Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft
File:                     B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft (raw, json)
Hash identifier:          6ToHEDGueEMIqhhvErbniHko6OBT7BFZUZdwNW8uKTA=
Subject key identifier:   1E:56:3D:40:14:C7:9C:AD:A3:57:6E:57:90:09:01:EC:58:A9:38:A2
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Certificate issuer:       /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial:       01D22710AB63A7A5EA7547FD58F895860D42DBB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft
Manifest number:          033D
Signing time:             Mon 15 Apr 2024 05:04:35 +0000
Manifest this update:     Mon 15 Apr 2024 04:59:35 +0000
Manifest next update:     Tue 16 Apr 2024 05:17:35 +0000
Files and hashes:         1: 34352e3137302e37322e302f32332d3233203d3e20323638313533.roa (hash: NLTqUFdHD+LASe+sKlRzxXJ0fXLwL957xspgsMPeLIY=)
                          2: 34352e3137302e37352e302f32342d3234203d3e20323638313533.roa (hash: gaCH7r0gwmsPSPu4sNf1PQvXnmBa5nOKeaHVQ+gFPks=)
                          3: 34352e3137302e37342e302f32342d3234203d3e20323638313533.roa (hash: D0BFxN4GEAu1kTObX7foartmQqDtm+jEtxN7MzAxbn8=)
                          4: 34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (hash: FOJPqp6ao9QNFlG142FDPYZEtlpSlyggTLJn0c4qunY=)
                          5: B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl (hash: NYQOdXpyvSAKBXihUgOFgweQ8eNgexaayjKKOjwdq7A=)
                          6: 34352e3137302e37332e302f32342d3234203d3e20323638313533.roa (hash: Mx7QAhCg5lptqi5TyJcUy8Gf2qMRO0jvC8crdZH9WLw=)
                          7: 323830343a353864383a3a2f33322d3332203d3e20323638313533.roa (hash: 67wZZ+T6Dcm02fTIVkxpRwyUXbqFjSytO5eNQEIhK3U=)
                          8: 34352e3137302e37342e302f32332d3233203d3e20323638313533.roa (hash: ncw8of3XyfjeocyV8zNjjOXifK0snz0pHVJtVCU+eK0=)
                          9: 34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (hash: B8RxU6sybJzzR1lw1x6imyVPQIusPn6/BwCMc4UzjQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:27:10:ab:63:a7:a5:ea:75:47:fd:58:f8:95:86:0d:42:db:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Validity
            Not Before: Apr 15 04:59:35 2024 GMT
            Not After : Apr 16 05:17:35 2024 GMT
        Subject: CN=1E563D4014C79CADA3576E57900901EC58A938A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:06:aa:08:f8:54:ac:e4:b0:d8:2a:9b:b7:
                    ec:ea:d6:0e:79:02:4a:84:61:ff:32:5c:21:1d:48:
                    eb:7a:10:c6:ae:4b:b8:b7:13:52:08:07:3a:d3:5c:
                    b9:fe:df:8e:11:a9:b2:63:5d:39:15:27:47:ee:c3:
                    c0:ba:3d:4c:91:c1:08:13:97:c8:67:fe:18:b4:de:
                    52:04:50:28:f6:eb:b1:9e:ec:ed:e3:1c:b8:32:72:
                    82:f9:ab:4f:ca:b4:bd:7c:5a:7a:a6:2a:e3:8b:a7:
                    4a:83:61:4f:82:41:81:cf:cc:7c:e4:30:7e:04:33:
                    aa:05:8c:f1:09:43:1c:2a:93:42:61:47:44:b6:61:
                    da:46:ea:8d:cf:cc:e2:21:4b:ae:cb:70:04:6c:b2:
                    5d:77:7e:3e:59:dd:a0:a7:1b:85:0e:a2:ef:fa:04:
