Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft
File:                     1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft (raw, json)
Hash identifier:          rbKCmLtTdcVui8iOtRTNfuC2+ku1FOpgUoV7AKtitwo=
Subject key identifier:   D1:36:94:ED:FF:AC:07:CF:67:5F:CD:C6:98:D2:FF:F3:BC:EE:70:DD
Authority key identifier: 1C:4F:6E:4E:B9:B8:95:A1:66:06:25:EE:A6:5D:38:90:A0:5C:7A:E5
Certificate issuer:       /CN=1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5
Certificate serial:       472FD73C720EFCB39529C88D54BA879649B3963D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft
Manifest number:          21
Signing time:             Thu 14 Mar 2024 06:11:27 +0000
Manifest this update:     Thu 14 Mar 2024 06:06:27 +0000
Manifest next update:     Fri 15 Mar 2024 06:19:27 +0000
Files and hashes:         1: 34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (hash: VYMJ5DLRJN/pOy/W/rHz1MF0RIc1z9K//VDsx124voU=)
                          2: 1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.crl (hash: T5TjG/vGfkKxZQFiBxHI0AVOMk0z8HA9eJNeQii05pA=)
                          3: 323830343a356635343a3a2f33322d3334203d3e20323639303932.roa (hash: VzpRt7RPnDDHtqkNjQiugdCfwz+OpydvP/gMSxSBaFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2f:d7:3c:72:0e:fc:b3:95:29:c8:8d:54:ba:87:96:49:b3:96:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5
        Validity
            Not Before: Mar 14 06:06:27 2024 GMT
            Not After : Mar 15 06:19:27 2024 GMT
        Subject: CN=D13694EDFFAC07CF675FCDC698D2FFF3BCEE70DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:2f:b4:63:61:75:4d:c2:e6:0a:c7:4c:b2:
                    45:5d:6e:a5:a5:8b:c6:06:52:18:50:21:12:2f:c1:
                    ab:8d:b1:fb:15:ee:f9:48:7c:50:d9:2c:ca:3c:63:
                    1a:af:5d:ed:9e:1e:89:b5:bf:ae:14:cf:6b:56:e1:
                    66:f6:3c:fb:ec:de:11:61:c4:8b:96:2d:38:7c:9c:
                    f3:73:49:fe:87:d4:86:f2:95:be:d6:d3:11:53:4c:
                    d1:c6:f1:3a:60:89:f4:40:d5:b2:75:e6:5d:73:9f:
                    7e:b2:67:f6:da:25:5d:6d:aa:33:f4:db:ef:b1:21:
                    dd:68:13:09:26:b3:02:d5:b6:4c:71:22:f3:c8:98:
                    39:d8:c6:a2:01:3d:b6:24:86:4a:2d:e7:78:92:be:
                    e6:e7:29:a4:26:1b:26:b6:4b:c5:cc:99:97:04:44:
                    a4:ea:da:38:a3:6d:29:8d:77:34:6f:b7:4d:10:f0:
                    6b:41:27:b2:7d:2e:17:1c:c1:33:e8:a0:89:76:da:
                    4c:ec:b1:d4:10:6c:f4:1b:75:11:7e:db:23:ab:82:
                    89:c5:18:70:1d:57:13:05:b7:a9:92:be:b1:2c:fa:
                    04:bc:c8:1b:c5:19:e5:c4:0d:2c:a6:56:9d:40:8e:
                    12:55:88:64:72:0d:05:54:05:4a:0d:9a:be:b3:f0:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:94:ED:FF:AC:07:CF:67:5F:CD:C6:98:D2:FF:F3:BC:EE:70:DD
            X509v3 Authority Key Identifier:
                keyid:1C:4F:6E:4E:B9:B8:95:A1:66:06:25:EE:A6:5D:38:90:A0:5C:7A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/1C4F6E4EB9B895A1660625EEA65D3890A05C7AE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:95:9b:55:d6:63:bf:7e:4f:fb:81:a1:ba:e3:ab:49:09:a9:
         42:b7:27:08:6f:d3:b9:92:7e:c0:12:04:72:75:46:7e:ab:51:
         06:55:0b:6c:16:4b:0e:dd:8a:e2:2e:a4:30:ee:95:21:7c:d6:
         46:3a:fd:35:6c:90:42:ac:e0:5d:4b:d2:31:fb:5d:a7:4e:31:
         84:25:80:eb:f9:b6:fd:d8:e4:64:d0:80:ff:c1:29:ce:5f:63:
         05:f9:bc:88:70:e9:5d:ad:0d:69:86:ea:64:d1:bb:d4:f7:0e:
         ba:0a:aa:35:03:64:35:1d:42:2a:11:83:3b:65:de:db:75:ca:
         c3:b9:dc:52:65:5f:39:d7:be:98:b5:74:cb:e3:42:56:4c:f5:
         52:4c:25:25:01:9f:a7:e9:ae:79:24:cc:f1:13:8b:f9:1d:e9:
         6a:40:35:da:eb:94:96:1a:00:c4:9c:b4:4e:df:54:e4:d0:50:
         cd:b3:3f:62:59:c0:c0:6b:5a:31:c3:05:ec:c3:aa:dc:01:8e:
         04:56:6f:d9:bf:c2:f6:f9:4d:fd:28:e8:a8:dd:7c:1f:d2:8f:
         44:f5:70:72:7d:3a:dd:b2:ac:41:73:1a:ae:cd:29:2d:5f:1d:
         7b:67:65:c3:8e:51:f2:75:96:c5:cc:f8:d4:26:74:24:73:01:
         ef:61:cd:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURy/XPHIO/LOVKciNVLqHlkmzlj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0RjZFNEVCOUI4OTVBMTY2MDYyNUVFQTY1RDM4OTBB
MDVDN0FFNTAeFw0yNDAzMTQwNjA2MjdaFw0yNDAzMTUwNjE5MjdaMDMxMTAvBgNV
BAMTKEQxMzY5NEVERkZBQzA3Q0Y2NzVGQ0RDNjk4RDJGRkYzQkNFRTcwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGi+0Y2F1TcLmCsdMskVdbqWl
i8YGUhhQIRIvwauNsfsV7vlIfFDZLMo8YxqvXe2eHom1v64Uz2tW4Wb2PPvs3hFh
xIuWLTh8nPNzSf6H1Ibylb7W0xFTTNHG8TpgifRA1bJ15l1zn36yZ/baJV1tqjP0
2++xId1oEwkmswLVtkxxIvPImDnYxqIBPbYkhkot53iSvubnKaQmGya2S8XMmZcE
RKTq2jijbSmNdzRvt00Q8GtBJ7J9LhccwTPooIl22kzssdQQbPQbdRF+2yOrgonF
GHAdVxMFt6mSvrEs+gS8yBvFGeXEDSymVp1AjhJViGRyDQVUBUoNmr6z8FevAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0TaU7f+sB89nX83GmNL/87zucN0wHwYDVR0j
BBgwFoAUHE9uTrm4laFmBiXupl04kKBceuUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21XdzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBR
NmEvMC8xQzRGNkU0RUI5Qjg5NUExNjYwNjI1RUVBNjVEMzg5MEEwNUM3QUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNEY2RTRFQjlCODk1QTE2
NjA2MjVFRUE2NUQzODkwQTA1QzdBRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M21XdzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBRNmEvMC8x
QzRGNkU0RUI5Qjg5NUExNjYwNjI1RUVBNjVEMzg5MEEwNUM3QUU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk5WbVdZjv35P+4GhuuOrSQmpQrcnCG/TuZJ+wBIEcnVGfqtRBlULbBZLDt2K
4i6kMO6VIXzWRjr9NWyQQqzgXUvSMftdp04xhCWA6/m2/djkZNCA/8Epzl9jBfm8
iHDpXa0NaYbqZNG71PcOugqqNQNkNR1CKhGDO2Xe23XKw7ncUmVfOde+mLV0y+NC
Vkz1UkwlJQGfp+mueSTM8ROL+R3pakA12uuUlhoAxJy0Tt9U5NBQzbM/YlnAwGta
McMF7MOq3AGOBFZv2b/C9vlN/SjoqN18H9KPRPVwcn063bKsQXMars0pLV8de2dl
w45R8nWWxcz41CZ0JHMB72HNaQ==
-----END CERTIFICATE-----