Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft
File:                     8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft (raw, json)
Hash identifier:          dJRSRFJQs9zrAx58cbOHGVOdO8FP+dTmNvBNHfWwVjg=
Subject key identifier:   7B:7F:C3:3B:43:1E:0B:97:D9:61:AB:1D:7D:47:E7:4F:70:CC:A6:9C
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       7BF5D4E57C983030698662AFCB00DAF21DC41521
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft
Manifest number:          0770
Signing time:             Mon 15 Apr 2024 06:26:40 +0000
Manifest this update:     Mon 15 Apr 2024 06:21:40 +0000
Manifest next update:     Tue 16 Apr 2024 07:46:40 +0000
Files and hashes:         1: 3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa (hash: dwBDqMx/eDJ1sDf948xTmMGn7E7/q167aXIyi0RA2ak=)
                          2: 8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl (hash: QrORGei+3LDZa9OA38uo5mGBXYKqaBGaIs1lc3+Pml4=)
                          3: 323830343a326137633a3a2f33322d3438203d3e20323634303735.roa (hash: 8krOqkBWIwuT3vnyCKuhOI/MYkyUQcoXi10SYqEvwrs=)
                          4: 34352e3136362e3136342e302f32322d3234203d3e20323634303735.roa (hash: UKn/vmpu3TQL7QmiM6iPiO0DfnT4aZi973jPPsOAOWw=)
                          5: 3136382e3232372e35322e302f32322d3234203d3e20323634303735.roa (hash: zfJwcm4AGXe1LfQvvXb+BawKPaL6AQZfBEH3knxsUOo=)
                          6: 3134332e302e32342e302f32322d3234203d3e20323634303735.roa (hash: nICRUwzywHOTzCoFG4/lDmHS2bRuouebwt9Q0ynVIBQ=)
                          7: 3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa (hash: SaQPSVOU0Q7MlDptQ3QnhOL4Z+wKA0/JaXzcsUzfZwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f5:d4:e5:7c:98:30:30:69:86:62:af:cb:00:da:f2:1d:c4:15:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Apr 15 06:21:40 2024 GMT
            Not After : Apr 16 07:46:40 2024 GMT
        Subject: CN=7B7FC33B431E0B97D961AB1D7D47E74F70CCA69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:f7:9d:eb:64:5e:01:15:8f:03:40:29:1d:
                    56:d2:ab:35:d3:bc:47:0d:d0:6f:65:1f:06:5a:91:
                    47:dd:ed:6b:7f:3f:de:cb:01:c2:9e:eb:76:83:bb:
                    3d:c5:f9:7c:da:d8:ed:dc:de:70:f3:18:81:1b:3c:
                    a8:61:9a:ac:97:4b:97:f5:05:da:5d:97:5f:d8:1c:
                    33:e4:73:98:ed:23:e8:52:cc:b2:9a:6a:30:36:81:
                    ba:7d:47:4c:58:d3:59:14:43:81:ac:11:89:ec:36:
                    6b:6b:89:bb:b5:6e:2d:4d:77:bc:1f:8c:25:85:74:
                    5d:eb:f5:6e:79:14:80:fc:4a:e0:68:84:63:6f:28:
                    03:d7:a4:39:fa:1f:fc:0a:75:fd:a0:04:f5:46:08:
                    0f:90:47:3f:15:dc:8e:14:9b:69:75:44:97:a3:9c:
                    20:ff:24:ea:fd:b6:cd:e1:09:23:e5:9f:ca:3c:ce:
                    96:d3:47:21:61:ae:91:a0:b2:f3:0c:12:fe:9a:86:
                    58:d1:ad:a8:bb:25:16:d4:38:3c:d3:5a:cd:9f:e4:
                    82:20:ca:3c:71:d2:5d:9f:d2:b2:e3:c9:17:6f:bc:
                    ef:64:ad:11:8e:ba:bd:fc:ba:55:d1:55:89:a1:e0:
                    8e:32:cb:01:de:97:42:f9:e0:49:57:4e:54:e0:0c:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7F:C3:3B:43:1E:0B:97:D9:61:AB:1D:7D:47:E7:4F:70:CC:A6:9C
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:f2:f1:99:af:1f:7d:ae:51:6f:2a:4a:ba:b1:d0:a0:8f:
         5a:ef:7a:48:e4:b9:b4:aa:9e:8c:46:46:d4:45:86:18:a0:99:
         2b:2d:8c:43:8f:73:13:8d:58:9e:92:e5:9e:d2:7f:38:5e:db:
         bc:0a:f4:21:7e:c1:7d:49:b9:c0:4a:0c:4e:bb:9b:7a:34:98:
         c2:35:64:3f:ef:e0:af:3a:0c:33:73:cb:1b:cf:d4:dd:a9:45:
         e3:bd:35:23:a3:30:8b:e6:82:30:f2:45:dd:9e:01:81:fc:e2:
         70:01:3c:05:c7:c5:90:c1:7d:9f:d5:91:a8:7e:1b:62:cf:8d:
         c7:17:27:e3:e9:6c:20:bb:a7:27:8f:58:84:bb:db:a5:40:83:
         79:15:15:23:b8:f8:b1:52:48:ec:69:5d:3b:2b:74:e5:98:0e:
         60:29:97:83:e6:c7:01:e0:e8:be:88:ff:da:8e:c4:c7:35:cf:
         f4:5b:a7:6d:23:17:ff:b3:72:d9:af:8c:e3:9c:37:e4:7b:4c:
         4f:1d:49:40:bb:b7:a0:f4:a0:2a:a8:90:96:f3:77:95:a7:b3:
         6e:e5:12:36:25:5c:bc:2d:62:08:b2:e5:ef:97:fc:65:cc:b2:
         ac:14:08:8c:f4:9b:d2:e5:c7:3d:d5:c4:d9:5a:b4:a1:fa:9b:
         44:57:c8:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe/XU5XyYMDBphmKvywDa8h3EFSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2M0MwRUU2OEQ3MTRGRDZFQjVGMTczOUM3RkQwMDQ1
QzRDMTIyODAeFw0yNDA0MTUwNjIxNDBaFw0yNDA0MTYwNzQ2NDBaMDMxMTAvBgNV
BAMTKDdCN0ZDMzNCNDMxRTBCOTdEOTYxQUIxRDdENDdFNzRGNzBDQ0E2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWq/ed62ReARWPA0ApHVbSqzXT
vEcN0G9lHwZakUfd7Wt/P97LAcKe63aDuz3F+Xza2O3c3nDzGIEbPKhhmqyXS5f1
Bdpdl1/YHDPkc5jtI+hSzLKaajA2gbp9R0xY01kUQ4GsEYnsNmtribu1bi1Nd7wf
jCWFdF3r9W55FID8SuBohGNvKAPXpDn6H/wKdf2gBPVGCA+QRz8V3I4Um2l1RJej
nCD/JOr9ts3hCSPln8o8zpbTRyFhrpGgsvMMEv6ahljRrai7JRbUODzTWs2f5IIg
yjxx0l2f0rLjyRdvvO9krRGOur38ulXRVYmh4I4yywHel0L54ElXTlTgDDifAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUe3/DO0MeC5fZYasdfUfnT3DMppwwHwYDVR0j
BBgwFoAUimPA7mjXFP1utfFznH/QBFxMEigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMC84QTYzQzBFRTY4RDcxNEZENkVCNUYxNzM5QzdGRDAwNDVDNEMxMjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNjNDMEVFNjhENzE0RkQ2
RUI1RjE3MzlDN0ZEMDA0NUM0QzEyMjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMC84
QTYzQzBFRTY4RDcxNEZENkVCNUYxNzM5QzdGRDAwNDVDNEMxMjI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIP3y8ZmvH32uUW8qSrqx0KCPWu96SOS5tKqejEZG1EWGGKCZKy2MQ49zE41Y
npLlntJ/OF7bvAr0IX7BfUm5wEoMTrubejSYwjVkP+/grzoMM3PLG8/U3alF4701
I6Mwi+aCMPJF3Z4BgfzicAE8BcfFkMF9n9WRqH4bYs+Nxxcn4+lsILunJ49YhLvb
pUCDeRUVI7j4sVJI7GldOyt05ZgOYCmXg+bHAeDovoj/2o7ExzXP9FunbSMX/7Ny
2a+M45w35HtMTx1JQLu3oPSgKqiQlvN3laezbuUSNiVcvC1iCLLl75f8ZcyyrBQI
jPSb0uXHPdXE2Vq0ofqbRFfI3Q==
-----END CERTIFICATE-----