                    79:b6:28:01:85:98:95:83:7a:d5:71:49:b5:a5:79:
                    61:9e:3b:79:d1:44:e4:d8:34:25:db:a0:66:11:76:
                    20:cf:ee:82:93:52:d0:6b:ff:74:8a:a9:d0:57:0e:
                    97:22:94:d9:a2:ef:68:19:1f:83:1c:57:db:b8:26:
                    b3:ff:03:14:83:40:4e:cc:ae:e9:e1:5d:c6:b8:bc:
                    97:db:ed:b5:a8:da:db:dd:34:66:f2:05:9a:b9:06:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:3D:40:14:C7:9C:AD:A3:57:6E:57:90:09:01:EC:58:A9:38:A2
            X509v3 Authority Key Identifier:
                keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:d0:bc:5d:cb:ae:43:d7:df:99:18:83:2e:e9:19:2e:8f:
         2f:13:76:da:50:dd:d1:a4:44:72:aa:e9:ac:38:a9:ec:26:4a:
         07:69:8a:bd:0c:0a:1b:37:4c:20:78:8d:73:e8:3e:a8:3f:54:
         bb:cc:2d:d8:f5:4e:a6:e6:2b:42:9a:09:f7:dd:a0:82:ba:e9:
         74:b4:4f:2a:33:e0:71:28:63:80:3c:5e:42:a4:1d:42:5c:84:
         07:ec:9a:77:59:d0:f7:7d:35:9c:7a:95:b6:4c:cf:bf:2f:67:
         91:f2:94:99:14:b6:e5:e7:d7:35:79:6c:5b:a3:70:62:83:3f:
         7c:2b:40:00:f8:08:13:37:ba:13:2f:20:90:3c:07:fd:63:16:
         2d:4c:cd:2b:cb:d6:be:67:d0:e0:88:c7:d0:fd:a8:77:bd:d7:
         d7:f3:73:3e:2d:6b:43:62:00:0d:2e:2c:c6:73:10:a7:af:8e:
         4d:c4:10:5c:8b:49:75:fe:78:a1:69:e6:2a:4a:3a:d1:3f:65:
         26:f6:49:dc:4f:a3:61:a2:7b:98:c5:0e:46:9f:a7:d3:fe:06:
         e0:5e:96:ea:6d:8b:29:ee:13:1e:88:cb:69:98:5b:23:16:f1:
         f6:d9:e8:d8:58:72:e6:af:b2:7f:eb:62:49:6f:c9:15:ba:50:
         80:ec:b7:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAdInEKtjp6XqdUf9WPiVhg1C27IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcxQTc0Mzc0QzVCMUI2NUI5NDU3RTAyQzNENzJCOEZE
NkU1MDRENTAeFw0yNDA0MTUwNDU5MzVaFw0yNDA0MTYwNTE3MzVaMDMxMTAvBgNV
BAMTKDFFNTYzRDQwMTRDNzlDQURBMzU3NkU1NzkwMDkwMUVDNThBOTM4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCygaqCPhUrOSw2Cqbt+zq1g55
AkqEYf8yXCEdSOt6EMauS7i3E1IIBzrTXLn+344RqbJjXTkVJ0fuw8C6PUyRwQgT
l8hn/hi03lIEUCj267Ge7O3jHLgycoL5q0/KtL18WnqmKuOLp0qDYU+CQYHPzHzk
MH4EM6oFjPEJQxwqk0JhR0S2YdpG6o3PzOIhS67LcARssl13fj5Z3aCnG4UOou/6
BHm2KAGFmJWDetVxSbWleWGeO3nRROTYNCXboGYRdiDP7oKTUtBr/3SKqdBXDpci
lNmi72gZH4McV9u4JrP/AxSDQE7MrunhXca4vJfb7bWo2tvdNGbyBZq5BmIJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHlY9QBTHnK2jV25XkAkB7FipOKIwHwYDVR0j
BBgwFoAUtxp0N0xbG2W5RX4Cw9crj9blBNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4
SzEvMC9CNzFBNzQzNzRDNUIxQjY1Qjk0NTdFMDJDM0Q3MkI4RkQ2RTUwNEQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3MUE3NDM3NEM1QjFCNjVC
OTQ1N0UwMkMzRDcyQjhGRDZFNTA0RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4SzEvMC9C
NzFBNzQzNzRDNUIxQjY1Qjk0NTdFMDJDM0Q3MkI4RkQ2RTUwNEQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHtvQvF3LrkPX35kYgy7pGS6PLxN22lDd0aREcqrprDip7CZKB2mKvQwKGzdM
IHiNc+g+qD9Uu8wt2PVOpuYrQpoJ992ggrrpdLRPKjPgcShjgDxeQqQdQlyEB+ya
d1nQ9301nHqVtkzPvy9nkfKUmRS25efXNXlsW6NwYoM/fCtAAPgIEze6Ey8gkDwH
/WMWLUzNK8vWvmfQ4IjH0P2od73X1/NzPi1rQ2IADS4sxnMQp6+OTcQQXItJdf54
oWnmKko60T9lJvZJ3E+jYaJ7mMUORp+n0/4G4F6W6m2LKe4THojLaZhbIxbx9tno
2Fhy5q+yf+tiSW/JFbpQgOy35A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org