Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.mft
File:                     B3816627A30C71423939EF4125FF37AE1B6A2A3A.mft (raw, json)
Hash identifier:          x8G0/oiqPBcx2lerUS2fIJi9FJVnjLzWttGnM+wD8iE=
Subject key identifier:   5B:13:A5:0A:CC:DD:FF:B5:97:41:48:09:38:A3:46:40:97:D9:58:45
Authority key identifier: B3:81:66:27:A3:0C:71:42:39:39:EF:41:25:FF:37:AE:1B:6A:2A:3A
Certificate issuer:       /CN=B3816627A30C71423939EF4125FF37AE1B6A2A3A
Certificate serial:       4141613AEFDB94DA9AB34764A14DC9E966E9A2C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.mft
Manifest number:          0171
Signing time:             Mon 15 Apr 2024 00:12:46 +0000
Manifest this update:     Mon 15 Apr 2024 00:07:46 +0000
Manifest next update:     Tue 16 Apr 2024 03:29:46 +0000
Files and hashes:         1: 323830343a376262633a3a2f33322d313238203d3e20323731343531.roa (hash: 12jegUI1HJBemyrUpt1/DN93RNkxzgTFQGQs0I6Ntpw=)
                          2: B3816627A30C71423939EF4125FF37AE1B6A2A3A.crl (hash: 1V+zo3IedDKyKAUK+TJA4ircMvbstQGw9s+C+q2xNS0=)
                          3: 3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa (hash: 1Rzgt8m3ztJzIY9obcIcS+VaT3PSA/s9C7WV//6v0I4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:61:3a:ef:db:94:da:9a:b3:47:64:a1:4d:c9:e9:66:e9:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3816627A30C71423939EF4125FF37AE1B6A2A3A
        Validity
            Not Before: Apr 15 00:07:46 2024 GMT
            Not After : Apr 16 03:29:46 2024 GMT
        Subject: CN=5B13A50ACCDDFFB59741480938A3464097D95845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:8a:01:50:5b:60:d0:c4:a4:5f:83:c0:8d:
                    96:43:7d:7c:ca:a6:c4:2c:3f:8a:dd:01:d5:26:41:
                    69:a5:ad:28:99:42:5e:66:2a:30:80:8e:73:2e:70:
                    62:99:06:53:3e:1b:ca:7a:e5:f0:16:3f:87:e8:33:
                    d7:1d:d3:3e:b8:33:69:ef:f5:2f:5c:9d:28:c4:80:
                    57:6f:a9:60:f9:85:04:83:d4:10:7b:34:d1:b6:ff:
                    fb:d0:00:a4:88:b1:e5:30:9c:71:07:50:fe:74:42:
                    9b:dd:d0:20:24:d5:b6:65:a2:37:38:96:c9:38:4b:
                    26:d7:1e:07:50:dc:42:64:c6:18:54:8a:44:4c:5f:
                    b1:f1:4d:7d:c1:3b:6b:1a:81:40:7f:a1:dd:0c:09:
                    ee:e7:f8:92:f7:ab:a6:98:3c:ad:19:39:51:32:8d:
                    00:fb:20:28:41:90:d2:0b:75:b4:a1:77:c4:68:68:
                    3e:30:4a:0b:58:b4:7a:29:78:18:55:2a:fd:e1:d0:
                    38:54:99:e1:2f:f8:e9:45:2e:8e:df:6c:ca:ee:8b:
                    03:49:ea:8a:af:82:68:98:37:2d:0f:e9:9b:b9:c0:
                    25:c1:4e:d5:9c:f0:73:41:95:56:f8:ba:a1:0e:6d:
                    36:b3:20:5a:01:5d:c6:91:0f:1c:f2:87:f8:ca:77:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:13:A5:0A:CC:DD:FF:B5:97:41:48:09:38:A3:46:40:97:D9:58:45
