Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
File:                     48DFE379FC64C3F50512033477F929291FC10CF2.mft (raw, json)
Hash identifier:          BNNfpGRmseuHt1ZoTyl91hB0KYl7F/5C0GYPh+P9ZMk=
Subject key identifier:   D1:65:6D:03:A0:D1:5B:3F:F9:F9:57:2E:BB:4C:22:64:60:0D:92:DE
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       0DEB07EB32EB981A7ABA1FC6B384AB26F883307D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
Manifest number:          38
Signing time:             Sun 14 Apr 2024 17:34:57 +0000
Manifest this update:     Sun 14 Apr 2024 17:29:57 +0000
Manifest next update:     Mon 15 Apr 2024 19:39:57 +0000
Files and hashes:         1: 323830343a353831383a383030303a3a2f33332d3334203d3e20323638313036.roa (hash: pA06u/GMWfD5LcJZv3/skkOBTb0nDRXu4CAyiLnfXhE=)
                          2: 323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (hash: x1au+IO9/0Dem6hXnkk1GJg6C/QGhifBBTlWYlk+REU=)
                          3: 34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa (hash: 8YwG4U3Yp8JYnTF0CdlXWM1z4SCmFqHddES7JGjDywU=)
                          4: 48DFE379FC64C3F50512033477F929291FC10CF2.crl (hash: QcOBd7PZXBrhusdRZTW7AJuxiBCkZOOw0ugXBcOK+eU=)
                          5: 34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (hash: zZ4mI6pWzTjdKB4zyrIItwFVuymSbMCYbf+Sim7+uKU=)
                          6: 34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa (hash: B54aSY6vwk/ydUUuZMHleV09cr8bcmldhH1Z3+eEh+Y=)
                          7: 323830343a353831383a3a2f33322d3332203d3e20323638313036.roa (hash: DK0ovn55H22QHq0thbBFk1uukCLI+KSKBry+KhjG+Do=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:07:eb:32:eb:98:1a:7a:ba:1f:c6:b3:84:ab:26:f8:83:30:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Apr 14 17:29:57 2024 GMT
            Not After : Apr 15 19:39:57 2024 GMT
        Subject: CN=D1656D03A0D15B3FF9F9572EBB4C2264600D92DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:88:76:a8:b8:b6:5b:64:41:6a:fe:1c:83:
                    25:32:75:17:03:ca:ca:65:b3:88:e2:28:7d:6d:27:
                    a8:9c:81:18:db:64:08:a2:8a:81:06:d3:89:5a:09:
                    08:82:7b:ab:af:05:02:bc:d7:ac:bb:1c:e4:fa:79:
                    d5:58:60:de:ba:16:b9:aa:48:be:8b:59:bb:50:f5:
                    fe:cc:59:40:f7:1f:50:d4:41:33:46:4c:68:d3:8e:
                    1a:a9:92:b6:0f:c1:0f:a6:8e:43:0e:da:15:de:15:
                    7d:96:6c:27:74:d5:aa:8d:ff:b0:6b:c0:11:74:e7:
                    d4:4f:46:b1:f7:e7:e5:c6:db:c6:a1:c4:c1:ed:9e:
                    cb:a4:f1:3d:b4:83:2f:3c:4b:9d:6c:8d:af:10:70:
                    99:a0:2f:cf:87:e5:0c:83:dd:5c:a7:ce:5e:30:68:
                    c7:04:60:00:de:5b:e6:20:20:7b:ee:eb:ea:0b:75:
                    3c:e7:e2:ed:54:e8:02:47:d1:e4:f2:0c:b4:e6:37:
                    0f:13:96:3f:0b:75:f3:a5:06:7f:e0:92:3c:d1:ae:
