Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft
File:                     0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft (raw, json)
Hash identifier:          c1eOjcYQPRfNEQobiAr8vbjeRi0JY7GO4eCj+yD12K4=
Subject key identifier:   D2:99:B3:A1:24:A2:66:2D:9A:7A:9E:37:89:C2:AC:E0:7E:2B:5D:DA
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       3D6AF848BD8EFA53F3FA8550A8E2E42DFB354EBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft
Manifest number:          7D
Signing time:             Mon 15 Apr 2024 04:59:01 +0000
Manifest this update:     Mon 15 Apr 2024 04:54:01 +0000
Manifest next update:     Tue 16 Apr 2024 07:21:01 +0000
Files and hashes:         1: 3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa (hash: 4nVQEMfeijwV5CDY7zxdksJCyATIHuaoTI+GvkPKrbU=)
                          2: 0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl (hash: AX7siPqJ/xK/wKntzKZ3jtAvKDTq2iBm5vXMR9eTZDg=)
                          3: 323830343a3839303a3a2f33322d3332203d3e203532383733.roa (hash: UoBO6tu3Md8X9IcQpuuU5RRhP+a6tDPAF4haDYuoWMQ=)
                          4: 3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa (hash: vxjsjw3Cq6QzfMM2+BdEHBpn/O6C2sqExs2GSIPbbeg=)
                          5: 3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa (hash: 6434efLrcQuTcr4Kr9hHIrVCRbO0Y4o5WDr6ueH0rao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6a:f8:48:bd:8e:fa:53:f3:fa:85:50:a8:e2:e4:2d:fb:35:4e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Apr 15 04:54:01 2024 GMT
            Not After : Apr 16 07:21:01 2024 GMT
        Subject: CN=D299B3A124A2662D9A7A9E3789C2ACE07E2B5DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:08:9c:3b:75:7a:49:39:0f:c1:7e:11:1f:
                    5e:85:33:90:e0:bc:f7:ee:60:b7:5b:75:39:6a:c5:
                    cd:9f:84:20:92:7c:f5:7c:5a:c3:08:7a:c8:cf:6c:
                    9e:a6:4e:a5:83:42:43:85:46:33:39:6e:b9:74:4d:
                    2c:d1:f0:53:61:aa:b6:70:5e:15:d9:30:3f:e4:00:
                    d7:1c:11:c6:16:38:7a:db:a6:66:cd:e2:cf:41:0e:
                    de:ed:1e:aa:9b:50:69:dd:b8:a1:dd:59:4f:70:4c:
                    f9:5e:32:2d:50:84:80:44:12:4b:8f:90:35:64:fa:
                    0a:f3:2a:a6:0c:a1:38:3f:25:08:07:94:16:43:26:
                    a2:5d:14:c3:dd:22:ba:68:92:35:e9:0d:d5:87:7a:
                    d9:97:c1:38:0f:ad:aa:79:b8:5f:e0:1c:68:de:1a:
                    ea:d9:8a:bd:a6:2d:fc:ee:b1:de:03:e0:99:07:98:
                    01:06:a7:7a:00:f3:09:42:9d:f0:58:c6:1b:e6:6e:
                    a1:eb:eb:16:0a:95:f0:88:97:8e:16:0b:ab:76:ec:
                    85:04:89:6c:f1:a6:65:5d:5a:95:07:64:b7:b8:08:
                    d1:6e:ec:71:27:64:7e:66:26:f1:34:43:6d:db:2f:
                    aa:2b:5d:ed:12:ba:e1:75:71:2f:58:23:08:66:a7:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:B3:A1:24:A2:66:2D:9A:7A:9E:37:89:C2:AC:E0:7E:2B:5D:DA
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:3f:92:25:1b:f0:9f:28:06:f0:bf:97:ea:fc:4c:ba:31:
         a7:50:50:23:d2:d0:da:0c:a8:63:b5:de:48:92:6f:e2:68:ac:
         14:8b:86:90:f4:d3:ea:c3:90:bb:a4:f9:fe:55:2f:ee:af:cc:
         9f:09:37:15:50:49:18:4a:9e:47:f8:67:8a:9f:32:c7:84:7c:
         2b:2c:f1:0f:06:b2:ba:cd:6e:7e:bd:d0:d1:c2:de:3b:1f:e1:
         9e:f1:17:16:b9:fc:29:de:47:1e:af:8a:26:f0:bd:21:f8:71:
         2b:8a:f6:c4:8a:a3:24:e3:20:5a:26:ad:eb:42:a7:53:d7:be:
         b7:f4:4f:6f:46:60:55:0f:ae:02:be:5c:7e:06:22:68:89:0e:
         62:5f:f9:85:23:3a:d6:d4:0d:9f:4d:a5:88:62:d0:e4:7c:8b:
         e0:6b:c9:2b:4f:ab:cf:e0:f2:62:ee:e0:44:0e:fc:03:71:b8:
         53:e7:7d:55:b6:af:f4:27:e7:a9:b3:bc:d3:e1:3b:28:df:a2:
         1c:7d:0d:36:7a:94:0a:a7:d8:6b:7f:cb:22:bd:78:49:9f:10:
         99:80:21:46:d0:2b:7e:1b:b8:44:e7:47:67:6f:e4:7f:be:70:
         53:2a:c1:55:01:92:c7:a7:fd:b7:c2:d8:87:7f:68:66:9e:9a:
         3b:ec:c1:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPWr4SL2O+lPz+oVQqOLkLfs1TrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDA0MTUwNDU0MDFaFw0yNDA0MTYwNzIxMDFaMDMxMTAvBgNV
BAMTKEQyOTlCM0ExMjRBMjY2MkQ5QTdBOUUzNzg5QzJBQ0UwN0UyQjVEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lwicO3V6STkPwX4RH16FM5Dg
vPfuYLdbdTlqxc2fhCCSfPV8WsMIesjPbJ6mTqWDQkOFRjM5brl0TSzR8FNhqrZw
XhXZMD/kANccEcYWOHrbpmbN4s9BDt7tHqqbUGnduKHdWU9wTPleMi1QhIBEEkuP
kDVk+grzKqYMoTg/JQgHlBZDJqJdFMPdIrpokjXpDdWHetmXwTgPrap5uF/gHGje
GurZir2mLfzusd4D4JkHmAEGp3oA8wlCnfBYxhvmbqHr6xYKlfCIl44WC6t27IUE
iWzxpmVdWpUHZLe4CNFu7HEnZH5mJvE0Q23bL6orXe0SuuF1cS9YIwhmp7NJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0pmzoSSiZi2aep43icKs4H4rXdowHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5HeUUvMC8w
RDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEYA/kiUb8J8oBvC/l+r8TLoxp1BQI9LQ2gyoY7XeSJJv4misFIuGkPTT6sOQ
u6T5/lUv7q/Mnwk3FVBJGEqeR/hnip8yx4R8KyzxDwayus1ufr3Q0cLeOx/hnvEX
Frn8Kd5HHq+KJvC9IfhxK4r2xIqjJOMgWiat60KnU9e+t/RPb0ZgVQ+uAr5cfgYi
aIkOYl/5hSM61tQNn02liGLQ5HyL4GvJK0+rz+DyYu7gRA78A3G4U+d9Vbav9Cfn
qbO80+E7KN+iHH0NNnqUCqfYa3/LIr14SZ8QmYAhRtArfhu4ROdHZ2/kf75wUyrB
VQGSx6f9t8LYh39oZp6aO+zB4g==
-----END CERTIFICATE-----