Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft
File:                     D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft (raw, json)
Hash identifier:          o3hch4RZICGT1bJjnm6Zl6uLEcnZWEQ86wlIxz3eEeM=
Subject key identifier:   9F:AF:11:F6:3E:1F:79:E2:76:A6:E1:F1:4B:91:1B:09:57:3C:54:D6
Authority key identifier: D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A
Certificate issuer:       /CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
Certificate serial:       51501D70411FAC5B416FE8FAE54FE515D23DBE48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft
Manifest number:          23
Signing time:             Sun 14 Apr 2024 20:02:40 +0000
Manifest this update:     Sun 14 Apr 2024 19:57:40 +0000
Manifest next update:     Mon 15 Apr 2024 23:00:40 +0000
Files and hashes:         1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: KS35uIVWKb8OUd3BHR3jqXlN7gfi+7Ql8m7AGUDOLxE=)
                          2: D7EECEBFA6498EC7786E99D794BC594E9420DF2A.crl (hash: jufbpAI9j9MP+I4aFlFa8EyakQEqjRu73YA828G0E0U=)
                          3: 323830343a6331383a3a2f33322d3333203d3e203532363737.roa (hash: +r6veiYDb3zTU4bxK9xiDXgqacLCXl1UfSeRy7Cr9d4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:50:1d:70:41:1f:ac:5b:41:6f:e8:fa:e5:4f:e5:15:d2:3d:be:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
        Validity
            Not Before: Apr 14 19:57:40 2024 GMT
            Not After : Apr 15 23:00:40 2024 GMT
        Subject: CN=9FAF11F63E1F79E276A6E1F14B911B09573C54D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:6c:21:1b:19:a9:29:57:dd:0a:5b:1a:5f:
                    22:b6:8b:14:15:84:21:7a:8a:09:28:4d:61:4b:bf:
                    a5:ec:f3:da:fe:bd:5e:58:ae:88:8b:1c:cf:e8:55:
                    02:fb:35:c0:8b:81:cf:df:25:bd:87:83:ca:6a:bd:
                    08:fa:ba:d3:d6:56:a5:7e:67:b7:17:87:50:88:d6:
                    ce:97:4e:76:f9:db:1a:60:f2:31:88:a7:3a:ee:05:
                    4f:27:1e:17:ad:cb:1b:b5:02:f2:c9:04:3f:76:20:
                    69:d5:7a:53:99:8b:a9:04:49:1a:d0:e8:2e:8e:c4:
                    a8:c9:c4:f5:8d:f1:2f:95:04:4c:d2:77:4a:f3:3b:
                    50:d7:76:92:52:a0:18:bc:3d:3d:58:1c:4a:5f:d4:
                    8d:b6:f8:12:2a:ed:f5:d7:6f:48:de:30:df:ab:c5:
                    a0:6a:ee:51:9e:f5:aa:c3:47:09:1c:a9:aa:f4:20:
                    18:7c:57:23:69:47:89:c4:3c:4d:60:d6:ba:63:4d:
                    c3:26:81:ab:5c:03:16:a9:9f:c2:90:b2:e0:80:bc:
                    87:d9:5d:5d:f5:ef:36:b4:ad:63:76:15:00:eb:d0:
                    49:ba:aa:e2:aa:8b:30:76:36:29:10:e7:39:f9:89:
                    60:57:3f:59:40:99:d8:c5:23:95:8a:a8:54:98:95:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:11:F6:3E:1F:79:E2:76:A6:E1:F1:4B:91:1B:09:57:3C:54:D6
            X509v3 Authority Key Identifier:
                keyid:D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:96:97:5f:b5:00:3a:ab:32:b1:27:aa:6a:fa:dd:12:70:
         2a:70:b5:08:03:5e:db:11:23:1b:05:11:b4:be:63:2b:20:cf:
         62:2e:2a:06:f6:32:a2:f5:f6:e3:16:e7:9f:c1:71:5f:0f:1c:
         3c:ab:24:df:08:de:a0:d7:ea:c5:da:02:11:cc:54:32:7b:e3:
         ac:68:2c:1a:a1:29:24:be:04:60:0f:e9:a9:30:c7:fd:c6:f9:
         c1:e8:5d:c4:c6:81:b4:28:5d:7a:cc:25:3a:43:44:78:1c:f5:
         1f:7e:81:a3:59:72:dd:85:f6:ca:cb:31:f8:45:b4:23:d6:eb:
         99:de:f2:6f:a8:47:eb:db:8a:71:32:a0:a2:ab:0d:d0:6e:d4:
         cd:66:e7:3a:79:7b:88:63:03:33:ce:9b:95:45:86:1c:7c:e0:
         8a:ea:3a:a8:ca:7d:15:17:52:8c:8d:99:d0:27:28:15:0d:71:
         ed:b2:3b:72:75:12:7e:9a:be:fd:0e:61:16:7f:ce:ba:7a:50:
         7d:fc:99:6a:17:e6:33:16:fe:9c:16:0b:d3:1b:95:ad:90:05:
         02:33:73:f1:f7:a1:77:49:c1:47:3a:3b:06:19:43:ff:81:06:
         f4:e9:61:83:b3:1e:bd:56:15:8b:cb:e8:26:87:3d:e8:a0:4b:
         93:3b:a9:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUVAdcEEfrFtBb+j65U/lFdI9vkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRUNFQkZBNjQ5OEVDNzc4NkU5OUQ3OTRCQzU5NEU5
NDIwREYyQTAeFw0yNDA0MTQxOTU3NDBaFw0yNDA0MTUyMzAwNDBaMDMxMTAvBgNV
BAMTKDlGQUYxMUY2M0UxRjc5RTI3NkE2RTFGMTRCOTExQjA5NTczQzU0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyWwhGxmpKVfdClsaXyK2ixQV
hCF6igkoTWFLv6Xs89r+vV5YroiLHM/oVQL7NcCLgc/fJb2Hg8pqvQj6utPWVqV+
Z7cXh1CI1s6XTnb52xpg8jGIpzruBU8nHhetyxu1AvLJBD92IGnVelOZi6kESRrQ
6C6OxKjJxPWN8S+VBEzSd0rzO1DXdpJSoBi8PT1YHEpf1I22+BIq7fXXb0jeMN+r
xaBq7lGe9arDRwkcqar0IBh8VyNpR4nEPE1g1rpjTcMmgatcAxapn8KQsuCAvIfZ
XV317za0rWN2FQDr0Em6quKqizB2NikQ5zn5iWBXP1lAmdjFI5WKqFSYlWjvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn68R9j4feeJ2puHxS5EbCVc8VNYwHwYDVR0j
BBgwFoAU1+7Ov6ZJjsd4bpnXlLxZTpQg3yowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMS9EN0VFQ0VCRkE2NDk4RUM3Nzg2RTk5RDc5NEJDNTk0RTk0MjBERjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3RUVDRUJGQTY0OThFQzc3
ODZFOTlENzk0QkM1OTRFOTQyMERGMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E
N0VFQ0VCRkE2NDk4RUM3Nzg2RTk5RDc5NEJDNTk0RTk0MjBERjJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi8uWl1+1ADqrMrEnqmr63RJwKnC1CANe2xEjGwURtL5jKyDPYi4qBvYyovX2
4xbnn8FxXw8cPKsk3wjeoNfqxdoCEcxUMnvjrGgsGqEpJL4EYA/pqTDH/cb5wehd
xMaBtChdeswlOkNEeBz1H36Bo1ly3YX2yssx+EW0I9brmd7yb6hH69uKcTKgoqsN
0G7UzWbnOnl7iGMDM86blUWGHHzgiuo6qMp9FRdSjI2Z0CcoFQ1x7bI7cnUSfpq+
/Q5hFn/OunpQffyZahfmMxb+nBYL0xuVrZAFAjNz8fehd0nBRzo7BhlD/4EG9Olh
g7MevVYVi8voJoc96KBLkzupBA==
-----END CERTIFICATE-----