Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.mft
File:                     5EDCB685FD87B973BFE66FA36C4F4E0D24734821.mft (raw, json)
Hash identifier:          pkhiWTHme+QxEQFDB2+Qxw3vMjXhhzGrsaHK9gL+Aus=
Subject key identifier:   D7:E6:5C:65:B5:CC:6C:77:F8:46:DF:36:DC:A5:82:39:07:14:BA:DC
Authority key identifier: 5E:DC:B6:85:FD:87:B9:73:BF:E6:6F:A3:6C:4F:4E:0D:24:73:48:21
Certificate issuer:       /CN=5EDCB685FD87B973BFE66FA36C4F4E0D24734821
Certificate serial:       70898BA5FE581E6D220141EDC477EDEA916877A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.mft
Manifest number:          021C
Signing time:             Mon 15 Apr 2024 04:07:38 +0000
Manifest this update:     Mon 15 Apr 2024 04:02:38 +0000
Manifest next update:     Tue 16 Apr 2024 05:43:38 +0000
Files and hashes:         1: 34352e3138352e302e302f32322d3332203d3e20323639333531.roa (hash: Lf2dE1T92tYSmFbxi7HvGFnf37rrz5qzOHg85/2zQhw=)
                          2: 5EDCB685FD87B973BFE66FA36C4F4E0D24734821.crl (hash: vEf/2QsbEfs4tvFZyFM7wAb3LcX3aehOOJ+BhPTMB7g=)
                          3: 323830343a363334383a3a2f33322d313238203d3e20323639333531.roa (hash: 3pAFmgn8ZquL1M3z6klyEbilrM0OQXSL6lzZd0Cz8ys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:89:8b:a5:fe:58:1e:6d:22:01:41:ed:c4:77:ed:ea:91:68:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDCB685FD87B973BFE66FA36C4F4E0D24734821
        Validity
            Not Before: Apr 15 04:02:38 2024 GMT
            Not After : Apr 16 05:43:38 2024 GMT
        Subject: CN=D7E65C65B5CC6C77F846DF36DCA582390714BADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:4e:6b:fb:af:9f:ec:57:76:ed:27:46:cf:
                    1e:b2:69:00:de:d2:d2:57:2e:3c:ec:31:43:ed:e6:
                    5c:7c:f7:8e:57:53:e8:d6:9f:a8:d1:97:30:f5:18:
                    db:f1:00:09:40:84:e5:f0:c3:01:e4:5f:ab:37:cb:
                    15:08:5d:ea:f0:ef:d3:29:4e:3a:88:04:f8:27:1c:
                    7a:0f:f8:64:14:c7:b6:56:86:5c:86:81:2a:49:e6:
                    7b:b5:02:5b:26:0a:9d:15:84:e3:fa:79:91:af:73:
                    94:b0:86:93:82:77:3d:5e:83:a5:b6:0c:9f:50:48:
                    af:c1:f5:be:42:95:10:e5:1c:ea:6b:71:c7:04:e3:
                    27:63:23:1f:6e:d6:2a:33:54:8c:ae:62:ca:0c:29:
                    db:3f:96:4d:fc:7c:e6:c1:e4:9b:51:65:8c:07:a3:
                    e2:df:26:9a:80:52:68:74:f4:1b:2c:73:43:08:8b:
                    43:07:36:ae:04:09:06:98:93:c0:01:0a:07:f2:20:
                    aa:7c:d3:7f:79:f3:9d:fb:d0:de:d6:56:6d:89:91:
                    fe:74:b2:c0:df:5e:23:04:86:c9:6c:0c:07:0a:73:
                    19:79:f5:01:ff:37:a8:7a:ed:49:9c:21:a0:5d:2d:
                    38:80:4e:a4:25:00:b7:07:2f:b7:af:ea:30:09:53:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:5C:65:B5:CC:6C:77:F8:46:DF:36:DC:A5:82:39:07:14:BA:DC
            X509v3 Authority Key Identifier:
                keyid:5E:DC:B6:85:FD:87:B9:73:BF:E6:6F:A3:6C:4F:4E:0D:24:73:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3t7D6NmJsew5J4Z72kAUsJoum1o9RSxeRjtSx2iQGEUZ/0/5EDCB685FD87B973BFE66FA36C4F4E0D24734821.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:2c:38:5b:22:73:80:f7:80:32:09:78:b8:c6:5b:42:a5:
         90:e2:56:c0:f0:c2:23:0e:84:c5:c1:0c:d8:37:e6:b7:65:da:
         b6:01:b5:82:8f:40:7d:ef:84:f3:4a:b2:f3:1d:f8:b2:74:e6:
         3e:b5:35:2a:13:e0:47:7d:2d:7d:16:67:0c:1e:e0:9c:dd:a4:
         99:4c:17:b0:6b:89:dc:98:b8:df:88:8e:52:9a:4f:40:a8:bb:
         8f:38:da:e1:9c:d3:c8:2c:73:76:f7:30:27:09:ad:23:ac:01:
         fc:f8:5f:db:a8:5a:cc:20:28:60:cf:a2:12:71:77:28:8d:48:
         6e:85:8b:1b:3c:94:47:bd:7d:66:48:0b:a4:1c:51:24:98:79:
         89:2c:28:5e:bb:c4:c6:b9:41:b5:65:99:54:74:99:88:04:68:
         5a:01:4a:ee:52:f9:39:7e:2d:ed:5e:73:1d:f1:06:02:f1:bb:
         a8:82:9c:6b:eb:f5:0d:7f:2c:d7:43:67:21:f0:82:33:67:81:
         d3:7a:ea:6b:da:2b:f8:a9:88:b8:2f:db:11:0a:2b:7b:2b:07:
         ed:ff:33:8c:b3:99:fb:f1:21:f1:2d:c2:33:6c:01:36:c8:e8:
         bf:34:3d:4d:40:54:f5:92:18:66:d9:ce:22:45:a7:97:38:b3:
         6c:8f:b9:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcImLpf5YHm0iAUHtxHft6pFod6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVEQ0I2ODVGRDg3Qjk3M0JGRTY2RkEzNkM0RjRFMEQy
NDczNDgyMTAeFw0yNDA0MTUwNDAyMzhaFw0yNDA0MTYwNTQzMzhaMDMxMTAvBgNV
BAMTKEQ3RTY1QzY1QjVDQzZDNzdGODQ2REYzNkRDQTU4MjM5MDcxNEJBREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRPU5r+6+f7Fd27SdGzx6yaQDe
0tJXLjzsMUPt5lx8945XU+jWn6jRlzD1GNvxAAlAhOXwwwHkX6s3yxUIXerw79Mp
TjqIBPgnHHoP+GQUx7ZWhlyGgSpJ5nu1AlsmCp0VhOP6eZGvc5SwhpOCdz1eg6W2
DJ9QSK/B9b5ClRDlHOprcccE4ydjIx9u1iozVIyuYsoMKds/lk38fObB5JtRZYwH
o+LfJpqAUmh09Bssc0MIi0MHNq4ECQaYk8ABCgfyIKp8039585370N7WVm2Jkf50
ssDfXiMEhslsDAcKcxl59QH/N6h67UmcIaBdLTiATqQlALcHL7ev6jAJU++hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1+ZcZbXMbHf4Rt823KWCOQcUutwwHwYDVR0j
BBgwFoAUXty2hf2HuXO/5m+jbE9ODSRzSCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3Q3RDZObUpzZXc1SjRaNzJrQVVzSm91bTFvOVJTeGVSanRTeDJpUUdF
VVovMC81RURDQjY4NUZEODdCOTczQkZFNjZGQTM2QzRGNEUwRDI0NzM0ODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFRENCNjg1RkQ4N0I5NzNC
RkU2NkZBMzZDNEY0RTBEMjQ3MzQ4MjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3Q3RDZObUpzZXc1SjRaNzJrQVVzSm91bTFvOVJTeGVSanRTeDJpUUdFVVovMC81
RURDQjY4NUZEODdCOTczQkZFNjZGQTM2QzRGNEUwRDI0NzM0ODIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA+osOFsic4D3gDIJeLjGW0KlkOJWwPDCIw6ExcEM2Dfmt2XatgG1go9Afe+E
80qy8x34snTmPrU1KhPgR30tfRZnDB7gnN2kmUwXsGuJ3Ji434iOUppPQKi7jzja
4ZzTyCxzdvcwJwmtI6wB/Phf26hazCAoYM+iEnF3KI1IboWLGzyUR719ZkgLpBxR
JJh5iSwoXrvExrlBtWWZVHSZiARoWgFK7lL5OX4t7V5zHfEGAvG7qIKca+v1DX8s
10NnIfCCM2eB03rqa9or+KmIuC/bEQoreysH7f8zjLOZ+/Eh8S3CM2wBNsjovzQ9
TUBU9ZIYZtnOIkWnlzizbI+5xg==
-----END CERTIFICATE-----