Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.mft
File:                     A92CCCC37FAF09303E0BACAE5529C7780E33D544.mft (raw, json)
Hash identifier:          hpqfFNLGhFAgOlId0QC+FXQIRu9uM8nWPcaZbbVWBZs=
Subject key identifier:   B9:D7:3F:1D:7C:7C:48:34:B0:A3:D1:B2:9C:05:AB:71:65:C2:04:92
Authority key identifier: A9:2C:CC:C3:7F:AF:09:30:3E:0B:AC:AE:55:29:C7:78:0E:33:D5:44
Certificate issuer:       /CN=A92CCCC37FAF09303E0BACAE5529C7780E33D544
Certificate serial:       28E3FADFE5E10115CB1A5F5A48FA3FFC6D0EA010
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.mft
Manifest number:          0105
Signing time:             Thu 20 Apr 2023 06:07:04 +0000
Manifest this update:     Thu 20 Apr 2023 06:02:04 +0000
Manifest next update:     Fri 21 Apr 2023 06:59:04 +0000
Files and hashes:         1: A92CCCC37FAF09303E0BACAE5529C7780E33D544.crl (hash: WiM6v3vODoxEj/xHciLmXclJWV7liexui7uvZI2A4Ck=)
                          2: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: J3WcCj4Clgc8G473WqsYofsXy0M0Tv0s8WahkmTG5Ho=)
                          3: 34352e3136352e39322e302f32322d3232203d3e20323638363831.roa (hash: krEJ8d4DGKhPT5h/9xc+z3ga+lthTKrxd/mysKtBUHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e3:fa:df:e5:e1:01:15:cb:1a:5f:5a:48:fa:3f:fc:6d:0e:a0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92CCCC37FAF09303E0BACAE5529C7780E33D544
        Validity
            Not Before: Apr 20 06:02:04 2023 GMT
            Not After : Apr 21 06:59:04 2023 GMT
        Subject: CN=B9D73F1D7C7C4834B0A3D1B29C05AB7165C20492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:90:9b:90:a5:c5:8d:5a:05:d1:7e:2f:71:
                    91:68:54:15:5a:fb:c1:2e:0a:69:f9:57:18:35:11:
                    67:99:a2:0c:19:96:7d:75:4e:d6:00:0b:74:fe:d2:
                    70:69:54:5e:52:e7:a8:4c:9b:20:2e:cd:0e:39:46:
                    a3:da:8e:48:bb:eb:3e:ed:a9:0d:33:e6:4a:97:fe:
                    66:d2:92:0e:dc:a0:00:32:f5:bf:68:32:33:25:cf:
                    ff:49:ba:c5:65:ad:53:3e:a2:b5:bb:27:df:06:00:
                    1a:45:e8:b5:e8:74:d2:d5:58:f0:02:a4:33:88:a1:
                    42:b1:bc:e6:a6:bb:80:06:34:a9:aa:b7:64:14:86:
                    2c:b7:10:9b:0b:2f:bf:8d:71:2f:84:b8:f4:d7:d3:
                    09:23:bd:87:99:cb:57:69:1a:da:68:8e:a1:0c:84:
                    4d:9e:08:23:41:92:98:aa:ad:30:9d:ea:dd:4d:f4:
                    b6:6b:52:f4:ca:f2:c9:36:a8:52:f8:86:2a:65:d1:
                    e0:4f:63:5f:f4:e2:11:48:93:c7:83:34:a5:ee:12:
                    0c:a2:0f:b5:81:df:9d:09:fe:59:63:d1:c2:72:7a:
                    1f:4b:37:6a:2b:e1:1e:8e:3f:6c:fc:0b:5a:8e:54:
                    c1:4d:ec:2b:a6:55:b4:6c:c9:e9:71:d9:bd:de:d9:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D7:3F:1D:7C:7C:48:34:B0:A3:D1:B2:9C:05:AB:71:65:C2:04:92
