Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.mft
File:                     34480FB5377B9D616C84A3C34C05E236C464E996.mft (raw, json)
Hash identifier:          MO1kHKxTggIB3YdEbeAPxS8cJ0bFq0K+zTq1/W1mxOw=
Subject key identifier:   AD:7A:95:9B:C8:9D:19:85:91:D5:22:49:55:F1:B1:FB:36:BA:DE:64
Authority key identifier: 34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
Certificate issuer:       /CN=34480FB5377B9D616C84A3C34C05E236C464E996
Certificate serial:       20A9987F66A31973807625A059BA09C1C52339D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.mft
Manifest number:          17
Signing time:             Mon 15 Apr 2024 10:00:12 +0000
Manifest this update:     Mon 15 Apr 2024 09:55:12 +0000
Manifest next update:     Tue 16 Apr 2024 11:41:12 +0000
Files and hashes:         1: 323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (hash: qmrfM4gw7sJIhhqZqlScbVtEm+HEkAuWLkBL4TdEL+4=)
                          2: 34480FB5377B9D616C84A3C34C05E236C464E996.crl (hash: DWhKqfjLJUSmH2hfsTratMbxNgfJ9SgLr0i2YsvDbxU=)
                          3: 3139302e3130322e34342e302f32332d3233203d3e20323731353134.roa (hash: cZRkmdLjh5+eMvSYPsqgM1y3Egr3D/9eqd1pk+RW4pI=)
                          4: 3139302e3130322e34362e302f32332d3233203d3e20323731353134.roa (hash: xWj+ZU4POuA8kvk1+XJNcgXZapKP3MvQ6hCb1yh4lV8=)
                          5: 3139302e3130322e34352e302f32342d3234203d3e20323731353134.roa (hash: 6l9GbULzMYx3HzNRzcvvebpPeraHUkVoY8w5tCR8LAM=)
                          6: 3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa (hash: yP2RmPiXGDSFcptnm7cYEIyhCswAGGzpNFRcWmnq7ss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a9:98:7f:66:a3:19:73:80:76:25:a0:59:ba:09:c1:c5:23:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34480FB5377B9D616C84A3C34C05E236C464E996
        Validity
            Not Before: Apr 15 09:55:12 2024 GMT
            Not After : Apr 16 11:41:12 2024 GMT
        Subject: CN=AD7A959BC89D198591D5224955F1B1FB36BADE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:9a:60:14:86:de:36:ee:0b:92:72:89:98:
                    12:a5:f3:5d:d1:92:8b:ef:f0:bf:b2:75:8b:ec:e7:
                    70:57:39:71:6d:c7:38:33:c4:da:b6:26:a6:34:3a:
                    dc:c9:5a:d4:d7:81:50:2e:1d:d5:87:1e:0c:55:3a:
                    07:2e:e6:cb:cb:ea:f9:e0:a3:a8:ee:7c:5d:73:b2:
                    38:d6:c2:cc:d9:31:ac:64:dd:19:48:c0:81:c3:17:
                    79:aa:1b:cf:b9:9d:48:56:a3:9d:1d:cf:97:5a:59:
                    02:a9:58:3f:eb:56:e7:ca:9b:7a:ad:7b:77:c7:9b:
                    cb:8e:8d:27:ae:d0:7e:9b:40:f8:b8:ee:a7:22:9d:
                    09:7c:64:07:5f:0b:fd:f8:36:f6:b2:14:ed:11:9f:
                    86:29:c3:08:fb:d5:5e:3e:2f:32:22:4b:6b:e9:8d:
                    51:d7:34:1d:68:13:70:60:29:3a:12:40:55:15:22:
                    fc:41:2d:0c:48:af:1d:c5:92:41:9c:aa:78:c2:b5:
                    75:9c:c3:c2:b6:fb:09:42:60:d3:e1:41:3a:db:26:
                    f3:14:3e:f7:7e:b7:06:8b:56:94:bd:59:06:ef:42:
                    25:85:af:7e:5c:e2:c9:a4:08:82:87:00:a9:a8:cd:
                    0a:7f:09:21:21:e3:4f:8d:67:a8:ac:8d:34:2e:c6:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:95:9B:C8:9D:19:85:91:D5:22:49:55:F1:B1:FB:36:BA:DE:64
            X509v3 Authority Key Identifier:
                keyid:34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:96:de:e5:e1:ba:c4:a4:3c:1e:bd:90:40:22:40:56:de:59:
         65:bd:d3:fd:5d:36:ae:a0:16:6c:f6:33:58:b8:7a:61:8d:7c:
         88:38:46:ad:b3:12:b8:85:30:d0:e1:9c:6f:73:ce:69:8b:3c:
         e6:3a:02:31:9d:2c:58:8e:cb:28:06:0e:32:84:47:28:44:33:
         47:41:cc:45:1c:32:6d:bc:ca:33:d0:eb:ee:43:39:99:65:71:
         1e:43:a9:11:1b:fa:bb:e4:64:37:a2:7c:03:a0:23:5c:48:f8:
         d1:d5:80:ec:f1:12:69:39:29:54:e6:53:8d:74:ef:15:d8:92:
         d3:f2:5e:3f:8d:3b:de:c0:11:44:a1:d1:ce:da:d6:6f:3a:c4:
         41:dd:80:3d:62:83:73:f5:9f:54:90:3b:33:7e:93:db:a3:23:
         10:63:2a:3d:35:23:b0:34:13:01:4b:eb:99:4b:3d:57:a6:2d:
         9a:66:24:e2:ea:d3:7c:27:16:f2:d5:06:7b:dd:04:fe:9f:cc:
         00:34:44:e9:84:7d:0e:fc:a4:d4:39:f3:1c:26:c0:56:62:08:
         80:58:1d:5a:27:e9:19:c4:be:9e:c8:89:9a:20:cf:56:79:10:
         6e:a6:5e:ce:64:85:40:14:06:6d:de:47:68:fa:1f:17:74:64:
         e4:58:bf:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIKmYf2ajGXOAdiWgWboJwcUjOdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0ODBGQjUzNzdCOUQ2MTZDODRBM0MzNEMwNUUyMzZD
NDY0RTk5NjAeFw0yNDA0MTUwOTU1MTJaFw0yNDA0MTYxMTQxMTJaMDMxMTAvBgNV
BAMTKEFEN0E5NTlCQzg5RDE5ODU5MUQ1MjI0OTU1RjFCMUZCMzZCQURFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR0JpgFIbeNu4LknKJmBKl813R
kovv8L+ydYvs53BXOXFtxzgzxNq2JqY0OtzJWtTXgVAuHdWHHgxVOgcu5svL6vng
o6jufF1zsjjWwszZMaxk3RlIwIHDF3mqG8+5nUhWo50dz5daWQKpWD/rVufKm3qt
e3fHm8uOjSeu0H6bQPi47qcinQl8ZAdfC/34NvayFO0Rn4Ypwwj71V4+LzIiS2vp
jVHXNB1oE3BgKToSQFUVIvxBLQxIrx3FkkGcqnjCtXWcw8K2+wlCYNPhQTrbJvMU
Pvd+twaLVpS9WQbvQiWFr35c4smkCIKHAKmozQp/CSEh40+NZ6isjTQuxtSlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrXqVm8idGYWR1SJJVfGx+za63mQwHwYDVR0j
BBgwFoAUNEgPtTd7nWFshKPDTAXiNsRk6ZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnoxMUhlZzZTeUhGYTd1UEhEb2tZcDZjYkNKVG5VMkJGbnBnd21mWko5
ZEovMC8zNDQ4MEZCNTM3N0I5RDYxNkM4NEEzQzM0QzA1RTIzNkM0NjRFOTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0NDgwRkI1Mzc3QjlENjE2
Qzg0QTNDMzRDMDVFMjM2QzQ2NEU5OTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnoxMUhlZzZTeUhGYTd1UEhEb2tZcDZjYkNKVG5VMkJGbnBnd21mWko5ZEovMC8z
NDQ4MEZCNTM3N0I5RDYxNkM4NEEzQzM0QzA1RTIzNkM0NjRFOTk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARpbe5eG6xKQ8Hr2QQCJAVt5ZZb3T/V02rqAWbPYzWLh6YY18iDhGrbMSuIUw
0OGcb3POaYs85joCMZ0sWI7LKAYOMoRHKEQzR0HMRRwybbzKM9Dr7kM5mWVxHkOp
ERv6u+RkN6J8A6AjXEj40dWA7PESaTkpVOZTjXTvFdiS0/JeP4073sARRKHRztrW
bzrEQd2APWKDc/WfVJA7M36T26MjEGMqPTUjsDQTAUvrmUs9V6YtmmYk4urTfCcW
8tUGe90E/p/MADRE6YR9Dvyk1DnzHCbAVmIIgFgdWifpGcS+nsiJmiDPVnkQbqZe
zmSFQBQGbd5HaPofF3Rk5Fi/Fw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org