Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/C62B522145CCE2BC061DE87203AFE4124EE24560.mft
File:                     C62B522145CCE2BC061DE87203AFE4124EE24560.mft (raw, json)
Hash identifier:          8PFtF9ONpv74UgGKgIwPwdswFfmZjSESbDj0z16IY1c=
Subject key identifier:   FC:6B:FB:62:6C:E8:5B:76:F0:49:B7:17:1B:83:55:21:E9:63:92:D8
Authority key identifier: C6:2B:52:21:45:CC:E2:BC:06:1D:E8:72:03:AF:E4:12:4E:E2:45:60
Certificate issuer:       /CN=C62B522145CCE2BC061DE87203AFE4124EE24560
Certificate serial:       240CE67557FADE3CA6F4F0D9051FEB2465D702E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62B522145CCE2BC061DE87203AFE4124EE24560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/C62B522145CCE2BC061DE87203AFE4124EE24560.mft
Manifest number:          028F
Signing time:             Mon 15 Apr 2024 07:27:05 +0000
Manifest this update:     Mon 15 Apr 2024 07:22:05 +0000
Manifest next update:     Tue 16 Apr 2024 09:22:05 +0000
Files and hashes:         1: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: q0YGex52F4/SmlWFcIKfx6tAIpgZ/uNR4QjDPXhztvs=)
                          2: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: S32WyJfNS+ztqj5BY6+VaiOeCIhY19gsbAAM1aTS0xs=)
                          3: C62B522145CCE2BC061DE87203AFE4124EE24560.crl (hash: NolKOrR71BOCDLGPQLp7pa0HpPYYPu9su7p4g3i8/10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:e6:75:57:fa:de:3c:a6:f4:f0:d9:05:1f:eb:24:65:d7:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62B522145CCE2BC061DE87203AFE4124EE24560
        Validity
            Not Before: Apr 15 07:22:05 2024 GMT
            Not After : Apr 16 09:22:05 2024 GMT
        Subject: CN=FC6BFB626CE85B76F049B7171B835521E96392D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:8f:6f:74:3d:cf:3e:08:f9:48:36:0a:f5:
                    e6:c1:63:30:5b:84:93:77:5a:56:84:97:ec:88:97:
                    1f:07:d2:e3:dc:e0:cc:dd:b4:5f:16:67:df:53:ee:
                    52:bf:5f:7b:a6:cd:e1:1f:e4:9e:7a:be:48:e0:13:
                    76:00:6a:94:c6:24:4e:f2:85:3a:86:3b:67:f1:19:
                    95:da:8c:49:49:21:2a:90:1b:bd:2d:68:18:8e:f6:
                    64:90:fc:16:3b:5e:b7:bd:d3:86:09:b5:9f:d6:d3:
                    ce:f1:c1:6b:79:db:6b:6e:73:1e:71:db:b1:2d:c8:
                    47:b6:38:03:76:fb:31:0a:5b:84:18:28:a1:65:29:
                    bb:82:6b:0f:2b:b2:3b:66:9d:5a:89:f4:e7:88:95:
                    b3:ea:4f:56:cc:4f:03:4a:0f:07:a2:ec:96:ef:d5:
                    24:65:4c:e8:58:83:55:2b:50:37:fc:cb:8a:ff:d0:
                    6f:85:25:7e:96:04:94:fc:7b:3f:6a:92:3f:a2:eb:
                    fc:cc:c0:a3:25:ad:30:55:d2:06:b0:b1:f5:c3:4e:
                    a4:b6:1b:c3:b2:c3:ff:27:d6:a2:e2:9d:4d:4a:16:
                    43:d4:8a:88:de:be:e2:5d:d3:9b:a7:44:44:61:16:
                    0c:4c:1e:c3:82:aa:83:78:8c:2e:bc:6b:c4:2a:7f:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:FB:62:6C:E8:5B:76:F0:49:B7:17:1B:83:55:21:E9:63:92:D8
            X509v3 Authority Key Identifier:
                keyid:C6:2B:52:21:45:CC:E2:BC:06:1D:E8:72:03:AF:E4:12:4E:E2:45:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/C62B522145CCE2BC061DE87203AFE4124EE24560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62B522145CCE2BC061DE87203AFE4124EE24560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/C62B522145CCE2BC061DE87203AFE4124EE24560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:e2:d5:81:3c:78:38:23:c1:4e:db:21:78:ca:d7:5a:0a:
         5e:1d:82:de:b4:c7:be:43:f2:9e:29:03:a4:d1:14:b6:5a:7c:
         4a:45:c9:47:79:7d:81:1b:55:39:17:86:0b:68:5f:ef:52:a9:
         9b:ff:9e:be:76:4e:f6:7c:43:cd:85:7d:98:50:b5:ea:d5:5a:
         9d:2f:e9:39:4a:57:12:ba:78:8b:30:66:60:c7:cc:76:ee:68:
         a5:7c:c5:26:c6:be:e1:b7:ad:1b:1e:47:19:1d:52:4c:21:38:
         11:b0:b5:fb:52:87:07:fc:f5:f2:18:91:80:f5:a4:c2:a7:6f:
         a1:bb:da:2a:45:24:cd:91:8d:56:a1:a4:43:d5:86:42:8a:cb:
         d3:25:b9:fc:69:9e:fd:f0:87:2c:6a:7b:03:cc:fe:e7:10:bb:
         c4:3b:1b:cb:58:53:e8:da:4b:9b:92:3a:da:9e:12:c7:3b:48:
         82:47:d6:40:b9:4f:54:34:da:2e:5e:f7:54:f5:cc:7c:35:49:
         27:2a:82:f5:d0:2c:1c:2e:a9:34:9a:3e:bc:4e:c6:99:a3:56:
         5b:66:e4:7c:ad:e8:03:50:a4:1e:98:4b:7f:f1:53:29:0d:7a:
         f3:37:f7:4f:31:bb:06:0d:81:3d:7b:65:1b:f0:42:76:2b:13:
         d9:ed:c0:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJAzmdVf63jym9PDZBR/rJGXXAuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYyQjUyMjE0NUNDRTJCQzA2MURFODcyMDNBRkU0MTI0
RUUyNDU2MDAeFw0yNDA0MTUwNzIyMDVaFw0yNDA0MTYwOTIyMDVaMDMxMTAvBgNV
BAMTKEZDNkJGQjYyNkNFODVCNzZGMDQ5QjcxNzFCODM1NTIxRTk2MzkyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOno9vdD3PPgj5SDYK9ebBYzBb
hJN3WlaEl+yIlx8H0uPc4MzdtF8WZ99T7lK/X3umzeEf5J56vkjgE3YAapTGJE7y
hTqGO2fxGZXajElJISqQG70taBiO9mSQ/BY7Xre904YJtZ/W087xwWt522tucx5x
27EtyEe2OAN2+zEKW4QYKKFlKbuCaw8rsjtmnVqJ9OeIlbPqT1bMTwNKDwei7Jbv
1SRlTOhYg1UrUDf8y4r/0G+FJX6WBJT8ez9qkj+i6/zMwKMlrTBV0gawsfXDTqS2
G8Oyw/8n1qLinU1KFkPUiojevuJd05unRERhFgxMHsOCqoN4jC68a8Qqf8bbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/Gv7YmzoW3bwSbcXG4NVIeljktgwHwYDVR0j
BBgwFoAUxitSIUXM4rwGHehyA6/kEk7iRWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWd4Q1pSMmZNQTllVmlFZmJtYTFQMlhwMURHUUZ4VlZ1cGVrY243UHJO
Z24vMC9DNjJCNTIyMTQ1Q0NFMkJDMDYxREU4NzIwM0FGRTQxMjRFRTI0NTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2MkI1MjIxNDVDQ0UyQkMw
NjFERTg3MjAzQUZFNDEyNEVFMjQ1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWd4Q1pSMmZNQTllVmlFZmJtYTFQMlhwMURHUUZ4VlZ1cGVrY243UHJOZ24vMC9D
NjJCNTIyMTQ1Q0NFMkJDMDYxREU4NzIwM0FGRTQxMjRFRTI0NTYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHbzi1YE8eDgjwU7bIXjK11oKXh2C3rTHvkPynikDpNEUtlp8SkXJR3l9gRtV
OReGC2hf71Kpm/+evnZO9nxDzYV9mFC16tVanS/pOUpXErp4izBmYMfMdu5opXzF
Jsa+4betGx5HGR1STCE4EbC1+1KHB/z18hiRgPWkwqdvobvaKkUkzZGNVqGkQ9WG
QorL0yW5/Gme/fCHLGp7A8z+5xC7xDsby1hT6NpLm5I62p4SxztIgkfWQLlPVDTa
Ll73VPXMfDVJJyqC9dAsHC6pNJo+vE7GmaNWW2bkfK3oA1CkHphLf/FTKQ168zf3
TzG7Bg2BPXtlG/BCdisT2e3AKw==
-----END CERTIFICATE-----