Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft
File:                     EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft (raw, json)
Hash identifier:          oFCFEjh3Fkx8mN+g67ijoyv4d0pt8m3nbO6cMlK7jII=
Subject key identifier:   4B:C0:BE:FE:C7:56:72:4A:F8:C7:DA:74:41:C1:76:5F:E9:E7:64:1F
Authority key identifier: EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B
Certificate issuer:       /CN=EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B
Certificate serial:       7128FBE866B87DA1FAECFA83AB4D64365607198F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft
Manifest number:          05B2
Signing time:             Mon 15 Apr 2024 05:29:08 +0000
Manifest this update:     Mon 15 Apr 2024 05:24:08 +0000
Manifest next update:     Tue 16 Apr 2024 07:22:08 +0000
Files and hashes:         1: EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.crl (hash: ycLOY22qYsQxdmsdGJZ8+tTIzj/F2f2WtKN47GVxS1s=)
                          2: 323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (hash: 3fShliF0g8Omn3+S43e2vEX5pQ70GJwQFShaWllhD58=)
                          3: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (hash: BGJpKgvavE2UFBm3pkPD6jrkkFfRiWA6DLiwm7KlMyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:28:fb:e8:66:b8:7d:a1:fa:ec:fa:83:ab:4d:64:36:56:07:19:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B
        Validity
            Not Before: Apr 15 05:24:08 2024 GMT
            Not After : Apr 16 07:22:08 2024 GMT
        Subject: CN=4BC0BEFEC756724AF8C7DA7441C1765FE9E7641F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:9d:40:3d:45:3c:09:0b:1c:90:74:c6:0f:
                    d0:f8:04:fe:70:61:c4:d5:77:37:4c:e6:76:91:65:
                    57:16:45:7c:cd:4f:d7:4c:38:fb:c6:48:3a:63:d1:
                    02:9e:df:33:ff:cd:4f:6c:87:91:b3:df:57:d3:e8:
                    bb:b7:9b:9e:d6:ef:cd:97:75:a2:70:66:53:08:51:
                    45:71:8a:7d:de:65:1a:ea:e6:68:f5:03:8d:e3:c7:
                    4c:87:3e:9f:ca:06:ee:82:1a:8f:26:cb:32:62:33:
                    86:a2:95:17:36:2c:fb:96:a0:8a:9f:1d:62:4d:b6:
                    31:7a:e4:c3:69:29:6a:95:00:16:b1:37:e0:1b:67:
                    ed:cd:34:35:44:75:94:a2:13:b1:6b:92:14:dc:00:
                    44:48:8a:bd:50:30:16:2e:09:c0:46:c6:93:70:f0:
                    62:28:1f:18:8b:07:2a:a0:d7:d7:9a:f4:a8:8c:22:
                    1a:96:45:9a:81:c1:7e:e4:0b:17:ed:a7:14:21:6b:
                    a5:0a:e2:05:30:6f:ee:2b:fe:28:5a:31:83:e2:f5:
                    ba:60:fd:32:58:26:7c:58:22:3d:0a:48:f1:42:f5:
                    f5:5f:2d:b4:83:27:ad:0e:4d:f4:73:4b:7f:19:97:
                    b1:33:08:70:c1:95:4d:8a:9c:1c:41:57:b4:bf:1b:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:BE:FE:C7:56:72:4A:F8:C7:DA:74:41:C1:76:5F:E9:E7:64:1F
