Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft
File:                     BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft (raw, json)
Hash identifier:          LFNLSmIA1/gq15buHmUVPqG5Tp35FoqKF1LvCB9TwhM=
Subject key identifier:   A7:8C:51:F4:5B:91:DC:44:EA:AC:6F:16:5F:96:90:34:2D:94:06:98
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       7764BC72D6CCB98B13AF9A6F3DED263C5AD73748
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft
Manifest number:          0125
Signing time:             Sun 14 Apr 2024 18:16:46 +0000
Manifest this update:     Sun 14 Apr 2024 18:11:46 +0000
Manifest next update:     Mon 15 Apr 2024 20:10:46 +0000
Files and hashes:         1: 3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (hash: IAA6e3q/BiJ2leqaCMmqzcEE7HqamcV/aDiQ1N5bWCM=)
                          2: 3133382e33362e3139342e302f32332d3233203d3e20323634353835.roa (hash: 4kUj0pp63KrR4JwkKXwQ2A62ZJ6hQVTLM8njZ0sWOnM=)
                          3: 323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (hash: BBYHZzVJBMEuL+W+JYQJALJFA+PI9PR2Z2O1QGfIg48=)
                          4: 3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa (hash: 0OIJn8oMkpyQy2YyaEWRHp2GlBykYkady5glD2hu7Bg=)
                          5: 3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa (hash: 4B4cvqOhulTYf+YklKD426oEkblsdMwdRQf8MI7QVWM=)
                          6: BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl (hash: 7/T1B5vwRs0lMM3+h6obLlBqEEyHwmfZ9zUStkFcv9s=)
                          7: 3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa (hash: a1HfMbs/dyusdTLFwuUc7b7CnBhl8c5lBTbXaV6IHFM=)
                          8: 3133382e33362e3139322e302f32342d3234203d3e20323634353835.roa (hash: DvsdVdRA+qMrPFnwgxYlobg2ywa9jkuPuA8nBwQe594=)
                          9: 3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa (hash: lRjSAriTYOl/LcdxWPcuw8TlDoxJmoSSQ4xT81ncJ7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:64:bc:72:d6:cc:b9:8b:13:af:9a:6f:3d:ed:26:3c:5a:d7:37:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Apr 14 18:11:46 2024 GMT
            Not After : Apr 15 20:10:46 2024 GMT
        Subject: CN=A78C51F45B91DC44EAAC6F165F9690342D940698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:8b:dc:96:bd:75:15:45:d1:0b:28:f0:c8:
                    db:c3:b2:3b:41:99:63:c5:c2:44:88:9c:e6:14:b7:
                    b9:f7:b4:15:44:1a:6a:29:bf:fc:87:af:0d:c8:0e:
                    db:23:0d:be:99:59:74:9c:e0:87:63:df:bb:e6:ae:
                    58:0c:25:7d:8c:9b:43:91:c9:5a:be:c1:b8:e2:22:
                    2e:50:55:fc:b6:eb:28:0e:60:ea:c7:4b:4b:a1:69:
                    8d:62:6d:3b:94:d9:46:26:e4:85:bd:6a:6a:77:c3:
                    a1:58:67:7c:a5:1f:96:f0:6a:40:f3:bb:8b:8e:22:
                    19:eb:fd:3b:94:56:ee:8b:82:20:0d:7e:32:23:e7:
                    bf:50:5e:af:a5:e1:25:78:56:f8:b2:59:30:7b:70:
                    15:0f:e5:9c:4d:a2:72:43:6a:33:db:16:45:32:d9:
                    1a:a0:16:c6:d5:8e:42:75:1c:a6:4a:70:61:f3:06:
