Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft
File:                     31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft (raw, json)
Hash identifier:          ye+hjbWs0bLhPbmJSVvh26pVpLmeSNV1G+b9tEvwxmk=
Subject key identifier:   90:D8:E5:FA:BA:6B:95:FD:63:61:53:42:BD:76:1C:CC:5F:E6:DA:04
Authority key identifier: 31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6
Certificate issuer:       /CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
Certificate serial:       0C55DDB152A002397EE4709F4C84D7670030D95A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft
Manifest number:          D8
Signing time:             Wed 11 Sep 2024 06:57:47 +0000
Manifest this update:     Wed 11 Sep 2024 06:52:47 +0000
Manifest next update:     Thu 12 Sep 2024 10:17:47 +0000
Files and hashes:         1: 34352e3136312e3234372e302f32342d3234203d3e20323638343834.roa (hash: Ju9ENnYmALqeZpdTs6jEwzACo5LRdkEabAFvxCMI9Wc=)
                          2: 323830343a353165383a3a2f33332d3333203d3e20323638343834.roa (hash: tVEFAk46aQHZ2diZnKWF0660h3oUOWPlpqzglIzDUFo=)
                          3: 323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa (hash: ikTRgxQLvgd+TEzATxTk13rdCNm80DDMaSWa617osh8=)
                          4: 31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl (hash: EpsZdicQhIKZ4lAwOJwAl8/zIx7FVI256QxPl1xnuY8=)
                          5: 323830343a353165383a3a2f33322d3332203d3e20323638343834.roa (hash: GDIq6UXcfp9gI2quLJo9Jy5UI+aCw26Cp1mtpWOHZys=)
                          6: 34352e3136312e3234352e302f32342d3234203d3e20323638343834.roa (hash: tzgIWv/BeiUBoGYKkXZGU+eQvMsqdfRt0HSY4pssTM8=)
                          7: 34352e3136312e3234362e302f32332d3233203d3e20323638343834.roa (hash: LOqI57OYRUUCjt4fa6+vUn2pzEJNu91IpfbaQyoTMHs=)
                          8: 34352e3136312e3234362e302f32342d3234203d3e20323638343834.roa (hash: JjhBl2MubRQ1RV/p8mXKBOGkkRAgO62wM+gY4WU13go=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:55:dd:b1:52:a0:02:39:7e:e4:70:9f:4c:84:d7:67:00:30:d9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
        Validity
            Not Before: Sep 11 06:52:47 2024 GMT
            Not After : Sep 12 10:17:47 2024 GMT
        Subject: CN=90D8E5FABA6B95FD63615342BD761CCC5FE6DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:a9:d7:e9:ff:ee:da:eb:e8:69:75:51:d3:
                    dc:cb:a6:27:c3:ea:e8:7e:84:3a:c6:d5:4c:49:76:
                    48:a8:d4:70:10:6c:2d:c7:60:48:a3:68:a1:e2:8a:
                    29:c8:2c:5d:98:dd:81:66:f2:a8:de:9b:b1:07:fc:
                    00:e0:c5:39:48:e3:21:42:bd:2a:09:39:5e:77:1b:
                    39:e9:92:77:ed:18:1b:33:3f:b0:bd:ff:8f:7e:00:
                    5a:7e:df:ba:61:95:88:83:f8:28:b7:bf:e9:ac:9d:
                    cf:ff:93:e4:27:6e:44:d9:34:96:ce:9b:60:2a:f0:
                    a9:3f:5e:ba:f8:8c:d1:0b:81:21:36:14:2e:51:21:
                    2e:15:8b:b0:23:31:a5:15:e6:c3:96:08:87:6c:68:
                    fb:50:4c:34:11:4f:c5:96:8a:14:b6:b1:ac:4b:6a:
                    5b:a3:2b:a0:8a:54:85:cf:fa:7e:d2:eb:3c:57:3c:
                    04:a5:79:5e:a8:18:0d:4d:6d:5c:35:98:f8:2a:af:
                    9a:7d:79:05:33:bf:b4:4f:fb:e6:d5:f1:fd:1f:dc:
                    10:00:f5:d7:61:f0:45:b7:76:cc:79:93:8f:59:db:
                    52:b0:3b:56:6d:5c:67:33:ca:9c:6f:13:e6:2e:c5:
                    ec:12:c7:f0:21:fd:c7:86:22:75:9e:b2:4c:1a:04:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D8:E5:FA:BA:6B:95:FD:63:61:53:42:BD:76:1C:CC:5F:E6:DA:04
            X509v3 Authority Key Identifier:
                keyid:31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:66:52:23:02:ba:9c:a3:49:12:9f:22:30:b1:4e:a6:b1:
         09:d9:e8:ae:ad:15:29:87:a5:04:c7:6a:e0:4f:b4:57:01:ba:
         c8:44:7d:f3:70:76:81:3b:21:48:2e:ca:8f:fc:2f:2a:84:eb:
         5d:69:1a:bf:04:bd:bb:88:18:25:24:b9:08:f4:26:d5:e7:b6:
         1a:24:5e:ff:64:da:39:b1:33:1e:9d:8b:c0:1e:33:cd:91:06:
         4c:e3:09:9c:43:32:d5:00:26:fd:84:9c:63:34:a3:c6:85:16:
         da:84:8e:89:a0:db:6c:e8:ce:d0:2f:6d:5f:5f:d1:8a:8f:9b:
         7c:53:4a:21:a4:bd:5c:12:19:e0:53:4f:1c:91:d7:08:a0:11:
         c9:c8:33:52:b9:8c:f7:f4:b5:a8:0f:ff:da:49:ed:d7:55:2c:
         26:05:38:a2:65:15:6b:9e:11:05:1e:94:e9:35:4e:25:c8:0f:
         db:b2:b8:fa:9b:c9:53:00:6a:ad:53:17:ee:3b:30:54:67:d9:
         13:07:47:f5:c9:4f:32:1b:92:0d:c7:23:e5:32:69:aa:6a:e3:
         a4:57:e8:60:db:2b:88:2c:ea:9e:ab:a3:1f:b4:24:cd:70:26:
         de:3b:d8:a1:8e:d7:fe:0b:76:7f:aa:d6:21:5b:c8:39:cb:be:
         49:e7:28:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDFXdsVKgAjl+5HCfTITXZwAw2VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFEQ0I2MDFENEZEN0ZERDg3RDc0QzkzRUJCMjAxQ0ZC
RDBDQTlFNjAeFw0yNDA5MTEwNjUyNDdaFw0yNDA5MTIxMDE3NDdaMDMxMTAvBgNV
BAMTKDkwRDhFNUZBQkE2Qjk1RkQ2MzYxNTM0MkJENzYxQ0NDNUZFNkRBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYanX6f/u2uvoaXVR09zLpifD
6uh+hDrG1UxJdkio1HAQbC3HYEijaKHiiinILF2Y3YFm8qjem7EH/ADgxTlI4yFC
vSoJOV53GznpknftGBszP7C9/49+AFp+37phlYiD+Ci3v+msnc//k+QnbkTZNJbO
m2Aq8Kk/Xrr4jNELgSE2FC5RIS4Vi7AjMaUV5sOWCIdsaPtQTDQRT8WWihS2saxL
alujK6CKVIXP+n7S6zxXPASleV6oGA1NbVw1mPgqr5p9eQUzv7RP++bV8f0f3BAA
9ddh8EW3dsx5k49Z21KwO1ZtXGczypxvE+YuxewSx/Ah/ceGInWeskwaBCO/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkNjl+rprlf1jYVNCvXYczF/m2gQwHwYDVR0j
BBgwFoAUMdy2AdT9f92H10yT67IBz70MqeYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMS8zMURDQjYwMUQ0RkQ3RkREODdENzRDOTNFQkIyMDFDRkJEMENBOUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxRENCNjAxRDRGRDdGREQ4
N0Q3NEM5M0VCQjIwMUNGQkQwQ0E5RTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQlltNmQvMS8z
MURDQjYwMUQ0RkQ3RkREODdENzRDOTNFQkIyMDFDRkJEMENBOUU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlvRmUiMCupyjSRKfIjCxTqaxCdnorq0VKYelBMdq4E+0VwG6yER983B2gTsh
SC7Kj/wvKoTrXWkavwS9u4gYJSS5CPQm1ee2GiRe/2TaObEzHp2LwB4zzZEGTOMJ
nEMy1QAm/YScYzSjxoUW2oSOiaDbbOjO0C9tX1/Rio+bfFNKIaS9XBIZ4FNPHJHX
CKARycgzUrmM9/S1qA//2knt11UsJgU4omUVa54RBR6U6TVOJcgP27K4+pvJUwBq
rVMX7jswVGfZEwdH9clPMhuSDccj5TJpqmrjpFfoYNsriCzqnqujH7QkzXAm3jvY
oY7X/gt2f6rWIVvIOcu+Seco8Q==
-----END CERTIFICATE-----
Generated at Wed Sep 11 13:30:04 2024 by rpki-client on console-fra.rpki-client.org