            X509v3 Authority Key Identifier:
                keyid:B3:81:66:27:A3:0C:71:42:39:39:EF:41:25:FF:37:AE:1B:6A:2A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/0/B3816627A30C71423939EF4125FF37AE1B6A2A3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c0:15:9b:e6:1d:89:1d:b9:68:33:f5:62:b9:21:5c:2a:4e:
         84:cb:3b:06:1a:b5:86:5a:5f:f4:d3:e4:f2:a9:4f:05:27:e3:
         19:a5:74:6c:96:e6:e0:59:a1:09:5c:54:04:53:52:bd:1b:68:
         36:2c:07:6c:f0:ff:58:37:57:98:1a:41:d2:6c:77:43:b4:fe:
         f8:d7:fe:72:54:45:ce:f5:a0:1c:c6:88:13:87:a9:9c:c7:fa:
         f2:1c:30:e5:f2:be:05:2a:33:34:b5:53:81:a7:9e:22:cd:1d:
         df:9e:0c:bb:2e:fd:b0:97:99:3c:2c:79:5a:54:f6:38:b6:03:
         44:ce:32:12:15:9f:f1:0a:37:97:a3:94:10:72:e6:ae:6e:ca:
         41:65:10:cc:2f:81:ee:67:f6:23:ac:13:b6:16:01:33:e2:20:
         5e:7f:27:c5:f1:e6:0e:7a:2d:50:03:85:dc:87:95:5a:41:8e:
         cf:9e:c0:5d:1f:c7:9b:7e:a7:1a:91:b0:49:7a:e4:00:f8:f2:
         11:69:e9:19:aa:ca:b4:81:92:d8:47:11:11:4c:a5:c6:4c:dd:
         cc:96:5f:6f:1a:70:2b:fc:52:0b:6d:ba:6a:76:65:55:49:cf:
         4f:10:d3:37:ce:da:96:d2:d8:ef:fa:67:3a:32:4b:fc:e9:e4:
         18:ca:ac:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQUFhOu/blNqas0dkoU3J6WbposAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4MTY2MjdBMzBDNzE0MjM5MzlFRjQxMjVGRjM3QUUx
QjZBMkEzQTAeFw0yNDA0MTUwMDA3NDZaFw0yNDA0MTYwMzI5NDZaMDMxMTAvBgNV
BAMTKDVCMTNBNTBBQ0NEREZGQjU5NzQxNDgwOTM4QTM0NjQwOTdEOTU4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkIoBUFtg0MSkX4PAjZZDfXzK
psQsP4rdAdUmQWmlrSiZQl5mKjCAjnMucGKZBlM+G8p65fAWP4foM9cd0z64M2nv
9S9cnSjEgFdvqWD5hQSD1BB7NNG2//vQAKSIseUwnHEHUP50Qpvd0CAk1bZlojc4
lsk4SybXHgdQ3EJkxhhUikRMX7HxTX3BO2sagUB/od0MCe7n+JL3q6aYPK0ZOVEy
jQD7IChBkNILdbShd8RoaD4wSgtYtHopeBhVKv3h0DhUmeEv+OlFLo7fbMruiwNJ
6oqvgmiYNy0P6Zu5wCXBTtWc8HNBlVb4uqEObTazIFoBXcaRDxzyh/jKd/g9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWxOlCszd/7WXQUgJOKNGQJfZWEUwHwYDVR0j
BBgwFoAUs4FmJ6MMcUI5Oe9BJf83rhtqKjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL
QTcvMC9CMzgxNjYyN0EzMEM3MTQyMzkzOUVGNDEyNUZGMzdBRTFCNkEyQTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzODE2NjI3QTMwQzcxNDIz
OTM5RUY0MTI1RkYzN0FFMUI2QTJBM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRLQTcvMC9C
MzgxNjYyN0EzMEM3MTQyMzkzOUVGNDEyNUZGMzdBRTFCNkEyQTNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF8AVm+YdiR25aDP1YrkhXCpOhMs7Bhq1hlpf9NPk8qlPBSfjGaV0bJbm4Fmh
CVxUBFNSvRtoNiwHbPD/WDdXmBpB0mx3Q7T++Nf+clRFzvWgHMaIE4epnMf68hww
5fK+BSozNLVTgaeeIs0d354Muy79sJeZPCx5WlT2OLYDRM4yEhWf8Qo3l6OUEHLm
rm7KQWUQzC+B7mf2I6wTthYBM+IgXn8nxfHmDnotUAOF3IeVWkGOz57AXR/Hm36n
GpGwSXrkAPjyEWnpGarKtIGS2EcREUylxkzdzJZfbxpwK/xSC226anZlVUnPTxDT
N87altLY7/pnOjJL/OnkGMqsmg==
-----END CERTIFICATE-----