                    4c:3b:8c:90:6d:31:fe:bd:1b:c3:db:82:d8:14:eb:
                    dd:73:56:1a:74:6a:0a:0a:f4:3a:ea:f3:f6:65:6f:
                    f5:fb:ae:de:72:2e:9c:2d:22:ad:b0:33:86:ef:f2:
                    14:a5:06:a3:6d:f7:ea:ce:3b:6a:91:03:9f:4c:1a:
                    34:36:cf:e6:75:1e:9e:65:68:35:78:65:75:bd:28:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:51:F4:5B:91:DC:44:EA:AC:6F:16:5F:96:90:34:2D:94:06:98
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:24:1a:47:ff:25:35:d6:d4:eb:05:23:4c:4b:54:a8:d3:
         1c:22:a1:43:3d:2b:5e:89:41:9d:39:06:4c:9a:9f:98:ad:ca:
         50:0b:0d:0e:67:92:fb:42:b7:e3:c4:c1:3f:f4:58:1a:ac:e4:
         e1:a1:88:c4:b9:38:64:71:d3:a2:41:7b:24:be:bf:2e:9d:2a:
         c8:d8:91:ea:4b:cd:2e:d3:cb:43:c3:3c:f5:21:01:0e:81:6a:
         b3:d0:7d:62:f9:e1:dc:ec:a4:70:44:46:1a:2c:1d:87:db:a4:
         12:a1:ce:aa:27:fa:3a:c7:48:44:24:5d:c0:5f:ff:ee:de:8f:
         59:e9:6f:35:95:58:7d:25:31:3d:ba:8c:48:9b:76:99:5b:e7:
         8d:08:d1:cc:70:2a:3b:8b:ab:8d:9c:eb:59:fd:7e:69:18:2e:
         d2:b4:2d:89:ac:70:89:47:c4:ce:31:be:cb:30:3b:27:8f:f0:
         91:9d:5d:a5:9b:35:e4:7d:a4:70:de:cc:21:5e:4d:83:58:4b:
         49:f0:da:78:df:d6:21:cf:f9:7c:26:72:ac:42:56:59:4b:2b:
         bf:49:52:f1:66:5e:d2:0a:64:b0:bc:6c:87:ea:a4:df:43:0d:
         fc:04:6a:a1:2e:ac:77:63:e9:ec:a4:d5:e4:87:87:78:2e:38:
         f6:b7:1d:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd2S8ctbMuYsTr5pvPe0mPFrXN0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2MDFFODhFRkI5MTVFRUZCOTM4RjVFRUUxNkQwOEI4
REVCRkQwMDAeFw0yNDA0MTQxODExNDZaFw0yNDA0MTUyMDEwNDZaMDMxMTAvBgNV
BAMTKEE3OEM1MUY0NUI5MURDNDRFQUFDNkYxNjVGOTY5MDM0MkQ5NDA2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMIvclr11FUXRCyjwyNvDsjtB
mWPFwkSInOYUt7n3tBVEGmopv/yHrw3IDtsjDb6ZWXSc4Idj37vmrlgMJX2Mm0OR
yVq+wbjiIi5QVfy26ygOYOrHS0uhaY1ibTuU2UYm5IW9amp3w6FYZ3ylH5bwakDz
u4uOIhnr/TuUVu6LgiANfjIj579QXq+l4SV4VviyWTB7cBUP5ZxNonJDajPbFkUy
2RqgFsbVjkJ1HKZKcGHzBkw7jJBtMf69G8PbgtgU691zVhp0agoK9Drq8/Zlb/X7
rt5yLpwtIq2wM4bv8hSlBqNt9+rOO2qRA59MGjQ2z+Z1Hp5laDV4ZXW9KGHHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp4xR9FuR3ETqrG8WX5aQNC2UBpgwHwYDVR0j
BBgwFoAUvGAeiO+5Fe77k49e7hbQi43r/QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC9CQzYwMUU4OEVGQjkxNUVFRkI5MzhGNUVFRTE2RDA4QjhERUJGRDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDNjAxRTg4RUZCOTE1RUVG
QjkzOEY1RUVFMTZEMDhCOERFQkZEMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3NDMvMC9C
QzYwMUU4OEVGQjkxNUVFRkI5MzhGNUVFRTE2RDA4QjhERUJGRDAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqTUkGkf/JTXW1OsFI0xLVKjTHCKhQz0rXolBnTkGTJqfmK3KUAsNDmeS+0K3
48TBP/RYGqzk4aGIxLk4ZHHTokF7JL6/Lp0qyNiR6kvNLtPLQ8M89SEBDoFqs9B9
Yvnh3OykcERGGiwdh9ukEqHOqif6OsdIRCRdwF//7t6PWelvNZVYfSUxPbqMSJt2
mVvnjQjRzHAqO4urjZzrWf1+aRgu0rQtiaxwiUfEzjG+yzA7J4/wkZ1dpZs15H2k
cN7MIV5Ng1hLSfDaeN/WIc/5fCZyrEJWWUsrv0lS8WZe0gpksLxsh+qk30MN/ARq
oS6sd2Pp7KTV5IeHeC449rcdkA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org