Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.mft
File:                     226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.mft (raw, json)
Hash identifier:          +tvpl9tJNBg8SdfQAloqNXDnitGOF+TNr8WQ4oIJofk=
Subject key identifier:   1C:85:6E:36:12:E1:C6:E9:61:5F:C4:99:61:AF:34:99:CA:DD:B8:3F
Authority key identifier: 22:6E:D0:30:D3:3A:87:19:CA:A9:BF:BA:1C:11:39:F5:ED:84:3F:1F
Certificate issuer:       /CN=226ED030D33A8719CAA9BFBA1C1139F5ED843F1F
Certificate serial:       16D8741E7320BCA7ADBEFF25DA5BDC59D84DC9A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.mft
Manifest number:          20
Signing time:             Tue 09 Jul 2024 13:10:52 +0000
Manifest this update:     Tue 09 Jul 2024 13:05:52 +0000
Manifest next update:     Wed 10 Jul 2024 15:31:52 +0000
Files and hashes:         1: 323830343a376564343a3a2f33322d3438203d3e20323731363530.roa (hash: IeoKe20+2H1zYH8orKyg4arGhEtRitlohsUqa9TmSAw=)
                          2: 3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa (hash: MbdaL8pVYhC2WpOUQNpDGwMzONLxMpNK2X1nHrT9stM=)
                          3: 226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.crl (hash: 4g4HVKlEAA+LH1neIIXVAWv9EuIe5sp0KakBYXx60RE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d8:74:1e:73:20:bc:a7:ad:be:ff:25:da:5b:dc:59:d8:4d:c9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226ED030D33A8719CAA9BFBA1C1139F5ED843F1F
        Validity
            Not Before: Jul  9 13:05:52 2024 GMT
            Not After : Jul 10 15:31:52 2024 GMT
        Subject: CN=1C856E3612E1C6E9615FC49961AF3499CADDB83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:44:28:9a:8f:5a:9a:19:e9:da:2d:19:34:
                    62:eb:f7:69:a0:c9:80:3c:5e:bc:d3:b1:82:39:1e:
                    ef:13:b7:3b:b9:7a:95:3f:3a:9b:38:0d:c1:73:d1:
                    4c:b2:b8:e2:ae:b0:a9:05:18:45:83:04:ef:9a:46:
                    86:07:15:ba:50:fa:a2:e6:7a:e3:57:fb:d5:d3:29:
                    06:ad:84:29:b6:07:9e:0f:1e:e9:84:45:07:c8:cd:
                    c4:ae:45:3a:45:37:b5:2e:b5:45:16:96:c7:b5:47:
                    4d:38:b9:56:a7:75:be:99:02:46:da:af:9e:2d:ff:
                    9b:62:33:86:d5:2a:10:d4:40:cb:9b:92:42:07:79:
                    ed:20:1b:b3:39:a8:79:6c:da:73:d1:fc:19:4d:4a:
                    c9:68:7c:30:b0:d4:25:22:86:6a:cb:2a:9e:dd:21:
                    29:87:79:21:bc:10:3a:c3:16:b7:ae:05:e0:3f:8d:
                    76:b3:12:35:9b:42:61:a4:a5:05:5e:50:a4:d2:3c:
                    96:e0:16:0a:10:6b:ac:2e:7d:7c:1b:2e:b2:50:69:
                    b5:47:21:fe:c2:9c:05:dc:f6:d0:c5:d4:40:b1:d9:
                    92:7b:5e:ad:b0:31:6a:5c:85:4a:4c:0e:30:db:6c:
                    90:45:19:96:b5:0b:97:db:ea:ad:7f:67:5b:ee:d6:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:85:6E:36:12:E1:C6:E9:61:5F:C4:99:61:AF:34:99:CA:DD:B8:3F
