Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.mft
File:                     CED12942F9155F85AD79411B143D3B85417B5D3D.mft (raw, json)
Hash identifier:          nMwkO/NUgnSyvAVEzydQkc5dqhbSxg/1LfX6wWoA6Wo=
Subject key identifier:   F9:87:16:A4:29:DF:18:FA:0E:11:49:F9:CD:A5:55:4C:4A:E4:AF:E2
Authority key identifier: CE:D1:29:42:F9:15:5F:85:AD:79:41:1B:14:3D:3B:85:41:7B:5D:3D
Certificate issuer:       /CN=CED12942F9155F85AD79411B143D3B85417B5D3D
Certificate serial:       21C1A6AB15A42D66A5A702F5B7F72603BC2EB038
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED12942F9155F85AD79411B143D3B85417B5D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.mft
Manifest number:          30
Signing time:             Tue 09 Apr 2024 19:29:28 +0000
Manifest this update:     Tue 09 Apr 2024 19:24:28 +0000
Manifest next update:     Wed 10 Apr 2024 22:45:28 +0000
Files and hashes:         1: CED12942F9155F85AD79411B143D3B85417B5D3D.crl (hash: XQt466qmYtO3SrSj45zq4Uk3044Fh6LsZgXaW9X0HGw=)
                          2: 323830343a363734343a3a2f33322d313238203d3e20323639363137.roa (hash: nzQ7Dss9Uec0FfwrZ7UfQe+aRmhq6kSJYNPuN8p+l4w=)
                          3: 34352e3139302e382e302f32322d3332203d3e20323639363137.roa (hash: WV8uw7YEEjUY9PB0km5Rd8flGnygDu5sXLSYSR9Fwu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c1:a6:ab:15:a4:2d:66:a5:a7:02:f5:b7:f7:26:03:bc:2e:b0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED12942F9155F85AD79411B143D3B85417B5D3D
        Validity
            Not Before: Apr  9 19:24:28 2024 GMT
            Not After : Apr 10 22:45:28 2024 GMT
        Subject: CN=F98716A429DF18FA0E1149F9CDA5554C4AE4AFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:e4:be:75:7d:44:20:b3:0e:9d:75:eb:9b:
                    80:18:f9:79:24:60:b3:b1:63:9d:fc:9f:e4:46:15:
                    e5:38:79:f6:47:85:93:6e:c3:3d:f7:72:28:41:9b:
                    94:94:81:13:e2:0c:14:5c:e1:95:00:f5:17:14:3f:
                    4e:32:3a:c3:af:28:d0:34:7d:f1:8f:d0:bb:fc:27:
                    44:73:63:74:76:6c:74:82:7e:02:09:ca:0c:10:0e:
                    89:51:c5:4e:f1:e7:45:de:60:75:14:e4:92:f9:cc:
                    5d:34:f2:56:63:33:09:8c:43:b7:70:15:db:5a:e7:
                    30:9f:70:88:6a:7a:e9:bc:d1:66:76:87:24:cc:95:
                    ba:24:97:55:1d:95:15:34:8a:29:ec:50:5f:ec:5d:
                    fe:ca:e0:c6:b5:a0:13:4e:b7:6f:7e:2b:ab:eb:85:
                    97:21:9e:18:94:7b:0d:66:2f:a8:fa:b2:73:0e:c1:
                    eb:6d:ad:0b:2d:57:33:b4:a4:6e:39:c3:87:62:7c:
                    5f:20:b3:c9:bc:e4:0e:43:0b:38:15:60:30:f1:eb:
                    3b:49:c3:f5:b0:55:68:1f:ae:0d:e3:e0:50:8d:3d:
                    ad:b6:cf:17:21:f6:96:ff:83:50:07:37:c4:2c:0b:
                    2f:2a:c0:a0:9a:25:ea:dd:ce:12:34:8d:db:2d:49:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:87:16:A4:29:DF:18:FA:0E:11:49:F9:CD:A5:55:4C:4A:E4:AF:E2
