Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.mft
File:                     9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.mft (raw, json)
Hash identifier:          AalVq14es1tI+mgGygHG1eZVYX+iRuPQ7I/eP8rQ+BE=
Subject key identifier:   FA:39:E5:91:6A:F2:FE:0C:DA:78:91:D9:A1:85:27:BD:C8:12:4E:2C
Authority key identifier: 9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A
Certificate issuer:       /CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
Certificate serial:       156342DA74E16BCC82F6AFF7EF76D7BD7E1DFB00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.mft
Manifest number:          90
Signing time:             Wed 17 Jul 2024 09:15:30 +0000
Manifest this update:     Wed 17 Jul 2024 09:10:30 +0000
Manifest next update:     Thu 18 Jul 2024 12:35:30 +0000
Files and hashes:         1: 3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (hash: pqS9RHPi9ZpdTGFlhCQAgkak4r/TFWMdRsID2AfvmRE=)
                          2: 3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa (hash: iEUhMRo18wp40JC2xDmTNiPFgRuCUUMGMImFNNkk18w=)
                          3: 9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.crl (hash: sYYFYP9FLtXkUrC2t6S83JHDEFWKK5t+MRXJ6fH4U0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:63:42:da:74:e1:6b:cc:82:f6:af:f7:ef:76:d7:bd:7e:1d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A
        Validity
            Not Before: Jul 17 09:10:30 2024 GMT
            Not After : Jul 18 12:35:30 2024 GMT
        Subject: CN=FA39E5916AF2FE0CDA7891D9A18527BDC8124E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:c9:d6:8d:b5:13:10:7a:f1:91:f9:2c:75:
                    ce:db:70:12:db:1c:33:13:52:29:5d:62:ef:5d:fc:
                    b6:21:d0:d0:88:41:94:2f:66:16:60:59:64:82:f5:
                    1f:76:34:a6:2b:3d:1a:b2:63:33:66:db:48:86:ee:
                    9a:60:5b:51:84:3e:96:a5:38:85:4c:2a:e6:27:84:
                    ec:b7:82:b8:38:20:06:5e:bf:21:e2:f9:90:bd:cd:
                    11:22:bd:fb:8d:fa:45:b9:f2:35:83:df:ed:b6:85:
                    71:a0:0f:96:43:d6:73:ec:1c:67:51:90:3a:de:be:
                    db:49:b1:25:5a:31:a5:f7:90:8e:56:9a:b2:b4:94:
                    08:30:09:dc:a2:82:cd:4c:e5:d2:09:00:e0:9c:9c:
                    7f:06:f5:59:db:d5:77:4f:2b:de:9c:20:ac:e6:b9:
                    bd:06:dd:0c:31:2b:3e:66:eb:a9:aa:6a:20:be:47:
                    2d:1b:56:d0:77:1a:b8:c7:95:0a:eb:96:85:2d:66:
                    9c:69:93:be:4a:5c:cc:4a:28:71:16:77:75:e1:43:
                    dd:d6:be:76:a4:b7:84:72:3e:79:62:42:75:3a:22:
                    db:5f:f5:e1:42:a2:56:81:3a:45:0a:06:07:17:94:
                    d1:54:32:4b:04:02:c2:30:3d:8f:73:0b:d5:b1:65:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:39:E5:91:6A:F2:FE:0C:DA:78:91:D9:A1:85:27:BD:C8:12:4E:2C
            X509v3 Authority Key Identifier:
                keyid:9D:1F:16:BD:1B:CE:84:FE:4E:25:12:B2:FB:64:2A:22:AA:23:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/9D1F16BD1BCE84FE4E2512B2FB642A22AA23420A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:32:9f:4a:21:06:23:4a:c3:1f:66:f1:61:f6:53:4e:af:
         49:ad:ec:cb:b8:88:ad:54:3b:4d:d8:ba:48:d0:b6:11:57:91:
         ae:cc:27:71:88:46:39:b3:e3:4f:8f:97:fe:99:81:6e:64:62:
         3d:55:d7:5d:bd:94:39:9e:f4:91:54:5a:69:57:34:0d:f0:7f:
         05:4c:83:01:7c:bd:a8:9f:9e:df:d4:d7:a8:e8:7e:81:f1:09:
         0d:41:73:31:d7:a1:56:72:c5:52:10:b1:44:c2:cc:5d:85:43:
         43:f6:3b:47:27:26:23:49:eb:d6:8a:9c:86:87:e2:90:48:16:
         2d:bb:14:01:54:71:20:7c:08:82:74:0e:e7:80:28:d3:46:7c:
         99:8a:0c:a6:3f:c9:da:06:4d:78:b7:24:6c:48:d3:a5:c2:02:
         1c:2a:6e:de:8c:9c:2a:3a:2d:e5:5a:56:56:b1:1e:0a:d7:e3:
         45:99:8b:a5:b6:7c:df:f4:98:4b:bd:3f:7f:7b:9b:81:c2:c0:
         ff:69:5a:b0:ec:68:ee:35:52:48:7c:3b:c6:0a:89:b9:47:51:
         67:67:ad:1b:ea:cb:d6:72:b9:22:8b:82:02:01:b1:a0:f8:65:
         af:4b:58:2e:a9:e4:2a:3f:fe:71:5d:8b:6a:78:d3:64:0c:b8:
         9f:76:6c:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFWNC2nTha8yC9q/373bXvX4d+wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxRjE2QkQxQkNFODRGRTRFMjUxMkIyRkI2NDJBMjJB
QTIzNDIwQTAeFw0yNDA3MTcwOTEwMzBaFw0yNDA3MTgxMjM1MzBaMDMxMTAvBgNV
BAMTKEZBMzlFNTkxNkFGMkZFMENEQTc4OTFEOUExODUyN0JEQzgxMjRFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/cnWjbUTEHrxkfksdc7bcBLb
HDMTUildYu9d/LYh0NCIQZQvZhZgWWSC9R92NKYrPRqyYzNm20iG7ppgW1GEPpal
OIVMKuYnhOy3grg4IAZevyHi+ZC9zREivfuN+kW58jWD3+22hXGgD5ZD1nPsHGdR
kDrevttJsSVaMaX3kI5WmrK0lAgwCdyigs1M5dIJAOCcnH8G9Vnb1XdPK96cIKzm
ub0G3QwxKz5m66mqaiC+Ry0bVtB3GrjHlQrrloUtZpxpk75KXMxKKHEWd3XhQ93W
vnakt4RyPnliQnU6Ittf9eFColaBOkUKBgcXlNFUMksEAsIwPY9zC9WxZcZtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+jnlkWry/gzaeJHZoYUnvcgSTiwwHwYDVR0j
BBgwFoAUnR8WvRvOhP5OJRKy+2QqIqojQgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhWWTQySzdZVVM2NDlGTlozREp2R0pXV2JCSjN2MTYyd1NuOUp0N1F5
TksvMS85RDFGMTZCRDFCQ0U4NEZFNEUyNTEyQjJGQjY0MkEyMkFBMjM0MjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMUYxNkJEMUJDRTg0RkU0
RTI1MTJCMkZCNjQyQTIyQUEyMzQyMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhWWTQySzdZVVM2NDlGTlozREp2R0pXV2JCSjN2MTYyd1NuOUp0N1F5TksvMS85
RDFGMTZCRDFCQ0U4NEZFNEUyNTEyQjJGQjY0MkEyMkFBMjM0MjBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS8wyn0ohBiNKwx9m8WH2U06vSa3sy7iIrVQ7Tdi6SNC2EVeRrswncYhGObPj
T4+X/pmBbmRiPVXXXb2UOZ70kVRaaVc0DfB/BUyDAXy9qJ+e39TXqOh+gfEJDUFz
MdehVnLFUhCxRMLMXYVDQ/Y7RycmI0nr1oqchofikEgWLbsUAVRxIHwIgnQO54Ao
00Z8mYoMpj/J2gZNeLckbEjTpcICHCpu3oycKjot5VpWVrEeCtfjRZmLpbZ83/SY
S70/f3ubgcLA/2lasOxo7jVSSHw7xgqJuUdRZ2etG+rL1nK5IouCAgGxoPhlr0tY
LqnkKj/+cV2LanjTZAy4n3ZseQ==
-----END CERTIFICATE-----