Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.mft
File:                     1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.mft (raw, json)
Hash identifier:          rW8eCuOWH/bm96VInpVfUmeXgS5RtUs36ULyOPw+k/A=
Subject key identifier:   93:FC:18:65:B5:74:B1:8A:CD:74:7D:47:C5:A5:EC:6D:2D:57:6E:2D
Authority key identifier: 1F:5E:DF:2B:60:08:A7:F4:A3:D7:51:D0:5A:B9:6A:A0:7B:15:20:A2
Certificate issuer:       /CN=1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2
Certificate serial:       4AE1076D4C68CEC135AEFFB990E00BE1AFE0C9E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.mft
Manifest number:          0126
Signing time:             Mon 15 Apr 2024 07:19:35 +0000
Manifest this update:     Mon 15 Apr 2024 07:14:35 +0000
Manifest next update:     Tue 16 Apr 2024 09:36:35 +0000
Files and hashes:         1: 323830343a336132303a3a2f33322d3332203d3e20323636303732.roa (hash: NyJIS9go/0r8JLb1WHLomVf/+dWUg/XDTcHBT6zFQKY=)
                          2: 1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.crl (hash: bR7aYVwwNGgHdPu32Vw9Ej0yspQGrHyfG8riNnU4xUA=)
                          3: 34352e342e3134302e302f32332d3233203d3e20323636303732.roa (hash: ErXQt/xghSsMWgsMtIE/dw6aOWHy5LgBGSgothfzLoo=)
                          4: 34352e342e3134322e302f32332d3233203d3e20323636303732.roa (hash: CPBJI5SYtdR4g+/vc2QnBpZEJ6PwQkAkYUbDthtrR98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:07:6d:4c:68:ce:c1:35:ae:ff:b9:90:e0:0b:e1:af:e0:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2
        Validity
            Not Before: Apr 15 07:14:35 2024 GMT
            Not After : Apr 16 09:36:35 2024 GMT
        Subject: CN=93FC1865B574B18ACD747D47C5A5EC6D2D576E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:7d:72:d8:42:74:d3:6e:ac:1d:8a:ff:8b:
                    9e:82:eb:c9:81:c6:8b:ea:8f:70:cd:b7:4b:6d:13:
                    3f:28:0f:40:30:23:89:e3:eb:cf:79:02:f0:84:43:
                    b2:94:3a:76:a9:97:d2:39:23:03:f7:65:14:19:e0:
                    12:32:a8:35:44:71:a6:b5:6c:f6:ef:07:2a:4e:ae:
                    3a:3f:4a:9c:06:ff:d3:a6:dd:a4:1a:ef:6a:5b:59:
                    c1:99:69:a2:39:a8:fd:43:01:83:b9:03:76:84:03:
                    b9:a6:14:2f:7f:54:34:6d:68:cd:d3:b1:97:a9:af:
                    32:d5:c8:3e:47:14:c0:6d:39:e7:cb:2f:b1:18:41:
                    25:c7:9a:09:84:3d:3a:6e:9c:9e:01:bd:4a:34:ae:
                    58:d5:d1:e5:f3:a9:c6:44:5d:a1:12:ec:cc:93:4b:
                    a6:71:3e:31:9d:04:27:db:1f:e2:3e:76:82:66:cb:
                    11:b8:f9:a7:41:f0:46:8e:6e:9c:9b:42:e2:ac:58:
                    58:a3:74:d5:4c:cb:1d:e7:d6:a4:fc:c0:72:a0:b9:
                    ed:ed:48:3d:b7:74:b3:ec:42:b5:25:1c:50:56:74:
                    b5:5e:46:c7:bc:75:d6:d5:9b:46:a0:53:23:8c:9f:
                    a4:ba:d0:ad:d5:93:c3:d6:3c:20:d3:d9:9c:2c:89:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:18:65:B5:74:B1:8A:CD:74:7D:47:C5:A5:EC:6D:2D:57:6E:2D
