Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft
File:                     A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft (raw, json)
Hash identifier:          HZp1OKdi57EYTIqGvLEGGXV+VAZGlH6/uRiRmccWdaU=
Subject key identifier:   67:69:27:0E:9A:9A:A5:C1:6A:C2:51:95:87:9A:72:3C:89:74:86:F4
Authority key identifier: A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC
Certificate issuer:       /CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
Certificate serial:       4032133C74B127032BEE994A31F381BEF9B7E13E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft
Manifest number:          042D
Signing time:             Mon 15 Apr 2024 07:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 07:04:00 +0000
Files and hashes:         1: A432D1CCC67116292BF0943CA38D4C9A972E25AC.crl (hash: v2mAi98liHbxH8LeJIpzxI/6XfCkr1krlXZv0avwZwc=)
                          2: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: dIsbynozdBPX15t2ajMUaxf6kKAUYzFC44iNlmxLFR0=)
                          3: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: pSmfk/ZpskxaVjs9UMo0HaYiqnXgZ1mf4WAQgF6CvDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:32:13:3c:74:b1:27:03:2b:ee:99:4a:31:f3:81:be:f9:b7:e1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
        Validity
            Not Before: Apr 15 06:55:00 2024 GMT
            Not After : Apr 16 07:04:00 2024 GMT
        Subject: CN=6769270E9A9AA5C16AC25195879A723C897486F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:af:20:84:c9:8d:c1:66:c5:6b:08:ae:d8:
                    5e:ef:b0:1b:ac:d1:a1:da:15:b9:38:f7:9f:51:d0:
                    eb:96:20:0f:0e:c3:da:61:88:d7:a3:31:95:11:e3:
                    4d:bd:7d:d2:8d:af:25:5f:40:89:25:cd:a7:68:10:
                    09:3e:9c:7e:c7:cc:0e:77:3e:3c:e5:0c:c4:de:e0:
                    68:29:a1:bc:db:14:95:c4:39:cc:6d:88:78:12:46:
                    00:49:7b:18:94:21:71:81:30:25:c9:fa:a9:21:3c:
                    c3:84:39:58:73:a2:a4:bb:71:a7:8f:5e:56:73:de:
                    4f:94:84:ee:24:a5:8c:a7:ec:b0:b7:9b:c9:8e:b5:
                    07:3c:43:85:85:97:e1:f9:6d:b1:cd:95:08:b7:7f:
                    1c:17:24:7e:61:fc:54:7b:f8:cd:b5:aa:42:8d:f4:
                    4e:31:f9:2b:5a:fd:60:2d:7b:e1:6d:5a:62:89:53:
                    75:b9:8d:be:4b:b3:54:30:bb:fb:e0:80:44:cc:43:
                    4a:66:35:a6:25:bb:c5:cb:b1:69:8d:36:79:70:97:
                    e2:de:e4:be:95:43:cf:2e:ef:1f:9c:95:1b:4b:69:
                    5e:00:cd:31:6e:6e:af:67:0c:05:6a:b1:45:4c:75:
                    c8:16:87:5b:c1:98:53:a4:a7:f0:86:c1:95:53:07:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:27:0E:9A:9A:A5:C1:6A:C2:51:95:87:9A:72:3C:89:74:86:F4
