Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft
File:                     654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft (raw, json)
Hash identifier:          OSpDIrz3oM5X9IfHEO7XdGo9mzhu2frOPJDiqx1YCWA=
Subject key identifier:   5D:77:F3:D2:4E:10:18:9D:FE:18:A5:91:3D:BD:23:D5:E1:34:93:CF
Authority key identifier: 65:4F:CC:0B:EB:EF:31:2A:51:F2:E3:DD:40:96:45:30:98:8C:5D:12
Certificate issuer:       /CN=654FCC0BEBEF312A51F2E3DD40964530988C5D12
Certificate serial:       4732285174FB11D4522D618594AAF06E7D3817DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/654FCC0BEBEF312A51F2E3DD40964530988C5D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft
Manifest number:          70
Signing time:             Mon 02 Sep 2024 18:01:55 +0000
Manifest this update:     Mon 02 Sep 2024 17:56:55 +0000
Manifest next update:     Tue 03 Sep 2024 18:54:55 +0000
Files and hashes:         1: 323830343a363865383a3a2f33322d313238203d3e20323639373234.roa (hash: 9ea3Hr7aSPrk4xWainu2v45bSUD4S454F/hQF7VqOhs=)
                          2: 654FCC0BEBEF312A51F2E3DD40964530988C5D12.crl (hash: 8Y2ulIdzAIVO/WA4nQtuoboyVq7QiyExF0H19uXZg0U=)
                          3: 34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa (hash: eZKoRt8e0lZXluzr9haLxFmaS9VWfEPJb//3SmoIYKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:28:51:74:fb:11:d4:52:2d:61:85:94:aa:f0:6e:7d:38:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654FCC0BEBEF312A51F2E3DD40964530988C5D12
        Validity
            Not Before: Sep  2 17:56:55 2024 GMT
            Not After : Sep  3 18:54:55 2024 GMT
        Subject: CN=5D77F3D24E10189DFE18A5913DBD23D5E13493CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:bb:69:48:ff:33:f5:a4:9c:6b:bb:52:80:
                    79:1d:d5:57:de:9a:f9:23:b1:0e:e1:15:cd:70:49:
                    a2:99:ab:33:a1:cc:96:6a:02:88:14:a3:2b:fa:c3:
                    2b:a7:1a:2e:41:7b:54:eb:5e:01:25:a7:e1:a8:b9:
                    c9:3b:33:9e:76:6e:41:9a:dc:7b:a4:94:37:eb:50:
                    22:d6:79:58:fb:91:77:d6:0c:0e:3c:58:75:ed:53:
                    89:7b:f7:f0:db:e1:4f:76:59:bf:0f:dd:b3:5e:1f:
                    a6:3e:7a:e4:16:1d:22:53:4c:9e:37:db:d5:e9:fc:
                    67:a5:cc:2f:9d:3c:5e:e4:fd:02:fd:59:8e:a2:91:
                    05:ba:3a:97:2a:dc:3b:83:c8:39:96:8f:91:58:18:
                    97:60:5f:41:49:32:76:79:54:c9:96:e2:c9:09:b9:
                    50:52:fa:c7:be:b5:d2:cf:f2:61:7b:01:0d:59:51:
                    df:18:ae:42:67:b7:f6:00:8a:c6:26:15:8a:64:c3:
                    70:78:26:33:3c:f0:53:20:8f:6d:90:5e:ac:4b:d9:
                    4e:f0:bd:75:d6:ec:ed:c9:fb:db:d5:1d:ee:42:b2:
                    e1:bf:13:0b:22:8d:ec:5c:b1:08:f3:b7:16:ca:a1:
                    de:a1:9b:60:a5:84:2a:e7:af:8a:7c:a1:07:3f:ce:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:F3:D2:4E:10:18:9D:FE:18:A5:91:3D:BD:23:D5:E1:34:93:CF
