Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.mft
File:                     C086F933844AE977142A610348BAC966E4D6B7B4.mft (raw, json)
Hash identifier:          ynitJiy49c41H/nOEB35MozJiFbrTOmDq9+RDX97Lkg=
Subject key identifier:   9E:8C:40:33:35:46:0D:38:2D:3C:E0:15:79:45:AB:1C:D4:B7:99:A0
Authority key identifier: C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
Certificate issuer:       /CN=C086F933844AE977142A610348BAC966E4D6B7B4
Certificate serial:       6C94BC3EFAE05DFE4EA716E052D2F56AD0C8E37E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.mft
Manifest number:          5B
Signing time:             Mon 15 Apr 2024 06:08:30 +0000
Manifest this update:     Mon 15 Apr 2024 06:03:30 +0000
Manifest next update:     Tue 16 Apr 2024 08:35:30 +0000
Files and hashes:         1: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (hash: /xR85TZ4nQqNPbG/nxroIxB26uX8tUxB+HcP66y9PLo=)
                          2: C086F933844AE977142A610348BAC966E4D6B7B4.crl (hash: NtwD+cBPotqTMlKC0bLJ54yhSBMniTQuKDQWKnTBG/o=)
                          3: 323830343a326363343a3a2f33322d313238203d3e20323635323432.roa (hash: bEAWXfUt1aas/tZqqFLBAZxa4gq4COZY838rO5OLikw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:94:bc:3e:fa:e0:5d:fe:4e:a7:16:e0:52:d2:f5:6a:d0:c8:e3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C086F933844AE977142A610348BAC966E4D6B7B4
        Validity
            Not Before: Apr 15 06:03:30 2024 GMT
            Not After : Apr 16 08:35:30 2024 GMT
        Subject: CN=9E8C403335460D382D3CE0157945AB1CD4B799A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:97:81:ac:a4:54:54:71:0f:fc:c9:59:18:
                    7e:f6:5b:11:0a:c3:21:13:a1:77:33:71:a6:b9:86:
                    0e:4a:f2:e7:45:41:59:ab:4b:1b:00:d3:1b:9c:23:
                    59:cb:96:a7:f3:82:f1:ad:7c:7e:bc:33:c3:51:0e:
                    2f:2c:68:12:90:14:eb:87:e2:2a:f0:d2:2f:77:e7:
                    1f:8e:38:a2:de:a1:49:6d:2a:58:ef:70:79:cf:1c:
                    e2:b2:c7:be:64:a9:ba:9f:7f:57:1a:fa:29:e0:a4:
                    44:4e:6d:69:3e:c9:f2:39:9d:f2:40:79:2d:15:73:
                    d9:c1:7f:3b:65:3b:b6:22:2d:c3:1e:e3:98:6a:64:
                    74:67:f1:34:0e:23:ec:ac:22:90:ae:c3:73:1f:a8:
                    2e:a2:22:a7:45:85:be:d5:f8:cb:28:f6:84:f6:16:
                    e7:0a:b4:31:d2:bc:d7:4a:75:48:e2:84:31:8a:98:
                    3f:0b:c4:9b:e7:91:d9:c7:6d:2b:d0:eb:55:08:91:
                    ca:1d:69:de:0a:9b:ac:11:57:26:a3:04:49:5c:98:
                    b5:e2:e9:8e:25:a3:00:45:59:f9:b0:51:68:58:6a:
                    0e:85:cf:7c:d8:35:35:d3:23:21:e8:b4:34:40:18:
                    d2:6a:9d:e4:65:e7:f9:44:c8:a0:ba:7e:23:e6:18:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:40:33:35:46:0D:38:2D:3C:E0:15:79:45:AB:1C:D4:B7:99:A0
            X509v3 Authority Key Identifier:
                keyid:C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:a7:78:47:3f:d7:f5:ee:58:2b:12:10:bb:7e:1b:ef:51:
         9e:8e:98:86:fb:29:7e:8b:e3:90:1d:df:85:93:54:49:76:01:
         d6:92:9e:84:1e:57:17:a3:be:54:6f:6b:17:d8:6b:c5:89:38:
         cb:36:23:5c:28:60:65:70:c5:2d:2d:c2:86:0f:34:3a:47:f0:
         f8:95:d0:75:bd:5e:a0:a3:52:5e:a4:49:c6:20:dc:35:ad:dc:
         ad:f4:2d:07:b0:2d:09:14:ad:f9:72:9e:7e:4d:1b:27:fe:8b:
         29:d0:ad:58:4d:de:f7:b5:5e:ad:e0:4e:8a:f2:f4:7f:f3:a9:
         9d:74:25:2a:55:8b:67:58:91:f7:23:e3:d9:d1:b6:fc:5c:87:
         ac:d6:57:9d:83:4d:f1:42:2c:c8:c8:79:bb:b6:31:17:03:8d:
         d2:3b:b4:b3:ef:04:29:49:2c:a8:b6:94:fe:a5:48:2a:86:a9:
         ed:ac:93:3e:d6:f9:c5:8b:d8:1e:f4:5b:22:52:35:83:64:c9:
         e3:12:f7:9c:cb:3c:72:f1:44:13:21:c7:c9:92:84:34:57:f6:
         f4:71:dc:6e:62:01:57:ad:64:e2:b9:5c:86:e0:08:cc:9c:af:
         21:cd:12:13:5c:21:d4:82:59:ea:48:ee:7c:84:c0:db:e3:94:
         b7:b1:39:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbJS8PvrgXf5OpxbgUtL1atDI434wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA4NkY5MzM4NDRBRTk3NzE0MkE2MTAzNDhCQUM5NjZF
NEQ2QjdCNDAeFw0yNDA0MTUwNjAzMzBaFw0yNDA0MTYwODM1MzBaMDMxMTAvBgNV
BAMTKDlFOEM0MDMzMzU0NjBEMzgyRDNDRTAxNTc5NDVBQjFDRDRCNzk5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOJeBrKRUVHEP/MlZGH72WxEK
wyEToXczcaa5hg5K8udFQVmrSxsA0xucI1nLlqfzgvGtfH68M8NRDi8saBKQFOuH
4irw0i935x+OOKLeoUltKljvcHnPHOKyx75kqbqff1ca+ingpERObWk+yfI5nfJA
eS0Vc9nBfztlO7YiLcMe45hqZHRn8TQOI+ysIpCuw3MfqC6iIqdFhb7V+Mso9oT2
FucKtDHSvNdKdUjihDGKmD8LxJvnkdnHbSvQ61UIkcodad4Km6wRVyajBElcmLXi
6Y4lowBFWfmwUWhYag6Fz3zYNTXTIyHotDRAGNJqneRl5/lEyKC6fiPmGDDZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnoxAMzVGDTgtPOAVeUWrHNS3maAwHwYDVR0j
BBgwFoAUwIb5M4RK6XcUKmEDSLrJZuTWt7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBI
eXUvMC9DMDg2RjkzMzg0NEFFOTc3MTQyQTYxMDM0OEJBQzk2NkU0RDZCN0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwODZGOTMzODQ0QUU5Nzcx
NDJBNjEwMzQ4QkFDOTY2RTRENkI3QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBIeXUvMC9D
MDg2RjkzMzg0NEFFOTc3MTQyQTYxMDM0OEJBQzk2NkU0RDZCN0I0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARfCneEc/1/XuWCsSELt+G+9Rno6YhvspfovjkB3fhZNUSXYB1pKehB5XF6O+
VG9rF9hrxYk4yzYjXChgZXDFLS3Chg80Okfw+JXQdb1eoKNSXqRJxiDcNa3crfQt
B7AtCRSt+XKefk0bJ/6LKdCtWE3e97VereBOivL0f/OpnXQlKlWLZ1iR9yPj2dG2
/FyHrNZXnYNN8UIsyMh5u7YxFwON0ju0s+8EKUksqLaU/qVIKoap7ayTPtb5xYvY
HvRbIlI1g2TJ4xL3nMs8cvFEEyHHyZKENFf29HHcbmIBV61k4rlchuAIzJyvIc0S
E1wh1IJZ6kjufITA2+OUt7E5dQ==
-----END CERTIFICATE-----