Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.mft
File:                     992EBC162AFA257711721FED3599425F3A2B0077.mft (raw, json)
Hash identifier:          wEJrW+tACjzwfpy/ai4G2mDrIj3fPrFVR0PvnQlvXaQ=
Subject key identifier:   37:A8:94:07:D4:5A:E4:6A:4E:35:20:EB:62:F6:5B:4F:2A:0C:14:85
Authority key identifier: 99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77
Certificate issuer:       /CN=992EBC162AFA257711721FED3599425F3A2B0077
Certificate serial:       086CEDFD7722B05253F46F543010919E4EBBD0B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992EBC162AFA257711721FED3599425F3A2B0077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.mft
Manifest number:          36
Signing time:             Mon 15 Apr 2024 01:44:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:39:57 +0000
Manifest next update:     Tue 16 Apr 2024 02:39:57 +0000
Files and hashes:         1: 992EBC162AFA257711721FED3599425F3A2B0077.crl (hash: jrQXp+k6tJTZZoHxixiJ96zFhQ35Xftn63qIGsmWSmw=)
                          2: 323830343a353761343a3a2f33322d3332203d3e20323638303737.roa (hash: 8T4thLJXEim6kWjPUPGTUsod6crBUcRwWjeGqPg96Pk=)
                          3: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (hash: GeObiysG1Dfoupc4IYNe47xdbnLCfrKedGD2jMfHxOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6c:ed:fd:77:22:b0:52:53:f4:6f:54:30:10:91:9e:4e:bb:d0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992EBC162AFA257711721FED3599425F3A2B0077
        Validity
            Not Before: Apr 15 01:39:57 2024 GMT
            Not After : Apr 16 02:39:57 2024 GMT
        Subject: CN=37A89407D45AE46A4E3520EB62F65B4F2A0C1485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:c1:a4:af:42:4a:72:ce:98:2e:1d:1b:cb:
                    28:e9:c6:14:5e:e5:de:be:35:93:7a:aa:2e:a4:65:
                    a0:dd:6e:28:08:e0:c3:2a:e7:8c:0d:2d:28:7d:32:
                    bc:01:a0:1a:28:7a:a8:e2:e3:45:4b:0c:00:ad:fa:
                    46:82:b6:06:29:5a:5a:17:ba:65:8b:27:3c:d7:a1:
                    46:fb:cf:c2:13:6c:3f:24:5c:d2:83:e9:4f:37:a3:
                    a7:f9:d8:cf:84:bc:10:ec:e9:88:9c:1a:3a:71:21:
                    6b:c7:7b:77:17:d6:e1:ac:3c:5d:d3:24:a7:ef:fd:
                    1f:02:92:51:84:b5:b2:b4:5a:c2:f7:0f:05:c6:05:
                    57:86:da:97:da:59:71:79:50:72:c0:d0:67:ae:80:
                    cd:77:96:d3:a7:78:56:1f:61:d8:0f:fb:dc:99:ad:
                    02:0e:60:56:6b:5f:5a:f5:9d:ff:52:83:e2:25:85:
                    01:ba:99:a6:53:0b:82:28:d4:b7:41:ff:eb:30:95:
                    5d:fc:23:fb:a3:b6:6a:85:1f:69:8d:19:78:0f:45:
                    33:7d:8e:29:81:c0:3a:69:73:98:47:8c:a4:d3:56:
                    6d:76:e0:8d:46:fe:6b:69:00:9d:95:46:f2:4d:06:
                    ce:94:58:ca:e3:2f:77:52:e7:de:f2:9e:16:1d:5e:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A8:94:07:D4:5A:E4:6A:4E:35:20:EB:62:F6:5B:4F:2A:0C:14:85
            X509v3 Authority Key Identifier:
                keyid:99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/992EBC162AFA257711721FED3599425F3A2B0077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:64:7c:09:58:fe:21:62:33:8c:9b:a9:3a:6d:46:c9:7b:
         aa:e2:17:9f:dc:9a:76:ee:32:df:41:62:5c:72:aa:df:8f:01:
         dd:1e:ef:03:6e:07:84:f9:40:91:da:e0:9a:a3:73:66:8a:c5:
         7f:90:b8:84:74:b5:56:93:62:7a:01:cf:80:15:e0:32:42:de:
         f3:e8:53:b8:c1:75:14:fd:96:1e:b9:c6:0e:82:ab:a8:0a:ba:
         31:cf:b8:8a:59:2a:c3:73:78:39:fa:fc:2a:da:8c:e1:01:75:
         e5:71:74:78:fb:20:27:e7:73:12:65:01:20:df:09:af:d5:4a:
         af:29:93:40:16:24:4b:d5:71:2c:a7:dc:f2:be:0d:d7:eb:e1:
         35:8b:85:43:3b:d4:5c:d1:1f:75:a8:4f:98:74:ea:7c:20:43:
         c1:64:4d:21:4e:51:83:98:5c:72:12:5e:7d:0b:c3:f5:ff:91:
         aa:37:a8:7b:d6:b5:a9:46:a7:02:f1:99:e0:2f:74:b7:8f:a6:
         59:72:7b:b3:c6:85:f8:a9:34:12:c6:f8:6a:e4:07:7d:a4:6a:
         4b:31:54:48:06:b2:07:bc:1d:bb:82:17:c2:f2:52:95:64:8d:
         81:da:43:13:18:37:db:e0:fd:12:40:7a:8c:c4:28:c4:7c:f8:
         a5:80:a8:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCGzt/XcisFJT9G9UMBCRnk670LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyRUJDMTYyQUZBMjU3NzExNzIxRkVEMzU5OTQyNUYz
QTJCMDA3NzAeFw0yNDA0MTUwMTM5NTdaFw0yNDA0MTYwMjM5NTdaMDMxMTAvBgNV
BAMTKDM3QTg5NDA3RDQ1QUU0NkE0RTM1MjBFQjYyRjY1QjRGMkEwQzE0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqMGkr0JKcs6YLh0byyjpxhRe
5d6+NZN6qi6kZaDdbigI4MMq54wNLSh9MrwBoBooeqji40VLDACt+kaCtgYpWloX
umWLJzzXoUb7z8ITbD8kXNKD6U83o6f52M+EvBDs6YicGjpxIWvHe3cX1uGsPF3T
JKfv/R8CklGEtbK0WsL3DwXGBVeG2pfaWXF5UHLA0GeugM13ltOneFYfYdgP+9yZ
rQIOYFZrX1r1nf9Sg+IlhQG6maZTC4Io1LdB/+swlV38I/ujtmqFH2mNGXgPRTN9
jimBwDppc5hHjKTTVm124I1G/mtpAJ2VRvJNBs6UWMrjL3dS597ynhYdXkxzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN6iUB9Ra5GpONSDrYvZbTyoMFIUwHwYDVR0j
BBgwFoAUmS68Fir6JXcRch/tNZlCXzorAHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR
djcvMC85OTJFQkMxNjJBRkEyNTc3MTE3MjFGRUQzNTk5NDI1RjNBMkIwMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk5MkVCQzE2MkFGQTI1Nzcx
MTcyMUZFRDM1OTk0MjVGM0EyQjAwNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVRdjcvMC85
OTJFQkMxNjJBRkEyNTc3MTE3MjFGRUQzNTk5NDI1RjNBMkIwMDc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAkxkfAlY/iFiM4ybqTptRsl7quIXn9yadu4y30FiXHKq348B3R7vA24HhPlA
kdrgmqNzZorFf5C4hHS1VpNiegHPgBXgMkLe8+hTuMF1FP2WHrnGDoKrqAq6Mc+4
ilkqw3N4Ofr8KtqM4QF15XF0ePsgJ+dzEmUBIN8Jr9VKrymTQBYkS9VxLKfc8r4N
1+vhNYuFQzvUXNEfdahPmHTqfCBDwWRNIU5Rg5hcchJefQvD9f+Rqjeoe9a1qUan
AvGZ4C90t4+mWXJ7s8aF+Kk0Esb4auQHfaRqSzFUSAayB7wdu4IXwvJSlWSNgdpD
Exg32+D9EkB6jMQoxHz4pYCorQ==
-----END CERTIFICATE-----