Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft
File:                     8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft (raw, json)
Hash identifier:          xBKZnQXEbhlEb9BrNcJ7eZoRFAKQFJ+zdoGU9JROSRA=
Subject key identifier:   14:A0:95:22:80:EE:63:44:46:44:D4:04:14:79:B4:84:F0:51:E0:B9
Authority key identifier: 8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74
Certificate issuer:       /CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
Certificate serial:       506FE00FD0617B3C644AC9869A7201A5DFF93575
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft
Manifest number:          029C
Signing time:             Sun 14 Apr 2024 20:34:08 +0000
Manifest this update:     Sun 14 Apr 2024 20:29:08 +0000
Manifest next update:     Mon 15 Apr 2024 20:35:08 +0000
Files and hashes:         1: 8C5E36B81EEC513AEFC77A52B60D451BC4B02974.crl (hash: 84c+h6cxTVldWYZiYGWhpswW7RRP1pTQ1PT5G/nVfKk=)
                          2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: A9MzDptkCRnbCLxXjUu3xSlJIV8JNzZlWzJfCqIBefE=)
                          3: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: CpQ9wV8uG3lkOMAT7+9B4KZoEXcGg2vFgWPrD/SDTOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6f:e0:0f:d0:61:7b:3c:64:4a:c9:86:9a:72:01:a5:df:f9:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
        Validity
            Not Before: Apr 14 20:29:08 2024 GMT
            Not After : Apr 15 20:35:08 2024 GMT
        Subject: CN=14A0952280EE63444644D4041479B484F051E0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:c6:7e:76:cd:f9:26:e8:d7:50:5a:85:3b:
                    ea:28:53:ba:96:ac:6d:6e:70:da:88:37:96:f6:ea:
                    bf:12:3b:e0:e5:da:9e:c5:67:97:c4:01:4e:82:fc:
                    84:de:37:62:5b:5f:82:05:7d:72:a4:de:5b:8e:8c:
                    93:fc:9e:17:03:3f:5b:e1:79:e0:e3:67:e1:e1:de:
                    b6:19:49:69:d6:96:3b:f3:50:51:48:13:88:c0:b1:
                    74:a6:90:f5:ae:15:49:85:d0:b2:ab:8d:03:29:3b:
                    aa:3d:24:79:d2:a7:61:9d:26:0b:45:48:ae:6f:62:
                    19:37:01:27:80:dc:b9:6d:1c:31:46:e8:3f:49:50:
                    92:41:69:35:56:b1:24:15:20:89:50:c8:59:bd:79:
                    50:73:56:89:5d:e6:53:18:f3:0a:95:e7:58:fe:f8:
                    da:83:8e:4f:78:0c:e3:9f:e9:31:80:bb:30:4f:a1:
                    d4:e4:52:a1:c5:c9:5e:8b:40:53:d7:ff:68:e4:46:
                    11:cc:83:8b:6b:de:6a:38:61:de:99:d7:39:b9:6c:
                    c2:bf:8b:fc:82:fb:82:28:1c:05:1c:20:84:9e:16:
                    b8:8f:48:d4:48:45:98:d7:09:15:b4:27:36:e1:d7:
                    d8:c7:ab:0d:47:97:19:9d:ce:ce:91:50:dd:06:23:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A0:95:22:80:EE:63:44:46:44:D4:04:14:79:B4:84:F0:51:E0:B9
