Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft
File:                     143298B08D8709A1286FF347632874F903802FF3.mft (raw, json)
Hash identifier:          EP+KKHKqiVEO3mPk1kBd4IHt2NX+0VWjPSBn7b1PfzE=
Subject key identifier:   98:A5:2B:92:32:22:E8:3B:6B:31:83:A7:1F:66:1F:77:DE:94:61:C9
Authority key identifier: 14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3
Certificate issuer:       /CN=143298B08D8709A1286FF347632874F903802FF3
Certificate serial:       057C6839CD8877BE506212DD40AA329D7FC01DBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft
Manifest number:          0171
Signing time:             Fri 31 Jan 2025 15:07:38 +0000
Manifest this update:     Fri 31 Jan 2025 15:02:38 +0000
Manifest next update:     Sat 01 Feb 2025 15:26:38 +0000
Files and hashes:         1: 323830343a363535383a3a2f33322d313238203d3e20323639343834.roa (hash: uuCYGuNE+h+9P/5O49k1vwPLnkhtUTWnvTD19Y+Ubm0=)
                          2: 143298B08D8709A1286FF347632874F903802FF3.crl (hash: o3iqUDPlF7OjimRiahdpX4QakiKhuLoInaNGDlxa95k=)
                          3: 34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (hash: GIOXH9bTn5HjZuPFZubzxa2/N+FjdlztT3qzOTrDUKk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7c:68:39:cd:88:77:be:50:62:12:dd:40:aa:32:9d:7f:c0:1d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143298B08D8709A1286FF347632874F903802FF3
        Validity
            Not Before: Jan 31 15:02:38 2025 GMT
            Not After : Feb  1 15:26:38 2025 GMT
        Subject: CN=98A52B923222E83B6B3183A71F661F77DE9461C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:c9:6f:fc:a8:26:8d:e3:8f:77:1c:59:e2:
                    20:b0:75:9e:f4:99:45:3b:a8:5c:12:48:7a:4c:cc:
                    fc:69:fe:af:c2:ba:ca:70:37:2b:34:a4:a0:b7:4e:
                    ec:16:ea:46:94:e6:01:9f:15:ba:41:50:7f:65:06:
                    59:8e:4a:66:24:83:8c:b3:60:d2:5a:48:da:c0:1e:
                    7b:c9:95:41:65:24:34:f5:be:f7:5f:c7:06:10:ff:
                    22:43:fa:9f:fc:1a:eb:31:d4:aa:f2:a8:b5:34:29:
                    34:16:26:a7:75:e0:22:1e:ef:10:c5:cc:2d:d9:8c:
                    b8:0d:bb:9a:18:8f:07:0a:d3:eb:bc:fa:49:94:dc:
                    15:4c:9d:58:78:c6:28:ab:06:a4:5e:b2:2f:b1:11:
                    a8:f4:67:9b:5b:b4:4f:92:3a:ed:db:a6:a8:c0:e3:
                    fc:d7:a9:77:e5:7f:70:fe:65:05:e6:1a:08:61:15:
                    c6:53:7e:56:14:a7:4a:63:7e:8e:58:fd:e3:77:70:
                    e0:6c:f4:47:1c:44:57:4c:49:20:75:36:49:56:6f:
                    2e:98:e6:f1:c8:c8:d3:c8:c0:46:b8:29:66:a3:6a:
                    21:ae:37:28:c4:59:0b:17:2d:20:fe:88:82:1a:82:
                    36:77:50:a8:6b:4a:c2:58:06:2a:26:f3:79:67:b6:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A5:2B:92:32:22:E8:3B:6B:31:83:A7:1F:66:1F:77:DE:94:61:C9
            X509v3 Authority Key Identifier:
                keyid:14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:22:a0:eb:08:3a:e9:35:38:7f:37:de:41:e7:b6:cb:25:
         01:52:f0:fd:20:68:e6:44:59:2b:f1:5e:67:8e:18:07:37:c5:
         f7:65:fd:cd:fe:22:bc:41:7f:0f:8c:a5:93:11:0e:0d:8f:64:
         06:f2:88:f3:9b:13:e0:0b:20:32:50:f8:91:e2:81:3b:61:23:
         24:a2:c3:3b:6b:af:11:d2:4e:2a:a7:2a:27:8a:83:5f:2b:58:
         20:92:2f:1e:56:fe:bb:b8:63:2b:6e:72:35:2c:3f:60:9b:72:
         4b:9c:78:f5:f0:17:7e:37:a9:64:e5:21:f7:9a:c0:e1:98:b4:
         30:15:ac:ec:44:dc:b9:b9:d4:8d:b6:7c:0a:1f:27:95:ec:99:
         d4:6b:82:cb:e6:01:c0:92:9c:01:cd:39:d5:03:2e:31:1d:33:
         11:06:c2:22:5b:ab:de:40:1b:34:6a:e3:b7:1e:a5:c9:d4:3c:
         8f:b3:0d:1c:8a:fe:23:fa:d7:b2:fe:dd:75:17:e0:e5:f7:4d:
         3c:6f:dd:22:82:14:aa:b5:dc:04:5f:f9:9e:67:02:9d:0e:21:
         60:1c:b8:f2:28:f1:83:a3:b8:87:63:bc:b6:83:ee:d9:64:74:
         44:77:5d:e9:8b:a3:3c:06:14:cc:c9:ff:1a:03:9d:90:ec:c5:
         b3:af:e4:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBXxoOc2Id75QYhLdQKoynX/AHbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMjk4QjA4RDg3MDlBMTI4NkZGMzQ3NjMyODc0Rjkw
MzgwMkZGMzAeFw0yNTAxMzExNTAyMzhaFw0yNTAyMDExNTI2MzhaMDMxMTAvBgNV
BAMTKDk4QTUyQjkyMzIyMkU4M0I2QjMxODNBNzFGNjYxRjc3REU5NDYxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wclv/KgmjeOPdxxZ4iCwdZ70
mUU7qFwSSHpMzPxp/q/CuspwNys0pKC3TuwW6kaU5gGfFbpBUH9lBlmOSmYkg4yz
YNJaSNrAHnvJlUFlJDT1vvdfxwYQ/yJD+p/8Gusx1KryqLU0KTQWJqd14CIe7xDF
zC3ZjLgNu5oYjwcK0+u8+kmU3BVMnVh4xiirBqResi+xEaj0Z5tbtE+SOu3bpqjA
4/zXqXflf3D+ZQXmGghhFcZTflYUp0pjfo5Y/eN3cOBs9EccRFdMSSB1NklWby6Y
5vHIyNPIwEa4KWajaiGuNyjEWQsXLSD+iIIagjZ3UKhrSsJYBiom83lntn2NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmKUrkjIi6DtrMYOnH2Yfd96UYckwHwYDVR0j
BBgwFoAUFDKYsI2HCaEob/NHYyh0+QOAL/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2
VWIvMC8xNDMyOThCMDhEODcwOUExMjg2RkYzNDc2MzI4NzRGOTAzODAyRkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MzI5OEIwOEQ4NzA5QTEy
ODZGRjM0NzYzMjg3NEY5MDM4MDJGRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2VWIvMC8x
NDMyOThCMDhEODcwOUExMjg2RkYzNDc2MzI4NzRGOTAzODAyRkYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARP0ioOsIOuk1OH833kHntsslAVLw/SBo5kRZK/FeZ44YBzfF92X9zf4ivEF/
D4ylkxEODY9kBvKI85sT4AsgMlD4keKBO2EjJKLDO2uvEdJOKqcqJ4qDXytYIJIv
Hlb+u7hjK25yNSw/YJtyS5x49fAXfjepZOUh95rA4Zi0MBWs7ETcubnUjbZ8Ch8n
leyZ1GuCy+YBwJKcAc051QMuMR0zEQbCIlur3kAbNGrjtx6lydQ8j7MNHIr+I/rX
sv7ddRfg5fdNPG/dIoIUqrXcBF/5nmcCnQ4hYBy48ijxg6O4h2O8toPu2WR0RHdd
6YujPAYUzMn/GgOdkOzFs6/k1Q==
-----END CERTIFICATE-----