BD:A4
Authority key identifier: 3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87
Certificate issuer:       /CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
Certificate serial:       1145A831425BDDDE8B5F532FDBA937707FFCB8EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft
Manifest number:          048E
Signing time:             Mon 15 Apr 2024 00:08:06 +0000
Manifest this update:     Mon 15 Apr 2024 00:03:06 +0000
Manifest next update:     Tue 16 Apr 2024 02:55:06 +0000
Files and hashes:         1: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: cFXV3Vh6fU+hW5Qi6ZRHm7lPblD25BEHdC7+tHapHY4=)
                          2: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: p5WiXPCyj2eUa55jZSu58cjkbBT/FdINvKsJlYW4ZVA=)
                          3: 3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.crl (hash: YTAlzr6WHzkIuVqwOAkbaaey2aMS7g/V7w9nISz56x0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:a8:31:42:5b:dd:de:8b:5f:53:2f:db:a9:37:70:7f:fc:b8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
        Validity
            Not Before: Apr 15 00:03:06 2024 GMT
            Not After : Apr 16 02:55:06 2024 GMT
        Subject: CN=F64F3FCB7DD840036661864DCA31ACF48C13BDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:f0:44:30:c3:47:03:b9:86:43:31:8f:5a:
                    d4:14:82:03:e2:75:3a:b7:6b:2e:59:14:79:50:36:
                    0e:0a:7e:1b:d1:d3:e2:6c:c0:d2:2f:a9:b3:bb:49:
                    74:f1:c8:6d:45:d8:8e:43:b8:31:75:03:e5:55:db:
                    ef:77:b4:25:c4:c2:bc:78:0d:5f:3b:be:b1:8c:f6:
                    ae:5d:8a:76:73:74:38:0b:f9:94:1a:8b:44:5e:91:
                    5b:41:b5:e4:f4:01:b5:2f:f2:26:b6:6a:ea:a7:ce:
                    e1:1f:c4:7e:42:cc:3b:9d:2c:81:d4:fb:11:a4:f1:
                    d8:00:cf:f7:54:0d:5d:7c:24:38:a0:14:1e:d7:52:
                    ef:b9:5e:10:e5:e9:6e:fc:29:23:a1:bc:d4:f1:52:
                    ad:fd:08:0f:9e:f3:3b:3c:86:bc:1b:54:c2:a9:90:
                    34:51:44:b0:3e:8b:4b:51:f9:08:ea:57:7f:63:31:
                    58:60:89:05:03:84:ae:82:96:2b:d3:af:a8:de:3a:
                    53:0c:98:7d:34:e4:78:65:f1:48:0c:8d:ca:13:e0:
                    5e:46:f6:f5:8d:4f:21:58:58:e7:e9:b7:03:fe:8b:
                    ca:b7:4f:80:62:26:ef:94:31:4d:b8:16:67:cf:99:
                    89:34:40:cb:73:22:51:39:f0:76:3e:a1:3a:88:0b:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:3F:CB:7D:D8:40:03:66:61:86:4D:CA:31:AC:F4:8C:13:BD:A4
            X509v3 Authority Key Identifier:
                keyid:3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:e5:77:ef:01:95:83:27:92:b0:5f:81:55:a3:56:f5:20:
         6e:fb:6f:f5:de:23:ae:40:5b:5d:46:06:25:0b:da:ac:6a:1d:
         55:9f:f2:9e:b0:6e:86:2d:ab:79:7e:54:e0:f5:7e:89:ec:fe:
         39:3e:79:02:97:9d:46:74:e5:11:66:fe:f0:b6:5e:8d:2d:e2:
         38:7f:35:f5:d7:31:3a:33:91:67:81:89:12:80:7b:42:4d:77:
         16:e9:88:02:10:cf:29:7d:f8:cc:fc:10:3e:bc:0b:e4:ec:ea:
         e7:3a:de:ae:73:29:38:9b:76:3e:86:0c:29:ce:ee:02:d0:55:
         47:5c:f3:7d:ca:da:53:e1:56:1f:33:ea:81:78:76:f0:55:4d:
         17:42:0b:65:d2:67:3e:6a:2c:cf:d2:bf:61:a7:33:71:ae:61:
         5d:85:56:fb:dd:7c:55:0a:9d:9a:3c:67:c4:f2:b8:a1:fc:c4:
         26:2e:f8:62:a3:e4:d1:53:78:3d:32:21:33:86:19:06:f3:cb:
         2a:8f:7c:9f:85:0c:75:bb:16:e5:9f:09:b7:43:02:48:a0:70:
         62:75:e4:e5:6b:94:09:49:70:d0:c5:fd:6c:6d:6b:e7:ac:8d:
         db:2b:21:79:a7:cd:25:ee:0d:cc:3e:c3:52:63:02:96:d5:02:
         40:8f:a6:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEUWoMUJb3d6LX1Mv26k3cH/8uO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EyQkQ0QjdGRTU2MDZCN0ZBRjRDM0E1NkFCODA4MjUy
RThENzM4NzAeFw0yNDA0MTUwMDAzMDZaFw0yNDA0MTYwMjU1MDZaMDMxMTAvBgNV
BAMTKEY2NEYzRkNCN0REODQwMDM2NjYxODY0RENBMzFBQ0Y0OEMxM0JEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv/BEMMNHA7mGQzGPWtQUggPi
dTq3ay5ZFHlQNg4KfhvR0+JswNIvqbO7SXTxyG1F2I5DuDF1A+VV2+93tCXEwrx4
DV87vrGM9q5dinZzdDgL+ZQai0RekVtBteT0AbUv8ia2auqnzuEfxH5CzDudLIHU
+xGk8dgAz/dUDV18JDigFB7XUu+5XhDl6W78KSOhvNTxUq39CA+e8zs8hrwbVMKp
kDRRRLA+i0tR+QjqV39jMVhgiQUDhK6ClivTr6jeOlMMmH005Hhl8UgMjcoT4F5G
9vWNTyFYWOfptwP+i8q3T4BiJu+UMU24FmfPmYk0QMtzIlE58HY+oTqIC94LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9k8/y33YQANmYYZNyjGs9IwTvaQwHwYDVR0j
BBgwFoAUOivUt/5WBrf69MOlargIJS6Nc4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZv
ZjIvMC8zQTJCRDRCN0ZFNTYwNkI3RkFGNEMzQTU2QUI4MDgyNTJFOEQ3Mzg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNBMkJENEI3RkU1NjA2QjdG
QUY0QzNBNTZBQjgwODI1MkU4RDczODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZvZjIvMC8z
QTJCRDRCN0ZFNTYwNkI3RkFGNEMzQTU2QUI4MDgyNTJFOEQ3Mzg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkuLld+8BlYMnkrBfgVWjVvUgbvtv9d4jrkBbXUYGJQvarGodVZ/ynrBuhi2r
eX5U4PV+iez+OT55ApedRnTlEWb+8LZejS3iOH819dcxOjORZ4GJEoB7Qk13FumI
AhDPKX34zPwQPrwL5Ozq5zrernMpOJt2PoYMKc7uAtBVR1zzfcraU+FWHzPqgXh2
8FVNF0ILZdJnPmosz9K/Yaczca5hXYVW+918VQqdmjxnxPK4ofzEJi74YqPk0VN4
PTIhM4YZBvPLKo98n4UMdbsW5Z8Jt0MCSKBwYnXk5WuUCUlw0MX9bG1r56yN2ysh
eafNJe4NzD7DUmMCltUCQI+mHQ==
-----END CERTIFICATE-----