Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft
File:                     E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft (raw, json)
Hash identifier:          QeA6GDsm0rvRppehyuGQ6DxuTLf+U+bMP3EIneHmMLA=
Subject key identifier:   1C:61:FD:99:86:3B:05:9E:50:FC:6B:8F:A2:70:B6:7C:FA:B7:32:43
Authority key identifier: E8:9B:D1:66:D8:87:13:4D:A1:D3:FE:3E:BF:98:56:B4:D0:30:1D:E8
Certificate issuer:       /CN=E89BD166D887134DA1D3FE3EBF9856B4D0301DE8
Certificate serial:       725FA49641D65D86389DF1B5A32F79E8263AFAF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft
Manifest number:          0314
Signing time:             Sun 14 Apr 2024 22:23:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:18:04 +0000
Manifest next update:     Tue 16 Apr 2024 00:20:04 +0000
Files and hashes:         1: 34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa (hash: /94E4czMOytbWWM63bYFTn8UreLhxqTPoreq5yV3nJA=)
                          2: 323830343a363234303a3a2f33322d3438203d3e20323639323836.roa (hash: glTTKrRfvazpiIlzoR5X2I5xw8NN6j+ehNaad9Qf2lc=)
                          3: E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.crl (hash: i2640zfC6NvCtg3qReTh8wyRzkRcyymGaxdiUmF7/TU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5f:a4:96:41:d6:5d:86:38:9d:f1:b5:a3:2f:79:e8:26:3a:fa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89BD166D887134DA1D3FE3EBF9856B4D0301DE8
        Validity
            Not Before: Apr 14 22:18:04 2024 GMT
            Not After : Apr 16 00:20:04 2024 GMT
        Subject: CN=1C61FD99863B059E50FC6B8FA270B67CFAB73243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:87:6a:c8:18:4a:75:d8:34:59:56:62:e4:
                    70:e1:23:08:d5:61:c2:68:db:4b:3c:47:65:c0:b1:
                    1a:d5:42:7a:ea:d0:77:fa:26:4a:fd:3b:b9:fa:96:
                    c5:84:32:39:e4:98:dc:c7:48:de:f8:97:86:83:d6:
                    85:dd:cf:f5:5c:73:58:c1:33:34:40:ec:a3:ab:f5:
                    6a:4c:9e:c5:14:e6:f5:81:04:25:9e:31:71:06:a9:
                    cf:6f:96:94:ad:4a:fe:85:86:15:45:31:a9:56:cf:
                    57:2f:70:b0:c0:9b:17:ba:5f:95:dd:31:31:0e:9e:
                    22:9b:cd:40:91:91:2f:02:63:56:1b:1c:e4:5a:82:
                    5b:9a:b7:7a:53:81:86:af:3d:5e:33:13:54:38:ef:
                    08:36:af:8b:77:61:f5:5d:95:67:51:4d:a5:8f:7c:
                    76:32:1b:a5:e2:67:f9:9e:84:9c:66:29:da:88:48:
                    c9:be:3b:36:1d:8a:48:88:f3:be:d6:e2:ee:aa:96:
                    da:2e:88:43:a7:0f:d3:1b:3d:86:3d:ac:16:4f:a1:
                    a9:a4:b5:ed:90:5c:02:22:5e:0a:f6:e6:bf:05:f4:
                    e8:78:62:5e:d9:b6:d1:3c:3b:b1:64:9c:96:49:cd:
                    2d:1f:9c:25:55:5c:47:14:a3:dc:a1:9b:61:98:5a:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:61:FD:99:86:3B:05:9E:50:FC:6B:8F:A2:70:B6:7C:FA:B7:32:43