            X509v3 Authority Key Identifier:
                keyid:1F:5E:DF:2B:60:08:A7:F4:A3:D7:51:D0:5A:B9:6A:A0:7B:15:20:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/1F5EDF2B6008A7F4A3D751D05AB96AA07B1520A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:95:f0:b4:f8:6f:91:29:51:74:70:4e:bb:d6:b1:bf:64:
         91:4b:ba:83:62:24:68:ba:92:61:d1:13:1a:1b:21:24:00:06:
         52:3b:52:89:eb:d7:4e:46:b6:e6:80:09:93:1b:ee:0f:8a:65:
         f7:91:05:04:6e:89:98:20:b0:4d:99:5f:6a:ab:eb:cf:86:07:
         36:a6:32:5e:67:f0:dd:4f:ac:f8:bb:57:bd:7d:78:4f:a7:bc:
         a6:64:d6:64:f3:35:dd:44:1b:39:0c:ba:01:df:e1:04:44:ca:
         f5:6b:fa:a7:a2:83:42:01:53:0f:b5:b6:1e:f7:ce:ee:09:da:
         ca:fd:9d:2c:a7:50:22:f5:14:80:96:79:f2:6d:39:71:4d:c2:
         78:1a:6d:51:6d:87:95:08:b3:ff:2c:ad:24:f3:b7:a3:8e:1f:
         1a:b2:e7:3e:55:b3:d8:8d:d8:04:50:b5:31:62:8e:57:28:dc:
         1a:11:3c:f0:55:0a:68:82:6d:f5:4e:5f:8e:ff:f7:d2:22:19:
         92:c5:92:bd:38:2e:8e:4d:28:1f:a0:6d:8a:b1:fe:f3:f0:ce:
         6b:64:a5:3d:40:9d:72:56:fa:03:86:9d:c6:06:44:29:0c:03:
         d9:4c:0b:e4:01:10:3c:1b:17:94:8a:a8:2d:35:df:a8:8c:e8:
         88:56:09:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSuEHbUxozsE1rv+5kOAL4a/gyeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RURGMkI2MDA4QTdGNEEzRDc1MUQwNUFCOTZBQTA3
QjE1MjBBMjAeFw0yNDA0MTUwNzE0MzVaFw0yNDA0MTYwOTM2MzVaMDMxMTAvBgNV
BAMTKDkzRkMxODY1QjU3NEIxOEFDRDc0N0Q0N0M1QTVFQzZEMkQ1NzZFMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrn1y2EJ0026sHYr/i56C68mB
xovqj3DNt0ttEz8oD0AwI4nj6895AvCEQ7KUOnapl9I5IwP3ZRQZ4BIyqDVEcaa1
bPbvBypOrjo/SpwG/9Om3aQa72pbWcGZaaI5qP1DAYO5A3aEA7mmFC9/VDRtaM3T
sZeprzLVyD5HFMBtOefLL7EYQSXHmgmEPTpunJ4BvUo0rljV0eXzqcZEXaES7MyT
S6ZxPjGdBCfbH+I+doJmyxG4+adB8EaObpybQuKsWFijdNVMyx3n1qT8wHKgue3t
SD23dLPsQrUlHFBWdLVeRse8ddbVm0agUyOMn6S60K3Vk8PWPCDT2ZwsidgrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk/wYZbV0sYrNdH1HxaXsbS1Xbi0wHwYDVR0j
BBgwFoAUH17fK2AIp/Sj11HQWrlqoHsVIKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm1RaUZoaWhqVEJFcFpxM0VMb1k1bnh3aGROQmNMWkJYUlNuaFprQW1X
U2kvMC8xRjVFREYyQjYwMDhBN0Y0QTNENzUxRDA1QUI5NkFBMDdCMTUyMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNUVERjJCNjAwOEE3RjRB
M0Q3NTFEMDVBQjk2QUEwN0IxNTIwQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm1RaUZoaWhqVEJFcFpxM0VMb1k1bnh3aGROQmNMWkJYUlNuaFprQW1XU2kvMC8x
RjVFREYyQjYwMDhBN0Y0QTNENzUxRDA1QUI5NkFBMDdCMTUyMEEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf9yV8LT4b5EpUXRwTrvWsb9kkUu6g2IkaLqSYdETGhshJAAGUjtSievXTka2
5oAJkxvuD4pl95EFBG6JmCCwTZlfaqvrz4YHNqYyXmfw3U+s+LtXvX14T6e8pmTW
ZPM13UQbOQy6Ad/hBETK9Wv6p6KDQgFTD7W2HvfO7gnayv2dLKdQIvUUgJZ58m05
cU3CeBptUW2HlQiz/yytJPO3o44fGrLnPlWz2I3YBFC1MWKOVyjcGhE88FUKaIJt
9U5fjv/30iIZksWSvTgujk0oH6BtirH+8/DOa2SlPUCdclb6A4adxgZEKQwD2UwL
5AEQPBsXlIqoLTXfqIzoiFYJTA==
-----END CERTIFICATE-----