                    9e:8a:22:89:a1:fa:13:49:6e:4c:32:f8:bf:6d:52:
                    48:cf:4e:86:48:49:74:56:dc:3a:67:f1:f0:61:a9:
                    68:70:8a:53:5b:3b:e9:31:d5:87:a4:04:24:8f:52:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:6D:03:A0:D1:5B:3F:F9:F9:57:2E:BB:4C:22:64:60:0D:92:DE
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:3b:e5:c9:40:8a:19:62:e2:fb:e7:56:a3:ff:16:14:27:
         88:e4:0a:d7:ec:b0:39:b9:ff:0e:6e:71:17:da:58:d9:38:50:
         50:9f:ec:50:1e:a0:b5:d3:a4:0e:28:31:df:9a:97:9a:e9:e4:
         39:da:39:9b:24:1e:bd:e2:0f:fc:39:1b:71:ed:50:d5:64:24:
         80:2f:d8:57:52:91:0a:7b:99:2f:cc:cc:7f:c4:46:15:8f:ef:
         32:b8:16:c9:aa:2c:0d:3a:eb:8b:9e:cc:5d:60:34:95:12:cb:
         44:fe:fd:08:7e:3a:1b:6f:55:d4:77:31:68:ca:de:bd:f2:fd:
         4e:a8:d0:bf:ed:df:82:a0:00:6c:fb:79:52:b0:48:24:45:af:
         8c:93:49:24:64:ab:2a:31:76:4a:2b:9e:88:42:1d:13:20:d7:
         dd:24:a7:17:50:86:e9:1f:57:04:35:b1:a7:cd:25:43:90:f8:
         7b:2a:3f:47:ee:c0:45:7e:3c:fb:c5:a0:5f:05:a8:07:11:04:
         a8:1b:92:21:47:ee:39:f8:72:1c:03:e0:d7:79:66:9f:85:27:
         d8:9f:e9:48:e2:82:68:35:b8:cf:49:1a:09:4a:c3:3e:76:08:
         fc:f1:e5:29:4a:8a:74:6b:6c:85:7b:08:16:04:dd:37:0f:4c:
         13:06:9e:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDesH6zLrmBp6uh/Gs4SrJviDMH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhERkUzNzlGQzY0QzNGNTA1MTIwMzM0NzdGOTI5Mjkx
RkMxMENGMjAeFw0yNDA0MTQxNzI5NTdaFw0yNDA0MTUxOTM5NTdaMDMxMTAvBgNV
BAMTKEQxNjU2RDAzQTBEMTVCM0ZGOUY5NTcyRUJCNEMyMjY0NjAwRDkyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfYh2qLi2W2RBav4cgyUydRcD
yspls4jiKH1tJ6icgRjbZAiiioEG04laCQiCe6uvBQK816y7HOT6edVYYN66Frmq
SL6LWbtQ9f7MWUD3H1DUQTNGTGjTjhqpkrYPwQ+mjkMO2hXeFX2WbCd01aqN/7Br
wBF059RPRrH35+XG28ahxMHtnsuk8T20gy88S51sja8QcJmgL8+H5QyD3Vynzl4w
aMcEYADeW+YgIHvu6+oLdTzn4u1U6AJH0eTyDLTmNw8Tlj8LdfOlBn/gkjzRrp6K
Iomh+hNJbkwy+L9tUkjPToZISXRW3Dpn8fBhqWhwilNbO+kx1YekBCSPUt6TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0WVtA6DRWz/5+Vcuu0wiZGANkt4wHwYDVR0j
BBgwFoAUSN/jefxkw/UFEgM0d/kpKR/BDPIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMC80OERGRTM3OUZDNjRDM0Y1MDUxMjAzMzQ3N0Y5MjkyOTFGQzEwQ0YyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4REZFMzc5RkM2NEMzRjUw
NTEyMDMzNDc3RjkyOTI5MUZDMTBDRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4bncvMC80
OERGRTM3OUZDNjRDM0Y1MDUxMjAzMzQ3N0Y5MjkyOTFGQzEwQ0YyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoCc75clAihli4vvnVqP/FhQniOQK1+ywObn/Dm5xF9pY2ThQUJ/sUB6gtdOk
Digx35qXmunkOdo5myQeveIP/Dkbce1Q1WQkgC/YV1KRCnuZL8zMf8RGFY/vMrgW
yaosDTrri57MXWA0lRLLRP79CH46G29V1HcxaMrevfL9TqjQv+3fgqAAbPt5UrBI
JEWvjJNJJGSrKjF2SiueiEIdEyDX3SSnF1CG6R9XBDWxp80lQ5D4eyo/R+7ARX48
+8WgXwWoBxEEqBuSIUfuOfhyHAPg13lmn4Un2J/pSOKCaDW4z0kaCUrDPnYI/PHl
KUqKdGtshXsIFgTdNw9MEwae8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org