            X509v3 Authority Key Identifier:
                keyid:E8:9B:D1:66:D8:87:13:4D:A1:D3:FE:3E:BF:98:56:B4:D0:30:1D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:67:30:fd:63:9d:79:b9:01:ea:ae:dd:02:c0:51:a5:a0:57:
         ee:1a:89:21:45:59:61:26:5c:13:41:bc:62:2e:9a:8b:81:fd:
         cf:b1:ee:00:c3:4b:0d:58:51:e8:6b:ac:19:4e:15:bf:3d:7e:
         9b:d9:ba:0a:7d:3b:f2:af:5f:3e:43:07:0e:98:f1:54:e5:0b:
         96:22:24:73:ea:c3:e8:c9:6b:96:18:34:f7:a0:01:ac:12:e4:
         b0:15:b2:10:e7:42:c9:d0:ab:ba:38:64:2e:c2:bb:7a:44:e4:
         f2:02:21:3b:f6:97:32:c0:00:8d:a3:0f:c8:64:ce:40:97:15:
         6f:91:aa:e5:cf:20:f2:0d:ce:38:76:7b:d9:35:47:12:32:c8:
         75:aa:e0:20:6a:bc:ca:de:99:01:01:a8:48:ab:d8:fd:c3:12:
         9b:82:3f:48:67:5f:1e:6a:58:36:b4:24:83:67:cd:6e:14:76:
         6e:b7:04:5c:c8:10:d7:ac:bb:18:f3:cd:fb:1f:3c:50:41:d3:
         29:7a:bd:c1:a1:cf:07:5c:79:f6:fb:49:ea:5e:98:ef:2c:ab:
         f1:9a:36:a1:20:ab:b8:7e:ad:95:1b:4c:26:3e:73:88:81:b9:
         80:ab:b8:f6:63:fe:d9:ae:d3:f6:1e:3d:53:93:8e:73:54:a3:
         74:c5:6c:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcl+klkHWXYY4nfG1oy956CY6+vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5QkQxNjZEODg3MTM0REExRDNGRTNFQkY5ODU2QjRE
MDMwMURFODAeFw0yNDA0MTQyMjE4MDRaFw0yNDA0MTYwMDIwMDRaMDMxMTAvBgNV
BAMTKDFDNjFGRDk5ODYzQjA1OUU1MEZDNkI4RkEyNzBCNjdDRkFCNzMyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZYdqyBhKddg0WVZi5HDhIwjV
YcJo20s8R2XAsRrVQnrq0Hf6Jkr9O7n6lsWEMjnkmNzHSN74l4aD1oXdz/Vcc1jB
MzRA7KOr9WpMnsUU5vWBBCWeMXEGqc9vlpStSv6FhhVFMalWz1cvcLDAmxe6X5Xd
MTEOniKbzUCRkS8CY1YbHORagluat3pTgYavPV4zE1Q47wg2r4t3YfVdlWdRTaWP
fHYyG6XiZ/mehJxmKdqISMm+OzYdikiI877W4u6qltouiEOnD9MbPYY9rBZPoamk
te2QXAIiXgr25r8F9Oh4Yl7ZttE8O7FknJZJzS0fnCVVXEcUo9yhm2GYWkK5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHGH9mYY7BZ5Q/GuPonC2fPq3MkMwHwYDVR0j
BBgwFoAU6JvRZtiHE02h0/4+v5hWtNAwHegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpWY1ZIS282S3ExQWIyYTI5SGVnNU5zcTZlTTllTXlBNDE3aDc1SDRr
N2kvMC9FODlCRDE2NkQ4ODcxMzREQTFEM0ZFM0VCRjk4NTZCNEQwMzAxREU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4OUJEMTY2RDg4NzEzNERB
MUQzRkUzRUJGOTg1NkI0RDAzMDFERTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVpWY1ZIS282S3ExQWIyYTI5SGVnNU5zcTZlTTllTXlBNDE3aDc1SDRrN2kvMC9F
ODlCRDE2NkQ4ODcxMzREQTFEM0ZFM0VCRjk4NTZCNEQwMzAxREU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARGcw/WOdebkB6q7dAsBRpaBX7hqJIUVZYSZcE0G8Yi6ai4H9z7HuAMNLDVhR
6GusGU4Vvz1+m9m6Cn078q9fPkMHDpjxVOULliIkc+rD6Mlrlhg096ABrBLksBWy
EOdCydCrujhkLsK7ekTk8gIhO/aXMsAAjaMPyGTOQJcVb5Gq5c8g8g3OOHZ72TVH
EjLIdargIGq8yt6ZAQGoSKvY/cMSm4I/SGdfHmpYNrQkg2fNbhR2brcEXMgQ16y7
GPPN+x88UEHTKXq9waHPB1x59vtJ6l6Y7yyr8Zo2oSCruH6tlRtMJj5ziIG5gKu4
9mP+2a7T9h49U5OOc1SjdMVsgg==
-----END CERTIFICATE-----