Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft
File:                     F2956E37351B36DB889EB71E79F2AD375B315A2C.mft (raw, json)
Hash identifier:          P9vUS8bOzkBSwJhUaSFCv9uWtNgXrsko3vuiSHeBLI4=
Subject key identifier:   8E:B2:E2:7F:E5:A3:0B:40:D9:1C:9E:83:A7:58:B0:5B:A2:B9:9A:8C
Authority key identifier: F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C
Certificate issuer:       /CN=F2956E37351B36DB889EB71E79F2AD375B315A2C
Certificate serial:       790EC4EFFAE5D79F30DA599B031EE7DFDBF9714D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft
Manifest number:          37
Signing time:             Fri 19 Jan 2024 00:22:36 +0000
Manifest this update:     Fri 19 Jan 2024 00:17:36 +0000
Manifest next update:     Sat 20 Jan 2024 00:30:36 +0000
Files and hashes:         1: 3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa (hash: yHYgWFnJXzj4jgm673vH5cCv8wn7n/XfwWZqOZEcX6g=)
                          2: F2956E37351B36DB889EB71E79F2AD375B315A2C.crl (hash: +TKVFt8g4FmJ9P6n52O5XDrDA54UHQycDp9t+fA4UMU=)
                          3: 323830343a333562633a3a2f33322d3332203d3e20323636333033.roa (hash: T572wIyiOXD087gSgn6jysB3+KrNw0xNME5ImeW7/d8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0e:c4:ef:fa:e5:d7:9f:30:da:59:9b:03:1e:e7:df:db:f9:71:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2956E37351B36DB889EB71E79F2AD375B315A2C
        Validity
            Not Before: Jan 19 00:17:36 2024 GMT
            Not After : Jan 20 00:30:36 2024 GMT
        Subject: CN=8EB2E27FE5A30B40D91C9E83A758B05BA2B99A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:48:8f:16:8c:e8:69:2e:81:b4:de:0f:e6:
                    8f:fa:1d:1a:4b:b8:ab:d9:79:a3:a3:13:0a:67:6f:
                    a6:c6:7f:d0:aa:dc:80:6b:90:88:36:e6:20:3f:9b:
                    ff:41:ed:d6:d4:77:ab:94:bc:e3:61:3d:a5:1d:46:
                    75:36:e8:6a:b0:d9:4b:c2:9d:f1:ca:32:b7:8a:8b:
                    5f:ba:3a:91:93:89:11:e9:3b:03:83:47:c3:24:7c:
                    15:fc:30:3d:50:37:34:37:b2:b3:04:59:7c:93:91:
                    2a:69:53:5c:b0:c1:62:1d:ec:a5:ff:19:19:1d:e8:
                    14:c7:5f:25:f8:e9:71:ae:16:13:1d:1d:a0:10:70:
                    15:22:f9:8f:96:6e:8f:0b:df:14:9b:0f:84:f0:9f:
                    06:b3:5b:83:18:ea:44:10:c8:27:dc:0e:28:3a:73:
                    2b:1d:e4:2a:25:ee:79:19:0e:d8:88:89:5c:8c:98:
                    37:2a:01:7c:a1:9b:b5:ce:27:e5:31:1b:b4:1d:b2:
                    87:22:68:97:2e:8e:2d:54:aa:40:16:36:b0:91:67:
                    06:02:dc:73:86:ba:b5:51:ad:a3:b7:a6:1f:90:58:
                    5d:d1:af:5a:ad:9c:30:3d:7a:1e:33:28:e0:93:4b:
