Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft
File:                     98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft (raw, json)
Hash identifier:          htwBbkUOQAfH4R4Ox8j4RCCo+cXg0UjZkKbayzub4lI=
Subject key identifier:   43:E6:E1:83:91:1E:5C:6A:3F:FE:E6:9E:F4:A7:3D:0C:F5:48:22:DE
Authority key identifier: 98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07
Certificate issuer:       /CN=98395AED1C5386EB667D2CD30DDAF80EC4EC4807
Certificate serial:       304830314B04053856DA1B061060F5320EA28A65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft
Manifest number:          27
Signing time:             Fri 22 Nov 2024 15:30:29 +0000
Manifest this update:     Fri 22 Nov 2024 15:25:29 +0000
Manifest next update:     Sat 23 Nov 2024 18:23:29 +0000
Files and hashes:         1: 323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (hash: Pi7twEOkVWlIHhnaFqsWsnyzy781EMx0ngoIcq9y9fE=)
                          2: 98395AED1C5386EB667D2CD30DDAF80EC4EC4807.crl (hash: ovZ8TMN1jtdfS1yB8YfbJAWr+qQav8qYICgmLIl9l9M=)
                          3: 3137372e3132392e33362e302f32322d3234203d3e20323730353838.roa (hash: DDHt2Sy7S2VBFuHGm8FR/NuC5sQzjx5QlYq9sqH/gZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:30:31:4b:04:05:38:56:da:1b:06:10:60:f5:32:0e:a2:8a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98395AED1C5386EB667D2CD30DDAF80EC4EC4807
        Validity
            Not Before: Nov 22 15:25:29 2024 GMT
            Not After : Nov 23 18:23:29 2024 GMT
        Subject: CN=43E6E183911E5C6A3FFEE69EF4A73D0CF54822DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c1:f3:cd:4f:c5:78:6e:17:99:ce:9f:f9:91:
                    bf:13:a8:2a:99:fd:ea:97:69:51:0d:bb:49:dd:25:
                    d9:33:d5:b7:1b:77:31:f3:e2:d0:a2:3e:31:de:c7:
                    2e:55:81:6b:a9:74:9d:b7:b5:39:54:28:0c:47:d0:
                    df:c9:e4:5a:6a:6f:8a:21:10:ab:e5:21:67:35:af:
                    34:42:81:88:c8:6f:2f:ff:ba:2d:ca:fb:7b:89:86:
                    8a:05:53:ad:46:f9:70:ab:57:db:5a:60:8d:b1:fc:
                    ed:97:a4:c6:63:4d:ee:6a:ad:23:51:dc:ff:4e:62:
                    1b:12:49:40:61:2c:7b:54:c9:eb:8e:e9:73:6c:d5:
                    79:06:9e:9e:1c:5c:e8:73:73:4a:1a:6f:93:41:04:
                    09:ad:8b:a9:41:17:5c:4b:ab:dc:67:ef:40:8f:cf:
                    30:ec:11:07:fa:db:ba:34:9d:81:7e:e2:bf:47:47:
                    c5:d4:0d:e0:5d:14:ca:c5:db:7a:d9:07:a0:a5:88:
                    2d:16:e3:05:27:72:c6:26:da:81:8c:f0:66:c0:f7:
                    b7:fd:07:2b:a3:c7:ce:2d:cc:a5:d5:f6:d4:14:00:
                    5b:16:41:0a:2b:59:a2:c4:fa:5f:0c:19:a6:0b:c7:
                    20:50:4e:79:c5:f9:73:f4:cc:dc:63:a7:6c:a4:73:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E6:E1:83:91:1E:5C:6A:3F:FE:E6:9E:F4:A7:3D:0C:F5:48:22:DE
            X509v3 Authority Key Identifier:
                keyid:98:39:5A:ED:1C:53:86:EB:66:7D:2C:D3:0D:DA:F8:0E:C4:EC:48:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/98395AED1C5386EB667D2CD30DDAF80EC4EC4807.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:e5:a4:1d:b6:e0:76:8c:a3:41:ba:98:1f:f3:59:16:0e:
         fb:a2:81:59:b4:db:80:be:0b:b0:8a:7b:bf:30:c5:cd:0e:06:
         bd:15:e3:ff:3c:f1:27:d0:e7:81:eb:b9:d2:ee:a4:6b:a4:1f:
         52:ad:6b:10:a3:af:93:1b:97:63:31:c1:16:3d:ab:7b:91:f1:
         0f:92:5d:d6:e4:d8:a1:2b:04:30:86:ac:d5:e0:0c:76:44:ba:
         6c:4b:83:56:5d:89:3e:6f:61:fc:42:4c:3e:38:12:d6:6c:24:
         f6:f1:40:98:02:c7:ce:09:1a:8a:28:44:e7:2f:c3:86:1e:81:
         6d:45:6e:db:8b:b6:20:ce:30:e6:58:b1:26:9d:4b:d2:0b:53:
         9a:f6:86:15:d1:1c:f4:37:fb:9b:dd:de:28:f7:96:57:2e:d0:
         98:7a:eb:a4:3b:36:ca:0c:2b:3c:5f:02:f4:2a:5d:28:36:e1:
         8f:3a:36:7b:31:ea:99:01:30:ff:fc:d2:6b:b4:66:d7:df:69:
         12:db:96:35:1d:3f:5e:d8:2a:59:b3:2f:4d:00:99:bf:8b:a7:
         ff:8e:d0:5b:af:4c:0e:fd:36:d0:af:4a:42:4e:7e:cc:3a:78:
         01:fd:6e:ed:a5:66:53:34:1d:d4:96:56:1a:c8:06:b3:37:de:
         86:6c:90:9f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMEgwMUsEBThW2hsGEGD1Mg6iimUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzOTVBRUQxQzUzODZFQjY2N0QyQ0QzMEREQUY4MEVD
NEVDNDgwNzAeFw0yNDExMjIxNTI1MjlaFw0yNDExMjMxODIzMjlaMDMxMTAvBgNV
BAMTKDQzRTZFMTgzOTExRTVDNkEzRkZFRTY5RUY0QTczRDBDRjU0ODIyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDywfPNT8V4bheZzp/5kb8TqCqZ
/eqXaVENu0ndJdkz1bcbdzHz4tCiPjHexy5VgWupdJ23tTlUKAxH0N/J5Fpqb4oh
EKvlIWc1rzRCgYjIby//ui3K+3uJhooFU61G+XCrV9taYI2x/O2XpMZjTe5qrSNR
3P9OYhsSSUBhLHtUyeuO6XNs1XkGnp4cXOhzc0oab5NBBAmti6lBF1xLq9xn70CP
zzDsEQf627o0nYF+4r9HR8XUDeBdFMrF23rZB6CliC0W4wUncsYm2oGM8GbA97f9
Byujx84tzKXV9tQUAFsWQQorWaLE+l8MGaYLxyBQTnnF+XP0zNxjp2ykc03fAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUQ+bhg5EeXGo//uae9Kc9DPVIIt4wHwYDVR0j
BBgwFoAUmDla7RxThutmfSzTDdr4DsTsSAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KWlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZn
LzAvOTgzOTVBRUQxQzUzODZFQjY2N0QyQ0QzMEREQUY4MEVDNEVDNDgwNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85ODM5NUFFRDFDNTM4NkVCNjY3
RDJDRDMwRERBRjgwRUM0RUM0ODA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pa
VmJwWXVZNGZ5dm96OEJBY0p0Wm42Yk5tZG05dFhlTmFZaFhKOGYyVmcvMC85ODM5
NUFFRDFDNTM4NkVCNjY3RDJDRDMwRERBRjgwRUM0RUM0ODA3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
gvzlpB224HaMo0G6mB/zWRYO+6KBWbTbgL4LsIp7vzDFzQ4GvRXj/zzxJ9Dngeu5
0u6ka6QfUq1rEKOvkxuXYzHBFj2re5HxD5Jd1uTYoSsEMIas1eAMdkS6bEuDVl2J
Pm9h/EJMPjgS1mwk9vFAmALHzgkaiihE5y/Dhh6BbUVu24u2IM4w5lixJp1L0gtT
mvaGFdEc9Df7m93eKPeWVy7QmHrrpDs2ygwrPF8C9CpdKDbhjzo2ezHqmQEw//zS
a7Rm199pEtuWNR0/XtgqWbMvTQCZv4un/47QW69MDv020K9KQk5+zDp4Af1u7aVm
UzQd1JZWGsgGszfehmyQnw==
-----END CERTIFICATE-----