Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.mft
File:                     9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.mft (raw, json)
Hash identifier:          5LCJQSmJcWXHeYHL1xpanWyY00VGtWqQUgofy6L+AhY=
Subject key identifier:   E3:88:52:29:FA:20:14:04:79:02:77:5B:43:3F:D9:B2:91:FD:26:20
Authority key identifier: 9D:9D:E8:BB:D3:56:9E:75:A0:B1:B7:7F:20:E4:CF:EF:D9:48:D0:C6
Certificate issuer:       /CN=9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6
Certificate serial:       7E52E741B6647DF0A98376D80D64C3BCA39E3072
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.mft
Manifest number:          6A
Signing time:             Mon 15 Apr 2024 08:37:38 +0000
Manifest this update:     Mon 15 Apr 2024 08:32:38 +0000
Manifest next update:     Tue 16 Apr 2024 08:52:38 +0000
Files and hashes:         1: 9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.crl (hash: Mic1u/roUk35Xo+cdHBgUGKeX9Hs/FA9yqEohubnVrc=)
                          2: 3230302e3135302e3235322e302f32322d3234203d3e20323731363730.roa (hash: XJkEmWcxm837Am7pB7DDHw39983lvgyrempeDlKs6ME=)
                          3: 323830343a376632383a3a2f33322d3334203d3e20323731363730.roa (hash: d6tHBqBqmtB0TcqqRz+QMm4qEeX5D+6JA6kh2vPOJWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:52:e7:41:b6:64:7d:f0:a9:83:76:d8:0d:64:c3:bc:a3:9e:30:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6
        Validity
            Not Before: Apr 15 08:32:38 2024 GMT
            Not After : Apr 16 08:52:38 2024 GMT
        Subject: CN=E3885229FA2014047902775B433FD9B291FD2620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:85:2c:a4:e5:a5:f5:15:57:56:2e:a9:33:
                    35:d3:61:44:39:18:8d:18:07:1b:74:8e:66:e6:c3:
                    6a:ad:be:eb:5a:c5:96:e4:15:e8:23:07:d9:7c:0d:
                    f2:01:29:b4:fc:be:5b:4a:19:34:40:82:64:ca:33:
                    f5:11:d6:77:17:f0:0b:a4:1f:cf:28:11:f8:69:b8:
                    9f:43:83:85:2e:91:30:89:4f:36:99:88:54:02:7d:
                    b6:28:b2:4d:c7:54:e4:de:2e:2f:5e:ae:f7:6e:72:
                    4a:3a:28:e4:9c:c5:23:4f:58:19:49:af:52:15:8f:
                    0b:7f:2a:3b:d1:17:82:2b:82:c4:d7:18:d3:46:3d:
                    55:a8:52:94:29:ab:b4:55:3a:34:8d:6a:78:f2:a8:
                    a9:c7:fc:c4:65:95:28:fb:6b:b1:ff:3f:44:a0:15:
                    84:9b:83:b8:c6:f8:2b:a9:be:c6:0f:3b:dc:9a:6d:
                    8d:24:64:bc:5d:6b:01:62:ec:0e:2b:d6:8e:9f:8c:
                    61:ef:ce:64:b9:37:c6:73:ef:86:0b:89:cc:1c:9f:
                    77:37:d9:03:68:ed:ce:8b:ea:ea:3f:c2:9d:ff:c0:
                    55:dc:ce:ac:9b:de:0c:b7:35:90:49:3c:01:5d:85:
                    6b:25:8c:8e:7c:e5:e2:fa:09:dd:f5:95:5b:63:e0:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:52:29:FA:20:14:04:79:02:77:5B:43:3F:D9:B2:91:FD:26:20