                    13:63:cf:39:fc:65:21:b6:76:34:29:65:96:a4:ae:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B2:E2:7F:E5:A3:0B:40:D9:1C:9E:83:A7:58:B0:5B:A2:B9:9A:8C
            X509v3 Authority Key Identifier:
                keyid:F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:89:16:74:37:af:eb:4a:30:75:12:bd:2d:20:94:22:0d:
         bb:f6:62:15:7f:d1:34:51:7d:8b:41:d0:cf:b1:40:bc:6a:8b:
         60:5a:2f:8a:e2:0b:87:12:90:16:64:47:73:4b:27:c5:ab:20:
         f5:5d:b2:55:b5:3e:7c:fa:bb:2e:46:9f:af:65:88:76:ad:c3:
         65:55:e0:80:0c:84:9c:0a:a8:78:ef:4f:36:b0:0f:74:a9:7c:
         7a:96:95:58:01:8e:33:60:5d:7b:fd:cf:65:24:a6:6f:89:b3:
         5d:8b:be:41:38:d9:87:47:8e:cf:ce:8f:46:ed:75:6d:40:e4:
         64:0a:e7:68:63:98:df:0b:17:50:a3:03:a5:f3:9a:0a:5e:df:
         24:ab:e8:61:fb:a2:fe:fb:ae:5d:83:ff:bc:6b:4c:fc:74:dc:
         ac:b6:ea:36:9a:7a:91:47:bd:a7:5f:8c:8f:e9:96:df:6e:5f:
         5c:5d:8b:1a:e0:7f:e2:c9:8d:fd:2c:4d:7a:83:3e:b7:37:4c:
         30:96:e1:a2:e0:d4:01:a3:72:19:b8:dd:9f:55:13:1c:27:30:
         ed:68:8d:c2:ee:05:47:ad:6b:5c:a6:6e:fd:c8:01:66:91:13:
         3f:fa:9a:75:45:4d:dc:04:bc:47:b7:10:73:4b:2b:cc:af:14:
         54:a8:1c:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeQ7E7/rl158w2lmbAx7n39v5cU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI5NTZFMzczNTFCMzZEQjg4OUVCNzFFNzlGMkFEMzc1
QjMxNUEyQzAeFw0yNDAxMTkwMDE3MzZaFw0yNDAxMjAwMDMwMzZaMDMxMTAvBgNV
BAMTKDhFQjJFMjdGRTVBMzBCNDBEOTFDOUU4M0E3NThCMDVCQTJCOTlBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2EiPFozoaS6BtN4P5o/6HRpL
uKvZeaOjEwpnb6bGf9Cq3IBrkIg25iA/m/9B7dbUd6uUvONhPaUdRnU26Gqw2UvC
nfHKMreKi1+6OpGTiRHpOwODR8MkfBX8MD1QNzQ3srMEWXyTkSppU1ywwWId7KX/
GRkd6BTHXyX46XGuFhMdHaAQcBUi+Y+Wbo8L3xSbD4TwnwazW4MY6kQQyCfcDig6
cysd5Col7nkZDtiIiVyMmDcqAXyhm7XOJ+UxG7QdsociaJcuji1UqkAWNrCRZwYC
3HOGurVRraO3ph+QWF3Rr1qtnDA9eh4zKOCTSxNjzzn8ZSG2djQpZZakrrGvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjrLif+WjC0DZHJ6Dp1iwW6K5mowwHwYDVR0j
BBgwFoAU8pVuNzUbNtuInrceefKtN1sxWiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF
NFQvMC9GMjk1NkUzNzM1MUIzNkRCODg5RUI3MUU3OUYyQUQzNzVCMzE1QTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyOTU2RTM3MzUxQjM2REI4
ODlFQjcxRTc5RjJBRDM3NUIzMTVBMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC9G
Mjk1NkUzNzM1MUIzNkRCODg5RUI3MUU3OUYyQUQzNzVCMzE1QTJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPCqJFnQ3r+tKMHUSvS0glCINu/ZiFX/RNFF9i0HQz7FAvGqLYFoviuILhxKQ
FmRHc0snxasg9V2yVbU+fPq7Lkafr2WIdq3DZVXggAyEnAqoeO9PNrAPdKl8epaV
WAGOM2Bde/3PZSSmb4mzXYu+QTjZh0eOz86PRu11bUDkZArnaGOY3wsXUKMDpfOa
Cl7fJKvoYfui/vuuXYP/vGtM/HTcrLbqNpp6kUe9p1+Mj+mW325fXF2LGuB/4smN
/SxNeoM+tzdMMJbhouDUAaNyGbjdn1UTHCcw7WiNwu4FR61rXKZu/cgBZpETP/qa
dUVN3AS8R7cQc0srzK8UVKgc1A==
-----END CERTIFICATE-----