Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft
File:                     3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft (raw, json)
Hash identifier:          uimXgojwNEm5tZA99UvCdJQDaL22ziToipG3j1xlNDk=
Subject key identifier:   4B:AC:93:3B:0A:3D:35:7E:E4:1B:B3:39:58:FD:FE:04:78:25:AB:D2
Authority key identifier: 3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09
Certificate issuer:       /CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
Certificate serial:       054FA3C38707F0DD0E11D6A434CA7B0BC3E44401
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft
Manifest number:          03BC
Signing time:             Fri 20 Jan 2023 23:05:45 +0000
Manifest this update:     Fri 20 Jan 2023 23:00:45 +0000
Manifest next update:     Sun 22 Jan 2023 02:43:45 +0000
Files and hashes:         1: 3137302e37392e3137332e302f32342d3234203d3e20323636333033.roa (hash: 1Wp65TljlDXuBWWZqwOU9zHTeG1r5xMcSpKV/Lzs4HE=)
                          2: 3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl (hash: qmDEyND0OdDkiQ16iBebsw3HtCpP7phqKaCydqCdDOI=)
                          3: 3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa (hash: CIoMx2XtDlXee5AdUiCEFCMXUp8hkvvP1+gadbOFGgw=)
                          4: 3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa (hash: qIzNL/bMAp7BLGAyS47wWYuYE6ZrUxab1DFZlRm38Rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:a3:c3:87:07:f0:dd:0e:11:d6:a4:34:ca:7b:0b:c3:e4:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3F32B2D0B7593792121DA065FCA67CCB5A1709
        Validity
            Not Before: Jan 20 23:00:45 2023 GMT
            Not After : Jan 22 02:43:45 2023 GMT
        Subject: CN=4BAC933B0A3D357EE41BB33958FDFE047825ABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:ea:d8:cb:6f:b0:2f:bd:3d:87:61:87:0f:
                    42:74:8b:06:23:4e:24:4c:b6:ac:d9:b9:cc:b8:89:
                    db:df:92:1a:b8:57:78:fb:37:65:33:2a:91:00:d9:
                    a6:27:17:32:ce:ac:d1:75:ef:3d:7e:ff:75:41:69:
                    5a:14:5d:52:ef:08:85:31:c1:13:bd:d1:af:ae:e7:
                    2f:e9:d6:81:63:54:1e:57:48:a3:8c:51:a0:54:5d:
                    1c:f3:14:da:09:c1:82:4c:10:3c:9e:d7:54:a2:78:
                    d5:52:17:c4:af:b4:a9:57:fd:00:c0:1e:fa:5e:2f:
                    4e:22:f8:c7:db:44:06:38:c4:a0:98:b6:3a:58:8b:
                    ec:a2:65:13:31:1b:27:40:00:08:f1:61:cf:40:07:
                    ab:c0:9c:34:3c:c9:8f:d3:ef:74:fe:82:78:5e:d3:
                    a8:b3:57:40:8d:fe:62:8c:da:2c:3c:dd:f8:36:10:
                    8f:5a:85:e3:70:0f:d6:d1:05:12:96:5d:45:d1:32:
                    5a:1f:ba:1d:e7:db:66:a3:8c:bb:c3:7d:91:d9:06:
                    fc:25:c1:0b:08:a0:a1:f3:b0:a3:a2:02:06:11:e3:
                    ed:e6:17:22:aa:5f:35:39:8c:7f:4d:93:ac:4a:6c:
                    89:d3:9b:2b:3f:10:9f:a3:f2:d9:bd:e3:9e:44:2f:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:93:3B:0A:3D:35:7E:E4:1B:B3:39:58:FD:FE:04:78:25:AB:D2
            X509v3 Authority Key Identifier:
                keyid:3D:3F:32:B2:D0:B7:59:37:92:12:1D:A0:65:FC:A6:7C:CB:5A:17:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3D3F32B2D0B7593792121DA065FCA67CCB5A1709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a9:72:06:36:b0:a9:28:6d:4c:b6:6a:c2:8b:71:c2:1a:18:
         4a:aa:86:df:80:01:ed:aa:48:d1:a5:32:f4:45:18:73:e4:40:
         b3:2a:d4:21:ce:c0:37:3f:0b:e2:71:ba:da:86:cc:5d:c9:86:
         b5:34:7c:9e:76:a1:a2:ff:a2:18:78:a9:e2:5c:24:30:88:f4:
         46:01:7c:59:61:b2:7b:80:3e:d5:6d:dd:9c:f8:a1:9d:e3:32:
         57:f3:8b:6e:b0:b2:b5:a4:21:04:6f:0d:1b:70:a2:85:94:d4:
         ea:03:b2:d8:71:d7:84:ae:38:11:22:12:45:9e:92:9e:c5:2f:
         ec:29:45:e8:5e:d4:e0:ef:26:51:23:e5:de:8e:60:65:5f:90:
         b9:ae:3a:1d:96:47:45:dd:09:21:20:d7:b8:1e:e3:d0:b5:7f:
         17:27:f3:7f:60:52:5d:3a:fe:20:a9:bb:6d:92:5b:ee:e0:f3:
         b8:34:29:ed:38:12:f5:2a:3e:1f:5a:e0:e4:10:f4:f2:24:fc:
         4e:7b:fd:16:3b:ba:d9:60:9c:0f:3d:1f:ac:43:46:86:51:03:
         d9:65:cd:eb:df:84:db:3e:a9:78:6b:32:46:29:8a:2f:84:5d:
         9a:4d:1a:d0:fd:be:b3:2b:1c:38:ce:e1:d0:09:2f:8a:f0:a3:
         80:fc:3d:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBU+jw4cH8N0OEdakNMp7C8PkRAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QzRjMyQjJEMEI3NTkzNzkyMTIxREEwNjVGQ0E2N0ND
QjVBMTcwOTAeFw0yMzAxMjAyMzAwNDVaFw0yMzAxMjIwMjQzNDVaMDMxMTAvBgNV
BAMTKDRCQUM5MzNCMEEzRDM1N0VFNDFCQjMzOTU4RkRGRTA0NzgyNUFCRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7OrYy2+wL709h2GHD0J0iwYj
TiRMtqzZucy4idvfkhq4V3j7N2UzKpEA2aYnFzLOrNF17z1+/3VBaVoUXVLvCIUx
wRO90a+u5y/p1oFjVB5XSKOMUaBUXRzzFNoJwYJMEDye11SieNVSF8SvtKlX/QDA
HvpeL04i+MfbRAY4xKCYtjpYi+yiZRMxGydAAAjxYc9AB6vAnDQ8yY/T73T+gnhe
06izV0CN/mKM2iw83fg2EI9aheNwD9bRBRKWXUXRMlofuh3n22ajjLvDfZHZBvwl
wQsIoKHzsKOiAgYR4+3mFyKqXzU5jH9Nk6xKbInTmys/EJ+j8tm9455EL+d3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUS6yTOwo9NX7kG7M5WP3+BHglq9IwHwYDVR0j
BBgwFoAUPT8ystC3WTeSEh2gZfymfMtaFwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF
NFQvMC8zRDNGMzJCMkQwQjc1OTM3OTIxMjFEQTA2NUZDQTY3Q0NCNUExNzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNEM0YzMkIyRDBCNzU5Mzc5
MjEyMURBMDY1RkNBNjdDQ0I1QTE3MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8z
RDNGMzJCMkQwQjc1OTM3OTIxMjFEQTA2NUZDQTY3Q0NCNUExNzA5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATalyBjawqShtTLZqwotxwhoYSqqG34AB7apI0aUy9EUYc+RAsyrUIc7ANz8L
4nG62obMXcmGtTR8nnahov+iGHip4lwkMIj0RgF8WWGye4A+1W3dnPihneMyV/OL
brCytaQhBG8NG3CihZTU6gOy2HHXhK44ESISRZ6SnsUv7ClF6F7U4O8mUSPl3o5g
ZV+Qua46HZZHRd0JISDXuB7j0LV/Fyfzf2BSXTr+IKm7bZJb7uDzuDQp7TgS9So+
H1rg5BD08iT8Tnv9Fju62WCcDz0frENGhlED2WXN69+E2z6peGsyRimKL4Rdmk0a
0P2+syscOM7h0AkvivCjgPw9Dw==
-----END CERTIFICATE-----