            X509v3 Authority Key Identifier:
                keyid:A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:38:3f:1b:52:ed:72:cb:dc:90:a3:b9:0e:88:a4:cc:d8:
         52:18:25:94:c5:4e:b4:2a:42:63:13:29:f5:34:4c:0f:a5:d6:
         d8:38:76:16:ab:99:9c:96:5d:e8:bd:27:65:09:87:28:1b:b5:
         9d:c5:c7:6e:6a:23:a5:f8:3c:ac:07:ca:83:27:45:fc:d4:d6:
         02:61:a8:31:8f:42:0e:dc:09:79:30:14:f5:d6:3c:ee:86:99:
         68:da:79:06:22:2b:df:62:14:d9:a0:c1:fa:5e:f9:d0:4e:28:
         8f:e2:97:db:4c:91:17:6f:33:84:73:12:1c:72:b1:15:f3:62:
         a3:3f:2b:41:23:9d:3f:1a:60:73:90:c4:26:d7:be:47:4d:d5:
         df:c6:e9:16:47:c0:e0:44:09:6b:58:d1:46:d6:51:f7:9b:7e:
         10:59:98:02:77:6a:da:b8:e4:e6:a5:27:03:71:79:bf:e0:d4:
         3a:cd:af:c3:f5:c5:f7:da:a3:d5:b8:8e:4b:e0:f7:8c:76:ca:
         ee:c4:4d:e2:12:0b:8c:45:f7:cc:54:7a:58:45:78:50:42:db:
         38:03:0d:ce:1e:7d:22:ae:3e:35:75:1e:c6:3d:6e:e7:cf:b0:
         17:50:33:ef:bc:6d:64:f2:47:50:48:a6:b6:36:ca:c9:39:76:
         cb:79:6a:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQDITPHSxJwMr7plKMfOBvvm34T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzMkQxQ0NDNjcxMTYyOTJCRjA5NDNDQTM4RDRDOUE5
NzJFMjVBQzAeFw0yNDA0MTUwNjU1MDBaFw0yNDA0MTYwNzA0MDBaMDMxMTAvBgNV
BAMTKDY3NjkyNzBFOUE5QUE1QzE2QUMyNTE5NTg3OUE3MjNDODk3NDg2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdY68ghMmNwWbFawiu2F7vsBus
0aHaFbk4959R0OuWIA8Ow9phiNejMZUR4029fdKNryVfQIklzadoEAk+nH7HzA53
PjzlDMTe4GgpobzbFJXEOcxtiHgSRgBJexiUIXGBMCXJ+qkhPMOEOVhzoqS7caeP
XlZz3k+UhO4kpYyn7LC3m8mOtQc8Q4WFl+H5bbHNlQi3fxwXJH5h/FR7+M21qkKN
9E4x+Sta/WAte+FtWmKJU3W5jb5Ls1Qwu/vggETMQ0pmNaYlu8XLsWmNNnlwl+Le
5L6VQ88u7x+clRtLaV4AzTFubq9nDAVqsUVMdcgWh1vBmFOkp/CGwZVTBzc3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ2knDpqapcFqwlGVh5pyPIl0hvQwHwYDVR0j
BBgwFoAUpDLRzMZxFikr8JQ8o41MmpcuJawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu
dlovMC9BNDMyRDFDQ0M2NzExNjI5MkJGMDk0M0NBMzhENEM5QTk3MkUyNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0MzJEMUNDQzY3MTE2Mjky
QkYwOTQzQ0EzOEQ0QzlBOTcyRTI1QUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMC9B
NDMyRDFDQ0M2NzExNjI5MkJGMDk0M0NBMzhENEM5QTk3MkUyNUFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL5U4PxtS7XLL3JCjuQ6IpMzYUhgllMVOtCpCYxMp9TRMD6XW2Dh2FquZnJZd
6L0nZQmHKBu1ncXHbmojpfg8rAfKgydF/NTWAmGoMY9CDtwJeTAU9dY87oaZaNp5
BiIr32IU2aDB+l750E4oj+KX20yRF28zhHMSHHKxFfNioz8rQSOdPxpgc5DEJte+
R03V38bpFkfA4EQJa1jRRtZR95t+EFmYAndq2rjk5qUnA3F5v+DUOs2vw/XF99qj
1biOS+D3jHbK7sRN4hILjEX3zFR6WEV4UELbOAMNzh59Iq4+NXUexj1u58+wF1Az
77xtZPJHUEimtjbKyTl2y3lqHw==
-----END CERTIFICATE-----