Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.mft
File:                     9DBD5473A95D527EA6BE14F8BF303E3589305F38.mft (raw, json)
Hash identifier:          KldLFMUj/RdPg0uclRFOys5WhntY/68zQF3PoBPSkV0=
Subject key identifier:   15:61:9C:2D:9B:75:E6:AB:39:60:47:82:8D:8E:0B:1D:15:6C:0F:83
Authority key identifier: 9D:BD:54:73:A9:5D:52:7E:A6:BE:14:F8:BF:30:3E:35:89:30:5F:38
Certificate issuer:       /CN=9DBD5473A95D527EA6BE14F8BF303E3589305F38
Certificate serial:       59F782D869C51A674151F3F06DB850D3D3299728
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.mft
Manifest number:          CA
Signing time:             Thu 15 Dec 2022 21:21:09 +0000
Manifest this update:     Thu 15 Dec 2022 21:16:08 +0000
Manifest next update:     Sat 17 Dec 2022 00:49:08 +0000
Files and hashes:         1: 3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa (hash: r230ENyIxMIGI+lF+hEpUZqtAhWi1lx122f0E92i2VA=)
                          2: 323830343a313861383a3a2f33322d3438203d3e20323632353032.roa (hash: z+JrwHwpBqjW2wDMV8lxbP0vZMIOeEHVZ1PZUDdgv54=)
                          3: 3139302e372e3137362e302f32302d3234203d3e20323632353032.roa (hash: 3/zv8F7Do+HaJtY+Mw9+ZbRerIfsZIF108eYXqL+nOE=)
                          4: 9DBD5473A95D527EA6BE14F8BF303E3589305F38.crl (hash: If7moLbbTMSkuDCHk1GAFhxjsuez2h/Zl7kdVy+BiXE=)
                          5: 3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa (hash: CxqiolxORpfpxdPK27JVKO9bnDKJj9JXn7S1wgV1GQk=)
                          6: 3137372e36362e3138342e302f32322d3234203d3e20323632353032.roa (hash: PYr7XEBtY2Z/7YfrOeygspxppMY8+d02wf+KRKDubDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:82:d8:69:c5:1a:67:41:51:f3:f0:6d:b8:50:d3:d3:29:97:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBD5473A95D527EA6BE14F8BF303E3589305F38
        Validity
            Not Before: Dec 15 21:16:08 2022 GMT
            Not After : Dec 17 00:49:08 2022 GMT
        Subject: CN=15619C2D9B75E6AB396047828D8E0B1D156C0F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:da:5a:6f:bc:8f:c8:0e:f0:f8:1c:47:42:
                    31:82:6a:ec:06:eb:d6:04:a3:86:ab:5f:dd:d8:57:
                    38:ea:c1:ef:5d:bb:dd:0b:88:99:29:53:ae:cd:fc:
                    9b:30:78:66:3e:47:87:b0:48:bc:e5:05:6b:88:d7:
                    a1:e2:34:6d:49:ec:11:8b:b9:47:32:a3:f0:04:c4:
                    50:51:d8:2a:c7:43:93:77:22:da:b4:9d:49:1a:96:
                    bc:c2:1f:a7:22:00:99:98:e8:49:6b:7d:45:1c:97:
                    a8:46:dd:1f:11:05:be:d5:7c:d3:3e:9d:87:9b:5a:
                    73:7f:05:bc:69:71:f3:5f:07:c8:33:e6:31:bb:36:
                    89:1a:c5:53:94:78:2b:e0:07:8b:cb:0a:39:27:0c:
                    43:12:96:cd:0c:2e:7d:1e:d6:57:49:59:c0:df:a9:
                    59:32:21:93:bf:fa:6c:de:c5:3a:a9:aa:74:24:39:
                    81:e6:ef:0c:46:c2:ca:ce:c9:25:e7:31:bb:d9:db:
                    c6:cb:8c:42:2f:ce:0b:83:b9:9c:93:3d:f6:e3:41:
                    0b:bf:76:c9:9e:ed:3c:63:e8:8c:54:7d:a5:c0:07:
                    2a:22:82:3c:58:f1:cb:0c:6a:89:f2:c2:20:a4:28:
                    8e:9e:cf:90:13:1a:fb:8e:40:b8:ae:ed:ad:7a:d0:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:9C:2D:9B:75:E6:AB:39:60:47:82:8D:8E:0B:1D:15:6C:0F:83
            X509v3 Authority Key Identifier:
                keyid:9D:BD:54:73:A9:5D:52:7E:A6:BE:14:F8:BF:30:3E:35:89:30:5F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/9DBD5473A95D527EA6BE14F8BF303E3589305F38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:0d:b4:a7:be:43:4b:e9:f9:19:a7:68:d2:b0:71:90:e4:
         e2:b9:b3:fb:81:80:18:3e:47:c5:1a:84:1c:36:9f:d7:98:b5:
         38:26:8c:ea:07:1f:e2:5d:1c:9c:e6:5f:83:a9:68:06:40:0a:
         09:4e:17:02:b6:65:7c:9f:3f:c3:5f:f8:85:e2:b7:90:32:06:
         1a:e4:b3:a0:a7:fe:a3:56:cf:14:31:d0:8c:46:bf:e1:b7:9a:
         f2:63:fb:24:64:41:e5:8b:e1:cb:c4:3e:27:88:23:59:be:9e:
         1f:40:1b:98:b2:bd:74:96:fd:8d:e2:05:50:ee:46:f4:37:69:
         b3:84:ae:69:61:54:19:1c:f9:e3:9f:48:b3:90:48:89:da:e5:
         64:62:b8:3e:ad:20:81:33:30:68:bc:0e:a0:76:e0:21:a3:aa:
         91:7a:25:04:6d:c1:01:c9:29:5c:11:dd:4d:11:1b:7e:8c:51:
         07:6e:14:8b:46:b3:a5:c7:83:60:9f:e1:c5:b0:83:d0:35:34:
         fa:24:8d:44:4f:2c:ea:53:80:2d:6e:a7:ee:80:41:c8:a0:43:
         d5:55:c4:8d:19:0f:a7:97:69:b7:1c:01:1d:58:89:61:0d:98:
         8c:b0:23:76:8b:44:69:cf:14:4e:8d:47:90:e8:d3:78:c0:61:
         38:c9:26:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWfeC2GnFGmdBUfPwbbhQ09MplygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRDU0NzNBOTVENTI3RUE2QkUxNEY4QkYzMDNFMzU4
OTMwNUYzODAeFw0yMjEyMTUyMTE2MDhaFw0yMjEyMTcwMDQ5MDhaMDMxMTAvBgNV
BAMTKDE1NjE5QzJEOUI3NUU2QUIzOTYwNDc4MjhEOEUwQjFEMTU2QzBGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ltpab7yPyA7w+BxHQjGCauwG
69YEo4arX93YVzjqwe9du90LiJkpU67N/JsweGY+R4ewSLzlBWuI16HiNG1J7BGL
uUcyo/AExFBR2CrHQ5N3Itq0nUkalrzCH6ciAJmY6ElrfUUcl6hG3R8RBb7VfNM+
nYebWnN/BbxpcfNfB8gz5jG7NokaxVOUeCvgB4vLCjknDEMSls0MLn0e1ldJWcDf
qVkyIZO/+mzexTqpqnQkOYHm7wxGwsrOySXnMbvZ28bLjEIvzguDuZyTPfbjQQu/
dsme7Txj6IxUfaXAByoigjxY8csMaonywiCkKI6ez5ATGvuOQLiu7a160Dj/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFWGcLZt15qs5YEeCjY4LHRVsD4MwHwYDVR0j
BBgwFoAUnb1Uc6ldUn6mvhT4vzA+NYkwXzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhiRUMxd1dvZ2tGb1RKcW10SmhjRGczOEI0QmlzREQ3WnR4cTdzeUU5
OTgvMC85REJENTQ3M0E5NUQ1MjdFQTZCRTE0RjhCRjMwM0UzNTg5MzA1RjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEQkQ1NDczQTk1RDUyN0VB
NkJFMTRGOEJGMzAzRTM1ODkzMDVGMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjhiRUMxd1dvZ2tGb1RKcW10SmhjRGczOEI0QmlzREQ3WnR4cTdzeUU5OTgvMC85
REJENTQ3M0E5NUQ1MjdFQTZCRTE0RjhCRjMwM0UzNTg5MzA1RjM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn68NtKe+Q0vp+RmnaNKwcZDk4rmz+4GAGD5HxRqEHDaf15i1OCaM6gcf4l0c
nOZfg6loBkAKCU4XArZlfJ8/w1/4heK3kDIGGuSzoKf+o1bPFDHQjEa/4bea8mP7
JGRB5Yvhy8Q+J4gjWb6eH0AbmLK9dJb9jeIFUO5G9Ddps4SuaWFUGRz5459Is5BI
idrlZGK4Pq0ggTMwaLwOoHbgIaOqkXolBG3BAckpXBHdTREbfoxRB24Ui0azpceD
YJ/hxbCD0DU0+iSNRE8s6lOALW6n7oBByKBD1VXEjRkPp5dptxwBHViJYQ2YjLAj
dotEac8UTo1HkOjTeMBhOMkmaw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:57 2025 by rpki-client