Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft
File:                     F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft (raw, json)
Hash identifier:          Ppl0XbyT+zRp5/1UPrFkCKcyCDcaJ0b+OlTS5yGThPw=
Subject key identifier:   9D:6F:B0:5C:35:74:57:03:F0:14:D6:B1:9F:45:2E:0B:A4:D6:C4:D3
Authority key identifier: F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB
Certificate issuer:       /CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
Certificate serial:       7C7A1DEED27CFABBD2BC6231FE9E4B4E74620F9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft
Manifest number:          BC
Signing time:             Sun 14 Apr 2024 22:13:48 +0000
Manifest this update:     Sun 14 Apr 2024 22:08:48 +0000
Manifest next update:     Mon 15 Apr 2024 23:00:48 +0000
Files and hashes:         1: F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl (hash: M+lA7FNBgFfQ3CBHoPPtMQfnuJby2bRkk1p28Jjpb1Q=)
                          2: 3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa (hash: yJ851W/+YYL5QO+YqlFMRXBZ+e8WQ1SgSiF2JVC2UEw=)
                          3: 323830343a373232303a3a2f33322d3332203d3e20323730383334.roa (hash: WX53vv5P/P1nMpTlwvqlakscnxX5oEOhYvWtHihmWIY=)
                          4: 3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa (hash: dYVBz+5CXfzCxOHHnxFdOrN4GrEMUQJRhe8a6Dx6z1c=)
                          5: 323830343a373232303a343030303a3a2f33342d3334203d3e20323730383334.roa (hash: p8Pl3+50xJ6qG20P5EewS9eRpFB9wLsVSCUva+dLp38=)
                          6: 3230302e3232392e3234332e302f32342d3234203d3e20323730383334.roa (hash: 4sPl4ClqQSeCxqu2rniFptYhz59/E0P96Q7hWsiHRjo=)
                          7: 3230302e3232392e3234302e302f32332d3233203d3e20323730383334.roa (hash: 8VD4JRxYFcbOzm0N0QIJ4RA+oXqHXKRXd8mdhDjel04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7a:1d:ee:d2:7c:fa:bb:d2:bc:62:31:fe:9e:4b:4e:74:62:0f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB
        Validity
            Not Before: Apr 14 22:08:48 2024 GMT
            Not After : Apr 15 23:00:48 2024 GMT
        Subject: CN=9D6FB05C35745703F014D6B19F452E0BA4D6C4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:e2:d3:76:75:ce:a2:89:ad:79:af:f4:9f:
                    72:12:91:72:f9:c8:90:8e:ea:69:ee:b6:1b:94:3d:
                    be:19:51:3f:6e:f6:0d:a1:33:a1:17:1d:5c:19:93:
                    ec:17:6e:4c:21:28:95:05:ea:32:9c:cd:92:6e:54:
                    70:6b:a1:a6:a6:95:e3:b5:c1:3e:90:20:cb:3c:d4:
                    51:f0:ae:b8:de:4a:79:96:cb:35:e8:a5:eb:8b:82:
                    f9:9c:e5:69:03:78:fb:47:3d:56:bc:93:19:e0:7d:
                    d2:1a:66:f2:73:ed:fd:2f:bb:e3:67:39:0e:60:97:
                    34:73:95:42:59:ea:fc:a4:83:86:47:44:b5:15:a1:
                    95:ae:b0:f8:aa:d0:a8:d6:a5:b8:70:a9:7d:2a:ac:
                    b9:19:8a:09:30:ed:80:e5:2c:61:0c:2f:dd:d4:31:
                    fa:67:11:ed:29:ef:91:9a:ca:e8:08:e0:37:7c:54:
                    d7:ad:23:fb:65:cb:79:72:cc:fb:bb:33:82:a7:91:
                    98:21:6d:95:e7:05:d7:97:3a:82:c2:1a:ab:4b:d2:
                    07:62:3c:7f:1f:22:ec:f1:95:71:5b:a0:a6:75:29:
                    93:25:75:49:f4:be:d2:b0:53:d1:e5:9a:d1:62:fe:
                    7a:d5:7f:51:d1:29:38:2f:ca:e4:fd:7f:bf:aa:a7:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:B0:5C:35:74:57:03:F0:14:D6:B1:9F:45:2E:0B:A4:D6:C4:D3
            X509v3 Authority Key Identifier:
                keyid:F5:EB:D2:D8:FD:46:BA:62:86:77:A6:61:76:C7:3A:BC:E3:EF:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/F5EBD2D8FD46BA628677A66176C73ABCE3EF2AEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:07:76:30:df:c9:08:99:50:45:16:5e:7a:13:d6:06:f9:
         d8:c7:4f:8a:44:8f:a9:97:27:30:5d:b5:dc:af:ac:97:8f:ce:
         a5:54:c0:93:9c:dc:32:55:50:b7:1c:0c:4f:30:c3:14:a1:70:
         8b:08:70:ca:0d:d3:d8:c1:86:08:83:16:ad:2a:37:dd:a9:64:
         f6:37:c9:e0:15:56:f9:ec:64:53:41:21:6e:c8:8b:4c:c4:82:
         68:16:a0:b3:02:05:71:32:4f:c8:0e:da:72:b8:4e:45:41:30:
         10:86:81:a6:21:19:2f:85:01:13:1d:c2:63:a1:0f:f0:35:d7:
         1e:39:82:37:11:0c:a0:45:9e:55:f0:da:c5:6b:7a:c6:09:e9:
         87:91:db:e3:39:81:7d:37:ae:29:fb:9b:8d:62:c0:86:22:91:
         63:ef:11:21:d2:4d:fb:71:49:38:91:d4:fb:4f:b9:cd:25:4c:
         22:00:05:04:2b:c1:88:01:43:32:73:e5:bb:00:e3:2b:2f:05:
         ea:85:2f:b0:59:ab:73:6c:40:38:fa:1a:8c:1b:43:de:fb:eb:
         bb:0b:61:4b:eb:fd:4f:f2:1b:56:86:2e:12:40:7d:35:d1:c8:
         44:33:30:7b:7b:5b:0c:bf:39:7d:d5:1d:85:8a:30:da:ee:c8:
         c6:28:c9:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfHod7tJ8+rvSvGIx/p5LTnRiD5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVFQkQyRDhGRDQ2QkE2Mjg2NzdBNjYxNzZDNzNBQkNF
M0VGMkFFQjAeFw0yNDA0MTQyMjA4NDhaFw0yNDA0MTUyMzAwNDhaMDMxMTAvBgNV
BAMTKDlENkZCMDVDMzU3NDU3MDNGMDE0RDZCMTlGNDUyRTBCQTRENkM0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi+LTdnXOoomtea/0n3ISkXL5
yJCO6mnuthuUPb4ZUT9u9g2hM6EXHVwZk+wXbkwhKJUF6jKczZJuVHBroaamleO1
wT6QIMs81FHwrrjeSnmWyzXopeuLgvmc5WkDePtHPVa8kxngfdIaZvJz7f0vu+Nn
OQ5glzRzlUJZ6vykg4ZHRLUVoZWusPiq0KjWpbhwqX0qrLkZigkw7YDlLGEML93U
MfpnEe0p75GayugI4Dd8VNetI/tly3lyzPu7M4KnkZghbZXnBdeXOoLCGqtL0gdi
PH8fIuzxlXFboKZ1KZMldUn0vtKwU9HlmtFi/nrVf1HRKTgvyuT9f7+qpzH9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnW+wXDV0VwPwFNaxn0UuC6TWxNMwHwYDVR0j
BBgwFoAU9evS2P1GumKGd6Zhdsc6vOPvKuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRxWndmdEdOTmRFb3ZrS0szN3FLMTVobVpTeHYyaWI2eTR0OEhobnBz
NWMvMC9GNUVCRDJEOEZENDZCQTYyODY3N0E2NjE3NkM3M0FCQ0UzRUYyQUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1RUJEMkQ4RkQ0NkJBNjI4
Njc3QTY2MTc2QzczQUJDRTNFRjJBRUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkRxWndmdEdOTmRFb3ZrS0szN3FLMTVobVpTeHYyaWI2eTR0OEhobnBzNWMvMC9G
NUVCRDJEOEZENDZCQTYyODY3N0E2NjE3NkM3M0FCQ0UzRUYyQUVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKLcHdjDfyQiZUEUWXnoT1gb52MdPikSPqZcnMF213K+sl4/OpVTAk5zcMlVQ
txwMTzDDFKFwiwhwyg3T2MGGCIMWrSo33alk9jfJ4BVW+exkU0EhbsiLTMSCaBag
swIFcTJPyA7acrhORUEwEIaBpiEZL4UBEx3CY6EP8DXXHjmCNxEMoEWeVfDaxWt6
xgnph5Hb4zmBfTeuKfubjWLAhiKRY+8RIdJN+3FJOJHU+0+5zSVMIgAFBCvBiAFD
MnPluwDjKy8F6oUvsFmrc2xAOPoajBtD3vvruwthS+v9T/IbVoYuEkB9NdHIRDMw
e3tbDL85fdUdhYow2u7IxijJFw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org