            X509v3 Authority Key Identifier:
                keyid:22:6E:D0:30:D3:3A:87:19:CA:A9:BF:BA:1C:11:39:F5:ED:84:3F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/226ED030D33A8719CAA9BFBA1C1139F5ED843F1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:1f:9e:45:2b:a1:ca:e6:eb:65:37:d4:64:79:27:8e:3a:
         3b:9a:d0:26:c5:38:82:a3:ae:77:fc:73:0e:e9:6c:0c:a3:9d:
         91:a4:41:63:74:f0:97:bf:c9:84:f3:8b:f3:de:02:1e:e2:0d:
         1a:be:df:c2:5f:eb:06:d6:a1:3d:0f:e7:78:23:cd:ba:eb:d8:
         2f:18:c7:bc:0f:37:60:1b:86:1b:86:81:9d:56:81:d7:36:4c:
         db:3f:50:0f:2c:b7:6c:23:9f:d4:a4:6c:2c:d8:bb:1b:0e:64:
         19:84:e9:4a:ad:a9:e9:64:6d:a8:41:ce:59:da:0a:b2:47:90:
         26:b7:94:51:21:c6:fb:1c:b8:b5:34:28:23:f7:8f:11:a6:96:
         c6:0e:1b:51:9f:b9:9f:0d:29:bd:89:a2:ba:c9:b1:02:f8:96:
         3d:a5:74:4f:54:82:cf:b8:74:d9:44:03:fb:c4:90:fd:d3:8e:
         a2:02:9b:cd:1a:8b:d7:e8:e7:cb:3c:3c:62:7a:f2:2b:8a:c1:
         79:53:2f:00:40:b1:f5:37:b9:7f:16:9b:74:ee:4b:bd:c2:1d:
         06:9b:bf:37:f8:6b:ba:3a:70:d9:74:ff:08:92:97:92:7b:08:
         02:57:b0:a2:56:69:86:2a:5f:a1:49:b4:78:fc:5a:d5:f3:b2:
         e6:8d:88:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFth0HnMgvKetvv8l2lvcWdhNyagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2RUQwMzBEMzNBODcxOUNBQTlCRkJBMUMxMTM5RjVF
RDg0M0YxRjAeFw0yNDA3MDkxMzA1NTJaFw0yNDA3MTAxNTMxNTJaMDMxMTAvBgNV
BAMTKDFDODU2RTM2MTJFMUM2RTk2MTVGQzQ5OTYxQUYzNDk5Q0FEREI4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd90Qomo9amhnp2i0ZNGLr92mg
yYA8XrzTsYI5Hu8Ttzu5epU/Ops4DcFz0UyyuOKusKkFGEWDBO+aRoYHFbpQ+qLm
euNX+9XTKQathCm2B54PHumERQfIzcSuRTpFN7UutUUWlse1R004uVandb6ZAkba
r54t/5tiM4bVKhDUQMubkkIHee0gG7M5qHls2nPR/BlNSslofDCw1CUihmrLKp7d
ISmHeSG8EDrDFreuBeA/jXazEjWbQmGkpQVeUKTSPJbgFgoQa6wufXwbLrJQabVH
If7CnAXc9tDF1ECx2ZJ7Xq2wMWpchUpMDjDbbJBFGZa1C5fb6q1/Z1vu1jHLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHIVuNhLhxulhX8SZYa80mcrduD8wHwYDVR0j
BBgwFoAUIm7QMNM6hxnKqb+6HBE59e2EPx8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NKYThXMkNENlB5WDY4a2s3VUY5TjJDZW1MZGVKRDdybjZRNHN5eWZt
TGovMC8yMjZFRDAzMEQzM0E4NzE5Q0FBOUJGQkExQzExMzlGNUVEODQzRjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNkVEMDMwRDMzQTg3MTlD
QUE5QkZCQTFDMTEzOUY1RUQ4NDNGMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1NKYThXMkNENlB5WDY4a2s3VUY5TjJDZW1MZGVKRDdybjZRNHN5eWZtTGovMC8y
MjZFRDAzMEQzM0E4NzE5Q0FBOUJGQkExQzExMzlGNUVEODQzRjFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAr8fnkUrocrm62U31GR5J446O5rQJsU4gqOud/xzDulsDKOdkaRBY3Twl7/J
hPOL894CHuINGr7fwl/rBtahPQ/neCPNuuvYLxjHvA83YBuGG4aBnVaB1zZM2z9Q
Dyy3bCOf1KRsLNi7Gw5kGYTpSq2p6WRtqEHOWdoKskeQJreUUSHG+xy4tTQoI/eP
EaaWxg4bUZ+5nw0pvYmiusmxAviWPaV0T1SCz7h02UQD+8SQ/dOOogKbzRqL1+jn
yzw8YnryK4rBeVMvAECx9Te5fxabdO5LvcIdBpu/N/hrujpw2XT/CJKXknsIAlew
olZphipfoUm0ePxa1fOy5o2ItQ==
-----END CERTIFICATE-----