Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.mft
File:                     D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.mft (raw, json)
Hash identifier:          Ol2lHL+RWo4AUZF31PoMpKWZVKQ9kdYPOa1sb6a51Jc=
Subject key identifier:   3C:5A:F0:68:67:53:4F:B6:A1:7B:1B:4D:E5:EE:48:71:35:FA:B5:FA
Authority key identifier: D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34
Certificate issuer:       /CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
Certificate serial:       3CAC2E2E870345D2EF90A4DF27EB4AE027E6A0A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.mft
Manifest number:          016E
Signing time:             Mon 15 Apr 2024 08:08:36 +0000
Manifest this update:     Mon 15 Apr 2024 08:03:36 +0000
Manifest next update:     Tue 16 Apr 2024 09:17:36 +0000
Files and hashes:         1: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: KVkS5zoeuiWVQsv9Qv5660WuQ0JVQHLEFVpo7+k7eYc=)
                          2: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: iH93TG9+/feEwWM5N/Zq8MRQsC4scalYocgKzg9JNr0=)
                          3: D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl (hash: xvM8MRda4oTmjId4kPepClU8ZT4a8hvmgMbJaXOkslA=)
                          4: 323830343a386165303a3a2f33322d3332203d3e203631363130.roa (hash: 93pdcZi973T6Sx4UV0SzQVGdzU6aWF+JNpgYcuoT8jE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:2e:2e:87:03:45:d2:ef:90:a4:df:27:eb:4a:e0:27:e6:a0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34
        Validity
            Not Before: Apr 15 08:03:36 2024 GMT
            Not After : Apr 16 09:17:36 2024 GMT
        Subject: CN=3C5AF06867534FB6A17B1B4DE5EE487135FAB5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:48:79:97:25:70:cf:a9:8c:2a:6e:4c:c0:
                    af:e8:28:05:21:4c:b8:43:1b:c2:33:2b:5f:50:88:
                    a6:02:ff:79:15:35:49:96:67:eb:3f:55:89:03:8a:
                    0e:b3:c1:85:fc:0b:19:89:59:09:fe:79:60:37:3a:
                    f1:fd:66:4d:05:84:56:4c:ba:eb:7b:ed:86:2e:3c:
                    21:cc:72:52:72:0a:44:a3:3d:d1:0c:36:98:42:f7:
                    90:93:3a:0d:0c:17:7b:21:b7:a5:e5:1a:6f:00:fc:
                    15:5a:d6:8f:c1:1b:e2:d3:85:d6:32:f3:47:0e:01:
                    ad:83:4a:41:06:17:e3:1c:51:fb:07:00:e0:18:04:
                    c2:7c:db:ac:16:de:1a:27:ea:64:57:26:56:cf:35:
                    c9:5d:69:94:23:d6:2b:99:ab:90:f3:40:f5:89:e7:
                    79:10:79:16:b9:ec:91:d7:7f:f3:8d:3a:50:19:84:
                    43:f7:bc:85:5b:dd:ca:ac:84:a1:32:60:35:36:88:
                    e8:ce:09:15:cb:3d:fb:31:c0:96:d4:c4:c0:bc:8e:
                    8a:c3:4c:07:6c:4f:50:81:e5:63:25:9d:c9:66:c9:
                    2c:e2:d5:63:62:9d:bd:40:78:c0:f5:3d:08:d4:db:
                    fc:d3:f1:50:c1:c8:98:46:7a:12:e4:21:00:80:91:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5A:F0:68:67:53:4F:B6:A1:7B:1B:4D:E5:EE:48:71:35:FA:B5:FA
            X509v3 Authority Key Identifier:
                keyid:D8:BD:6B:C3:D4:F7:0E:CD:0B:8C:9B:80:DA:40:91:EA:74:CE:3E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/D8BD6BC3D4F70ECD0B8C9B80DA4091EA74CE3E34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:bb:04:22:e7:7d:e1:54:c2:10:75:a8:8f:02:b8:98:97:
         a1:18:28:0d:02:d4:39:15:b7:ab:2a:05:80:b8:89:f9:b0:61:
         90:c3:38:61:0a:24:a1:60:09:2d:df:9c:ca:da:09:ee:98:07:
         8a:72:32:e1:05:7f:cb:99:98:d8:fc:31:ce:bb:62:ef:1e:93:
         84:8a:ed:50:02:a3:9a:20:11:4c:70:48:54:fc:49:e5:fa:fd:
         4b:63:b0:8a:1a:bf:63:dc:4c:ff:53:09:ba:be:66:c2:39:5c:
         01:93:5b:27:04:bf:71:e3:49:1a:78:6f:08:31:a9:83:b5:aa:
         44:00:43:d0:62:0d:bc:4c:7d:b0:8f:25:3f:27:1d:59:51:81:
         c8:ec:05:14:b4:4d:5d:df:9d:89:00:64:31:0f:ff:87:ba:b4:
         11:0a:79:cf:89:89:94:80:3a:0c:3e:89:d2:c0:5f:8d:7f:65:
         58:f4:db:05:2d:22:d6:34:08:35:30:29:9f:2c:02:c7:a1:0f:
         dc:bb:d4:76:ac:be:2f:74:a5:c1:36:c3:b6:56:ff:85:27:a7:
         ae:32:5d:47:d2:e0:16:55:41:03:a9:46:fa:00:d5:9f:5a:11:
         5f:a4:e6:ff:06:51:29:42:b8:cc:2f:06:40:a2:53:e7:c1:bb:
         15:ba:d4:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPKwuLocDRdLvkKTfJ+tK4CfmoKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCRDZCQzNENEY3MEVDRDBCOEM5QjgwREE0MDkxRUE3
NENFM0UzNDAeFw0yNDA0MTUwODAzMzZaFw0yNDA0MTYwOTE3MzZaMDMxMTAvBgNV
BAMTKDNDNUFGMDY4Njc1MzRGQjZBMTdCMUI0REU1RUU0ODcxMzVGQUI1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidkh5lyVwz6mMKm5MwK/oKAUh
TLhDG8IzK19QiKYC/3kVNUmWZ+s/VYkDig6zwYX8CxmJWQn+eWA3OvH9Zk0FhFZM
uut77YYuPCHMclJyCkSjPdEMNphC95CTOg0MF3sht6XlGm8A/BVa1o/BG+LThdYy
80cOAa2DSkEGF+McUfsHAOAYBMJ826wW3hon6mRXJlbPNcldaZQj1iuZq5DzQPWJ
53kQeRa57JHXf/ONOlAZhEP3vIVb3cqshKEyYDU2iOjOCRXLPfsxwJbUxMC8jorD
TAdsT1CB5WMlnclmySzi1WNinb1AeMD1PQjU2/zT8VDByJhGehLkIQCAkcblAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPFrwaGdTT7ahextN5e5IcTX6tfowHwYDVR0j
BBgwFoAU2L1rw9T3Ds0LjJuA2kCR6nTOPjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51
RlcvMC9EOEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4QkQ2QkMzRDRGNzBFQ0Qw
QjhDOUI4MERBNDA5MUVBNzRDRTNFMzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMC9E
OEJENkJDM0Q0RjcwRUNEMEI4QzlCODBEQTQwOTFFQTc0Q0UzRTM0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACEu7BCLnfeFUwhB1qI8CuJiXoRgoDQLUORW3qyoFgLiJ+bBhkMM4YQokoWAJ
Ld+cytoJ7pgHinIy4QV/y5mY2Pwxzrti7x6ThIrtUAKjmiARTHBIVPxJ5fr9S2Ow
ihq/Y9xM/1MJur5mwjlcAZNbJwS/ceNJGnhvCDGpg7WqRABD0GINvEx9sI8lPycd
WVGByOwFFLRNXd+diQBkMQ//h7q0EQp5z4mJlIA6DD6J0sBfjX9lWPTbBS0i1jQI
NTApnywCx6EP3LvUdqy+L3SlwTbDtlb/hSenrjJdR9LgFlVBA6lG+gDVn1oRX6Tm
/wZRKUK4zC8GQKJT58G7FbrU2g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org