Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft
File:                     CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft (raw, json)
Hash identifier:          722zEcMTEa9gQkMJFWDPU6osCo+Cgjqkv2ae/lPvc9U=
Subject key identifier:   2D:73:58:AB:C8:B1:5F:3B:39:4C:EB:61:64:BE:A6:88:02:B9:62:15
Authority key identifier: CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5
Certificate issuer:       /CN=CE7A3178DB016E104AF14BE894CD002DB3ED52A5
Certificate serial:       6CC39C568EC8E82575D77AAA163680F36304472E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft
Manifest number:          1C
Signing time:             Wed 20 Sep 2023 03:59:05 +0000
Manifest this update:     Wed 20 Sep 2023 03:54:05 +0000
Manifest next update:     Thu 21 Sep 2023 06:13:05 +0000
Files and hashes:         1: CE7A3178DB016E104AF14BE894CD002DB3ED52A5.crl (hash: FMcRPiG7igA/ycHM8JLDj/lhkc+ZpRSUD4eb3Vxypd8=)
                          2: 3137392e36332e3135362e302f32322d3232203d3e20323731363032.roa (hash: sJvlbbmg7X0BTtZWUXd0viXTfiRn1AsxoQ80KXcD+II=)
                          3: 323830343a376531383a3a2f33322d3332203d3e20323731363032.roa (hash: E8g5Bw/Y2NWOubDV5qC9ZdRBgOJI9Oi58ocbJNaLgmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:9c:56:8e:c8:e8:25:75:d7:7a:aa:16:36:80:f3:63:04:47:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7A3178DB016E104AF14BE894CD002DB3ED52A5
        Validity
            Not Before: Sep 20 03:54:05 2023 GMT
            Not After : Sep 21 06:13:05 2023 GMT
        Subject: CN=2D7358ABC8B15F3B394CEB6164BEA68802B96215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:af:97:e0:9b:ba:87:b4:af:73:a7:1c:9b:
                    c1:73:06:38:10:0d:9e:99:51:17:a6:15:76:81:cb:
                    ad:db:68:35:62:0f:a2:1b:d6:59:34:8c:d9:92:b5:
                    9c:09:bd:52:db:76:a3:32:52:c9:60:c4:d1:18:67:
                    4b:24:7c:7d:30:27:8a:31:93:2f:bc:c0:33:12:29:
                    6d:37:c5:48:ee:e3:86:73:1e:de:11:95:5f:ec:0a:
                    64:64:7e:d7:ff:eb:e5:72:30:5e:29:54:bf:3d:0c:
                    a6:62:fe:77:4f:3d:71:a6:a1:21:8d:ea:a5:77:fe:
                    17:38:4e:69:c2:2f:44:5c:03:83:e7:09:7d:d3:9a:
                    0e:3f:b1:3f:b7:7c:f6:a3:c0:01:e4:e7:76:4a:2e:
                    3d:6c:fb:05:75:84:70:4a:78:5c:e1:bd:42:3e:38:
                    51:ca:9d:ac:c3:0e:cd:b1:2e:1f:96:86:45:08:79:
                    3d:d1:64:4f:04:b7:cc:0e:60:9c:a3:5d:21:01:d6:
                    d4:e1:5c:5c:93:71:b8:fe:ed:a9:19:23:c5:4b:e7:
                    59:cd:81:1e:27:30:60:80:bb:58:f2:e5:a0:c7:8c:
                    81:14:1b:7f:b8:c3:ab:09:ad:00:4e:76:31:5f:66:
                    8f:e9:b9:59:6d:05:30:94:9b:01:54:f6:72:cc:d7:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:73:58:AB:C8:B1:5F:3B:39:4C:EB:61:64:BE:A6:88:02:B9:62:15
