Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft
File:                     52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft (raw, json)
Hash identifier:          DAPFN/NlgxT/QCZ2xRDuuTc53UBrD+YCkJvSDv3L7vY=
Subject key identifier:   53:85:BE:FD:D0:DB:C1:FD:78:6D:CE:8D:68:B1:D5:0A:9F:9A:17:C1
Authority key identifier: 52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
Certificate issuer:       /CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
Certificate serial:       81DA41A82ADE563DD575D210579845714B9BF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft
Manifest number:          C8
Signing time:             Mon 15 Apr 2024 02:05:32 +0000
Manifest this update:     Mon 15 Apr 2024 02:00:32 +0000
Manifest next update:     Tue 16 Apr 2024 05:37:32 +0000
Files and hashes:         1: 52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.crl (hash: v4haZjfOohfzQlrPi++2aD3Qa45tOpXzn7TxyIYFU+Q=)
                          2: 323830343a336539343a3a2f33322d3332203d3e20323636363037.roa (hash: B4dvy26D2dhitkj5ZMFAthst1qQQDDcns2BzB0dt17Y=)
                          3: 34352e372e3139342e302f32332d3234203d3e20323636363037.roa (hash: g3CVPOhsUW2lFuyJXm8uYc35+iKg7Zl6OaagZEjPgL8=)
                          4: 323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (hash: sK6TfwLukS/TRjBI7l8kQESia7Par7qGaPQK0s3wVzg=)
                          5: 34352e372e3139322e302f32332d3234203d3e20323636363037.roa (hash: Jgv9fDVga32o+CaoZgr6fuOiuVnPtzU4xYo0Piznpqs=)
                          6: 34352e372e3139322e302f32322d3232203d3e20323636363037.roa (hash: 6lGAVxOOKlrq683qWjlo2DJIG15v9MP6UEGReTB2cuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:da:41:a8:2a:de:56:3d:d5:75:d2:10:57:98:45:71:4b:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
        Validity
            Not Before: Apr 15 02:00:32 2024 GMT
            Not After : Apr 16 05:37:32 2024 GMT
        Subject: CN=5385BEFDD0DBC1FD786DCE8D68B1D50A9F9A17C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:df:45:2d:1a:1e:c5:4d:5f:8f:b9:cd:00:
                    a0:f9:8f:3f:4c:10:4e:61:2d:b1:49:80:27:41:c7:
                    c3:6f:31:75:f0:0f:fd:8a:fd:cf:96:9d:94:03:71:
                    11:f4:06:49:88:fc:12:9b:5d:fb:55:4b:80:36:e3:
                    ed:8c:c4:f0:07:b5:78:63:b0:79:52:e0:84:70:99:
                    fb:5b:16:00:e8:1d:98:35:a8:3e:08:20:74:8b:c5:
                    7d:b8:73:e4:9d:f6:75:2b:92:1a:d9:43:62:de:c8:
                    ee:26:38:eb:91:4c:db:43:9c:91:0a:fb:c2:8b:1a:
                    6b:1d:c3:c8:3d:9e:72:e8:64:63:ab:4c:7d:d9:d7:
                    f8:aa:54:86:d4:31:24:b1:45:22:15:e4:db:1b:be:
                    d5:fc:02:d4:7a:95:1f:ca:0b:b4:64:2d:0a:ac:2e:
                    0b:dd:5d:a9:d0:e9:fe:e5:2d:60:0d:a0:36:c5:1a:
                    f2:28:0e:c3:3a:fb:0d:90:f7:26:ab:c7:f7:db:75:
                    1d:23:9d:84:18:00:28:06:b2:0d:38:39:ee:67:1c:
                    88:95:40:bd:b9:6c:18:6f:f3:77:9a:82:0c:92:c1:
                    26:66:5e:56:11:3c:49:72:c4:5c:ab:8c:2b:1b:22:
                    b1:94:25:48:66:40:29:04:c5:f1:1e:5e:6e:fe:78:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:85:BE:FD:D0:DB:C1:FD:78:6D:CE:8D:68:B1:D5:0A:9F:9A:17:C1
            X509v3 Authority Key Identifier:
                keyid:52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:43:30:68:9e:ca:1c:84:82:de:d6:2f:ff:94:4f:ad:6d:22:
         c5:63:8b:c5:1e:81:69:f2:0c:6c:fe:64:b2:8a:1e:62:43:28:
         4c:9d:74:67:c3:34:f4:f7:53:bf:f9:cc:c0:37:f1:56:de:70:
         cf:47:90:aa:58:f8:93:53:55:a6:5d:a5:48:58:39:5c:26:99:
         e5:e8:25:29:18:3f:13:c6:fa:67:a8:b4:0b:6c:6c:a5:e9:e9:
         91:52:72:1c:fb:43:9d:7b:25:89:72:b9:78:eb:d9:2a:05:cd:
         23:a3:fe:06:93:5c:1b:1e:70:a7:39:95:44:71:b2:92:50:fd:
         2a:78:d1:25:e0:e6:a5:0c:d5:d6:3d:11:dd:b9:4d:c2:64:05:
         91:9b:a3:c7:d0:6d:17:1b:49:ce:74:01:b0:a1:67:12:54:52:
         6b:6b:81:39:97:33:08:25:43:cf:ae:cd:0d:02:e3:a8:ce:16:
         4f:f8:31:38:7e:52:f2:3c:8b:44:90:b8:9f:8c:39:80:58:a9:
         3f:42:7a:72:14:eb:de:92:bd:f3:43:6a:0a:b6:10:49:31:5d:
         2b:76:7e:88:90:a7:79:e0:63:79:91:ed:c7:a1:8b:03:8d:be:
         0e:74:6e:33:fa:0e:eb:31:c7:4b:c2:2e:de:5f:e7:7b:8f:c3:
         11:ef:e6:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAIHaQagq3lY91XXSEFeYRXFLm/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGQ0JCRkY1RkYzRUVFQTRBNDdBQTUwRDM3OTRFQzRF
QjA3QkU3QTAeFw0yNDA0MTUwMjAwMzJaFw0yNDA0MTYwNTM3MzJaMDMxMTAvBgNV
BAMTKDUzODVCRUZERDBEQkMxRkQ3ODZEQ0U4RDY4QjFENTBBOUY5QTE3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOt9FLRoexU1fj7nNAKD5jz9M
EE5hLbFJgCdBx8NvMXXwD/2K/c+WnZQDcRH0BkmI/BKbXftVS4A24+2MxPAHtXhj
sHlS4IRwmftbFgDoHZg1qD4IIHSLxX24c+Sd9nUrkhrZQ2LeyO4mOOuRTNtDnJEK
+8KLGmsdw8g9nnLoZGOrTH3Z1/iqVIbUMSSxRSIV5NsbvtX8AtR6lR/KC7RkLQqs
LgvdXanQ6f7lLWANoDbFGvIoDsM6+w2Q9yarx/fbdR0jnYQYACgGsg04Oe5nHIiV
QL25bBhv83eaggySwSZmXlYRPElyxFyrjCsbIrGUJUhmQCkExfEeXm7+eNk7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU4W+/dDbwf14bc6NaLHVCp+aF8EwHwYDVR0j
BBgwFoAUUvy7/1/z7upKR6pQ03lOxOsHvnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXc0RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVU
aHAvMC81MkZDQkJGRjVGRjNFRUVBNEE0N0FBNTBEMzc5NEVDNEVCMDdCRTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyRkNCQkZGNUZGM0VFRUE0
QTQ3QUE1MEQzNzk0RUM0RUIwN0JFN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXc0RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVUaHAvMC81
MkZDQkJGRjVGRjNFRUVBNEE0N0FBNTBEMzc5NEVDNEVCMDdCRTdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZkMwaJ7KHISC3tYv/5RPrW0ixWOLxR6BafIMbP5ksooeYkMoTJ10Z8M09PdT
v/nMwDfxVt5wz0eQqlj4k1NVpl2lSFg5XCaZ5eglKRg/E8b6Z6i0C2xspenpkVJy
HPtDnXsliXK5eOvZKgXNI6P+BpNcGx5wpzmVRHGyklD9KnjRJeDmpQzV1j0R3blN
wmQFkZujx9BtFxtJznQBsKFnElRSa2uBOZczCCVDz67NDQLjqM4WT/gxOH5S8jyL
RJC4n4w5gFipP0J6chTr3pK980NqCrYQSTFdK3Z+iJCneeBjeZHtx6GLA42+DnRu
M/oO6zHHS8Iu3l/ne4/DEe/miQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org