Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.mft
File:                     60573234304A14834036D2BAAADE23EE1832BF5E.mft (raw, json)
Hash identifier:          +OvpJDILgQa22Mc3XCqCIgtCoZhJwTDcD83svCp/G/0=
Subject key identifier:   88:59:0B:63:DF:F9:1F:4F:3E:7F:46:CA:7C:18:02:DB:0D:E1:52:A8
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       6DC400966CFBFA1DE778FBCFCE716909230CBE0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.mft
Manifest number:          19
Signing time:             Mon 15 Apr 2024 00:02:39 +0000
Manifest this update:     Sun 14 Apr 2024 23:57:39 +0000
Manifest next update:     Tue 16 Apr 2024 01:27:39 +0000
Files and hashes:         1: 34352e3136372e36302e302f32322d3232203d3e20323638303533.roa (hash: j7DhAiWBFIbj/WyfNuDnQg8x1puRjkcm5EyVsAggq4I=)
                          2: 34352e3136372e36302e302f32342d3234203d3e20323638303533.roa (hash: ANX0t088IyX7+iY9IjxcDzLv3MS7wsSr42CncdRINj8=)
                          3: 34352e3136372e36322e302f32332d3233203d3e20323638303533.roa (hash: b2Xyh2GLBmYzx9elg1UgtGPJCt2Ab9vVXr6r4a2p9tQ=)
                          4: 34352e3136372e36332e302f32342d3234203d3e20323638303533.roa (hash: z+s60H3cS3aDwdafSGdj8r0O4KjavModFpllvWIAoK0=)
                          5: 34352e3136372e36312e302f32342d3234203d3e20323638303533.roa (hash: 8y14wvuBd/j3sHTJT7GxaIIuP7z90bb+7mSmP9xY+Bk=)
                          6: 34352e3136372e36322e302f32342d3234203d3e20323638303533.roa (hash: NLPh70W3aWx1UHoDprw6jjveFjUBtFNs2IQfOJFZ704=)
                          7: 34352e3136372e36302e302f32332d3233203d3e20323638303533.roa (hash: i45NVsOk++23UhE3eornL8k4xwBtkRwiAxvqw/H/Ruw=)
                          8: 60573234304A14834036D2BAAADE23EE1832BF5E.crl (hash: 8BdiQxYgup9bqBa1am+BO6JqwhJiewxcX9oTr7G/Ah4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:00:96:6c:fb:fa:1d:e7:78:fb:cf:ce:71:69:09:23:0c:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Apr 14 23:57:39 2024 GMT
            Not After : Apr 16 01:27:39 2024 GMT
        Subject: CN=88590B63DFF91F4F3E7F46CA7C1802DB0DE152A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:85:06:6d:03:12:08:de:1a:87:53:6a:34:
                    9b:80:25:97:e4:6f:6e:28:7a:1e:d9:70:91:1d:0d:
                    51:f5:90:a7:ca:06:f5:a1:4d:e5:24:5c:c8:35:7d:
                    08:a0:38:b2:b4:7d:bb:5c:1c:08:ba:b9:a0:6a:71:
                    ab:48:e3:74:71:04:9f:34:73:be:61:10:72:1c:6b:
                    0e:fb:53:fa:f6:8c:5c:90:67:65:73:6e:90:aa:f0:
                    a8:33:1f:52:9e:54:56:b4:34:42:12:48:2b:34:78:
                    40:b5:42:88:f1:fb:48:43:ec:61:c0:ad:d4:d5:ed:
                    9a:88:97:25:8c:fd:13:8a:b3:2b:d9:b2:60:aa:9b:
                    28:6c:96:41:45:03:72:1c:49:20:8c:cb:0d:58:d7:
                    0a:81:ad:ac:c1:f7:72:75:6b:f0:8b:30:bb:b0:a4:
                    90:57:e0:43:0a:91:8e:17:8d:c3:80:37:30:f0:ba:
                    e6:73:37:91:9a:f6:6a:a3:7d:b3:27:d2:3c:22:9b:
                    7a:fa:ed:68:f3:8d:9c:ec:50:58:1f:eb:36:b1:c6:
                    36:2a:bd:f3:c4:1d:0b:9b:ce:3b:8b:f6:d5:ac:53:
                    6e:10:08:55:7d:30:f1:bc:99:ba:98:85:f0:de:77:
                    7f:9a:a7:e6:bf:3d:f6:f9:b0:af:cc:d6:29:7f:11:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:59:0B:63:DF:F9:1F:4F:3E:7F:46:CA:7C:18:02:DB:0D:E1:52:A8
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:e2:eb:f4:aa:23:b9:04:fb:9f:15:63:f5:de:74:11:5d:
         7c:c5:53:cc:67:6b:69:16:89:b9:6d:67:2d:d2:59:3f:e3:04:
         27:4f:d4:c2:b2:12:ed:ca:1a:66:36:cd:e0:ca:97:ee:bb:c3:
         f5:8e:c4:6a:77:91:b5:f4:4d:77:f7:be:2b:51:01:62:79:b5:
         86:e2:af:0e:cf:d1:46:87:77:15:cc:8f:9d:e6:7c:fa:00:db:
         f7:5f:bc:7a:07:0f:ea:2c:56:7f:8a:b0:8d:28:b6:cd:58:17:
         58:97:20:d4:99:88:b8:68:9d:4d:c3:20:34:a4:37:9f:43:b9:
         c0:86:82:ee:6e:94:56:9e:84:49:81:f9:57:bb:42:f1:4f:50:
         ca:19:5f:e7:b2:4b:dc:a7:52:60:94:25:2e:8f:fb:44:31:9c:
         00:a8:2d:1c:5e:9b:f0:01:74:e4:91:cb:a0:7c:3f:12:22:63:
         ba:cd:77:0d:ab:32:51:66:43:b1:a5:72:83:f4:2b:9b:d3:8c:
         43:3e:b7:cd:72:3a:f0:01:0c:31:1f:d1:93:99:f6:2c:61:68:
         03:19:7f:e6:71:7e:e0:64:2a:a9:99:9f:72:6a:e4:4b:4d:81:
         f5:e2:02:ce:be:5e:4e:cf:99:e4:25:82:0b:95:9a:07:9a:d2:
         08:ff:06:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbcQAlmz7+h3nePvPznFpCSMMvgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NzMyMzQzMDRBMTQ4MzQwMzZEMkJBQUFERTIzRUUx
ODMyQkY1RTAeFw0yNDA0MTQyMzU3MzlaFw0yNDA0MTYwMTI3MzlaMDMxMTAvBgNV
BAMTKDg4NTkwQjYzREZGOTFGNEYzRTdGNDZDQTdDMTgwMkRCMERFMTUyQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6z4UGbQMSCN4ah1NqNJuAJZfk
b24oeh7ZcJEdDVH1kKfKBvWhTeUkXMg1fQigOLK0fbtcHAi6uaBqcatI43RxBJ80
c75hEHIcaw77U/r2jFyQZ2VzbpCq8KgzH1KeVFa0NEISSCs0eEC1Qojx+0hD7GHA
rdTV7ZqIlyWM/ROKsyvZsmCqmyhslkFFA3IcSSCMyw1Y1wqBrazB93J1a/CLMLuw
pJBX4EMKkY4XjcOANzDwuuZzN5Ga9mqjfbMn0jwim3r67WjzjZzsUFgf6zaxxjYq
vfPEHQubzjuL9tWsU24QCFV9MPG8mbqYhfDed3+ap+a/Pfb5sK/M1il/EUJdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiFkLY9/5H08+f0bKfBgC2w3hUqgwHwYDVR0j
BBgwFoAUYFcyNDBKFINANtK6qt4j7hgyv14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNjQTk4Y204SlRBTno2Y0JrcFV6bWRSMzVrNzk2a2lCV3I2ZzNlS0N2
czMvMC82MDU3MzIzNDMwNEExNDgzNDAzNkQyQkFBQURFMjNFRTE4MzJCRjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYwNTczMjM0MzA0QTE0ODM0
MDM2RDJCQUFBREUyM0VFMTgzMkJGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NmNjQTk4Y204SlRBTno2Y0JrcFV6bWRSMzVrNzk2a2lCV3I2ZzNlS0N2czMvMC82
MDU3MzIzNDMwNEExNDgzNDAzNkQyQkFBQURFMjNFRTE4MzJCRjVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4Di6/SqI7kE+58VY/XedBFdfMVTzGdraRaJuW1nLdJZP+MEJ0/UwrIS7coa
ZjbN4MqX7rvD9Y7EaneRtfRNd/e+K1EBYnm1huKvDs/RRod3FcyPneZ8+gDb91+8
egcP6ixWf4qwjSi2zVgXWJcg1JmIuGidTcMgNKQ3n0O5wIaC7m6UVp6ESYH5V7tC
8U9Qyhlf57JL3KdSYJQlLo/7RDGcAKgtHF6b8AF05JHLoHw/EiJjus13DasyUWZD
saVyg/Qrm9OMQz63zXI68AEMMR/Rk5n2LGFoAxl/5nF+4GQqqZmfcmrkS02B9eIC
zr5eTs+Z5CWCC5WaB5rSCP8GpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org