            X509v3 Authority Key Identifier:
                keyid:CE:7A:31:78:DB:01:6E:10:4A:F1:4B:E8:94:CD:00:2D:B3:ED:52:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/CE7A3178DB016E104AF14BE894CD002DB3ED52A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:bd:05:4d:b4:2b:87:2f:f7:34:da:24:c5:93:0b:17:3a:
         8a:a4:37:aa:9c:47:b1:8d:9c:ee:5d:21:83:09:83:c4:ab:8c:
         59:5b:43:cd:51:95:fe:82:49:2c:1f:b9:01:51:86:6d:09:21:
         2a:77:9e:90:ff:17:a9:34:17:6a:d4:6a:de:c3:c2:d5:93:23:
         71:49:24:d7:53:e4:ce:56:b2:1e:e2:0c:a5:00:88:bf:7c:38:
         fd:0d:f6:73:3c:3e:b3:69:73:07:26:06:c1:c8:e7:be:1c:6b:
         55:d0:f2:55:f2:13:aa:bb:f3:db:6c:7f:60:a8:ea:70:ff:27:
         6e:9f:ae:51:6a:d8:0f:0d:80:9f:8d:96:74:ae:34:bd:a1:df:
         f5:47:1c:a6:e2:74:ac:62:51:3a:21:89:c2:6d:a0:f3:f8:a8:
         ae:32:8d:74:61:fd:e5:54:ff:32:47:d3:94:ae:3a:67:5e:02:
         11:c3:1e:1f:98:db:1a:1b:c9:ad:e2:61:06:fd:29:9d:5d:33:
         99:a0:62:87:c8:ac:b0:61:e6:e7:00:71:ec:bb:60:23:78:91:
         20:85:fb:f9:96:c4:f0:2e:15:40:24:ed:ac:19:ba:83:1e:a9:
         4d:a0:4f:ad:d0:d2:a6:ff:00:73:53:ed:f9:e2:12:bd:15:6b:
         74:ed:6d:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbMOcVo7I6CV113qqFjaA82MERy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3QTMxNzhEQjAxNkUxMDRBRjE0QkU4OTRDRDAwMkRC
M0VENTJBNTAeFw0yMzA5MjAwMzU0MDVaFw0yMzA5MjEwNjEzMDVaMDMxMTAvBgNV
BAMTKDJENzM1OEFCQzhCMTVGM0IzOTRDRUI2MTY0QkVBNjg4MDJCOTYyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sa+X4Ju6h7Svc6ccm8FzBjgQ
DZ6ZURemFXaBy63baDViD6Ib1lk0jNmStZwJvVLbdqMyUslgxNEYZ0skfH0wJ4ox
ky+8wDMSKW03xUju44ZzHt4RlV/sCmRkftf/6+VyMF4pVL89DKZi/ndPPXGmoSGN
6qV3/hc4TmnCL0RcA4PnCX3Tmg4/sT+3fPajwAHk53ZKLj1s+wV1hHBKeFzhvUI+
OFHKnazDDs2xLh+WhkUIeT3RZE8Et8wOYJyjXSEB1tThXFyTcbj+7akZI8VL51nN
gR4nMGCAu1jy5aDHjIEUG3+4w6sJrQBOdjFfZo/puVltBTCUmwFU9nLM16vpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULXNYq8ixXzs5TOthZL6miAK5YhUwHwYDVR0j
BBgwFoAUznoxeNsBbhBK8UvolM0ALbPtUqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW80WDZIRWloN0p4dm03ajNwbUFuaHQ4TnFCTEFkVzZQZkxCMnNoNE5T
TDUvMC9DRTdBMzE3OERCMDE2RTEwNEFGMTRCRTg5NENEMDAyREIzRUQ1MkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFN0EzMTc4REIwMTZFMTA0
QUYxNEJFODk0Q0QwMDJEQjNFRDUyQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NW80WDZIRWloN0p4dm03ajNwbUFuaHQ4TnFCTEFkVzZQZkxCMnNoNE5TTDUvMC9D
RTdBMzE3OERCMDE2RTEwNEFGMTRCRTg5NENEMDAyREIzRUQ1MkE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfNC9BU20K4cv9zTaJMWTCxc6iqQ3qpxHsY2c7l0hgwmDxKuMWVtDzVGV/oJJ
LB+5AVGGbQkhKneekP8XqTQXatRq3sPC1ZMjcUkk11PkzlayHuIMpQCIv3w4/Q32
czw+s2lzByYGwcjnvhxrVdDyVfITqrvz22x/YKjqcP8nbp+uUWrYDw2An42WdK40
vaHf9UccpuJ0rGJROiGJwm2g8/iorjKNdGH95VT/MkfTlK46Z14CEcMeH5jbGhvJ
reJhBv0pnV0zmaBih8issGHm5wBx7LtgI3iRIIX7+ZbE8C4VQCTtrBm6gx6pTaBP
rdDSpv8Ac1Pt+eISvRVrdO1t1g==
-----END CERTIFICATE-----