Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.mft
File:                     DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.mft (raw, json)
Hash identifier:          q0QZnqGWYZIBY20+7pPt1Aesw2hPhg03uZZpSnseQhg=
Subject key identifier:   21:01:A6:D1:D4:24:91:49:B1:98:25:C7:A8:24:54:E3:50:39:0E:60
Authority key identifier: DC:DF:C1:4B:4A:60:27:0D:D4:18:62:6E:DC:93:7B:3A:3E:33:A1:FB
Certificate issuer:       /CN=DCDFC14B4A60270DD418626EDC937B3A3E33A1FB
Certificate serial:       33D81DE1CEC0AACCE37D8D507DEEE4820A090CEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.mft
Manifest number:          0199
Signing time:             Mon 15 Apr 2024 03:26:16 +0000
Manifest this update:     Mon 15 Apr 2024 03:21:16 +0000
Manifest next update:     Tue 16 Apr 2024 04:21:16 +0000
Files and hashes:         1: 34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa (hash: ty0S/1PByaG4SADKHLPMeI0yd++hVUMl6nmpMusq5tU=)
                          2: 323830343a353832343a3a2f33322d3438203d3e20323638313039.roa (hash: NsWNu64lvY8pJn4F+5bo0N6uSTjGgeaVnJWvpSn0n7s=)
                          3: DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.crl (hash: N0Fngbj/6PLR7U4UhvGKyZmoDMRvY2zWTwfyzVeMoBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:1d:e1:ce:c0:aa:cc:e3:7d:8d:50:7d:ee:e4:82:0a:09:0c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDFC14B4A60270DD418626EDC937B3A3E33A1FB
        Validity
            Not Before: Apr 15 03:21:16 2024 GMT
            Not After : Apr 16 04:21:16 2024 GMT
        Subject: CN=2101A6D1D4249149B19825C7A82454E350390E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:5b:a3:b7:fd:e8:ff:39:af:11:57:c8:bb:
                    47:39:36:a2:a1:85:7e:4f:56:04:bb:65:f0:05:e2:
                    f8:9f:c4:37:a8:2e:3c:8f:a6:71:1a:c8:6a:b1:60:
                    c2:12:49:37:d8:97:12:d4:db:93:aa:df:f6:72:de:
                    dc:0b:bb:7a:3a:aa:74:a0:9c:b8:43:fb:d8:eb:60:
                    d7:d1:d8:c5:a4:d8:46:cd:4e:54:00:77:8e:2a:6b:
                    a7:04:53:bc:2f:5d:a2:5f:6d:8c:66:a9:ea:26:c9:
                    14:3e:8b:c7:c9:7d:8d:64:69:52:07:fd:f8:70:f6:
                    92:13:f6:2b:70:1e:16:f1:b2:d7:ef:ed:97:31:36:
                    f1:ea:1e:08:41:db:35:fe:e6:78:76:ad:5e:28:27:
                    a0:98:07:8f:63:92:7d:d2:44:2f:e6:fd:7c:64:ee:
                    24:39:6f:98:1a:50:29:73:bb:6d:01:4b:5c:4c:f9:
                    6a:cd:6b:4a:da:be:22:61:62:e0:8c:f3:1e:57:e9:
                    f9:81:fb:15:61:fa:57:9f:0c:fb:52:15:55:ed:6e:
                    a0:3e:49:49:a6:59:dc:bf:de:bc:7e:0a:92:1f:45:
                    5b:3d:ae:56:82:ff:3b:40:9c:00:bb:cc:62:6b:fd:
                    d9:d2:8e:f1:6e:95:20:bf:64:e8:94:d4:ea:c1:6b:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:A6:D1:D4:24:91:49:B1:98:25:C7:A8:24:54:E3:50:39:0E:60
            X509v3 Authority Key Identifier:
