Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.mft
File:                     0788534AE206ADFCCDDCE737423FD789BFB281C4.mft (raw, json)
Hash identifier:          kVdXgQxZoAXUiAOs227Y2pFPISOxr5Z/WsanT8ma5fc=
Subject key identifier:   7C:E2:81:FE:A7:33:4E:1C:A9:6B:79:6F:0E:34:4B:29:FF:4B:E0:25
Authority key identifier: 07:88:53:4A:E2:06:AD:FC:CD:DC:E7:37:42:3F:D7:89:BF:B2:81:C4
Certificate issuer:       /CN=0788534AE206ADFCCDDCE737423FD789BFB281C4
Certificate serial:       5F9D603464DB4A61158AF1EDAC6A41782F055ABF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.mft
Manifest number:          033A
Signing time:             Mon 15 Apr 2024 00:23:28 +0000
Manifest this update:     Mon 15 Apr 2024 00:18:28 +0000
Manifest next update:     Tue 16 Apr 2024 02:43:28 +0000
Files and hashes:         1: 323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (hash: 3RQumFHJrt+9fIXpQAMUOlXgMJc7cfu5uJblq9xrsnM=)
                          2: 0788534AE206ADFCCDDCE737423FD789BFB281C4.crl (hash: Mjj/5ErzNZ1iE4UFyUd0rvjF6CJKqgnRuP6cmtNHNYg=)
                          3: 3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (hash: HrXIiluGxXHQPCxPdJNp4Myb1AAJl+WRtodfSFBWAsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9d:60:34:64:db:4a:61:15:8a:f1:ed:ac:6a:41:78:2f:05:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0788534AE206ADFCCDDCE737423FD789BFB281C4
        Validity
            Not Before: Apr 15 00:18:28 2024 GMT
            Not After : Apr 16 02:43:28 2024 GMT
        Subject: CN=7CE281FEA7334E1CA96B796F0E344B29FF4BE025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:a2:01:c9:fb:04:0d:a1:c1:51:e5:ed:de:
                    92:65:6d:c3:d1:91:25:24:8e:23:5f:c2:b8:98:94:
                    50:f8:f9:16:3f:7f:49:d5:ff:d9:10:81:bd:3e:96:
                    ef:00:56:7f:9f:52:66:e4:65:0b:bf:c8:57:8f:a4:
                    d7:d9:a0:cb:f2:b7:50:45:bf:1c:14:ae:bd:49:39:
                    55:b6:e2:7f:85:e8:fe:ee:14:88:57:c9:94:93:66:
                    fc:9d:ff:4f:94:97:2f:c3:65:85:90:94:59:0b:29:
                    16:2d:30:6c:89:4d:ec:d3:64:2b:53:4c:a4:50:a5:
                    d2:88:6f:0f:35:f7:9a:bb:1f:63:e3:3b:38:f6:c5:
                    72:f7:4c:fe:7d:3f:58:29:a6:2e:f4:6a:8d:20:e5:
                    fc:9b:f8:9c:43:7a:ec:6d:29:cf:e0:61:04:55:18:
                    4a:30:d2:54:df:65:43:00:21:4b:9f:61:90:96:ce:
                    a9:8a:ca:39:b1:97:c1:77:69:30:9d:31:0e:35:8a:
                    19:d1:34:d2:50:5f:6e:31:a9:a9:df:a9:1c:3f:a9:
                    1e:65:11:a7:43:1a:3f:78:fb:56:90:d2:c2:ca:c4:
                    ba:53:c8:c3:e5:7b:cf:2e:f5:56:55:0f:fa:e2:6f:
                    c5:12:c1:34:62:77:9a:d2:64:18:cf:aa:0a:f9:19:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:81:FE:A7:33:4E:1C:A9:6B:79:6F:0E:34:4B:29:FF:4B:E0:25
