Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.mft
File:                     2868687EA5FA41E3EBA80800528C90ADEE4EE771.mft (raw, json)
Hash identifier:          mqKoBweR0Y6qRPNu/lH5+HeMaw6QJn78GdmZb0vDcNE=
Subject key identifier:   A4:44:D1:39:F8:86:B6:A2:82:6E:44:E7:D1:AE:B8:6C:79:11:33:A4
Authority key identifier: 28:68:68:7E:A5:FA:41:E3:EB:A8:08:00:52:8C:90:AD:EE:4E:E7:71
Certificate issuer:       /CN=2868687EA5FA41E3EBA80800528C90ADEE4EE771
Certificate serial:       4285816ACE063E814007B4B519A0AC7C40C7358F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.mft
Manifest number:          1D
Signing time:             Wed 22 Nov 2023 12:38:17 +0000
Manifest this update:     Wed 22 Nov 2023 12:33:17 +0000
Manifest next update:     Thu 23 Nov 2023 16:25:17 +0000
Files and hashes:         1: 3138362e3235302e32332e302f32342d3234203d3e20323632383033.roa (hash: B+f6r7X/7Yln/0tTS3fcrmu48Eq7RQkKCERcNkYfmn0=)
                          2: 2868687EA5FA41E3EBA80800528C90ADEE4EE771.crl (hash: a2S5ptS7Pjf2WHq+22S0lKu6FGXi7QM1oYaxWv1a+Y0=)
                          3: 3138362e3235302e32302e302f32342d3234203d3e20323632383033.roa (hash: +GYka8XK7I9mXl+mQKKs4CKOljEQofNGUHrk9YR/hKY=)
                          4: 3138362e3235302e31382e302f32332d3233203d3e20323632383033.roa (hash: 2N4iQFUG5p2ge1iZAx7dWZcCac3brCC3lO2zTU5Jzrw=)
                          5: 323830343a3235303a3a2f33322d3336203d3e20323632383033.roa (hash: ockSMJjvZc/fYtPC/l2ZywJjcnLA7oAR0bo4CPT9xIQ=)
                          6: 3138362e3235302e32302e302f32332d3233203d3e20323632383033.roa (hash: 4jCtEV07GZ1LMFa08gMQqKh2mWsqL666DqQDvC7jYsQ=)
                          7: 3138362e3235302e31362e302f32332d3233203d3e20323632383033.roa (hash: X1tKPU8aBOXENz1LSmfyq2OHftBlEPtxmZ6WRMgmsqA=)
                          8: 3138362e3235302e32322e302f32342d3234203d3e20323632383033.roa (hash: M5dzm7vL5oG0ZBIBUzkjNAF1r8eu4hwlQfdFl9dnleU=)
                          9: 3138362e3235302e32312e302f32342d3234203d3e20323632383033.roa (hash: ARp6qWQXCmdOj1b0/BBbxeuevy5VOyue4GYpkC4Jdi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:85:81:6a:ce:06:3e:81:40:07:b4:b5:19:a0:ac:7c:40:c7:35:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2868687EA5FA41E3EBA80800528C90ADEE4EE771
        Validity
            Not Before: Nov 22 12:33:17 2023 GMT
            Not After : Nov 23 16:25:17 2023 GMT
        Subject: CN=A444D139F886B6A2826E44E7D1AEB86C791133A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:e5:97:8f:e2:64:2a:3d:22:8d:f9:cd:08:
                    90:51:10:17:d8:17:10:24:7a:63:90:2e:c2:fd:ed:
                    15:ce:bc:f7:0d:f6:75:40:a1:0b:7a:07:47:b4:43:
                    f8:85:6e:4a:69:3f:75:c2:66:88:1d:b9:ba:27:12:
                    fa:bb:66:ec:f9:1e:38:2e:51:34:14:45:42:37:8b:
                    54:e3:fc:62:12:1c:d4:3d:6f:5d:78:4d:08:5b:de:
                    5b:df:c5:d3:87:bb:3a:ed:5d:77:0a:2a:f5:1b:dc:
                    a9:65:4e:10:a8:a3:31:45:87:1e:25:6f:9e:a1:35:
                    11:6f:2c:c2:8f:ef:e4:d4:36:49:e7:59:18:f9:8b:
                    ba:83:6f:1f:5d:40:f5:a1:bd:05:30:54:65:d3:e7:
                    1d:6e:67:8b:bd:f7:b5:97:eb:f2:e7:3b:1a:c4:55:
                    8f:ba:0f:db:7b:30:39:82:88:80:6d:16:ed:81:64:
                    1b:d1:2e:0e:b8:86:60:22:65:05:0f:c8:43:32:61:
                    0a:f7:14:e7:49:46:f8:87:08:f6:88:ca:ed:64:91:
                    3b:80:a4:7b:8c:8a:07:76:e1:df:d9:e6:e3:35:81:
                    45:7e:d5:0d:1d:f1:e5:a5:ad:82:a9:42:7c:dc:71:
                    e9:77:ac:ee:cf:ee:b7:93:95:56:72:fb:27:45:d8:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:D1:39:F8:86:B6:A2:82:6E:44:E7:D1:AE:B8:6C:79:11:33:A4
            X509v3 Authority Key Identifier:
                keyid:28:68:68:7E:A5:FA:41:E3:EB:A8:08:00:52:8C:90:AD:EE:4E:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/2868687EA5FA41E3EBA80800528C90ADEE4EE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:3d:4f:b4:b9:0e:fc:a4:9d:4d:18:6f:2a:63:be:9b:cb:
         84:b6:9e:25:58:ac:7b:2e:f4:57:98:05:be:d4:da:10:8b:9f:
         73:08:f1:7f:b3:de:c1:a4:a7:87:15:01:29:12:0d:5e:cf:c6:
         b6:38:24:fe:26:44:8e:ad:4b:24:c8:19:4b:a8:ee:44:25:97:
         bb:34:b2:4f:a8:82:1e:f1:fb:c0:94:d8:52:9e:36:21:ef:51:
         c4:ab:05:f6:b9:4d:48:3c:c5:ff:f8:16:43:6c:b0:ac:92:82:
         d0:17:f5:4c:71:0b:c8:e0:b4:de:79:ab:da:05:aa:34:fa:97:
         1b:71:3c:f0:32:e1:9b:e0:d8:b6:17:e4:67:5c:fc:23:87:61:
         4c:e3:6e:50:fa:f9:91:5c:dd:19:67:94:93:53:09:0a:d8:89:
         a9:fc:4f:c7:68:8b:d4:2d:bc:ac:78:a5:58:9d:6d:ac:56:ad:
         a6:57:63:26:a3:17:c3:cd:93:30:48:98:08:ef:6d:9a:50:6b:
         7a:25:77:0f:23:ba:a5:d2:be:02:6d:e8:68:10:4e:42:0d:76:
         8a:c3:d7:e2:e3:a2:7e:a1:23:a4:ee:aa:ee:ad:aa:2f:77:e0:
         62:cb:6b:12:e3:d6:12:0c:e5:e6:f6:14:2a:55:d5:17:85:02:
         b9:f1:c2:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQoWBas4GPoFAB7S1GaCsfEDHNY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg2ODY4N0VBNUZBNDFFM0VCQTgwODAwNTI4QzkwQURF
RTRFRTc3MTAeFw0yMzExMjIxMjMzMTdaFw0yMzExMjMxNjI1MTdaMDMxMTAvBgNV
BAMTKEE0NDREMTM5Rjg4NkI2QTI4MjZFNDRFN0QxQUVCODZDNzkxMTMzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUeWXj+JkKj0ijfnNCJBREBfY
FxAkemOQLsL97RXOvPcN9nVAoQt6B0e0Q/iFbkppP3XCZogdubonEvq7Zuz5Hjgu
UTQURUI3i1Tj/GISHNQ9b114TQhb3lvfxdOHuzrtXXcKKvUb3KllThCoozFFhx4l
b56hNRFvLMKP7+TUNknnWRj5i7qDbx9dQPWhvQUwVGXT5x1uZ4u997WX6/LnOxrE
VY+6D9t7MDmCiIBtFu2BZBvRLg64hmAiZQUPyEMyYQr3FOdJRviHCPaIyu1kkTuA
pHuMigd24d/Z5uM1gUV+1Q0d8eWlrYKpQnzccel3rO7P7reTlVZy+ydF2BcRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpETROfiGtqKCbkTn0a64bHkRM6QwHwYDVR0j
BBgwFoAUKGhofqX6QePrqAgAUoyQre5O53EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1Bq
UEovMC8yODY4Njg3RUE1RkE0MUUzRUJBODA4MDA1MjhDOTBBREVFNEVFNzcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4Njg2ODdFQTVGQTQxRTNF
QkE4MDgwMDUyOEM5MEFERUU0RUU3NzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1BqUEovMC8y
ODY4Njg3RUE1RkE0MUUzRUJBODA4MDA1MjhDOTBBREVFNEVFNzcxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXiA9T7S5DvyknU0YbypjvpvLhLaeJVisey70V5gFvtTaEIufcwjxf7PewaSn
hxUBKRINXs/Gtjgk/iZEjq1LJMgZS6juRCWXuzSyT6iCHvH7wJTYUp42Ie9RxKsF
9rlNSDzF//gWQ2ywrJKC0Bf1THELyOC03nmr2gWqNPqXG3E88DLhm+DYthfkZ1z8
I4dhTONuUPr5kVzdGWeUk1MJCtiJqfxPx2iL1C28rHilWJ1trFatpldjJqMXw82T
MEiYCO9tmlBreiV3DyO6pdK+Am3oaBBOQg12isPX4uOifqEjpO6q7q2qL3fgYstr
EuPWEgzl5vYUKlXVF4UCufHC/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org