Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.mft
File:                     EC3D2AF31757127EC7DE6313971820C9C34E685C.mft (raw, json)
Hash identifier:          dQ0yCcscCMJ4d1ChIWNABK+55KHuuYKnn/cpWlTiwyU=
Subject key identifier:   88:34:84:03:D9:9A:A3:7D:9B:B0:DF:85:D2:FF:50:DC:ED:9C:94:91
Authority key identifier: EC:3D:2A:F3:17:57:12:7E:C7:DE:63:13:97:18:20:C9:C3:4E:68:5C
Certificate issuer:       /CN=EC3D2AF31757127EC7DE6313971820C9C34E685C
Certificate serial:       66361E7ACD2A5802F3A80EE6A4135D769193A286
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.mft
Manifest number:          1C
Signing time:             Sun 21 Apr 2024 18:40:00 +0000
Manifest this update:     Sun 21 Apr 2024 18:35:00 +0000
Manifest next update:     Mon 22 Apr 2024 18:40:00 +0000
Files and hashes:         1: EC3D2AF31757127EC7DE6313971820C9C34E685C.crl (hash: CqV47DaKQKWAnW/Gw28HPKUrK4eNJWyWgA0fIZ1INTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:1e:7a:cd:2a:58:02:f3:a8:0e:e6:a4:13:5d:76:91:93:a2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3D2AF31757127EC7DE6313971820C9C34E685C
        Validity
            Not Before: Apr 21 18:35:00 2024 GMT
            Not After : Apr 28 18:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:91:00:32:3b:67:7b:f3:5b:c4:67:7d:3d:
                    a7:dd:66:ff:25:ea:bb:5e:27:2d:5a:0d:3d:a5:02:
                    0c:e4:aa:ee:ad:21:65:fb:e0:44:4d:22:ed:21:7d:
                    3a:24:85:3f:07:1f:13:3c:bd:e0:c6:c4:64:3b:20:
                    21:ab:46:33:5f:d9:61:54:86:a0:f2:6f:02:52:57:
                    00:86:af:e0:0a:cf:cc:8c:31:b4:8a:f2:9d:15:dd:
                    6e:7e:79:5a:71:a1:3c:60:12:ec:87:94:d1:a9:cd:
                    d4:d7:30:33:60:bf:0a:7b:77:c4:e3:e8:51:f7:fc:
                    9f:3b:e4:37:2f:a5:96:f0:8e:c8:bf:5e:05:40:32:
                    6b:c4:4a:43:41:0c:21:65:12:a3:67:24:8d:ca:53:
                    62:18:32:a4:bd:c0:34:64:80:6e:77:ad:89:f7:77:
                    90:66:ba:52:d0:ac:44:33:f5:7e:93:21:df:10:4e:
                    90:ae:77:a6:d9:5b:f2:a3:f9:2b:22:40:4f:6c:8b:
                    62:65:0e:da:11:32:e7:7f:54:0f:fa:09:82:c5:5f:
                    93:3b:6c:27:99:3c:06:09:5f:e5:93:6e:66:8f:ec:
                    ab:4f:80:5b:2a:47:81:8f:86:25:ee:98:c0:bf:ac:
                    13:e1:67:4d:db:0d:61:55:72:c1:15:2b:b9:f6:0d:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:84:03:D9:9A:A3:7D:9B:B0:DF:85:D2:FF:50:DC:ED:9C:94:91
            X509v3 Authority Key Identifier:
                keyid:EC:3D:2A:F3:17:57:12:7E:C7:DE:63:13:97:18:20:C9:C3:4E:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/1/EC3D2AF31757127EC7DE6313971820C9C34E685C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:3e:b3:e3:75:f3:49:a4:1c:43:1b:58:56:fd:3a:6d:be:
         78:8a:ef:87:f3:33:39:c4:83:39:35:a9:68:6c:a0:4a:b7:72:
         9b:52:a7:bc:a9:77:de:9b:73:31:8d:7b:69:3e:46:c7:68:f8:
         25:33:09:1b:08:03:f4:4d:e0:58:6c:cb:9d:3d:11:07:8e:3c:
         c0:47:00:b7:96:01:c5:8b:fd:ef:1d:84:aa:8f:f8:74:63:4f:
         82:1b:8e:d1:93:a6:d2:22:41:c8:3d:5c:6b:b6:89:93:58:74:
         ff:d1:20:6e:c4:3d:24:ef:60:72:c0:73:6f:af:c5:b2:1b:f8:
         fa:ee:b9:46:25:b4:cd:57:55:0d:4a:bc:26:72:e8:67:cf:57:
         82:cf:7d:2d:f6:0a:77:dd:70:5c:df:b5:fd:88:67:bb:ca:b0:
         12:6a:5f:b4:a6:18:41:b8:48:69:7c:6e:42:5e:de:b2:bd:ba:
         8e:22:69:a3:83:f5:c5:1a:ab:af:ce:d8:c4:e3:04:fa:60:ad:
         4c:75:b5:cc:ad:27:3a:5d:f3:71:00:e3:da:10:00:d2:51:f5:
         87:dc:a7:bc:90:5b:23:68:6b:64:6b:a5:d3:b5:b9:83:c7:5b:
         fe:bc:59:aa:86:aa:c4:0f:63:f1:12:99:1e:ad:27:16:dd:70:
         a4:d3:79:a5
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUZjYees0qWALzqA7mpBNddpGTooYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzRDJBRjMxNzU3MTI3RUM3REU2MzEzOTcxODIwQzlD
MzRFNjg1QzAeFw0yNDA0MjExODM1MDBaFw0yNDA0MjgxODQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJENjkxMDAzMjNCNjc3QkYz
NUJDNDY3N0QzREE3REQ2NkZGMjVFQUJCNUUyNzJENUEwRDNEQTUwMjBDRTRBQUVF
QUQyMTY1RkJFMDQ0NEQyMkVEMjE3RDNBMjQ4NTNGMDcxRjEzM0NCREUwQzZDNDY0
M0IyMDIxQUI0NjMzNUZEOTYxNTQ4NkEwRjI2RjAyNTI1NzAwODZBRkUwMEFDRkND
OEMzMUI0OEFGMjlEMTVERDZFN0U3OTVBNzFBMTNDNjAxMkVDODc5NEQxQTlDREQ0
RDczMDMzNjBCRjBBN0I3N0M0RTNFODUxRjdGQzlGM0JFNDM3MkZBNTk2RjA4RUM4
QkY1RTA1NDAzMjZCQzQ0QTQzNDEwQzIxNjUxMkEzNjcyNDhEQ0E1MzYyMTgzMkE0
QkRDMDM0NjQ4MDZFNzdBRDg5Rjc3NzkwNjZCQTUyRDBBQzQ0MzNGNTdFOTMyMURG
MTA0RTkwQUU3N0E2RDk1QkYyQTNGOTJCMjI0MDRGNkM4QjYyNjUwRURBMTEzMkU3
N0Y1NDBGRkEwOTgyQzU1RjkzM0I2QzI3OTkzQzA2MDk1RkU1OTM2RTY2OEZFQ0FC
NEY4MDVCMkE0NzgxOEY4NjI1RUU5OEMwQkZBQzEzRTE2NzREREIwRDYxNTU3MkMx
MTUyQkI5RjYwREMwMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0taRADI7Z3vzW8RnfT2n3Wb/Jeq7XictWg09pQIM5KrurSFl++BE
TSLtIX06JIU/Bx8TPL3gxsRkOyAhq0YzX9lhVIag8m8CUlcAhq/gCs/MjDG0ivKd
Fd1ufnlacaE8YBLsh5TRqc3U1zAzYL8Ke3fE4+hR9/yfO+Q3L6WW8I7Iv14FQDJr
xEpDQQwhZRKjZySNylNiGDKkvcA0ZIBud62J93eQZrpS0KxEM/V+kyHfEE6Qrnem
2Vvyo/krIkBPbItiZQ7aETLnf1QP+gmCxV+TO2wnmTwGCV/lk25mj+yrT4BbKkeB
j4Yl7pjAv6wT4WdN2w1hVXLBFSu59g3ADQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FIg0hAPZmqN9m7DfhdL/UNztnJSRMB8GA1UdIwQYMBaAFOw9KvMXVxJ+x95jE5cY
IMnDTmhcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0QxZHVFdUY4ZUxCdGlX
cWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzEvRUMzRDJBRjMxNzU3MTI3
RUM3REU2MzEzOTcxODIwQzlDMzRFNjg1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQzNEMkFGMzE3NTcxMjdFQzdERTYzMTM5NzE4MjBDOUMzNEU2
ODVDLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0QxZHVFdUY4ZUxCdGlXcWVCNnpG
bnZHakpzN052dEJudTM3Ym9yS1Z6amRILzEvRUMzRDJBRjMxNzU3MTI3RUM3REU2
MzEzOTcxODIwQzlDMzRFNjg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAQsPrPjdfNJpBxDG1hW/Tpt
vniK74fzMznEgzk1qWhsoEq3cptSp7ypd96bczGNe2k+Rsdo+CUzCRsIA/RN4Fhs
y509EQeOPMBHALeWAcWL/e8dhKqP+HRjT4IbjtGTptIiQcg9XGu2iZNYdP/RIG7E
PSTvYHLAc2+vxbIb+PruuUYltM1XVQ1KvCZy6GfPV4LPfS32CnfdcFzftf2IZ7vK
sBJqX7SmGEG4SGl8bkJe3rK9uo4iaaOD9cUaq6/O2MTjBPpgrUx1tcytJzpd83EA
49oQANJR9Yfcp7yQWyNoa2RrpdO1uYPHW/68WaqGqsQPY/ESmR6tJxbdcKTTeaU=
-----END CERTIFICATE-----