                keyid:DC:DF:C1:4B:4A:60:27:0D:D4:18:62:6E:DC:93:7B:3A:3E:33:A1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/1/DCDFC14B4A60270DD418626EDC937B3A3E33A1FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:48:b1:29:51:83:a9:eb:26:4e:51:74:31:71:53:af:01:
         59:38:72:66:01:92:35:cc:c6:00:a3:d3:5a:52:b1:ea:44:8d:
         b5:cb:38:8d:78:d2:ac:a4:d1:04:2f:b8:4b:ca:0f:ba:c1:69:
         a7:6e:7f:0a:c7:c2:25:88:75:ee:a8:88:2c:7c:1d:c6:39:8d:
         c7:b1:83:9c:c8:74:fc:2d:fc:77:f8:a8:3a:7f:b2:cc:13:54:
         85:5a:db:90:99:e1:b9:b8:77:bf:99:f4:67:8e:61:37:54:ae:
         5d:86:fd:f0:13:fc:47:5e:c5:45:91:f9:52:d9:7f:ca:7d:69:
         15:1d:c7:6a:4b:14:bc:0a:35:b0:75:11:e9:cc:8e:16:bf:a2:
         ad:d7:bd:66:7b:55:f7:2c:de:a9:a4:f7:31:6d:89:1a:52:40:
         a0:d0:41:57:f1:30:a7:92:a8:76:fe:fd:ff:57:e9:0f:52:d0:
         42:80:a1:df:76:af:4c:23:9b:fa:3f:6f:03:da:c8:99:23:5c:
         62:af:a2:14:bc:93:1c:83:e6:a7:cc:d7:b4:c3:27:0b:02:de:
         b9:81:e7:9d:9c:ff:68:3d:03:d6:10:e3:4b:d9:f9:fb:ad:46:
         4a:8d:ca:7d:44:18:19:46:62:f5:c1:1f:fa:4a:83:3b:51:2f:
         84:88:10:ab
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUM9gd4c7AqszjfY1Qfe7kggoJDOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERkMxNEI0QTYwMjcwREQ0MTg2MjZFREM5MzdCM0Ez
RTMzQTFGQjAeFw0yNDA0MTUwMzIxMTZaFw0yNDA0MTYwNDIxMTZaMDMxMTAvBgNV
BAMTKDIxMDFBNkQxRDQyNDkxNDlCMTk4MjVDN0E4MjQ1NEUzNTAzOTBFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzelujt/3o/zmvEVfIu0c5NqKh
hX5PVgS7ZfAF4vifxDeoLjyPpnEayGqxYMISSTfYlxLU25Oq3/Zy3twLu3o6qnSg
nLhD+9jrYNfR2MWk2EbNTlQAd44qa6cEU7wvXaJfbYxmqeomyRQ+i8fJfY1kaVIH
/fhw9pIT9itwHhbxstfv7ZcxNvHqHghB2zX+5nh2rV4oJ6CYB49jkn3SRC/m/Xxk
7iQ5b5gaUClzu20BS1xM+WrNa0raviJhYuCM8x5X6fmB+xVh+lefDPtSFVXtbqA+
SUmmWdy/3rx+CpIfRVs9rlaC/ztAnAC7zGJr/dnSjvFulSC/ZOiU1OrBayMpAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUIQGm0dQkkUmxmCXHqCRU41A5DmAwHwYDVR0j
BBgwFoAU3N/BS0pgJw3UGGJu3JN7Oj4zofswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QTUFTVnJjOEF5bXlzNDczd3FFQXh1Z1NQRVpIa1JBdjVybUxOQzZab0FT
LzEvRENERkMxNEI0QTYwMjcwREQ0MTg2MjZFREM5MzdCM0EzRTMzQTFGQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQ0RGQzE0QjRBNjAyNzBERDQx
ODYyNkVEQzkzN0IzQTNFMzNBMUZCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1BN
QVNWcmM4QXlteXM0NzN3cUVBeHVnU1BFWkhrUkF2NXJtTE5DNlpvQVMvMS9EQ0RG
QzE0QjRBNjAyNzBERDQxODYyNkVEQzkzN0IzQTNFMzNBMUZCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
cjpIsSlRg6nrJk5RdDFxU68BWThyZgGSNczGAKPTWlKx6kSNtcs4jXjSrKTRBC+4
S8oPusFpp25/CsfCJYh17qiILHwdxjmNx7GDnMh0/C38d/ioOn+yzBNUhVrbkJnh
ubh3v5n0Z45hN1SuXYb98BP8R17FRZH5Utl/yn1pFR3HaksUvAo1sHUR6cyOFr+i
rde9ZntV9yzeqaT3MW2JGlJAoNBBV/Ewp5Kodv79/1fpD1LQQoCh33avTCOb+j9v
A9rImSNcYq+iFLyTHIPmp8zXtMMnCwLeuYHnnZz/aD0D1hDjS9n5+61GSo3KfUQY
GUZi9cEf+kqDO1EvhIgQqw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org