Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/70FF6069A867E734F1989540EB4725CA692B5877.mft
File:                     70FF6069A867E734F1989540EB4725CA692B5877.mft (raw, json)
Hash identifier:          d5Dea/oWUW1T9WauuTW4IvXJLbeIGgtxjheklktRors=
Subject key identifier:   5A:D3:56:B2:90:19:A0:8F:8E:4E:A2:D5:C2:03:15:5E:CC:E0:66:AB
Authority key identifier: 70:FF:60:69:A8:67:E7:34:F1:98:95:40:EB:47:25:CA:69:2B:58:77
Certificate issuer:       /CN=70FF6069A867E734F1989540EB4725CA692B5877
Certificate serial:       7C891CC34586FCA8F60DD94813B2688B18C0DAD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FF6069A867E734F1989540EB4725CA692B5877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/70FF6069A867E734F1989540EB4725CA692B5877.mft
Manifest number:          2A
Signing time:             Sun 05 May 2024 09:09:29 +0000
Manifest this update:     Sun 05 May 2024 09:04:29 +0000
Manifest next update:     Mon 06 May 2024 12:18:29 +0000
Files and hashes:         1: 70FF6069A867E734F1989540EB4725CA692B5877.crl (hash: PIs9cklCf1s9GO5Nu//Nzf4KXmEqO6kgSmdbVHr9fD0=)
                          2: 34352e3232352e3131362e302f32322d3332203d3e20323636393334.roa (hash: lm5ctaxPudCCIl/ZlX+BbwtJKVRogxBIKVf++ObZvfk=)
                          3: 323830343a343538633a3a2f33322d313238203d3e20323636393334.roa (hash: /bo5gkPwrE2rjakdk1n6XQNT0FDtCt/wrz6sLFjwG04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:89:1c:c3:45:86:fc:a8:f6:0d:d9:48:13:b2:68:8b:18:c0:da:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FF6069A867E734F1989540EB4725CA692B5877
        Validity
            Not Before: May  5 09:04:29 2024 GMT
            Not After : May  6 12:18:29 2024 GMT
        Subject: CN=5AD356B29019A08F8E4EA2D5C203155ECCE066AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:b7:c3:cb:77:8e:3c:1c:0c:06:41:d1:e1:
                    fc:85:6b:99:85:33:d1:f2:ab:00:fd:17:04:9d:78:
                    d9:cd:0c:94:da:ef:ae:46:27:70:d3:5f:32:8a:a5:
                    bf:fa:a2:aa:b3:e0:b8:8c:fb:28:bc:61:a3:4c:95:
                    37:97:ab:a4:da:fb:d2:80:78:1e:7c:74:08:eb:01:
                    57:b1:18:31:f6:67:fd:f7:eb:c7:03:d4:2f:ee:10:
                    ae:45:c9:4e:31:74:e5:8a:47:fa:7b:68:df:70:6e:
                    ce:13:d9:1a:38:c4:b6:98:1f:aa:16:a9:ac:bd:aa:
                    19:62:11:04:7f:e6:2f:39:3b:33:a4:a0:4b:04:b1:
                    ec:1a:89:44:94:e3:44:3e:16:04:01:35:73:31:c8:
                    ef:b8:1f:ce:54:2f:cb:06:e3:35:10:3c:80:db:6b:
                    f4:3a:65:f3:86:6c:f5:5e:86:7a:28:d3:9d:53:76:
                    cb:e9:49:01:76:78:95:34:4b:69:99:aa:83:74:a7:
                    dc:58:8f:ea:51:18:5a:29:b6:c2:6f:db:1b:2d:23:
                    30:b8:08:6e:d9:bc:24:85:c9:55:51:6c:d7:2d:5a:
                    97:7b:db:49:84:52:3a:a1:ad:d8:77:82:3a:9b:07:
                    b6:39:26:cc:57:4a:83:98:6f:a5:d6:56:52:78:ee:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:56:B2:90:19:A0:8F:8E:4E:A2:D5:C2:03:15:5E:CC:E0:66:AB
            X509v3 Authority Key Identifier:
                keyid:70:FF:60:69:A8:67:E7:34:F1:98:95:40:EB:47:25:CA:69:2B:58:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/70FF6069A867E734F1989540EB4725CA692B5877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FF6069A867E734F1989540EB4725CA692B5877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/1/70FF6069A867E734F1989540EB4725CA692B5877.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:4b:01:28:9f:4d:75:36:e9:fc:9f:86:85:cb:c7:62:5c:
         95:e0:ef:14:e2:e3:0f:34:46:ed:ff:1b:9e:21:7e:ba:fb:80:
         46:16:6f:91:f5:43:8a:c5:9c:7f:c6:71:f3:7f:f6:3e:3e:73:
         7a:13:3d:f3:56:2b:85:95:62:10:3e:31:ac:e2:7e:30:6f:80:
         49:96:b5:24:86:f3:53:3c:bd:86:92:ac:33:91:40:d4:6d:7d:
         b3:44:d2:c3:77:a3:72:97:39:94:b6:38:4e:ed:5a:94:0e:92:
         63:eb:2c:b3:bb:e5:65:e8:f4:e6:53:1e:25:86:67:0e:3d:8a:
         cb:d7:f8:af:d6:9f:b6:d7:8d:c9:92:86:96:fa:b2:eb:a1:5d:
         00:3d:47:ad:8c:e9:e0:8a:57:9f:eb:d4:dc:30:4b:3a:af:6f:
         2e:4d:28:d5:47:cf:e4:92:df:5c:4f:21:90:76:aa:4a:20:0d:
         1f:02:46:90:3e:d8:9a:d9:57:e9:2b:e2:df:14:d1:0c:93:43:
         d0:c0:94:1f:00:e0:ed:bc:20:d0:15:77:60:2a:13:0e:8a:3c:
         27:67:46:5d:a7:96:a6:be:ec:65:de:be:16:64:ab:a1:56:63:
         66:a6:03:a1:b2:f6:36:ba:f4:d0:95:c9:ad:0d:65:ab:89:e3:
         f4:15:79:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfIkcw0WG/Kj2DdlIE7JoixjA2tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBGRjYwNjlBODY3RTczNEYxOTg5NTQwRUI0NzI1Q0E2
OTJCNTg3NzAeFw0yNDA1MDUwOTA0MjlaFw0yNDA1MDYxMjE4MjlaMDMxMTAvBgNV
BAMTKDVBRDM1NkIyOTAxOUEwOEY4RTRFQTJENUMyMDMxNTVFQ0NFMDY2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTbfDy3eOPBwMBkHR4fyFa5mF
M9HyqwD9FwSdeNnNDJTa765GJ3DTXzKKpb/6oqqz4LiM+yi8YaNMlTeXq6Ta+9KA
eB58dAjrAVexGDH2Z/3368cD1C/uEK5FyU4xdOWKR/p7aN9wbs4T2Ro4xLaYH6oW
qay9qhliEQR/5i85OzOkoEsEsewaiUSU40Q+FgQBNXMxyO+4H85UL8sG4zUQPIDb
a/Q6ZfOGbPVehnoo051TdsvpSQF2eJU0S2mZqoN0p9xYj+pRGFoptsJv2xstIzC4
CG7ZvCSFyVVRbNctWpd720mEUjqhrdh3gjqbB7Y5JsxXSoOYb6XWVlJ47pUVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWtNWspAZoI+OTqLVwgMVXszgZqswHwYDVR0j
BBgwFoAUcP9gaahn5zTxmJVA60clymkrWHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHZYbVNTZDMxMUxMZFkzWEtmUTVLbTlETm91UmR3MXpyd3k1MlViQnR0
UGgvMS83MEZGNjA2OUE4NjdFNzM0RjE5ODk1NDBFQjQ3MjVDQTY5MkI1ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRkY2MDY5QTg2N0U3MzRG
MTk4OTU0MEVCNDcyNUNBNjkyQjU4NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHZYbVNTZDMxMUxMZFkzWEtmUTVLbTlETm91UmR3MXpyd3k1MlViQnR0UGgvMS83
MEZGNjA2OUE4NjdFNzM0RjE5ODk1NDBFQjQ3MjVDQTY5MkI1ODc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjsdLASifTXU26fyfhoXLx2JcleDvFOLjDzRG7f8bniF+uvuARhZvkfVDisWc
f8Zx83/2Pj5zehM981YrhZViED4xrOJ+MG+ASZa1JIbzUzy9hpKsM5FA1G19s0TS
w3ejcpc5lLY4Tu1alA6SY+sss7vlZej05lMeJYZnDj2Ky9f4r9aftteNyZKGlvqy
66FdAD1HrYzp4IpXn+vU3DBLOq9vLk0o1UfP5JLfXE8hkHaqSiANHwJGkD7YmtlX
6Svi3xTRDJND0MCUHwDg7bwg0BV3YCoTDoo8J2dGXaeWpr7sZd6+FmSroVZjZqYD
obL2Nrr00JXJrQ1lq4nj9BV5+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org