Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
File:                     AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft (raw, json)
Hash identifier:          SHFGliofqbsJPAHUWENp0HwPOTNwDubR7h6KlAGwtK4=
Subject key identifier:   AB:0F:EA:A6:C3:9D:F4:01:3F:BF:C2:69:FE:B1:78:43:E0:A1:B3:DA
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Certificate issuer:       /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial:       1D4219960FF30D7D387F4C7C9BF26941564E9323
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
Manifest number:          4C
Signing time:             Mon 15 Apr 2024 11:45:10 +0000
Manifest this update:     Mon 15 Apr 2024 11:40:10 +0000
Manifest next update:     Tue 16 Apr 2024 15:09:10 +0000
Files and hashes:         1: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: D66J2ZSbcKjsJfSeJ7CxCPTndvslU6KhPqCQ8nJPICs=)
                          2: AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl (hash: SuJq0c4y8wsovfKLhgiJ5KrmrMgEYJeQ3FfeMYEkYU4=)
                          3: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: 0KUTXNgpxOk42MbtBHoHJUSo9wacb+pUT/drXEmeJuA=)
                          4: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: grquM0etDMv6Swf8SSxpXwmjnIcSVxqWpcP1bqm/ks0=)
                          5: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: DSczuPL5JzyCjpisTZJ0cls6AyAcw7SOsltR0aEoDQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:19:96:0f:f3:0d:7d:38:7f:4c:7c:9b:f2:69:41:56:4e:93:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
        Validity
            Not Before: Apr 15 11:40:10 2024 GMT
            Not After : Apr 16 15:09:10 2024 GMT
        Subject: CN=AB0FEAA6C39DF4013FBFC269FEB17843E0A1B3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:0a:10:29:59:94:1c:e2:97:c9:b5:4c:ff:
                    51:84:1b:75:99:dc:fa:49:b1:fe:3d:79:e3:06:c8:
                    ba:13:bf:d0:24:04:8e:e6:a9:dc:a0:cb:d2:70:fa:
                    49:1a:83:c8:a7:ca:bd:90:94:83:31:68:39:b5:44:
                    43:b6:19:e4:6a:e5:88:32:10:89:70:51:95:17:f1:
                    94:e8:28:68:ef:c7:80:99:cc:4b:af:31:7e:7d:1f:
                    b9:f9:cb:86:23:b3:99:6b:e5:d4:6c:4e:2a:5c:ac:
                    0b:e0:58:fb:d5:e0:5a:96:8f:a0:88:4f:74:3d:c0:
                    9d:5b:7f:71:7e:6d:6d:24:16:14:60:e4:da:e8:5e:
                    43:3e:eb:b1:1b:cd:83:17:45:9f:69:60:7a:70:b8:
                    b8:9c:5a:1f:ae:09:75:30:8d:a5:44:ad:2c:6b:24:
                    5a:a5:d7:af:74:6c:6a:13:bd:fb:89:0a:17:2c:f0:
                    6a:d3:b0:27:bd:f8:6a:20:0d:1f:4e:4f:8f:aa:99:
                    3d:cf:d4:1d:6d:10:da:2b:b4:be:1b:62:83:18:34:
                    5c:5a:44:f0:eb:cc:66:07:34:48:6f:a3:cd:19:6b:
                    cf:12:ff:58:d3:fe:1e:ef:32:6b:18:9e:20:dd:02:
                    39:a2:07:b4:a2:c7:c4:12:f0:fa:15:18:16:97:58:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:EA:A6:C3:9D:F4:01:3F:BF:C2:69:FE:B1:78:43:E0:A1:B3:DA
            X509v3 Authority Key Identifier:
                keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:1f:30:72:74:69:c3:d8:a1:48:7a:0a:8d:bd:0c:1b:4f:
         8f:f3:76:37:7b:5d:05:8c:22:62:b9:f2:f0:b4:bf:90:15:47:
         ac:29:e6:be:60:21:74:8b:00:84:13:c5:1b:6a:7c:ed:fc:a6:
         dd:71:77:cc:07:1a:c3:b5:54:4a:a7:61:b2:3c:4c:97:80:d0:
         80:73:74:6d:38:8f:8b:5a:1f:b5:52:6b:9a:af:25:41:a1:7c:
         00:a8:ba:37:f1:d7:2e:e0:b1:e9:a9:53:00:a3:94:42:83:42:
         c6:f8:d3:da:5e:4b:ae:91:e9:83:59:9f:f9:89:cf:64:7e:f6:
         ef:16:d4:4e:78:da:19:1a:01:88:c5:0f:18:b7:c3:bf:bb:28:
         d7:4d:20:d9:f2:f1:23:a3:4e:8a:ec:f8:fb:af:af:65:d9:c2:
         f7:b1:80:ae:9a:f6:ca:26:2c:54:99:0d:4b:77:d3:06:36:f1:
         3c:28:35:a3:2a:72:36:48:ea:06:01:6d:2c:d4:f9:fc:81:6d:
         5f:76:b0:4e:16:f4:34:3d:c7:fd:ae:a1:63:7a:f9:c7:78:b2:
         57:34:64:62:03:75:02:e3:4b:c4:cf:81:19:07:b4:c1:6e:12:
         8b:e9:f6:85:35:15:f8:87:92:51:66:f3:ee:73:f4:fa:53:66:
         27:95:eb:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHUIZlg/zDX04f0x8m/JpQVZOkyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUzNDM5QTE0RUZFOThEQjc3NUFDRUMyQTFFNEY1QTdG
N0MzMUM4MDAeFw0yNDA0MTUxMTQwMTBaFw0yNDA0MTYxNTA5MTBaMDMxMTAvBgNV
BAMTKEFCMEZFQUE2QzM5REY0MDEzRkJGQzI2OUZFQjE3ODQzRTBBMUIzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHAoQKVmUHOKXybVM/1GEG3WZ
3PpJsf49eeMGyLoTv9AkBI7mqdygy9Jw+kkag8inyr2QlIMxaDm1REO2GeRq5Ygy
EIlwUZUX8ZToKGjvx4CZzEuvMX59H7n5y4Yjs5lr5dRsTipcrAvgWPvV4FqWj6CI
T3Q9wJ1bf3F+bW0kFhRg5NroXkM+67EbzYMXRZ9pYHpwuLicWh+uCXUwjaVErSxr
JFql1690bGoTvfuJChcs8GrTsCe9+GogDR9OT4+qmT3P1B1tENortL4bYoMYNFxa
RPDrzGYHNEhvo80Za88S/1jT/h7vMmsYniDdAjmiB7Six8QS8PoVGBaXWOZPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqw/qpsOd9AE/v8Jp/rF4Q+Chs9owHwYDVR0j
BBgwFoAUrjQ5oU7+mNt3Ws7CoeT1p/fDHIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl
bncvMC9BRTM0MzlBMTRFRkU5OERCNzc1QUNFQzJBMUU0RjVBN0Y3QzMxQzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFMzQzOUExNEVGRTk4REI3
NzVBQ0VDMkExRTRGNUE3RjdDMzFDODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMC9B
RTM0MzlBMTRFRkU5OERCNzc1QUNFQzJBMUU0RjVBN0Y3QzMxQzgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApDofMHJ0acPYoUh6Co29DBtPj/N2N3tdBYwiYrny8LS/kBVHrCnmvmAhdIsA
hBPFG2p87fym3XF3zAcaw7VUSqdhsjxMl4DQgHN0bTiPi1oftVJrmq8lQaF8AKi6
N/HXLuCx6alTAKOUQoNCxvjT2l5LrpHpg1mf+YnPZH727xbUTnjaGRoBiMUPGLfD
v7so100g2fLxI6NOiuz4+6+vZdnC97GArpr2yiYsVJkNS3fTBjbxPCg1oypyNkjq
BgFtLNT5/IFtX3awThb0ND3H/a6hY3r5x3iyVzRkYgN1AuNLxM+BGQe0wW4Si+n2
hTUV+IeSUWbz7nP0+lNmJ5XrqQ==
-----END CERTIFICATE-----