Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.mft
File:                     85148194E7412878BCCDE25660F9052CF17D2FB1.mft (raw, json)
Hash identifier:          2d6qBrJ0f4+awD8FauCTXpHtJSnSEUcAL8ECvxFV8no=
Subject key identifier:   46:1E:AD:67:5C:6E:98:9A:76:EA:73:F1:2E:D2:18:59:78:4C:99:D2
Authority key identifier: 85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
Certificate issuer:       /CN=85148194E7412878BCCDE25660F9052CF17D2FB1
Certificate serial:       62C30B2CDA18219946356EBD90C0AC43D5955F7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.mft
Manifest number:          02D1
Signing time:             Sun 13 Aug 2023 19:34:47 +0000
Manifest this update:     Sun 13 Aug 2023 19:29:47 +0000
Manifest next update:     Mon 14 Aug 2023 23:07:47 +0000
Files and hashes:         1: 323830343a363732343a3a2f33322d3438203d3e20323639363036.roa (hash: gaohgzdnlzLfB+WR4DhOOHTS55jXKhuVL3RHr9gGFfY=)
                          2: 85148194E7412878BCCDE25660F9052CF17D2FB1.crl (hash: KKlgqFzVqrOEbFJdlWkXSvcXibxu3EXiA2dPPemt+Qg=)
                          3: 34352e3139302e302e302f32322d3234203d3e20323639363036.roa (hash: krU82x4LCAEDglKNtP7rkVU5xprzQ41NwDzM3/ftuWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c3:0b:2c:da:18:21:99:46:35:6e:bd:90:c0:ac:43:d5:95:5f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85148194E7412878BCCDE25660F9052CF17D2FB1
        Validity
            Not Before: Aug 13 19:29:47 2023 GMT
            Not After : Aug 14 23:07:47 2023 GMT
        Subject: CN=461EAD675C6E989A76EA73F12ED21859784C99D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:c5:2f:92:33:b1:4d:16:2e:16:35:d6:36:
                    1d:d1:64:2e:04:78:97:fc:33:eb:1e:3a:87:72:6a:
                    75:63:09:0c:71:fe:3f:f9:f2:09:0a:27:da:30:63:
                    39:21:cf:a6:9c:a5:8b:fe:50:20:f4:4b:ca:e1:8a:
                    c7:03:88:dd:2c:d1:5b:fb:6a:bc:c3:f8:da:31:f7:
                    85:22:89:25:f3:df:b4:5b:5d:e2:98:51:d2:99:26:
                    19:c3:2c:0e:a9:e9:ea:e9:59:17:10:b9:05:95:21:
                    a4:8e:7f:33:4d:04:98:8d:d7:9b:6d:06:27:11:e1:
                    0e:07:7a:e7:1d:20:56:76:c1:94:27:4d:59:79:d3:
                    27:6d:db:69:42:d2:2c:08:bb:90:5e:37:6c:41:ef:
                    4d:a7:60:da:3a:7c:74:f4:7d:dd:d4:81:2e:27:52:
                    58:75:39:8c:1b:06:fd:46:99:b9:06:72:4e:26:6b:
                    34:be:c0:44:b7:69:26:e5:40:0d:d3:c9:82:43:e7:
                    db:06:4b:ca:fa:7a:85:e3:b7:34:9b:2a:ff:c9:48:
                    de:52:8a:d2:10:d5:0e:3c:c6:62:2c:34:a6:86:68:
                    b0:0c:d1:66:53:36:de:e3:62:9f:65:3c:11:29:c1:
                    0a:b2:0c:34:75:31:26:d8:73:c5:1b:18:3f:9d:9c:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:AD:67:5C:6E:98:9A:76:EA:73:F1:2E:D2:18:59:78:4C:99:D2
