Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.mft
File:                     F4BDCE480451ABBB0286495824155B9D52C19A01.mft (raw, json)
Hash identifier:          yIUhahP2abSMh8UI13MihqW33eQljlQ7yvxL8PhnduI=
Subject key identifier:   9E:BA:27:5C:E7:EC:01:44:D3:D0:C0:3D:08:20:A5:DE:91:80:E0:16
Authority key identifier: F4:BD:CE:48:04:51:AB:BB:02:86:49:58:24:15:5B:9D:52:C1:9A:01
Certificate issuer:       /CN=F4BDCE480451ABBB0286495824155B9D52C19A01
Certificate serial:       783F546DC02C9C4EBB8AD9605D76B73291813791
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BDCE480451ABBB0286495824155B9D52C19A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.mft
Manifest number:          0D
Signing time:             Fri 23 Feb 2024 08:45:11 +0000
Manifest this update:     Fri 23 Feb 2024 08:40:11 +0000
Manifest next update:     Sat 24 Feb 2024 11:59:11 +0000
Files and hashes:         1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: Y6NhOKM62KUDuztm9cpfQSE2UpYzG053e5FsshCRIGw=)
                          2: F4BDCE480451ABBB0286495824155B9D52C19A01.crl (hash: FSFzmZXGQMXC1pIMcGBTT/IdE9gF+EkpvB4mNWoKKzQ=)
                          3: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: kDVrIn6ikUCS/6BLEfjipaDqfaKnlXyjJtenixgxFC4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3f:54:6d:c0:2c:9c:4e:bb:8a:d9:60:5d:76:b7:32:91:81:37:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BDCE480451ABBB0286495824155B9D52C19A01
        Validity
            Not Before: Feb 23 08:40:11 2024 GMT
            Not After : Feb 24 11:59:11 2024 GMT
        Subject: CN=9EBA275CE7EC0144D3D0C03D0820A5DE9180E016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:b1:6f:54:f1:ce:90:4b:7b:06:54:7e:d6:
                    c4:01:09:ad:1a:61:4e:3f:6e:6d:73:66:13:0a:cc:
                    d4:bd:d6:7b:b8:40:78:0e:24:8e:08:34:37:f7:ae:
                    82:e2:3e:c0:d6:ad:a7:34:e9:00:52:4d:aa:cd:f3:
                    1f:12:0a:83:57:1e:3f:0c:b8:35:e4:5c:c9:53:a6:
                    d9:de:dc:fd:26:75:a2:35:5f:97:55:c8:29:ab:bd:
                    46:40:e1:65:09:af:70:00:42:b2:3c:df:c4:c9:9c:
                    6e:e6:85:b8:58:27:8a:9f:21:f3:ad:52:a7:62:5c:
                    cd:5d:78:cf:dc:9d:01:e6:13:16:4b:20:4c:b7:75:
                    9d:53:ce:d7:2a:1d:1f:43:d5:f9:5e:66:89:79:de:
                    9b:8f:a2:a0:43:3c:31:0a:f3:81:64:58:fd:12:6f:
                    65:d2:7c:c7:45:c9:34:b7:d6:ba:15:74:98:1c:3e:
                    62:17:8d:b5:bf:62:6d:04:48:56:4b:c8:e2:26:11:
                    a8:ef:7e:2e:d6:d4:e2:87:ee:46:66:93:cc:35:a8:
                    42:53:b5:41:12:8c:4f:0e:7f:08:17:07:e1:c0:57:
                    49:d7:c2:8a:d7:a2:1e:6f:07:c5:8c:9b:a9:85:af:
                    18:c4:53:c4:25:18:c3:2c:e9:fa:52:28:f9:d1:41:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:27:5C:E7:EC:01:44:D3:D0:C0:3D:08:20:A5:DE:91:80:E0:16