            X509v3 Authority Key Identifier:
                keyid:EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5e:2d:49:02:c4:99:fc:f5:47:47:b0:3d:c9:b1:ab:36:ca:
         c8:bf:b9:ba:93:05:aa:b7:f5:f1:20:d5:c8:3a:67:60:34:37:
         40:3d:0b:d2:1e:35:90:5e:fa:52:76:d4:a6:21:26:d9:8e:f1:
         14:14:1a:63:0c:01:72:94:19:97:7c:36:cd:85:0c:40:b8:3f:
         40:4d:e4:42:e7:98:61:e7:23:1b:be:dd:68:3b:61:a3:0a:0d:
         38:41:d4:4c:d5:b4:ce:2e:94:6b:84:64:e8:77:ce:bc:0d:ed:
         3e:49:1c:a3:59:b1:a6:e7:ea:e5:17:f0:68:6d:a9:17:e1:f7:
         5c:c7:49:3b:ac:c3:f4:b5:f5:a4:c6:bf:44:1f:50:b1:8f:49:
         20:99:55:bb:a0:04:8e:b0:0a:c4:5d:15:b5:68:9a:43:37:b8:
         01:38:69:c7:58:32:a0:a7:ee:2d:71:eb:6f:f2:6b:c4:1b:46:
         79:b1:b8:eb:fd:23:27:96:6c:05:c5:38:be:ce:16:94:29:b4:
         fa:f1:b7:51:84:2e:09:7e:e2:c3:4f:49:6f:56:e6:b9:44:7a:
         a1:2f:56:ee:15:ed:6f:8e:8f:09:37:13:a5:71:ee:21:23:23:
         f6:93:f0:a2:0b:a5:91:6c:c7:fe:b3:14:8c:52:fc:f0:a3:6c:
         3f:56:59:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcSj76Ga4faH67PqDq01kNlYHGY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCQTMyNkU0NTYzOTY2RThCMEI4MjYyRTdEQ0VGODND
REM5Q0I2QjAeFw0yNDA0MTUwNTI0MDhaFw0yNDA0MTYwNzIyMDhaMDMxMTAvBgNV
BAMTKDRCQzBCRUZFQzc1NjcyNEFGOEM3REE3NDQxQzE3NjVGRTlFNzY0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcp1APUU8CQsckHTGD9D4BP5w
YcTVdzdM5naRZVcWRXzNT9dMOPvGSDpj0QKe3zP/zU9sh5Gz31fT6Lu3m57W782X
daJwZlMIUUVxin3eZRrq5mj1A43jx0yHPp/KBu6CGo8myzJiM4ailRc2LPuWoIqf
HWJNtjF65MNpKWqVABaxN+AbZ+3NNDVEdZSiE7FrkhTcAERIir1QMBYuCcBGxpNw
8GIoHxiLByqg19ea9KiMIhqWRZqBwX7kCxftpxQha6UK4gUwb+4r/ihaMYPi9bpg
/TJYJnxYIj0KSPFC9fVfLbSDJ60OTfRzS38Zl7EzCHDBlU2KnBxBV7S/G9NHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUS8C+/sdWckr4x9p0QcF2X+nnZB8wHwYDVR0j
BBgwFoAU67oybkVjlm6LC4Ji59zvg83Jy2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZuN0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25k
dWMvMC9FQkJBMzI2RTQ1NjM5NjZFOEIwQjgyNjJFN0RDRUY4M0NEQzlDQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCQkEzMjZFNDU2Mzk2NkU4
QjBCODI2MkU3RENFRjgzQ0RDOUNCNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkZuN0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25kdWMvMC9F
QkJBMzI2RTQ1NjM5NjZFOEIwQjgyNjJFN0RDRUY4M0NEQzlDQjZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvV4tSQLEmfz1R0ewPcmxqzbKyL+5upMFqrf18SDVyDpnYDQ3QD0L0h41kF76
UnbUpiEm2Y7xFBQaYwwBcpQZl3w2zYUMQLg/QE3kQueYYecjG77daDthowoNOEHU
TNW0zi6Ua4Rk6HfOvA3tPkkco1mxpufq5RfwaG2pF+H3XMdJO6zD9LX1pMa/RB9Q
sY9JIJlVu6AEjrAKxF0VtWiaQze4AThpx1gyoKfuLXHrb/JrxBtGebG46/0jJ5Zs
BcU4vs4WlCm0+vG3UYQuCX7iw09Jb1bmuUR6oS9W7hXtb46PCTcTpXHuISMj9pPw
ogulkWzH/rMUjFL88KNsP1ZZ5Q==
-----END CERTIFICATE-----