Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft
File:                     DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft (raw, json)
Hash identifier:          qKaN/otcegcHhbt7hPQMG08+dN0zA/IWXOBwF6a/VQs=
Subject key identifier:   DE:65:1E:CE:2A:58:F9:79:54:73:F6:44:20:5D:B1:BE:CD:A5:30:CA
Authority key identifier: DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
Certificate issuer:       /CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
Certificate serial:       3DA7708542292D95722CE665EE1D1949486B6615
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft
Manifest number:          02B3
Signing time:             Mon 15 Apr 2024 09:25:55 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:55 +0000
Manifest next update:     Tue 16 Apr 2024 11:25:55 +0000
Files and hashes:         1: 3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa (hash: VgScNi3Vk/WIL7aqbkV+QDjPOLdjmGACwa0Ln5DW6Vg=)
                          2: 323830343a6663303a3a2f33322d3335203d3e20323633363031.roa (hash: RFBEPsVo9FUxKMxGxhOBKD47dnM6eNbjs4sWxYz2bM4=)
                          3: DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.crl (hash: eVWG6uQC0tF269d+4+AgTO6g/ZEp+RyaamiwRxZjtC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a7:70:85:42:29:2d:95:72:2c:e6:65:ee:1d:19:49:48:6b:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
        Validity
            Not Before: Apr 15 09:20:55 2024 GMT
            Not After : Apr 16 11:25:55 2024 GMT
        Subject: CN=DE651ECE2A58F9795473F644205DB1BECDA530CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:ff:d5:e9:b1:87:1a:f2:42:8a:12:0c:3d:
                    2c:9b:49:41:8d:c3:c6:2f:c7:46:d0:3b:d7:57:3e:
                    64:4a:e1:d1:6c:ab:44:3a:9f:b6:5a:c6:68:25:cc:
                    a4:52:c2:86:4e:4b:56:52:2b:e8:60:b5:54:4e:17:
                    e3:20:2a:df:bc:b5:ea:1a:a9:60:fe:65:de:3f:5e:
                    c9:c7:f4:08:ba:8b:27:26:72:5e:c2:0e:68:60:52:
                    b2:e5:a7:0d:a0:e0:b6:6f:f3:13:b5:7e:e8:ff:f1:
                    f5:1f:46:90:a6:ce:b5:16:d2:5a:71:1c:fa:67:62:
                    12:6e:5a:f6:90:ed:06:87:6c:95:39:55:2e:0a:d6:
                    0b:3b:e2:2c:03:56:8c:1e:80:c5:99:52:b3:17:53:
                    3d:74:7b:e0:0b:2f:0e:51:19:24:b3:82:41:c9:c1:
                    ae:d7:04:57:03:63:7e:e9:25:af:c5:71:4e:6d:4c:
                    5c:76:3b:15:a0:47:a7:be:94:c9:be:23:03:73:18:
                    bc:1c:d4:57:c1:09:fe:e9:d4:8c:14:39:32:1a:41:
                    b2:ed:55:fa:85:6e:8a:49:33:ff:f8:12:27:09:c9:
                    78:8c:85:79:f8:49:d2:d2:02:8f:f2:c9:37:34:4a:
                    18:8f:89:5c:d8:05:b2:7c:11:30:9d:5a:b1:e3:34:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:1E:CE:2A:58:F9:79:54:73:F6:44:20:5D:B1:BE:CD:A5:30:CA
