Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft
File:                     9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft (raw, json)
Hash identifier:          OPosK2gJZpPgTri91TBolu0rnEfi+7bK6Hdn91m1OsY=
Subject key identifier:   61:02:2A:F0:9A:36:4A:DB:9D:52:F3:25:8F:07:D1:A8:C9:A9:F3:A6
Authority key identifier: 96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48
Certificate issuer:       /CN=9689C17DD6A40C061C6DBFB1538BBF7ECECDB848
Certificate serial:       385D7CEFFB038E42B6176BD28CE25FA3DCCE2844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft
Manifest number:          043A
Signing time:             Thu 07 Sep 2023 05:22:00 +0000
Manifest this update:     Thu 07 Sep 2023 05:17:00 +0000
Manifest next update:     Fri 08 Sep 2023 05:22:00 +0000
Files and hashes:         1: 9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.crl (hash: AMglQyDBf+TXLqpwEZRbNePLwDnbo8zwpN+lIJbCdRg=)
                          2: 323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (hash: qGxCY+5ylUM/W/rViHFs38oqM1CmK9swRCEVuoN4yEo=)
                          3: 34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (hash: z+JV2Cc4RSOTZPYKzJvFwu4gWVgPBsEfhHZ3RZDkljg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5d:7c:ef:fb:03:8e:42:b6:17:6b:d2:8c:e2:5f:a3:dc:ce:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9689C17DD6A40C061C6DBFB1538BBF7ECECDB848
        Validity
            Not Before: Sep  7 05:17:00 2023 GMT
            Not After : Sep 14 05:22:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:08:b0:8f:2e:6b:79:2c:7f:61:60:8a:16:
                    03:5e:2e:4c:b2:77:3b:5c:0c:30:d5:41:33:32:ac:
                    25:ff:00:9d:e7:72:c8:a2:4c:af:54:a6:82:04:39:
                    39:80:14:ef:ff:bb:14:50:c1:27:41:dc:cd:da:35:
                    e1:3f:e5:d5:28:04:64:89:81:18:88:c6:0d:31:ac:
                    f7:ed:5a:cd:81:0e:eb:ed:23:93:e2:ab:d9:39:eb:
                    2f:ba:17:81:ae:25:01:71:18:a3:1e:a2:b2:c8:cf:
                    de:27:e6:66:42:63:7e:ea:98:91:46:26:09:3d:20:
                    b6:8a:c8:f7:ee:d5:97:2e:e1:11:69:e1:0d:70:24:
                    8f:c4:e4:13:94:31:1b:4d:3b:24:4e:10:b1:d4:25:
                    1d:c8:b9:44:42:a6:90:89:4a:c2:ea:23:3d:7b:50:
                    07:7e:ca:07:cf:fd:1b:cf:34:08:c4:1a:94:8c:db:
                    c1:b5:34:a3:02:59:02:d9:74:93:99:e1:b1:9c:f9:
                    13:83:25:e5:c9:0f:a4:27:e5:72:b7:37:5f:a9:93:
                    60:c3:7a:f3:6e:a9:04:23:53:2b:d4:2c:a0:6b:1e:
                    04:2e:09:17:ca:7a:7c:2e:4b:e7:ba:89:60:fd:87:
                    55:28:f4:2c:e1:e3:d1:38:57:6e:89:0d:28:cf:5e:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:2A:F0:9A:36:4A:DB:9D:52:F3:25:8F:07:D1:A8:C9:A9:F3:A6
            X509v3 Authority Key Identifier:
                keyid:96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:87:71:70:bc:d1:7b:75:e4:a0:44:24:d6:c9:ca:79:3e:
         fe:8f:d5:09:ed:16:87:d3:75:50:f3:9d:b4:9c:54:d6:c0:fe:
         94:9e:18:ec:3b:39:7d:4e:b6:11:d0:11:70:1f:e9:7b:17:3c:
         b4:9f:3a:23:d6:23:9b:e1:1e:6d:3a:33:7d:a7:2d:c9:00:ad:
         62:71:f3:1b:08:8a:4f:d4:ae:6f:0d:f7:dd:6b:9e:cf:01:59:
         04:26:13:a1:5d:8b:b0:13:95:45:31:aa:8f:f5:4a:dc:50:15:
         42:2f:6d:e3:f6:04:3c:e9:03:90:39:18:05:84:7f:9f:20:6a:
         2d:3b:32:ca:a6:f7:3f:2c:78:a4:bf:ca:bc:a5:2c:de:a0:a1:
         5a:9a:8b:be:9e:5c:e6:62:cb:2d:09:f5:01:95:67:d9:12:24:
         31:ac:9e:5c:77:75:bb:45:7b:47:eb:fd:a3:ff:53:38:0b:e3:
         82:e1:cd:6d:c9:69:77:2b:0d:c1:e4:7a:c2:1f:ff:77:83:fd:
         d0:bb:60:57:50:37:7c:44:49:52:14:38:64:bd:2a:30:fb:92:
         b9:28:1a:0f:5e:e1:c4:1d:24:5d:03:3a:a9:dd:26:09:e1:38:
         20:34:e5:d2:06:b7:28:83:64:43:26:51:80:53:bd:75:f3:49:
         c5:7a:00:c6
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUOF187/sDjkK2F2vSjOJfo9zOKEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4OUMxN0RENkE0MEMwNjFDNkRCRkIxNTM4QkJGN0VD
RUNEQjg0ODAeFw0yMzA5MDcwNTE3MDBaFw0yMzA5MTQwNTIyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREEwQTA4QjA4RjJFNkI3OTJD
N0Y2MTYwOEExNjAzNUUyRTRDQjI3NzNCNUMwQzMwRDU0MTMzMzJBQzI1RkYwMDlE
RTc3MkM4QTI0Q0FGNTRBNjgyMDQzOTM5ODAxNEVGRkZCQjE0NTBDMTI3NDFEQ0NE
REEzNUUxM0ZFNUQ1MjgwNDY0ODk4MTE4ODhDNjBEMzFBQ0Y3RUQ1QUNEODEwRUVC
RUQyMzkzRTJBQkQ5MzlFQjJGQkExNzgxQUUyNTAxNzExOEEzMUVBMkIyQzhDRkRF
MjdFNjY2NDI2MzdFRUE5ODkxNDYyNjA5M0QyMEI2OEFDOEY3RUVENTk3MkVFMTEx
NjlFMTBENzAyNDhGQzRFNDEzOTQzMTFCNEQzQjI0NEUxMEIxRDQyNTFEQzhCOTQ0
NDJBNjkwODk0QUMyRUEyMzNEN0I1MDA3N0VDQTA3Q0ZGRDFCQ0YzNDA4QzQxQTk0
OENEQkMxQjUzNEEzMDI1OTAyRDk3NDkzOTlFMUIxOUNGOTEzODMyNUU1QzkwRkE0
MjdFNTcyQjczNzVGQTk5MzYwQzM3QUYzNkVBOTA0MjM1MzJCRDQyQ0EwNkIxRTA0
MkUwOTE3Q0E3QTdDMkU0QkU3QkE4OTYwRkQ4NzU1MjhGNDJDRTFFM0QxMzg1NzZF
ODkwRDI4Q0Y1RUMyNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2goIsI8ua3ksf2FgihYDXi5Msnc7XAww1UEzMqwl/wCd53LIokyv
VKaCBDk5gBTv/7sUUMEnQdzN2jXhP+XVKARkiYEYiMYNMaz37VrNgQ7r7SOT4qvZ
OesvuheBriUBcRijHqKyyM/eJ+ZmQmN+6piRRiYJPSC2isj37tWXLuERaeENcCSP
xOQTlDEbTTskThCx1CUdyLlEQqaQiUrC6iM9e1AHfsoHz/0bzzQIxBqUjNvBtTSj
AlkC2XSTmeGxnPkTgyXlyQ+kJ+VytzdfqZNgw3rzbqkEI1Mr1Cygax4ELgkXynp8
Lkvnuolg/YdVKPQs4ePROFduiQ0oz17CcQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FGECKvCaNkrbnVLzJY8H0ajJqfOmMB8GA1UdIwQYMBaAFJaJwX3WpAwGHG2/sVOL
v37OzbhIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVl
Z0piQUt3N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzAvOTY4OUMxN0RENkE0MEMw
NjFDNkRCRkIxNTM4QkJGN0VDRUNEQjg0OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Njg5QzE3REQ2QTQwQzA2MUM2REJGQjE1MzhCQkY3RUNFQ0RC
ODQ4LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVlZ0piQUt3
N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzAvOTY4OUMxN0RENkE0MEMwNjFDNkRC
RkIxNTM4QkJGN0VDRUNEQjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKBGh3FwvNF7deSgRCTWycp5
Pv6P1QntFofTdVDznbScVNbA/pSeGOw7OX1OthHQEXAf6XsXPLSfOiPWI5vhHm06
M32nLckArWJx8xsIik/Urm8N991rns8BWQQmE6Fdi7ATlUUxqo/1StxQFUIvbeP2
BDzpA5A5GAWEf58gai07Msqm9z8seKS/yrylLN6goVqai76eXOZiyy0J9QGVZ9kS
JDGsnlx3dbtFe0fr/aP/UzgL44LhzW3JaXcrDcHkesIf/3eD/dC7YFdQN3xESVIU
OGS9KjD7krkoGg9e4cQdJF0DOqndJgnhOCA05dIGtyiDZEMmUYBTvXXzScV6AMY=
-----END CERTIFICATE-----