Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft
File:                     551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft (raw, json)
Hash identifier:          tCHeYREqvm9kByIO4shqahoiqXK0Y+mOJhj/38tKgAM=
Subject key identifier:   60:DF:6C:8E:5B:1B:D1:66:29:6D:29:69:D0:64:35:9B:8C:AE:BC:3C
Authority key identifier: 55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
Certificate issuer:       /CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
Certificate serial:       03132B3150D99D686A0A304F305DDEB702ED62A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft
Manifest number:          36
Signing time:             Mon 15 Apr 2024 07:14:58 +0000
Manifest this update:     Mon 15 Apr 2024 07:09:58 +0000
Manifest next update:     Tue 16 Apr 2024 10:32:58 +0000
Files and hashes:         1: 3138312e3233332e34342e302f32322d3234203d3e20323731343230.roa (hash: 4VPea5gTk7AX3BV2YCUhSjoi2EQIdOCuUCJpwgl5JkE=)
                          2: 551FF95B2328867EC2F8D3A8E213AF61D7EC076F.crl (hash: 8viaS4NrSwS37lNM43QarAMCwkuDJCJebBkTq+kCn5Y=)
                          3: 3137392e3132372e3135322e302f32312d3234203d3e20323633363431.roa (hash: Piq9QadFs7py8M+eP3vgYO+KfG2H7GBhx5ZR6DCYv+U=)
                          4: 323830343a313039343a3a2f33322d3438203d3e20323633363431.roa (hash: NRLyzofbfjvaqZcQ1ojHPTEiKnm+6EmjqtmNozLW5PM=)
                          5: 3136382e3230352e36302e302f32322d3234203d3e20323633363431.roa (hash: bolZJMrKzaB1rJL1pC+xIZy3xJlq0qROhy2fbXYkp+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:2b:31:50:d9:9d:68:6a:0a:30:4f:30:5d:de:b7:02:ed:62:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
        Validity
            Not Before: Apr 15 07:09:58 2024 GMT
            Not After : Apr 16 10:32:58 2024 GMT
        Subject: CN=60DF6C8E5B1BD166296D2969D064359B8CAEBC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:f0:cf:0c:35:fb:ec:2b:b1:eb:a4:24:22:
                    1f:07:b9:e1:07:03:fa:47:a7:e2:13:2b:63:e6:36:
                    38:67:13:06:1e:38:f8:57:ef:4b:35:62:b9:f5:f5:
                    87:ce:4d:2c:48:7d:62:22:b7:bc:16:59:6b:44:d6:
                    33:c8:b2:58:31:8a:60:d4:95:8a:40:d7:00:3b:cf:
                    07:79:e1:94:a6:b8:7c:e0:53:29:b8:88:f6:f5:6a:
                    cf:42:8d:b0:2e:52:d2:6c:53:98:08:e2:10:d5:99:
                    9a:5b:f3:01:1f:46:3a:9a:0b:ae:9e:eb:be:71:e9:
                    c5:42:b3:1a:68:1f:72:96:72:aa:3f:9b:92:89:cf:
                    e7:50:c4:4a:23:9d:74:1e:99:1b:d7:83:0c:8c:4b:
                    c7:d0:61:3a:96:b6:9e:66:8f:34:f1:cd:78:62:32:
                    12:78:9a:13:ce:00:39:6f:ee:ed:c9:5c:ed:0d:bb:
                    f2:92:9f:8e:81:32:a1:7f:df:ae:a6:ca:be:06:15:
                    73:c4:9a:19:59:6a:30:24:17:87:b5:eb:05:c7:7d:
                    22:53:d1:0e:82:09:33:cc:ce:f3:e8:34:d6:20:5a:
                    da:01:9d:64:f2:05:1c:ba:5a:45:1f:cf:3b:03:b8:
                    37:02:0e:94:bd:a3:66:ca:b5:71:9e:00:62:45:96:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DF:6C:8E:5B:1B:D1:66:29:6D:29:69:D0:64:35:9B:8C:AE:BC:3C
            X509v3 Authority Key Identifier:
                keyid:55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:58:5f:36:12:f0:42:c5:bd:60:97:90:bb:81:bf:09:d7:
         77:0e:e7:0f:85:28:9c:6a:fe:e2:16:76:ca:95:f0:42:da:e8:
         5f:46:cf:ad:1c:31:55:fe:d9:cf:06:fb:05:ca:ae:bf:85:65:
         89:69:0c:8f:fc:41:dc:b5:b0:74:75:7e:e0:4d:52:b0:84:60:
         5c:5b:0f:02:e2:db:fc:9d:22:eb:fa:24:61:1e:1b:93:01:bb:
         1c:8f:5f:cf:83:74:85:15:7c:73:13:f3:86:69:3d:af:65:94:
         38:4e:4d:c8:cc:b8:1c:e5:13:3e:5d:9a:d8:61:1b:d0:cc:8f:
         90:26:6c:2d:14:74:ff:ef:c1:6b:ad:8a:84:dd:64:7a:bf:27:
         33:7f:89:1d:38:20:6b:94:4e:f6:9c:d8:33:4c:77:9d:ce:e4:
         0c:63:de:dc:1a:b8:7c:82:2d:76:e5:6e:52:0d:51:29:f7:5a:
         05:b1:43:dd:61:43:25:69:71:7c:3b:a6:b1:27:84:85:86:c5:
         55:ff:a9:dd:80:7b:0d:fe:a0:81:e5:ad:7d:7e:c6:b6:90:3e:
         1e:b8:5d:e4:ac:f7:d3:34:26:62:6b:18:c8:67:ab:0c:8c:7b:
         8e:89:83:90:b3:2d:ef:bb:08:2d:d7:f5:51:36:8b:30:cc:09:
         9c:42:90:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAxMrMVDZnWhqCjBPMF3etwLtYqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxRkY5NUIyMzI4ODY3RUMyRjhEM0E4RTIxM0FGNjFE
N0VDMDc2RjAeFw0yNDA0MTUwNzA5NThaFw0yNDA0MTYxMDMyNThaMDMxMTAvBgNV
BAMTKDYwREY2QzhFNUIxQkQxNjYyOTZEMjk2OUQwNjQzNTlCOENBRUJDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhfDPDDX77Cux66QkIh8HueEH
A/pHp+ITK2PmNjhnEwYeOPhX70s1Yrn19YfOTSxIfWIit7wWWWtE1jPIslgximDU
lYpA1wA7zwd54ZSmuHzgUym4iPb1as9CjbAuUtJsU5gI4hDVmZpb8wEfRjqaC66e
675x6cVCsxpoH3KWcqo/m5KJz+dQxEojnXQemRvXgwyMS8fQYTqWtp5mjzTxzXhi
MhJ4mhPOADlv7u3JXO0Nu/KSn46BMqF/366myr4GFXPEmhlZajAkF4e16wXHfSJT
0Q6CCTPMzvPoNNYgWtoBnWTyBRy6WkUfzzsDuDcCDpS9o2bKtXGeAGJFlhkvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYN9sjlsb0WYpbSlp0GQ1m4yuvDwwHwYDVR0j
BBgwFoAUVR/5WyMohn7C+NOo4hOvYdfsB28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC81NTFGRjk1QjIzMjg4NjdFQzJGOEQzQThFMjEzQUY2MUQ3RUMwNzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1MUZGOTVCMjMyODg2N0VD
MkY4RDNBOEUyMTNBRjYxRDdFQzA3NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhma2EvMC81
NTFGRjk1QjIzMjg4NjdFQzJGOEQzQThFMjEzQUY2MUQ3RUMwNzZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACPpYXzYS8ELFvWCXkLuBvwnXdw7nD4UonGr+4hZ2ypXwQtroX0bPrRwxVf7Z
zwb7Bcquv4VliWkMj/xB3LWwdHV+4E1SsIRgXFsPAuLb/J0i6/okYR4bkwG7HI9f
z4N0hRV8cxPzhmk9r2WUOE5NyMy4HOUTPl2a2GEb0MyPkCZsLRR0/+/Ba62KhN1k
er8nM3+JHTgga5RO9pzYM0x3nc7kDGPe3Bq4fIItduVuUg1RKfdaBbFD3WFDJWlx
fDumsSeEhYbFVf+p3YB7Df6ggeWtfX7GtpA+Hrhd5Kz30zQmYmsYyGerDIx7jomD
kLMt77sILdf1UTaLMMwJnEKQ6g==
-----END CERTIFICATE-----