            X509v3 Authority Key Identifier:
                keyid:F4:BD:CE:48:04:51:AB:BB:02:86:49:58:24:15:5B:9D:52:C1:9A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BDCE480451ABBB0286495824155B9D52C19A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/F4BDCE480451ABBB0286495824155B9D52C19A01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:26:74:7f:9b:2c:eb:53:0e:87:94:15:0f:56:85:d5:5f:a9:
         8e:fc:a3:fc:26:65:ef:1d:31:25:79:c8:e6:41:a8:2f:e1:7c:
         82:ca:0f:52:a9:41:7f:c6:73:6b:ca:82:12:fb:e4:1f:66:86:
         f9:57:ff:73:89:09:9a:79:76:71:bd:4e:2b:a7:f2:5d:de:ae:
         17:3c:e2:37:10:69:2e:4e:02:71:c5:09:80:07:51:c9:60:00:
         40:c6:73:bf:68:42:43:5d:c4:9f:a5:bf:0a:7f:eb:6c:fc:cc:
         13:b1:3c:48:35:16:2f:41:a9:a2:68:5c:56:e9:f9:f9:e7:85:
         ad:f8:25:d9:01:24:96:8b:43:a7:15:0f:8d:06:c7:54:15:0a:
         2c:e1:06:b6:a3:5a:12:6b:7f:67:35:b9:7f:ee:30:7b:9a:8a:
         fe:35:0d:b9:89:03:8f:eb:cb:d8:d4:83:ee:8a:51:3e:f4:e7:
         a5:7a:e3:f9:73:97:9d:ae:b4:70:23:04:72:b8:e1:4b:a0:e9:
         82:84:cd:d1:78:37:73:5f:1b:96:90:2c:a2:71:ca:1b:1e:2b:
         45:b5:2a:ec:7c:05:33:c4:df:b0:15:58:9c:4b:08:2a:cc:dd:
         05:46:cd:24:1c:d5:79:18:1c:1a:ce:92:23:3a:87:0f:88:00:
         dd:e5:72:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeD9UbcAsnE67itlgXXa3MpGBN5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRCRENFNDgwNDUxQUJCQjAyODY0OTU4MjQxNTVCOUQ1
MkMxOUEwMTAeFw0yNDAyMjMwODQwMTFaFw0yNDAyMjQxMTU5MTFaMDMxMTAvBgNV
BAMTKDlFQkEyNzVDRTdFQzAxNDREM0QwQzAzRDA4MjBBNURFOTE4MEUwMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2v7FvVPHOkEt7BlR+1sQBCa0a
YU4/bm1zZhMKzNS91nu4QHgOJI4INDf3roLiPsDWrac06QBSTarN8x8SCoNXHj8M
uDXkXMlTptne3P0mdaI1X5dVyCmrvUZA4WUJr3AAQrI838TJnG7mhbhYJ4qfIfOt
UqdiXM1deM/cnQHmExZLIEy3dZ1TztcqHR9D1fleZol53puPoqBDPDEK84FkWP0S
b2XSfMdFyTS31roVdJgcPmIXjbW/Ym0ESFZLyOImEajvfi7W1OKH7kZmk8w1qEJT
tUESjE8OfwgXB+HAV0nXworXoh5vB8WMm6mFrxjEU8QlGMMs6fpSKPnRQVr9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnronXOfsAUTT0MA9CCCl3pGA4BYwHwYDVR0j
BBgwFoAU9L3OSARRq7sChklYJBVbnVLBmgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK
WFIvMC9GNEJEQ0U0ODA0NTFBQkJCMDI4NjQ5NTgyNDE1NUI5RDUyQzE5QTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0QkRDRTQ4MDQ1MUFCQkIw
Mjg2NDk1ODI0MTU1QjlENTJDMTlBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMC9G
NEJEQ0U0ODA0NTFBQkJCMDI4NjQ5NTgyNDE1NUI5RDUyQzE5QTAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABiZ0f5ss61MOh5QVD1aF1V+pjvyj/CZl7x0xJXnI5kGoL+F8gsoPUqlBf8Zz
a8qCEvvkH2aG+Vf/c4kJmnl2cb1OK6fyXd6uFzziNxBpLk4CccUJgAdRyWAAQMZz
v2hCQ13En6W/Cn/rbPzME7E8SDUWL0GpomhcVun5+eeFrfgl2QEklotDpxUPjQbH
VBUKLOEGtqNaEmt/ZzW5f+4we5qK/jUNuYkDj+vL2NSD7opRPvTnpXrj+XOXna60
cCMEcrjhS6DpgoTN0Xg3c18blpAsonHKGx4rRbUq7HwFM8TfsBVYnEsIKszdBUbN
JBzVeRgcGs6SIzqHD4gA3eVy5Q==
-----END CERTIFICATE-----