            X509v3 Authority Key Identifier:
                keyid:CE:D1:29:42:F9:15:5F:85:AD:79:41:1B:14:3D:3B:85:41:7B:5D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED12942F9155F85AD79411B143D3B85417B5D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/CED12942F9155F85AD79411B143D3B85417B5D3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:78:4d:3e:d9:50:33:ac:09:e4:39:79:03:23:78:3f:ff:ba:
         24:aa:f7:fd:a8:e3:0a:ee:fb:63:6c:45:00:47:33:77:c6:40:
         95:20:41:32:fd:4e:c1:9b:44:ae:36:bf:a9:0e:35:24:3b:8a:
         6b:fe:e4:cd:2d:8f:60:ae:7e:00:cd:74:45:8a:07:25:17:01:
         32:82:03:fb:88:80:bf:cc:fe:03:f1:bc:5a:c1:79:80:69:bb:
         ac:27:cb:a7:ef:7f:b1:9e:1a:bf:33:59:21:57:3f:c3:97:27:
         0f:64:8c:3d:26:cf:b3:31:c8:0c:f8:ef:07:72:09:6e:e1:ba:
         39:56:9c:95:b5:09:2d:5f:ad:a1:f7:2d:6e:c2:04:6f:79:3b:
         d6:7f:14:3f:5e:be:74:89:6c:2c:a1:84:57:62:9d:b6:55:37:
         be:61:4f:12:95:80:f7:71:91:f1:b2:3f:99:16:f6:b9:21:81:
         b0:50:f3:74:d6:64:22:c2:1c:6c:be:5b:58:e6:5a:9c:87:27:
         f1:d8:4e:c9:39:8d:5c:5c:d8:e5:be:f2:d4:d9:fe:4f:94:21:
         29:14:f2:59:2c:b0:05:c9:60:93:59:d3:2e:1e:73:5c:5d:41:
         cf:1c:62:49:78:08:5f:f9:43:82:d0:17:1e:86:bb:1e:11:ea:
         cb:8e:46:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIcGmqxWkLWalpwL1t/cmA7wusDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VEMTI5NDJGOTE1NUY4NUFENzk0MTFCMTQzRDNCODU0
MTdCNUQzRDAeFw0yNDA0MDkxOTI0MjhaFw0yNDA0MTAyMjQ1MjhaMDMxMTAvBgNV
BAMTKEY5ODcxNkE0MjlERjE4RkEwRTExNDlGOUNEQTU1NTRDNEFFNEFGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiOS+dX1EILMOnXXrm4AY+Xkk
YLOxY538n+RGFeU4efZHhZNuwz33cihBm5SUgRPiDBRc4ZUA9RcUP04yOsOvKNA0
ffGP0Lv8J0RzY3R2bHSCfgIJygwQDolRxU7x50XeYHUU5JL5zF008lZjMwmMQ7dw
Fdta5zCfcIhqeum80WZ2hyTMlbokl1UdlRU0iinsUF/sXf7K4Ma1oBNOt29+K6vr
hZchnhiUew1mL6j6snMOwettrQstVzO0pG45w4difF8gs8m85A5DCzgVYDDx6ztJ
w/WwVWgfrg3j4FCNPa22zxch9pb/g1AHN8QsCy8qwKCaJerdzhI0jdstSX7lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+YcWpCnfGPoOEUn5zaVVTErkr+IwHwYDVR0j
BBgwFoAUztEpQvkVX4WteUEbFD07hUF7XT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3WEpNczM1NjhG
aHovMC9DRUQxMjk0MkY5MTU1Rjg1QUQ3OTQxMUIxNDNEM0I4NTQxN0I1RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFRDEyOTQyRjkxNTVGODVB
RDc5NDExQjE0M0QzQjg1NDE3QjVEM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3WEpNczM1NjhGaHovMC9D
RUQxMjk0MkY5MTU1Rjg1QUQ3OTQxMUIxNDNEM0I4NTQxN0I1RDNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHnhNPtlQM6wJ5Dl5AyN4P/+6JKr3/ajjCu77Y2xFAEczd8ZAlSBBMv1OwZtE
rja/qQ41JDuKa/7kzS2PYK5+AM10RYoHJRcBMoID+4iAv8z+A/G8WsF5gGm7rCfL
p+9/sZ4avzNZIVc/w5cnD2SMPSbPszHIDPjvB3IJbuG6OVaclbUJLV+tofctbsIE
b3k71n8UP16+dIlsLKGEV2KdtlU3vmFPEpWA93GR8bI/mRb2uSGBsFDzdNZkIsIc
bL5bWOZanIcn8dhOyTmNXFzY5b7y1Nn+T5QhKRTyWSywBclgk1nTLh5zXF1Bzxxi
SXgIX/lDgtAXHoa7HhHqy45Gbw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org