Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
File:                     7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft (raw, json)
Hash identifier:          NS1hwHMxuDgKJGC0VJy9yB7MNceF5NghBZN3CKVASms=
Subject key identifier:   1E:D2:87:B7:1D:16:EF:DB:8D:27:68:83:D7:D6:0D:41:0D:47:BF:08
Authority key identifier: 7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0
Certificate issuer:       /CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
Certificate serial:       35BE29E3CE4E82A9916B926BFE0691C92C25F53A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft
Manifest number:          E4
Signing time:             Sun 14 Apr 2024 18:26:26 +0000
Manifest this update:     Sun 14 Apr 2024 18:21:26 +0000
Manifest next update:     Mon 15 Apr 2024 19:37:26 +0000
Files and hashes:         1: 323830343a373464633a3a2f33322d3332203d3e20323731303038.roa (hash: 63w5q8HIXlFZpgACF0mvG2vkakUKbQRCkN7kPhCokq0=)
                          2: 3137302e3235342e3132332e302f32342d3234203d3e20323731303038.roa (hash: SHOWfmieIz7kFDxk+mHaWdwNeiEFre0z0oTHkADLgcg=)
                          3: 3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa (hash: T7lvMGBBNK2yTGi2K2oIwVHltIjmYtXqFjfbo7cYnRY=)
                          4: 3137302e3235342e3132302e302f32342d3234203d3e20323731303038.roa (hash: gmHkmrI2d3vJFcd6aLX1/4hcobQuETh4oVmE17huMKk=)
                          5: 3137302e3235342e3132312e302f32342d3234203d3e20323731303038.roa (hash: UbMe9W1xWYZoIpJWg+YGUJl9Mdqp4mYjoa0Q6eNquSY=)
                          6: 7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl (hash: klujzMH53rH+ioFSKEq/jqxEkBATM/ojsQFMm12q9BM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:29:e3:ce:4e:82:a9:91:6b:92:6b:fe:06:91:c9:2c:25:f5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0
        Validity
            Not Before: Apr 14 18:21:26 2024 GMT
            Not After : Apr 15 19:37:26 2024 GMT
        Subject: CN=1ED287B71D16EFDB8D276883D7D60D410D47BF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:05:10:46:17:d1:91:d4:72:dd:89:9c:47:7d:
                    54:13:00:cd:64:68:c1:5b:fa:a7:c3:07:9b:67:47:
                    40:10:0c:a9:c5:13:f5:0f:dd:12:a6:6b:20:42:7e:
                    2b:7e:7a:b4:a6:3a:60:4e:81:1e:79:10:ca:b9:e8:
                    8c:93:18:48:09:51:13:ed:6a:3a:a0:6f:8c:b3:cb:
                    cf:49:af:66:2f:0e:f9:80:ef:60:da:93:d4:82:7e:
                    0d:cb:fb:86:56:ce:01:93:7d:cd:28:b0:5a:67:f5:
                    d5:ce:9f:4f:46:9b:ee:12:64:32:93:d1:3a:25:96:
                    60:b4:52:35:1d:e1:20:84:52:8b:8e:23:cb:43:aa:
                    9f:ff:8c:ac:6b:f4:c9:bb:80:22:ff:98:d2:5a:8e:
                    d0:29:d5:ef:3c:e0:79:09:22:a6:31:53:d5:a1:77:
                    73:da:b0:53:71:53:1b:1d:c4:ae:57:cc:6a:70:11:
                    ac:2a:f7:cc:8a:ba:d9:d4:4f:45:5c:1d:0c:66:d8:
                    8f:84:bc:73:34:d9:94:64:4b:f2:ce:cf:66:f6:f8:
                    76:be:67:25:79:02:4d:96:58:a7:33:4b:af:bf:55:
                    c8:85:24:78:ed:21:75:f1:17:c2:75:8b:bf:d8:ea:
                    f9:33:71:cd:98:2e:3b:32:83:95:e0:b5:c9:88:b7:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D2:87:B7:1D:16:EF:DB:8D:27:68:83:D7:D6:0D:41:0D:47:BF:08
            X509v3 Authority Key Identifier:
                keyid:7A:FE:46:9F:FF:0F:C6:0C:0E:5E:88:24:E0:95:DE:35:98:5C:7C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/0/7AFE469FFF0FC60C0E5E8824E095DE35985C7CD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:70:93:22:ce:c5:a6:64:20:73:dd:64:a2:64:5a:44:23:
         1e:84:97:85:ec:a4:56:88:ef:c4:10:11:24:0c:98:47:43:97:
         14:46:39:b7:fb:6b:ef:e1:6b:52:16:90:4f:00:0f:38:07:9d:
         64:8e:32:88:cc:20:16:75:51:98:f2:b7:84:dc:fd:04:1e:a8:
         15:70:72:1f:c4:09:64:cc:62:cf:9d:8c:b7:76:25:6b:ee:06:
         c0:f3:cc:c0:3c:ae:7d:50:cc:ba:27:f6:c8:e7:77:18:1c:c4:
         bd:01:3f:4e:b5:4a:8a:59:cc:e2:af:d9:ab:5b:b0:2e:63:54:
         b1:b7:77:bd:db:c5:23:2e:ca:88:2a:14:cc:ee:aa:27:fd:8e:
         7e:d9:ef:c2:d3:c3:96:21:97:c6:54:b6:0d:af:a7:98:a3:53:
         a4:e7:05:ef:d9:a8:2b:5b:c5:da:96:04:57:d2:0e:f3:e9:c3:
         6b:27:97:fe:d2:ef:f2:73:91:4c:0e:5b:d4:6a:97:f9:55:89:
         83:56:d7:10:6d:c2:e0:fe:3a:07:e7:65:30:bb:84:e4:cb:40:
         05:a1:fd:18:37:f1:66:b7:c9:8e:08:b9:f9:ca:a4:3d:4b:66:
         f5:79:21:92:62:f2:28:18:26:fe:f4:1f:9f:2f:be:67:9a:66:
         a9:8c:4c:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNb4p485OgqmRa5Jr/gaRySwl9TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FGRTQ2OUZGRjBGQzYwQzBFNUU4ODI0RTA5NURFMzU5
ODVDN0NEMDAeFw0yNDA0MTQxODIxMjZaFw0yNDA0MTUxOTM3MjZaMDMxMTAvBgNV
BAMTKDFFRDI4N0I3MUQxNkVGREI4RDI3Njg4M0Q3RDYwRDQxMEQ0N0JGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzBRBGF9GR1HLdiZxHfVQTAM1k
aMFb+qfDB5tnR0AQDKnFE/UP3RKmayBCfit+erSmOmBOgR55EMq56IyTGEgJURPt
ajqgb4yzy89Jr2YvDvmA72Dak9SCfg3L+4ZWzgGTfc0osFpn9dXOn09Gm+4SZDKT
0TollmC0UjUd4SCEUouOI8tDqp//jKxr9Mm7gCL/mNJajtAp1e884HkJIqYxU9Wh
d3PasFNxUxsdxK5XzGpwEawq98yKutnUT0VcHQxm2I+EvHM02ZRkS/LOz2b2+Ha+
ZyV5Ak2WWKczS6+/VciFJHjtIXXxF8J1i7/Y6vkzcc2YLjsyg5XgtcmIt9oVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHtKHtx0W79uNJ2iD19YNQQ1HvwgwHwYDVR0j
BBgwFoAUev5Gn/8PxgwOXogk4JXeNZhcfNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJp
V0IvMC83QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4NUM3Q0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBRkU0NjlGRkYwRkM2MEMw
RTVFODgyNEUwOTVERTM1OTg1QzdDRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJpV0IvMC83
QUZFNDY5RkZGMEZDNjBDMEU1RTg4MjRFMDk1REUzNTk4NUM3Q0QwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG51wkyLOxaZkIHPdZKJkWkQjHoSXheykVojvxBARJAyYR0OXFEY5t/tr7+Fr
UhaQTwAPOAedZI4yiMwgFnVRmPK3hNz9BB6oFXByH8QJZMxiz52Mt3Yla+4GwPPM
wDyufVDMuif2yOd3GBzEvQE/TrVKilnM4q/Zq1uwLmNUsbd3vdvFIy7KiCoUzO6q
J/2OftnvwtPDliGXxlS2Da+nmKNTpOcF79moK1vF2pYEV9IO8+nDayeX/tLv8nOR
TA5b1GqX+VWJg1bXEG3C4P46B+dlMLuE5MtABaH9GDfxZrfJjgi5+cqkPUtm9Xkh
kmLyKBgm/vQfny++Z5pmqYxMig==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org