            X509v3 Authority Key Identifier:
                keyid:9D:9D:E8:BB:D3:56:9E:75:A0:B1:B7:7F:20:E4:CF:EF:D9:48:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/9D9DE8BBD3569E75A0B1B77F20E4CFEFD948D0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:f8:03:6c:df:ea:d9:16:02:38:4d:63:08:ba:25:e0:8d:
         45:e8:1e:63:2d:d6:98:42:20:ff:36:88:64:f0:b8:04:64:fc:
         3d:39:89:f0:e5:ce:2c:aa:92:e7:1c:f4:5a:b4:17:6a:4b:3e:
         b1:50:1c:e9:e0:a0:16:b5:a4:5e:65:97:9e:65:c2:6d:69:f1:
         64:39:11:f4:45:71:6a:12:05:14:21:c5:c1:ef:8b:e6:2f:15:
         4f:3d:e2:08:52:94:b2:03:2d:ad:8a:f0:07:14:66:85:f3:44:
         87:a0:67:20:55:6a:52:f3:1a:51:4a:14:39:fe:cb:fa:76:5d:
         30:18:ad:10:90:09:54:66:b7:70:4e:3b:02:bd:b3:50:ed:3a:
         ad:89:f8:3b:bd:ef:f2:4d:85:39:db:85:c3:5b:0a:9f:a8:0e:
         d0:2a:b3:69:92:1a:cc:db:65:a7:6c:d1:fc:28:60:15:ed:46:
         2d:44:7a:a5:37:28:73:93:79:a2:aa:f0:cf:59:8b:16:2f:3e:
         1c:ce:bd:c3:1c:10:e9:4c:d7:4b:5d:ac:54:a3:34:93:d8:54:
         6c:20:20:80:c5:6c:c2:cf:15:ec:e2:86:ee:8d:b6:c0:b7:fd:
         e4:5d:bd:68:0e:6a:bc:45:73:15:46:6e:b5:1a:d0:aa:8e:c3:
         87:b0:d6:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUflLnQbZkffCpg3bYDWTDvKOeMHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5REU4QkJEMzU2OUU3NUEwQjFCNzdGMjBFNENGRUZE
OTQ4RDBDNjAeFw0yNDA0MTUwODMyMzhaFw0yNDA0MTYwODUyMzhaMDMxMTAvBgNV
BAMTKEUzODg1MjI5RkEyMDE0MDQ3OTAyNzc1QjQzM0ZEOUIyOTFGRDI2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPYUspOWl9RVXVi6pMzXTYUQ5
GI0YBxt0jmbmw2qtvutaxZbkFegjB9l8DfIBKbT8vltKGTRAgmTKM/UR1ncX8Auk
H88oEfhpuJ9Dg4UukTCJTzaZiFQCfbYosk3HVOTeLi9ervducko6KOScxSNPWBlJ
r1IVjwt/KjvRF4IrgsTXGNNGPVWoUpQpq7RVOjSNanjyqKnH/MRllSj7a7H/P0Sg
FYSbg7jG+CupvsYPO9yabY0kZLxdawFi7A4r1o6fjGHvzmS5N8Zz74YLicwcn3c3
2QNo7c6L6uo/wp3/wFXczqyb3gy3NZBJPAFdhWsljI585eL6Cd31lVtj4JGPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU44hSKfogFAR5AndbQz/ZspH9JiAwHwYDVR0j
BBgwFoAUnZ3ou9NWnnWgsbd/IOTP79lI0MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dOYVVxdGJKU3Y4NnVlSmNydkc1SjlMeHp4ZHMzd2paOHhFRzhDRU5y
emgvMC85RDlERThCQkQzNTY5RTc1QTBCMUI3N0YyMEU0Q0ZFRkQ5NDhEMEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEOURFOEJCRDM1NjlFNzVB
MEIxQjc3RjIwRTRDRkVGRDk0OEQwQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1dOYVVxdGJKU3Y4NnVlSmNydkc1SjlMeHp4ZHMzd2paOHhFRzhDRU5yemgvMC85
RDlERThCQkQzNTY5RTc1QTBCMUI3N0YyMEU0Q0ZFRkQ5NDhEMEM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi3X4A2zf6tkWAjhNYwi6JeCNRegeYy3WmEIg/zaIZPC4BGT8PTmJ8OXOLKqS
5xz0WrQXaks+sVAc6eCgFrWkXmWXnmXCbWnxZDkR9EVxahIFFCHFwe+L5i8VTz3i
CFKUsgMtrYrwBxRmhfNEh6BnIFVqUvMaUUoUOf7L+nZdMBitEJAJVGa3cE47Ar2z
UO06rYn4O73v8k2FOduFw1sKn6gO0CqzaZIazNtlp2zR/ChgFe1GLUR6pTcoc5N5
oqrwz1mLFi8+HM69wxwQ6UzXS12sVKM0k9hUbCAggMVsws8V7OKG7o22wLf95F29
aA5qvEVzFUZutRrQqo7Dh7DWBw==
-----END CERTIFICATE-----