            X509v3 Authority Key Identifier:
                keyid:DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:16:7a:70:6b:6c:5f:91:5f:d6:a5:30:d2:12:f9:b9:a5:
         c9:66:c7:f7:b7:3d:24:23:eb:16:99:1e:0b:be:2a:10:c4:6d:
         99:68:bf:26:5c:00:d0:c3:65:5c:64:e3:6a:1d:45:c2:ed:bb:
         b9:9a:7d:52:36:62:8a:f2:14:6a:40:64:c9:45:dc:86:e2:1a:
         3a:80:9d:40:bc:f2:f4:48:08:cd:7d:15:8b:2d:70:f7:cd:ed:
         e9:ca:df:15:cf:0c:ee:44:45:6b:16:6d:27:72:e8:de:fd:1a:
         46:6a:9b:89:a2:b1:fa:29:32:19:83:49:45:c6:cd:93:fb:80:
         26:bc:4f:73:74:0d:21:a0:26:7a:34:de:85:b7:b0:93:d4:a8:
         bc:86:b8:cf:16:a2:fe:2b:34:95:1e:62:45:07:c4:94:1e:c9:
         01:df:86:c3:c4:33:3b:1e:50:64:95:b7:5c:2c:06:96:fd:36:
         f8:68:d6:9d:8e:53:e3:3a:e2:35:d4:c0:62:51:b5:22:fd:d1:
         25:9f:59:95:9d:7a:01:49:ca:74:b9:84:0d:aa:3d:0f:06:18:
         06:26:86:7b:15:61:61:81:64:f5:60:cf:10:68:da:cb:5d:33:
         21:6d:fc:55:f1:1f:bd:ce:35:a6:0e:a7:44:69:98:ba:27:03:
         c4:7b:32:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPadwhUIpLZVyLOZl7h0ZSUhrZhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzQjI0MjlBRjgwMDJBNkRBNEREMDU1M0EwOUUyQzlB
NDhFRjI0MTAeFw0yNDA0MTUwOTIwNTVaFw0yNDA0MTYxMTI1NTVaMDMxMTAvBgNV
BAMTKERFNjUxRUNFMkE1OEY5Nzk1NDczRjY0NDIwNURCMUJFQ0RBNTMwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgt//V6bGHGvJCihIMPSybSUGN
w8Yvx0bQO9dXPmRK4dFsq0Q6n7ZaxmglzKRSwoZOS1ZSK+hgtVROF+MgKt+8teoa
qWD+Zd4/XsnH9Ai6iycmcl7CDmhgUrLlpw2g4LZv8xO1fuj/8fUfRpCmzrUW0lpx
HPpnYhJuWvaQ7QaHbJU5VS4K1gs74iwDVowegMWZUrMXUz10e+ALLw5RGSSzgkHJ
wa7XBFcDY37pJa/FcU5tTFx2OxWgR6e+lMm+IwNzGLwc1FfBCf7p1IwUOTIaQbLt
VfqFbopJM//4EicJyXiMhXn4SdLSAo/yyTc0ShiPiVzYBbJ8ETCdWrHjNKAjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3mUezipY+XlUc/ZEIF2xvs2lMMowHwYDVR0j
BBgwFoAU3jskKa+AAqbaTdBVOgniyaSO8kEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG85aXRNbWJWUmtkZmFiRGg2UVpDSDRiZW1GRVhwN0VHQlE2OFd5dW5i
eWMvMC9ERTNCMjQyOUFGODAwMkE2REE0REQwNTUzQTA5RTJDOUE0OEVGMjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFM0IyNDI5QUY4MDAyQTZE
QTRERDA1NTNBMDlFMkM5QTQ4RUYyNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG85aXRNbWJWUmtkZmFiRGg2UVpDSDRiZW1GRVhwN0VHQlE2OFd5dW5ieWMvMC9E
RTNCMjQyOUFGODAwMkE2REE0REQwNTUzQTA5RTJDOUE0OEVGMjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAerUWenBrbF+RX9alMNIS+bmlyWbH97c9JCPrFpkeC74qEMRtmWi/JlwA0MNl
XGTjah1Fwu27uZp9UjZiivIUakBkyUXchuIaOoCdQLzy9EgIzX0Viy1w983t6crf
Fc8M7kRFaxZtJ3Lo3v0aRmqbiaKx+ikyGYNJRcbNk/uAJrxPc3QNIaAmejTehbew
k9SovIa4zxai/is0lR5iRQfElB7JAd+Gw8QzOx5QZJW3XCwGlv02+GjWnY5T4zri
NdTAYlG1Iv3RJZ9ZlZ16AUnKdLmEDao9DwYYBiaGexVhYYFk9WDPEGjay10zIW38
VfEfvc41pg6nRGmYuicDxHsyaQ==
-----END CERTIFICATE-----