            X509v3 Authority Key Identifier:
                keyid:85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:07:96:35:08:4b:68:0b:05:c0:5d:b7:f2:b9:89:61:4f:
         43:0f:48:7f:51:17:ae:ac:db:60:fa:ff:6b:f9:04:10:e5:ba:
         d4:d2:26:97:ba:83:8c:e4:cc:3d:06:2f:3b:04:c1:e4:3a:62:
         e3:2f:1c:1a:4c:f9:3d:7c:57:66:f9:d5:d9:ba:e4:7e:ce:55:
         c6:c2:00:89:c1:96:7d:21:91:fb:88:a3:96:1a:f5:b0:01:78:
         87:a8:65:cc:fa:6f:51:83:dd:ba:59:a1:a3:55:f3:99:69:a2:
         4c:2b:cc:1f:13:c6:4c:7b:8a:d5:47:94:cb:88:1d:20:62:4b:
         d8:8d:8a:48:0c:ae:89:6d:ed:3a:81:6c:88:e0:48:88:e3:70:
         90:fd:e4:ea:79:8f:03:62:c3:73:2f:7d:3b:45:a9:18:6e:ab:
         32:e7:86:f1:6e:56:60:8e:df:db:2d:cc:2d:0c:11:5b:e6:1f:
         b8:13:5b:f4:39:97:98:63:58:96:26:ce:8e:20:99:20:45:1a:
         6c:44:56:07:48:77:e2:a2:65:f4:24:ce:42:09:7c:41:27:83:
         7b:bd:f3:78:4c:98:9e:e4:e8:48:17:e1:c8:d6:84:0d:7d:3d:
         62:a2:17:4a:3f:4a:6b:5e:0d:3d:d5:06:e3:e8:a3:82:ec:45:
         9a:68:24:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYsMLLNoYIZlGNW69kMCsQ9WVX3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxNDgxOTRFNzQxMjg3OEJDQ0RFMjU2NjBGOTA1MkNG
MTdEMkZCMTAeFw0yMzA4MTMxOTI5NDdaFw0yMzA4MTQyMzA3NDdaMDMxMTAvBgNV
BAMTKDQ2MUVBRDY3NUM2RTk4OUE3NkVBNzNGMTJFRDIxODU5Nzg0Qzk5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm78UvkjOxTRYuFjXWNh3RZC4E
eJf8M+seOodyanVjCQxx/j/58gkKJ9owYzkhz6acpYv+UCD0S8rhiscDiN0s0Vv7
arzD+Nox94UiiSXz37RbXeKYUdKZJhnDLA6p6erpWRcQuQWVIaSOfzNNBJiN15tt
BicR4Q4HeucdIFZ2wZQnTVl50ydt22lC0iwIu5BeN2xB702nYNo6fHT0fd3UgS4n
Ulh1OYwbBv1GmbkGck4mazS+wES3aSblQA3TyYJD59sGS8r6eoXjtzSbKv/JSN5S
itIQ1Q48xmIsNKaGaLAM0WZTNt7jYp9lPBEpwQqyDDR1MSbYc8UbGD+dnHeFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURh6tZ1xumJp26nPxLtIYWXhMmdIwHwYDVR0j
BBgwFoAUhRSBlOdBKHi8zeJWYPkFLPF9L7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHFaRDJCUkVINjFlOGVtTUdHNjVpODQ1NlhTeHVIVzRkZG9qam1KdllI
VkovMC84NTE0ODE5NEU3NDEyODc4QkNDREUyNTY2MEY5MDUyQ0YxN0QyRkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MTQ4MTk0RTc0MTI4NzhC
Q0NERTI1NjYwRjkwNTJDRjE3RDJGQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHFaRDJCUkVINjFlOGVtTUdHNjVpODQ1NlhTeHVIVzRkZG9qam1KdllIVkovMC84
NTE0ODE5NEU3NDEyODc4QkNDREUyNTY2MEY5MDUyQ0YxN0QyRkIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAai8HljUIS2gLBcBdt/K5iWFPQw9If1EXrqzbYPr/a/kEEOW61NIml7qDjOTM
PQYvOwTB5Dpi4y8cGkz5PXxXZvnV2brkfs5VxsIAicGWfSGR+4ijlhr1sAF4h6hl
zPpvUYPdulmho1XzmWmiTCvMHxPGTHuK1UeUy4gdIGJL2I2KSAyuiW3tOoFsiOBI
iONwkP3k6nmPA2LDcy99O0WpGG6rMueG8W5WYI7f2y3MLQwRW+YfuBNb9DmXmGNY
libOjiCZIEUabERWB0h34qJl9CTOQgl8QSeDe73zeEyYnuToSBfhyNaEDX09YqIX
Sj9Ka14NPdUG4+ijguxFmmgkAQ==
-----END CERTIFICATE-----