            X509v3 Authority Key Identifier:
                keyid:65:4F:CC:0B:EB:EF:31:2A:51:F2:E3:DD:40:96:45:30:98:8C:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/654FCC0BEBEF312A51F2E3DD40964530988C5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/654FCC0BEBEF312A51F2E3DD40964530988C5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:a0:b3:76:40:a2:e9:c9:cf:54:2d:c6:3d:34:d9:9b:41:
         5e:a5:4d:08:c0:0e:0b:0d:32:36:5d:b4:d5:c2:72:a1:f5:d8:
         68:54:cf:cb:08:ca:7c:1a:07:b4:af:66:de:2e:15:a0:1b:11:
         ef:bb:ed:ee:6c:24:18:95:5c:73:40:51:45:5f:d9:c7:31:59:
         92:bb:15:3f:4e:f0:c6:00:db:1d:60:4b:29:14:82:13:3e:84:
         d0:d3:0e:e6:04:fa:e0:3b:31:5e:3c:0f:32:14:ba:8b:80:00:
         50:a4:6a:ab:98:3b:ed:04:35:8d:1b:f7:c0:a6:f8:97:b0:13:
         6f:f7:6b:fc:8c:18:73:86:2c:e7:d8:46:57:de:17:1f:63:7d:
         ef:0f:8b:23:ac:49:83:b6:59:b3:28:3b:1a:3c:d3:0a:33:fc:
         80:7c:78:4a:01:d9:17:c9:b7:f1:83:87:2d:cf:2c:86:57:65:
         b1:89:58:b5:e0:30:3a:d5:2d:4b:c4:45:d5:d0:1e:05:b4:c5:
         69:e8:e9:ae:8b:50:82:bc:14:a6:c8:b7:60:80:f2:64:db:b3:
         30:7f:a4:0a:d0:d4:c7:4e:3f:1f:ef:a0:77:64:f2:33:4e:51:
         83:1b:da:c4:3f:b2:c8:49:85:a2:8f:f6:09:da:ee:d1:30:8b:
         f9:87:78:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURzIoUXT7EdRSLWGFlKrwbn04F9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU0RkNDMEJFQkVGMzEyQTUxRjJFM0RENDA5NjQ1MzA5
ODhDNUQxMjAeFw0yNDA5MDIxNzU2NTVaFw0yNDA5MDMxODU0NTVaMDMxMTAvBgNV
BAMTKDVENzdGM0QyNEUxMDE4OURGRTE4QTU5MTNEQkQyM0Q1RTEzNDkzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAS7tpSP8z9aSca7tSgHkd1Vfe
mvkjsQ7hFc1wSaKZqzOhzJZqAogUoyv6wyunGi5Be1TrXgElp+Gouck7M552bkGa
3HuklDfrUCLWeVj7kXfWDA48WHXtU4l79/Db4U92Wb8P3bNeH6Y+euQWHSJTTJ43
29Xp/GelzC+dPF7k/QL9WY6ikQW6Opcq3DuDyDmWj5FYGJdgX0FJMnZ5VMmW4skJ
uVBS+se+tdLP8mF7AQ1ZUd8YrkJnt/YAisYmFYpkw3B4JjM88FMgj22QXqxL2U7w
vXXW7O3J+9vVHe5CsuG/EwsijexcsQjztxbKod6hm2ClhCrnr4p8oQc/zhGPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXXfz0k4QGJ3+GKWRPb0j1eE0k88wHwYDVR0j
BBgwFoAUZU/MC+vvMSpR8uPdQJZFMJiMXRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3Zh
dlMvMC82NTRGQ0MwQkVCRUYzMTJBNTFGMkUzREQ0MDk2NDUzMDk4OEM1RDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NEZDQzBCRUJFRjMxMkE1
MUYyRTNERDQwOTY0NTMwOTg4QzVEMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3ZhdlMvMC82
NTRGQ0MwQkVCRUYzMTJBNTFGMkUzREQ0MDk2NDUzMDk4OEM1RDEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKFqgs3ZAounJz1Qtxj002ZtBXqVNCMAOCw0yNl201cJyofXYaFTPywjKfBoH
tK9m3i4VoBsR77vt7mwkGJVcc0BRRV/ZxzFZkrsVP07wxgDbHWBLKRSCEz6E0NMO
5gT64DsxXjwPMhS6i4AAUKRqq5g77QQ1jRv3wKb4l7ATb/dr/IwYc4Ys59hGV94X
H2N97w+LI6xJg7ZZsyg7GjzTCjP8gHx4SgHZF8m38YOHLc8shldlsYlYteAwOtUt
S8RF1dAeBbTFaejprotQgrwUpsi3YIDyZNuzMH+kCtDUx04/H++gd2TyM05Rgxva
xD+yyEmFoo/2Cdru0TCL+Yd4Kw==
-----END CERTIFICATE-----
Generated at Sun Sep 8 16:45:04 2024 by rpki-client on console-ams.rpki-client.org