Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.mft
File:                     206195A3F31278D368CE482292CC9971A22AC833.mft (raw, json)
Hash identifier:          gu7BG60uqppfzpgLNHLUxCZpccZ0D/+V7irKYCYXDng=
Subject key identifier:   73:ED:B7:BE:7B:E2:66:ED:3D:BF:1C:3D:7C:9B:77:E1:3D:BF:F6:BB
Authority key identifier: 20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33
Certificate issuer:       /CN=206195A3F31278D368CE482292CC9971A22AC833
Certificate serial:       117B08A1AE4725A3562950F5481E17B2BA7BF547
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206195A3F31278D368CE482292CC9971A22AC833.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.mft
Manifest number:          19
Signing time:             Sat 24 Feb 2024 03:48:39 +0000
Manifest this update:     Sat 24 Feb 2024 03:43:39 +0000
Manifest next update:     Sun 25 Feb 2024 07:02:39 +0000
Files and hashes:         1: 34352e3232382e3131322e302f32322d3234203d3e20323637303630.roa (hash: x3eYUYLiqVjR8Ixe2+CbabKzjmELZcaVUo0p711bDkE=)
                          2: 323830343a343738383a3a2f33322d3336203d3e20323637303630.roa (hash: El+sNWa9Fyb9Ph1KGph0VvE7GAxIXcrXE0BgekhPg0s=)
                          3: 206195A3F31278D368CE482292CC9971A22AC833.crl (hash: StU53+dDZoGJsTAbMHA0N0yIN3HZJl1zf5apWCOllpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7b:08:a1:ae:47:25:a3:56:29:50:f5:48:1e:17:b2:ba:7b:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206195A3F31278D368CE482292CC9971A22AC833
        Validity
            Not Before: Feb 24 03:43:39 2024 GMT
            Not After : Feb 25 07:02:39 2024 GMT
        Subject: CN=73EDB7BE7BE266ED3DBF1C3D7C9B77E13DBFF6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:18:6b:2f:3f:89:4a:1b:53:d4:36:c3:24:
                    b1:58:75:01:48:85:93:20:a8:f9:91:b0:a6:65:6b:
                    9d:9e:97:8a:bc:25:46:2b:cd:af:ec:1d:4f:81:24:
                    5c:22:84:d1:45:6c:93:48:8b:19:3c:77:08:c8:38:
                    10:81:6b:57:b3:ec:b5:63:05:bf:c9:22:5c:3e:12:
                    7c:93:b2:7e:90:76:0c:f6:2d:65:53:f5:f6:4e:e4:
                    2e:1f:d1:39:1a:d5:72:78:61:5f:c8:6e:9d:ae:3e:
                    92:d8:ba:63:59:6b:74:ad:40:95:4e:8c:97:5d:4d:
                    f0:00:53:53:c3:1e:6b:1d:dc:74:66:3c:38:25:45:
                    da:c5:6c:71:a2:46:34:92:ea:24:de:6d:26:c7:ee:
                    62:23:c5:c4:ad:cd:1f:9a:ad:7c:fa:37:e6:9e:6f:
                    e1:23:9b:7d:df:b0:be:00:f1:05:ce:b3:1b:78:47:
                    c3:58:a1:10:d4:d8:ff:08:da:ce:cf:6c:4a:6c:48:
                    2b:50:35:45:a3:f1:35:d8:c1:61:c6:a2:0f:2c:6b:
                    ce:17:90:dc:dd:c2:8e:08:2f:3b:c5:83:8f:b1:00:
                    ea:87:de:f3:9e:47:70:2b:51:b8:c6:f0:c3:fe:6b:
                    82:80:5c:70:35:18:7a:23:b2:e0:e5:6f:b6:8a:fb:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:B7:BE:7B:E2:66:ED:3D:BF:1C:3D:7C:9B:77:E1:3D:BF:F6:BB
