Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.mft
File:                     74ED85142F26302A125E71A3E55B2063509E7AA3.mft (raw, json)
Hash identifier:          TMf7+KchhqQ+Kjq8JQzgy9ctOTbSBi80yLHBpD2Kfm8=
Subject key identifier:   84:63:92:F2:E9:60:76:13:75:AE:9D:4D:D4:A0:4A:7B:B2:B5:CF:44
Authority key identifier: 74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
Certificate issuer:       /CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Certificate serial:       4AEC9961C185825B69A7D7949ECBB536EEB9D087
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.mft
Manifest number:          01CF
Signing time:             Mon 15 Apr 2024 10:53:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:48:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:54:00 +0000
Files and hashes:         1: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: PAmYC6D87HDWPMZMtx9k8wjAL8GDhlgZPzGxmnNP7LE=)
                          2: 74ED85142F26302A125E71A3E55B2063509E7AA3.crl (hash: KKhVFrdvSlTM84+ZrAuMDauv28n47hS+xLn9La1RoDs=)
                          3: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: Il0Dc+bpzH2j2X2gr8Hpji1uVQX7i6ThGa7JaZpsC4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ec:99:61:c1:85:82:5b:69:a7:d7:94:9e:cb:b5:36:ee:b9:d0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ED85142F26302A125E71A3E55B2063509E7AA3
        Validity
            Not Before: Apr 15 10:48:00 2024 GMT
            Not After : Apr 16 10:54:00 2024 GMT
        Subject: CN=846392F2E960761375AE9D4DD4A04A7BB2B5CF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:0a:cc:b7:d0:3a:bc:8a:94:cb:cf:31:c5:
                    6c:0b:00:32:c6:81:1f:31:21:39:16:b0:66:d0:0e:
                    a9:a4:9e:6e:d1:d2:1e:7c:a5:81:ce:cf:c1:6a:ad:
                    b7:6f:e8:ea:48:52:17:82:58:6d:3c:b4:d1:32:6b:
                    ba:c2:47:92:55:b1:d0:4e:1c:31:13:61:e7:a1:a1:
                    91:0b:1b:20:f8:82:08:cc:be:36:62:05:b2:e4:d1:
                    f0:2a:6e:f4:e2:52:40:41:64:72:13:90:6b:b9:eb:
                    53:87:1a:a0:bf:43:37:90:65:6a:28:fd:dd:5f:65:
                    c0:99:e9:fc:d3:42:ed:c8:ad:3b:eb:0f:68:c8:20:
                    85:7b:85:88:89:b1:10:7f:65:78:2a:d2:48:fe:df:
                    5d:e5:2b:c8:9d:b4:dc:2d:bf:07:87:fa:23:22:d5:
                    c4:53:ef:25:4e:38:45:e9:77:96:8e:d0:6e:af:8e:
                    41:ae:1c:e6:ce:cb:02:6d:7a:5e:39:2f:d4:20:e2:
                    83:be:1f:5d:6c:b1:8d:4d:e4:e1:78:e4:4e:de:ea:
                    08:ee:c9:51:00:a1:82:ed:f4:8c:ab:21:47:62:e2:
                    a3:13:ff:02:45:d1:89:b3:03:95:d4:14:25:fc:24:
                    59:e3:d6:70:97:b6:dd:ae:5e:dc:6f:c4:1d:b0:04:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:92:F2:E9:60:76:13:75:AE:9D:4D:D4:A0:4A:7B:B2:B5:CF:44
            X509v3 Authority Key Identifier:
                keyid:74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:6d:a1:de:58:ed:f1:73:89:7f:59:98:f8:88:26:fb:50:
         b9:6e:d0:45:8b:04:07:2c:f9:a9:ad:38:da:50:1b:9e:3e:70:
         bd:34:d2:d2:f3:20:f3:72:b4:e8:41:7a:f4:61:ca:9b:32:5f:
         e9:17:2c:a4:bb:6e:8d:77:17:9b:a3:a0:e0:d7:9e:4b:7f:af:
         6e:32:40:65:db:91:37:97:b3:ef:ff:8a:78:66:6b:c2:cd:bc:
         8b:ca:d9:d9:c7:98:0d:c5:dc:f6:2d:f4:c3:26:64:a8:58:1c:
         a4:34:65:29:d3:85:0e:84:c1:d8:85:2d:ce:ed:8c:45:83:a1:
         0b:c6:33:a7:a1:8e:43:6a:44:89:ab:93:7c:1e:46:2f:c7:b4:
         fc:19:1a:3a:a5:ea:c8:a3:19:b3:3e:c4:55:f8:4c:80:d8:01:
         1b:d2:b6:6d:57:0b:41:f4:5a:79:fc:f8:58:85:ac:01:1a:99:
         3a:35:35:6c:52:85:65:ee:2f:3b:16:43:b1:8c:59:07:a7:c5:
         ca:9d:a5:43:62:cb:b4:55:17:7c:4d:00:29:1c:a2:d1:66:57:
         b3:94:0e:5d:ec:0a:08:94:a9:f9:9d:28:e5:d1:09:30:2e:70:
         7a:e1:38:a1:e0:c9:42:5e:e7:dc:1a:ad:41:23:b4:d2:ea:6c:
         ad:5d:79:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSuyZYcGFgltpp9eUnsu1Nu650IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFRDg1MTQyRjI2MzAyQTEyNUU3MUEzRTU1QjIwNjM1
MDlFN0FBMzAeFw0yNDA0MTUxMDQ4MDBaFw0yNDA0MTYxMDU0MDBaMDMxMTAvBgNV
BAMTKDg0NjM5MkYyRTk2MDc2MTM3NUFFOUQ0REQ0QTA0QTdCQjJCNUNGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGgrMt9A6vIqUy88xxWwLADLG
gR8xITkWsGbQDqmknm7R0h58pYHOz8Fqrbdv6OpIUheCWG08tNEya7rCR5JVsdBO
HDETYeehoZELGyD4ggjMvjZiBbLk0fAqbvTiUkBBZHITkGu561OHGqC/QzeQZWoo
/d1fZcCZ6fzTQu3IrTvrD2jIIIV7hYiJsRB/ZXgq0kj+313lK8idtNwtvweH+iMi
1cRT7yVOOEXpd5aO0G6vjkGuHObOywJtel45L9Qg4oO+H11ssY1N5OF45E7e6gju
yVEAoYLt9IyrIUdi4qMT/wJF0YmzA5XUFCX8JFnj1nCXtt2uXtxvxB2wBDLNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhGOS8ulgdhN1rp1N1KBKe7K1z0QwHwYDVR0j
BBgwFoAUdO2FFC8mMCoSXnGj5VsgY1CeeqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE
SzcvMC83NEVEODUxNDJGMjYzMDJBMTI1RTcxQTNFNTVCMjA2MzUwOUU3QUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0RUQ4NTE0MkYyNjMwMkEx
MjVFNzFBM0U1NUIyMDYzNTA5RTdBQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJESzcvMC83
NEVEODUxNDJGMjYzMDJBMTI1RTcxQTNFNTVCMjA2MzUwOUU3QUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAffNtod5Y7fFziX9ZmPiIJvtQuW7QRYsEByz5qa042lAbnj5wvTTS0vMg83K0
6EF69GHKmzJf6RcspLtujXcXm6Og4NeeS3+vbjJAZduRN5ez7/+KeGZrws28i8rZ
2ceYDcXc9i30wyZkqFgcpDRlKdOFDoTB2IUtzu2MRYOhC8Yzp6GOQ2pEiauTfB5G
L8e0/BkaOqXqyKMZsz7EVfhMgNgBG9K2bVcLQfRaefz4WIWsARqZOjU1bFKFZe4v
OxZDsYxZB6fFyp2lQ2LLtFUXfE0AKRyi0WZXs5QOXewKCJSp+Z0o5dEJMC5weuE4
oeDJQl7n3BqtQSO00upsrV158g==
-----END CERTIFICATE-----