Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft
File:                     CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft (raw, json)
Hash identifier:          guvzkAX4l15heu1c57+mqhNhqKg3FR7qG6YQcNk3BQ8=
Subject key identifier:   71:65:CA:BC:28:D6:68:34:C8:24:ED:29:7F:B7:CB:C4:87:EC:09:63
Authority key identifier: CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB
Certificate issuer:       /CN=CC754C9ECCEF7E16653034A8D806C820C35D7CFB
Certificate serial:       6144523C9D08443A7FE950FC8E083E0EF6ED0728
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft
Manifest number:          0173
Signing time:             Mon 15 Apr 2024 05:52:38 +0000
Manifest this update:     Mon 15 Apr 2024 05:47:38 +0000
Manifest next update:     Tue 16 Apr 2024 09:01:38 +0000
Files and hashes:         1: CC754C9ECCEF7E16653034A8D806C820C35D7CFB.crl (hash: qRLKRHDwuQo5vRy/KKJd2AOampJgq70xDihSm4rtWeY=)
                          2: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: sOAMtVaHXjVEVUSTS9jowiKAJ6ZafEEegY1t5+KGaSQ=)
                          3: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: OGFecRrEVDYQbm39EZaIWiIc7VangXg+/fnX027YWzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:52:3c:9d:08:44:3a:7f:e9:50:fc:8e:08:3e:0e:f6:ed:07:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC754C9ECCEF7E16653034A8D806C820C35D7CFB
        Validity
            Not Before: Apr 15 05:47:38 2024 GMT
            Not After : Apr 16 09:01:38 2024 GMT
        Subject: CN=7165CABC28D66834C824ED297FB7CBC487EC0963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:92:a1:26:4c:14:38:83:4f:dd:0f:a0:00:
                    62:48:d8:ee:22:fe:72:51:e0:25:ad:70:c3:a1:fe:
                    38:e9:66:a0:d7:79:8d:74:34:37:78:4b:10:65:75:
                    5f:5d:7c:fa:0e:d7:ce:bf:ce:56:ef:ad:56:1e:ce:
                    d5:41:9b:af:7d:49:ca:5e:79:5a:d1:08:c8:8b:c5:
                    6f:8e:8d:cc:ce:d9:e0:bc:0f:21:b2:2e:a8:b5:ad:
                    c7:1b:17:89:09:64:ec:e7:5a:34:4c:0e:00:d6:2a:
                    08:85:41:77:fc:dd:b4:6b:12:8f:3b:ed:fa:71:7e:
                    74:1b:ce:03:5a:ce:13:3f:a5:2f:98:24:8f:07:e7:
                    d6:16:d2:e7:53:ca:a9:8c:5c:2c:f6:25:9a:5b:29:
                    da:c1:46:ca:68:53:b0:f3:e4:5b:74:d6:68:cf:91:
                    47:04:a8:ee:7c:54:bb:f4:86:10:f7:7c:7d:c9:0a:
                    0a:c4:a4:4b:00:71:04:80:eb:4e:0d:f6:9c:11:da:
                    d8:ea:9f:8f:75:e2:60:0d:4b:92:26:c6:db:4c:43:
                    81:9a:32:15:66:60:72:86:72:30:80:3c:ef:20:11:
                    95:ac:9b:ca:b5:0e:d8:e2:1c:6e:7a:00:e7:66:4f:
                    be:d5:e1:b7:3e:5a:4f:4d:ce:a3:3b:b4:4b:b7:5c:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:65:CA:BC:28:D6:68:34:C8:24:ED:29:7F:B7:CB:C4:87:EC:09:63
            X509v3 Authority Key Identifier:
                keyid:CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:a6:74:1a:e6:21:a2:30:7b:14:3e:2c:be:73:25:51:95:
         46:4e:09:a5:a8:f8:24:2e:74:79:f1:d3:8e:66:8a:1d:c7:3e:
         b3:0e:89:ac:12:77:58:5a:16:49:42:84:48:52:48:71:46:a9:
         7a:51:1a:f7:23:37:b9:cf:94:a3:81:06:21:25:f0:d9:76:65:
         79:10:d2:56:04:10:cb:54:fd:5d:fb:9b:8c:44:43:83:5b:d5:
         20:96:39:07:56:3e:ff:d9:ef:5c:7d:73:98:75:d7:2e:6f:0b:
         cb:2e:5e:5e:16:b5:cf:4c:d3:fd:6f:c2:19:5b:de:22:05:4d:
         af:0d:6e:71:42:23:da:c9:8d:d8:a8:44:25:be:ea:85:f9:fe:
         f8:5a:b1:b6:a8:10:df:2e:fa:53:cb:54:97:6f:a5:e1:d0:f4:
         58:47:de:8e:9b:f1:c4:c1:77:32:52:5e:31:12:a0:eb:69:24:
         65:aa:e9:24:71:df:82:7d:26:2f:29:b3:fa:58:0c:d9:9b:d6:
         74:4e:f4:db:87:c6:8b:88:56:88:b9:45:57:75:56:92:23:73:
         88:cb:f0:0e:66:5a:31:b5:ff:53:00:01:b2:fc:37:8e:e0:2a:
         b2:ea:46:51:fb:2f:6d:1b:41:71:43:6a:e5:e2:4f:34:af:df:
         34:fd:05:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYURSPJ0IRDp/6VD8jgg+DvbtBygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M3NTRDOUVDQ0VGN0UxNjY1MzAzNEE4RDgwNkM4MjBD
MzVEN0NGQjAeFw0yNDA0MTUwNTQ3MzhaFw0yNDA0MTYwOTAxMzhaMDMxMTAvBgNV
BAMTKDcxNjVDQUJDMjhENjY4MzRDODI0RUQyOTdGQjdDQkM0ODdFQzA5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nZKhJkwUOINP3Q+gAGJI2O4i
/nJR4CWtcMOh/jjpZqDXeY10NDd4SxBldV9dfPoO186/zlbvrVYeztVBm699Scpe
eVrRCMiLxW+OjczO2eC8DyGyLqi1rccbF4kJZOznWjRMDgDWKgiFQXf83bRrEo87
7fpxfnQbzgNazhM/pS+YJI8H59YW0udTyqmMXCz2JZpbKdrBRspoU7Dz5Ft01mjP
kUcEqO58VLv0hhD3fH3JCgrEpEsAcQSA604N9pwR2tjqn4914mANS5ImxttMQ4Ga
MhVmYHKGcjCAPO8gEZWsm8q1DtjiHG56AOdmT77V4bc+Wk9NzqM7tEu3XAQlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcWXKvCjWaDTIJO0pf7fLxIfsCWMwHwYDVR0j
BBgwFoAUzHVMnszvfhZlMDSo2AbIIMNdfPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdR
VlovMC9DQzc1NEM5RUNDRUY3RTE2NjUzMDM0QThEODA2QzgyMEMzNUQ3Q0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDNzU0QzlFQ0NFRjdFMTY2
NTMwMzRBOEQ4MDZDODIwQzM1RDdDRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdRVlovMC9D
Qzc1NEM5RUNDRUY3RTE2NjUzMDM0QThEODA2QzgyMEMzNUQ3Q0ZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdpymdBrmIaIwexQ+LL5zJVGVRk4Jpaj4JC50efHTjmaKHcc+sw6JrBJ3WFoW
SUKESFJIcUapelEa9yM3uc+Uo4EGISXw2XZleRDSVgQQy1T9XfubjERDg1vVIJY5
B1Y+/9nvXH1zmHXXLm8Lyy5eXha1z0zT/W/CGVveIgVNrw1ucUIj2smN2KhEJb7q
hfn++FqxtqgQ3y76U8tUl2+l4dD0WEfejpvxxMF3MlJeMRKg62kkZarpJHHfgn0m
Lymz+lgM2ZvWdE7024fGi4hWiLlFV3VWkiNziMvwDmZaMbX/UwABsvw3juAqsupG
UfsvbRtBcUNq5eJPNK/fNP0Fyg==
-----END CERTIFICATE-----