            X509v3 Authority Key Identifier:
                keyid:20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206195A3F31278D368CE482292CC9971A22AC833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:4a:2f:45:22:6c:8d:cd:64:05:68:ae:e3:b7:40:60:a2:
         ee:dc:43:2b:8d:2b:81:d0:73:1f:db:75:71:23:0b:8e:b7:eb:
         d1:f6:36:dd:6f:aa:56:e3:a3:e2:7d:e3:f8:e3:fb:56:26:45:
         c4:4c:d3:08:c1:5d:ea:9b:91:21:6e:d2:01:8e:a1:af:ad:34:
         8e:34:83:1f:4e:16:d0:b4:d7:1f:f9:12:67:ec:ea:5e:a7:0b:
         c1:77:bd:fd:aa:d3:c1:99:4e:e2:1a:da:45:6a:7e:f9:95:f6:
         9d:4a:7c:de:de:f1:cd:63:dc:27:a6:1e:f8:14:c3:61:fa:ba:
         ff:d0:cc:1d:a5:5c:20:ec:04:f1:c8:c6:fd:66:50:39:68:9b:
         c0:a9:b9:c7:8a:6a:18:72:5e:ef:0d:a9:63:4f:02:7c:71:fb:
         9c:6c:a0:d8:56:51:5d:dd:d0:e4:42:eb:4b:68:f4:06:21:dd:
         00:38:2c:24:00:bd:00:07:12:fd:e8:d0:70:ed:92:16:30:46:
         2b:2b:fd:0c:b3:34:2e:4f:08:8b:fe:10:bf:e5:73:dc:51:a6:
         c9:04:a0:2c:0d:cf:28:f6:b2:71:1b:03:fa:5c:17:09:b8:f8:
         91:1f:fd:fd:c3:ef:05:7c:e8:9b:b6:02:26:9c:3e:af:8e:bc:
         5f:01:ac:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEXsIoa5HJaNWKVD1SB4Xsrp79UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2MTk1QTNGMzEyNzhEMzY4Q0U0ODIyOTJDQzk5NzFB
MjJBQzgzMzAeFw0yNDAyMjQwMzQzMzlaFw0yNDAyMjUwNzAyMzlaMDMxMTAvBgNV
BAMTKDczRURCN0JFN0JFMjY2RUQzREJGMUMzRDdDOUI3N0UxM0RCRkY2QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQhhrLz+JShtT1DbDJLFYdQFI
hZMgqPmRsKZla52el4q8JUYrza/sHU+BJFwihNFFbJNIixk8dwjIOBCBa1ez7LVj
Bb/JIlw+EnyTsn6Qdgz2LWVT9fZO5C4f0Tka1XJ4YV/Ibp2uPpLYumNZa3StQJVO
jJddTfAAU1PDHmsd3HRmPDglRdrFbHGiRjSS6iTebSbH7mIjxcStzR+arXz6N+ae
b+Ejm33fsL4A8QXOsxt4R8NYoRDU2P8I2s7PbEpsSCtQNUWj8TXYwWHGog8sa84X
kNzdwo4ILzvFg4+xAOqH3vOeR3ArUbjG8MP+a4KAXHA1GHojsuDlb7aK+3YPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc+23vnviZu09vxw9fJt34T2/9rswHwYDVR0j
BBgwFoAUIGGVo/MSeNNozkgiksyZcaIqyDMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHJLSGdacmZWOGpKRXIxMVh3TlhyTW1MdHc3R2hHTFVOMUQ0dVVGaGNI
ak0vMC8yMDYxOTVBM0YzMTI3OEQzNjhDRTQ4MjI5MkNDOTk3MUEyMkFDODMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNjE5NUEzRjMxMjc4RDM2
OENFNDgyMjkyQ0M5OTcxQTIyQUM4MzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHJLSGdacmZWOGpKRXIxMVh3TlhyTW1MdHc3R2hHTFVOMUQ0dVVGaGNIak0vMC8y
MDYxOTVBM0YzMTI3OEQzNjhDRTQ4MjI5MkNDOTk3MUEyMkFDODMzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQOpKL0UibI3NZAVoruO3QGCi7txDK40rgdBzH9t1cSMLjrfr0fY23W+qVuOj
4n3j+OP7ViZFxEzTCMFd6puRIW7SAY6hr600jjSDH04W0LTXH/kSZ+zqXqcLwXe9
/arTwZlO4hraRWp++ZX2nUp83t7xzWPcJ6Ye+BTDYfq6/9DMHaVcIOwE8cjG/WZQ
OWibwKm5x4pqGHJe7w2pY08CfHH7nGyg2FZRXd3Q5ELrS2j0BiHdADgsJAC9AAcS
/ejQcO2SFjBGKyv9DLM0Lk8Ii/4Qv+Vz3FGmyQSgLA3PKPaycRsD+lwXCbj4kR/9
/cPvBXzom7YCJpw+r468XwGsEw==
-----END CERTIFICATE-----