            X509v3 Authority Key Identifier:
                keyid:A9:2C:CC:C3:7F:AF:09:30:3E:0B:AC:AE:55:29:C7:78:0E:33:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/A92CCCC37FAF09303E0BACAE5529C7780E33D544.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:33:04:df:6f:1d:8e:49:64:80:4e:cd:1a:31:0b:b6:09:66:
         8b:f3:b6:80:5a:99:10:30:e4:c1:fb:a7:6f:37:77:80:bf:25:
         88:69:1a:3e:00:c0:54:ef:94:99:d1:f5:c4:85:e9:45:b0:5d:
         d7:8e:df:d6:94:ad:c1:a9:17:6c:a0:18:a7:7a:1a:1d:d8:d3:
         e7:e3:5b:c6:15:6d:37:f6:3f:86:a2:c1:1c:3c:ce:20:8d:e4:
         ec:01:7f:ec:ee:7d:66:3b:a3:39:db:23:47:58:64:62:65:84:
         fc:45:cd:a8:1b:e4:b3:92:19:37:20:92:6a:cf:67:cf:ac:0d:
         8b:6f:fd:d4:a2:10:9a:24:fe:bb:a6:2d:c4:c4:28:ea:62:05:
         86:a9:3b:f7:e0:e0:04:ac:7b:52:43:7d:50:8f:86:c1:18:36:
         7d:3a:85:23:a4:19:6c:64:d9:9e:77:72:04:56:e5:af:a3:44:
         07:da:76:0f:35:13:d1:61:4a:75:5a:42:83:fd:59:b6:44:7c:
         d6:96:fb:b4:8f:a8:97:07:38:09:a6:e7:77:18:21:f9:0e:a1:
         c7:6d:00:ec:8e:1a:30:76:47:a6:4c:2a:f6:6f:ef:ae:c6:fe:
         3a:2a:22:a1:f9:68:95:a3:4f:40:9d:dc:90:7d:60:85:75:85:
         5f:b2:96:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKOP63+XhARXLGl9aSPo//G0OoBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkyQ0NDQzM3RkFGMDkzMDNFMEJBQ0FFNTUyOUM3Nzgw
RTMzRDU0NDAeFw0yMzA0MjAwNjAyMDRaFw0yMzA0MjEwNjU5MDRaMDMxMTAvBgNV
BAMTKEI5RDczRjFEN0M3QzQ4MzRCMEEzRDFCMjlDMDVBQjcxNjVDMjA0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tZCbkKXFjVoF0X4vcZFoVBVa
+8EuCmn5Vxg1EWeZogwZln11TtYAC3T+0nBpVF5S56hMmyAuzQ45RqPajki76z7t
qQ0z5kqX/mbSkg7coAAy9b9oMjMlz/9JusVlrVM+orW7J98GABpF6LXodNLVWPAC
pDOIoUKxvOamu4AGNKmqt2QUhiy3EJsLL7+NcS+EuPTX0wkjvYeZy1dpGtpojqEM
hE2eCCNBkpiqrTCd6t1N9LZrUvTK8sk2qFL4hipl0eBPY1/04hFIk8eDNKXuEgyi
D7WB350J/llj0cJyeh9LN2or4R6OP2z8C1qOVMFN7CumVbRsyelx2b3e2VgFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUudc/HXx8SDSwo9GynAWrcWXCBJIwHwYDVR0j
BBgwFoAUqSzMw3+vCTA+C6yuVSnHeA4z1UQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU
SGMvMC9BOTJDQ0NDMzdGQUYwOTMwM0UwQkFDQUU1NTI5Qzc3ODBFMzNENTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5MkNDQ0MzN0ZBRjA5MzAz
RTBCQUNBRTU1MjlDNzc4MEUzM0Q1NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFUSGMvMC9B
OTJDQ0NDMzdGQUYwOTMwM0UwQkFDQUU1NTI5Qzc3ODBFMzNENTQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANjME328djklkgE7NGjELtglmi/O2gFqZEDDkwfunbzd3gL8liGkaPgDAVO+U
mdH1xIXpRbBd147f1pStwakXbKAYp3oaHdjT5+NbxhVtN/Y/hqLBHDzOII3k7AF/
7O59ZjujOdsjR1hkYmWE/EXNqBvks5IZNyCSas9nz6wNi2/91KIQmiT+u6YtxMQo
6mIFhqk79+DgBKx7UkN9UI+GwRg2fTqFI6QZbGTZnndyBFblr6NEB9p2DzUT0WFK
dVpCg/1ZtkR81pb7tI+olwc4Cabndxgh+Q6hx20A7I4aMHZHpkwq9m/vrsb+Oioi
oflolaNPQJ3ckH1ghXWFX7KWyA==
-----END CERTIFICATE-----