Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.mft
File:                     40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.mft (raw, json)
Hash identifier:          9uvTeF/+VASyHx6eoKH+agUzlnIozWuoGvXPBR3KYkI=
Subject key identifier:   80:C2:31:EB:ED:68:1E:B5:AA:0D:44:90:04:9D:49:F4:D9:A3:18:E7
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Certificate issuer:       /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial:       4F959708E78A518F2620E7AC77ADE0CF9E03AD02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.mft
Manifest number:          2A
Signing time:             Wed 24 Jan 2024 01:29:06 +0000
Manifest this update:     Wed 24 Jan 2024 01:24:06 +0000
Manifest next update:     Thu 25 Jan 2024 02:49:06 +0000
Files and hashes:         1: 34352e372e3131362e302f32342d3234203d3e20323636353834.roa (hash: NcI39HRUAgGcYA0uo60r7OE2dJvCRxZ6e3d4EMt+v0U=)
                          2: 323830343a336534343a383030303a3a2f33342d3336203d3e20323636353834.roa (hash: HcrBodqv/GBcLRkk6ybkU2OHYFmkruiCnPgFzxMXP7o=)
                          3: 323830343a336534343a3a2f33322d3332203d3e20323636353834.roa (hash: 1k2349O4ehgARnM6fYCXE+Lm73uOHSaM1Fjcei7Ioj4=)
                          4: 323830343a336534343a3a2f33362d3336203d3e20323636353834.roa (hash: PH/LHHupOguKnjd8dqB+bPdSHWSPn6GxHrshOSFvl44=)
                          5: 323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa (hash: Fyyoj9tEsAKbBaO2B1MDAEYzaxIzWZx7FiC5b2mW8p8=)
                          6: 40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl (hash: S6TsJ0njfIKZyQMYhSvwAKJXmK0S6XEUk8Yv5tVWwiY=)
                          7: 34352e372e3131382e302f32332d3234203d3e20323636353834.roa (hash: LtzbCXUkIf21B4MKdkn/ZP1UYWv7GBqag6KLmGszKZI=)
                          8: 34352e372e3131372e302f32342d3234203d3e20323636353834.roa (hash: hKdwH2ws15W7S8HutDNLzQq+HsvJ98bJFfTThIVRis4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:95:97:08:e7:8a:51:8f:26:20:e7:ac:77:ad:e0:cf:9e:03:ad:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
        Validity
            Not Before: Jan 24 01:24:06 2024 GMT
            Not After : Jan 25 02:49:06 2024 GMT
        Subject: CN=80C231EBED681EB5AA0D4490049D49F4D9A318E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:19:2e:83:8e:9e:31:d8:25:ef:2c:a6:c1:
                    a4:85:6f:e9:2a:75:af:55:19:59:76:6a:9d:82:6a:
                    90:66:74:3e:a6:f6:1d:42:47:a8:2f:19:6e:ea:5a:
                    d2:0a:21:22:af:38:85:08:49:92:62:8a:b8:c5:15:
                    6f:4f:72:57:04:f7:7e:49:c5:95:35:7f:e2:58:08:
                    69:af:bd:0e:e2:91:b6:23:d1:ff:28:67:f9:71:8f:
                    1b:32:88:5a:c4:bc:66:85:4a:fd:98:13:91:c4:48:
                    0a:70:ba:00:58:43:a9:0a:40:90:fc:51:c1:2f:7a:
                    bf:f2:15:db:a0:35:61:1a:5f:9c:9f:6a:9e:bb:b4:
                    04:a1:50:2c:01:58:48:4a:0d:19:42:fe:e0:d8:b9:
                    4b:86:53:61:21:2c:50:97:1c:a7:ba:4f:bf:5b:c8:
                    ef:f0:9d:0e:20:67:45:16:06:99:12:cd:aa:9f:39:
                    18:7d:e8:cf:fd:75:a7:d4:f2:ff:e1:48:5e:9e:4a:
                    18:ef:54:01:c5:cc:3b:6f:5f:9f:db:e7:8b:a7:db:
                    97:96:15:5d:31:e1:b9:c3:ef:ae:b9:9d:36:e8:b9:
                    b8:98:13:b2:3f:98:4e:67:4c:0a:cc:97:e2:30:86:
                    98:c4:e3:ba:e9:ff:5d:cc:6b:05:27:88:ee:03:a7:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C2:31:EB:ED:68:1E:B5:AA:0D:44:90:04:9D:49:F4:D9:A3:18:E7
            X509v3 Authority Key Identifier:
                keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:f9:0b:9b:6e:98:f0:3b:bb:55:59:c3:b6:81:62:a0:e8:
         4c:20:48:dc:84:1c:a4:c2:18:70:fe:2c:4c:ff:85:25:a1:72:
         d5:a9:ad:77:ce:8c:cc:8a:1c:a5:f9:4a:c9:31:90:65:f2:71:
         4e:7c:17:18:2b:04:cc:4e:fa:13:4c:1c:6e:43:70:bb:e7:7e:
         e6:19:07:7a:39:0a:1e:2e:a6:de:36:f7:4c:1d:4a:a6:a2:bb:
         57:71:cb:91:61:a2:15:c8:f4:a2:3b:25:d7:0f:67:7e:0a:dd:
         11:0a:68:df:65:ff:5d:f3:dd:da:52:83:e7:4d:a9:5a:66:9a:
         07:f0:34:a5:95:21:30:ec:2d:58:10:e8:7c:d1:f9:1a:03:f3:
         26:d6:29:d2:24:8f:21:38:c3:57:33:49:f1:54:4a:07:fe:4c:
         5a:6c:55:f4:ac:c0:40:1a:86:84:b5:ab:60:80:13:cc:8c:e5:
         ed:56:c3:d1:8f:e7:ba:6e:0f:35:db:f3:7c:8f:8e:79:7b:e5:
         8d:e0:fb:25:62:14:99:9b:ce:ca:66:d2:cb:2f:60:3e:56:0c:
         a5:d4:07:ac:d4:b8:04:47:dc:68:6d:fa:aa:80:1f:69:7d:29:
         5f:26:f4:d8:a5:03:f0:b5:de:8f:99:98:dd:41:89:7f:4d:24:
         13:59:79:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT5WXCOeKUY8mIOesd63gz54DrQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDODUyNzlEMkVCNzFGMUIzREYxRTE1RTBGNDY3NkMy
MkJBNjUwQTAeFw0yNDAxMjQwMTI0MDZaFw0yNDAxMjUwMjQ5MDZaMDMxMTAvBgNV
BAMTKDgwQzIzMUVCRUQ2ODFFQjVBQTBENDQ5MDA0OUQ0OUY0RDlBMzE4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgBkug46eMdgl7yymwaSFb+kq
da9VGVl2ap2CapBmdD6m9h1CR6gvGW7qWtIKISKvOIUISZJiirjFFW9PclcE935J
xZU1f+JYCGmvvQ7ikbYj0f8oZ/lxjxsyiFrEvGaFSv2YE5HESApwugBYQ6kKQJD8
UcEver/yFdugNWEaX5yfap67tAShUCwBWEhKDRlC/uDYuUuGU2EhLFCXHKe6T79b
yO/wnQ4gZ0UWBpkSzaqfORh96M/9dafU8v/hSF6eShjvVAHFzDtvX5/b54un25eW
FV0x4bnD7665nTboubiYE7I/mE5nTArMl+IwhpjE47rp/13MawUniO4DpypVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgMIx6+1oHrWqDUSQBJ1J9NmjGOcwHwYDVR0j
BBgwFoAUQMhSedLrcfGz3x4V4PRnbCK6ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMC80MEM4NTI3OUQyRUI3MUYxQjNERjFFMTVFMEY0Njc2QzIyQkE2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwQzg1Mjc5RDJFQjcxRjFC
M0RGMUUxNUUwRjQ2NzZDMjJCQTY1MEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMC80
MEM4NTI3OUQyRUI3MUYxQjNERjFFMTVFMEY0Njc2QzIyQkE2NTBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaqX5C5tumPA7u1VZw7aBYqDoTCBI3IQcpMIYcP4sTP+FJaFy1amtd86MzIoc
pflKyTGQZfJxTnwXGCsEzE76E0wcbkNwu+d+5hkHejkKHi6m3jb3TB1KpqK7V3HL
kWGiFcj0ojsl1w9nfgrdEQpo32X/XfPd2lKD502pWmaaB/A0pZUhMOwtWBDofNH5
GgPzJtYp0iSPITjDVzNJ8VRKB/5MWmxV9KzAQBqGhLWrYIATzIzl7VbD0Y/num4P
NdvzfI+OeXvljeD7JWIUmZvOymbSyy9gPlYMpdQHrNS4BEfcaG36qoAfaX0pXyb0
2KUD8LXej5mY3UGJf00kE1l5kA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org