            X509v3 Authority Key Identifier:
                keyid:8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:c6:9d:36:45:41:f0:b8:01:8f:9c:d5:cc:6c:31:e0:fd:
         85:f6:7a:99:b3:df:21:e3:26:69:fa:8a:4b:b5:52:6e:91:9c:
         fc:b0:83:6d:40:1f:d2:73:52:08:ad:aa:f2:4b:3b:87:de:13:
         39:b0:c9:f4:b2:aa:7d:c2:f0:c9:10:af:0f:70:3b:2a:88:7a:
         fc:22:08:ec:52:22:6a:91:95:cc:06:6b:57:b5:07:63:01:57:
         db:63:de:11:a5:09:07:b8:9c:37:d3:03:c5:6d:be:a8:d8:e6:
         5a:88:75:11:39:cc:9d:c3:b4:bf:5c:dd:43:f3:5a:50:17:f0:
         90:77:c5:48:26:ca:ad:93:49:2c:32:ad:aa:5c:ea:5a:fa:a7:
         bd:c1:45:0a:dd:aa:bb:fb:99:89:86:c0:bd:f1:e1:2b:fc:37:
         88:30:a5:c3:ae:7d:8b:cd:76:a5:82:94:f8:45:3b:16:65:e0:
         f9:64:eb:74:0b:3a:fd:0e:fd:33:49:cc:82:e3:68:95:f6:3b:
         56:bc:eb:dd:28:cc:9e:04:84:b8:ae:12:e3:bb:05:81:d7:dd:
         3e:b6:2b:83:4c:68:66:a0:0b:fa:0b:cd:5b:0f:4a:9c:04:de:
         8f:5b:84:5f:6d:97:fe:49:dd:f6:8c:07:fb:6d:21:5b:0a:6a:
         d8:c1:b5:51
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUUG/gD9BhezxkSsmGmnIBpd/5NXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1RTM2QjgxRUVDNTEzQUVGQzc3QTUyQjYwRDQ1MUJD
NEIwMjk3NDAeFw0yNDA0MTQyMDI5MDhaFw0yNDA0MTUyMDM1MDhaMDMxMTAvBgNV
BAMTKDE0QTA5NTIyODBFRTYzNDQ0NjQ0RDQwNDE0NzlCNDg0RjA1MUUwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6scZ+ds35JujXUFqFO+ooU7qW
rG1ucNqIN5b26r8SO+Dl2p7FZ5fEAU6C/ITeN2JbX4IFfXKk3luOjJP8nhcDP1vh
eeDjZ+Hh3rYZSWnWljvzUFFIE4jAsXSmkPWuFUmF0LKrjQMpO6o9JHnSp2GdJgtF
SK5vYhk3ASeA3LltHDFG6D9JUJJBaTVWsSQVIIlQyFm9eVBzVold5lMY8wqV51j+
+NqDjk94DOOf6TGAuzBPodTkUqHFyV6LQFPX/2jkRhHMg4tr3mo4Yd6Z1zm5bMK/
i/yC+4IoHAUcIISeFriPSNRIRZjXCRW0Jzbh19jHqw1Hlxmdzs6RUN0GI8NRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUFKCVIoDuY0RGRNQEFHm0hPBR4LkwHwYDVR0j
BBgwFoAUjF42uB7sUTrvx3pStg1FG8SwKXQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9tQURYNDdBRUR4bzVTVzVIeVNRNXl2Z21rVjhUNzRqcWt6Mlh0RTFlTWo4
LzAvOEM1RTM2QjgxRUVDNTEzQUVGQzc3QTUyQjYwRDQ1MUJDNEIwMjk3NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84QzVFMzZCODFFRUM1MTNBRUZD
NzdBNTJCNjBENDUxQkM0QjAyOTc0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL21B
RFg0N0FFRHhvNVNXNUh5U1E1eXZnbWtWOFQ3NGpxa3oyWHRFMWVNajgvMC84QzVF
MzZCODFFRUM1MTNBRUZDNzdBNTJCNjBENDUxQkM0QjAyOTc0Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
G5fGnTZFQfC4AY+c1cxsMeD9hfZ6mbPfIeMmafqKS7VSbpGc/LCDbUAf0nNSCK2q
8ks7h94TObDJ9LKqfcLwyRCvD3A7Koh6/CII7FIiapGVzAZrV7UHYwFX22PeEaUJ
B7icN9MDxW2+qNjmWoh1ETnMncO0v1zdQ/NaUBfwkHfFSCbKrZNJLDKtqlzqWvqn
vcFFCt2qu/uZiYbAvfHhK/w3iDClw659i812pYKU+EU7FmXg+WTrdAs6/Q79M0nM
guNolfY7Vrzr3SjMngSEuK4S47sFgdfdPrYrg0xoZqAL+gvNWw9KnATej1uEX22X
/knd9owH+20hWwpq2MG1UQ==
-----END CERTIFICATE-----