            X509v3 Authority Key Identifier:
                keyid:07:88:53:4A:E2:06:AD:FC:CD:DC:E7:37:42:3F:D7:89:BF:B2:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:74:25:69:40:dd:d0:64:3b:32:54:c9:56:32:40:75:f9:b4:
         f5:fb:02:37:63:4a:01:16:ab:7c:aa:0f:5d:88:8d:48:5f:e2:
         70:7a:fe:e0:ba:2f:50:f0:c8:9d:17:e1:1f:85:2c:5f:57:37:
         01:bc:57:32:42:0d:48:bf:2b:9a:4d:a1:fb:97:d4:4b:d7:33:
         cd:2d:70:f4:8c:ca:17:e5:cc:7b:47:89:de:04:10:99:c9:9c:
         15:28:75:80:73:00:7e:8e:d7:9c:c5:15:b7:8b:63:29:03:e9:
         7b:eb:c1:c1:23:fa:7e:de:3b:92:0e:19:a0:b5:9c:17:aa:bd:
         24:7f:cc:9a:85:6c:19:eb:6e:5e:d2:c1:6e:d3:0d:71:73:b1:
         65:1b:bb:8f:36:08:5c:4e:60:e7:1a:61:44:ec:c0:1e:30:6c:
         e4:b6:1c:0a:dc:21:4f:17:48:a0:63:da:bc:fd:68:8c:3c:22:
         2e:80:18:7d:8e:f0:b3:3a:05:88:40:ed:26:cb:92:ee:35:cc:
         12:c9:11:fa:2c:30:d1:63:31:fb:1b:98:8c:c6:d2:b9:59:45:
         fa:6c:7c:03:be:4b:87:34:10:01:2f:38:b9:92:8b:7f:c1:6d:
         3b:38:64:d4:67:57:5c:9f:1d:7c:84:53:78:63:ab:66:3f:58:
         20:5f:86:e2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUX51gNGTbSmEVivHtrGpBeC8FWr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc4ODUzNEFFMjA2QURGQ0NERENFNzM3NDIzRkQ3ODlC
RkIyODFDNDAeFw0yNDA0MTUwMDE4MjhaFw0yNDA0MTYwMjQzMjhaMDMxMTAvBgNV
BAMTKDdDRTI4MUZFQTczMzRFMUNBOTZCNzk2RjBFMzQ0QjI5RkY0QkUwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUaIByfsEDaHBUeXt3pJlbcPR
kSUkjiNfwriYlFD4+RY/f0nV/9kQgb0+lu8AVn+fUmbkZQu/yFePpNfZoMvyt1BF
vxwUrr1JOVW24n+F6P7uFIhXyZSTZvyd/0+Uly/DZYWQlFkLKRYtMGyJTezTZCtT
TKRQpdKIbw8195q7H2PjOzj2xXL3TP59P1gppi70ao0g5fyb+JxDeuxtKc/gYQRV
GEow0lTfZUMAIUufYZCWzqmKyjmxl8F3aTCdMQ41ihnRNNJQX24xqanfqRw/qR5l
EadDGj94+1aQ0sLKxLpTyMPle88u9VZVD/rib8USwTRid5rSZBjPqgr5GUibAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUfOKB/qczThypa3lvDjRLKf9L4CUwHwYDVR0j
BBgwFoAUB4hTSuIGrfzN3Oc3Qj/Xib+ygcQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9vZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hT
LzAvMDc4ODUzNEFFMjA2QURGQ0NERENFNzM3NDIzRkQ3ODlCRkIyODFDNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wNzg4NTM0QUUyMDZBREZDQ0RE
Q0U3Mzc0MjNGRDc4OUJGQjI4MUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL29k
WDJ4SkwyVDdFaDNwdGtVNHYzTGluQ0RVaHpLVDJ4eUZnZVdQQnJzaFMvMC8wNzg4
NTM0QUUyMDZBREZDQ0REQ0U3Mzc0MjNGRDc4OUJGQjI4MUM0Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
v3QlaUDd0GQ7MlTJVjJAdfm09fsCN2NKARarfKoPXYiNSF/icHr+4LovUPDInRfh
H4UsX1c3AbxXMkINSL8rmk2h+5fUS9czzS1w9IzKF+XMe0eJ3gQQmcmcFSh1gHMA
fo7XnMUVt4tjKQPpe+vBwSP6ft47kg4ZoLWcF6q9JH/MmoVsGetuXtLBbtMNcXOx
ZRu7jzYIXE5g5xphROzAHjBs5LYcCtwhTxdIoGPavP1ojDwiLoAYfY7wszoFiEDt
JsuS7jXMEskR+iww0WMx+xuYjMbSuVlF+mx8A75LhzQQAS84uZKLf8FtOzhk1GdX
XJ8dfIRTeGOrZj9YIF+G4g==
-----END CERTIFICATE-----