Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft
File:                     D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft (raw, json)
Hash identifier:          sqkZXfbWgCsUfErUFFj73YT4PlbgZ4PfwQ1iA+ACvRg=
Subject key identifier:   E6:4B:42:25:F4:39:3F:BF:5A:93:62:27:F1:36:E9:E8:20:8B:46:74
Authority key identifier: D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
Certificate issuer:       /CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
Certificate serial:       3AFA0036D2139B8B0B46ADC022885BF359B6804D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft
Manifest number:          026E
Signing time:             Mon 15 Apr 2024 04:25:27 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:27 +0000
Manifest next update:     Tue 16 Apr 2024 04:50:27 +0000
Files and hashes:         1: 3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (hash: SrPm1S29w9KNGObRUo6E8vZRIf6zvF/2u6uG42X/Hck=)
                          2: 323830343a323961303a3a2f33322d3334203d3e203238323139.roa (hash: sHdry4D5IeQajd/A5FxkWsNN5b4WsZ7EJmAfZlsqLMI=)
                          3: D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.crl (hash: AB3bepWJhGm0O+J9zKibJthPKaZ1ymLpr/91x3dgydA=)
                          4: 3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (hash: QzSIMsboHIDRxh3olsmvoKqcS8EAosfRRFITlkw92hQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:00:36:d2:13:9b:8b:0b:46:ad:c0:22:88:5b:f3:59:b6:80:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
        Validity
            Not Before: Apr 15 04:20:27 2024 GMT
            Not After : Apr 16 04:50:27 2024 GMT
        Subject: CN=E64B4225F4393FBF5A936227F136E9E8208B4674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:8e:02:f9:e7:dd:cd:0f:f3:66:b9:f0:f6:
                    d6:9e:0c:fa:75:24:6a:7d:e1:b8:aa:ca:4f:b6:34:
                    c2:44:68:82:d2:37:d7:42:5b:f3:e8:01:64:73:d7:
                    65:23:ff:42:76:9f:59:df:ba:20:08:be:e4:dc:06:
                    b2:07:69:15:69:29:be:6d:46:9f:ec:c1:a4:83:84:
                    c0:3a:10:de:ab:99:e8:50:ef:aa:88:5c:e7:67:5e:
                    fb:b0:50:56:fb:8e:05:e4:2c:9d:f4:c4:71:92:c3:
                    ee:1e:d1:c5:c4:39:99:c9:61:83:3b:75:5d:58:a6:
                    6f:37:bf:a9:28:64:3b:d4:ff:3a:4e:a0:04:9c:a1:
                    b3:68:78:35:3d:24:e2:87:a5:24:c2:31:90:41:62:
                    b1:b9:ee:f8:0a:9f:d9:3d:7f:e6:c7:0e:95:7e:22:
                    79:79:0f:2f:ac:70:6a:2a:c6:e0:8e:0b:6a:a7:8d:
                    8d:b3:b4:29:88:10:d2:30:fd:6d:3c:41:fe:56:3c:
                    a9:19:4a:ef:00:b3:d8:a0:a7:59:0e:1b:db:2e:e9:
                    c0:32:52:c0:23:ea:b3:47:03:dd:60:2a:66:4d:77:
                    a3:68:e9:69:ad:92:98:4b:50:06:91:50:b7:13:4f:
                    77:2a:73:6f:8c:e4:0a:2e:90:2d:6d:c0:fe:3e:00:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4B:42:25:F4:39:3F:BF:5A:93:62:27:F1:36:E9:E8:20:8B:46:74
            X509v3 Authority Key Identifier:
                keyid:D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:fb:33:26:dd:99:fe:5f:5b:e5:99:9e:34:24:b9:f3:27:
         2f:bd:53:10:29:67:97:d8:9f:a4:c1:22:47:3a:8c:e9:68:0d:
         19:34:31:c9:6b:39:49:66:66:00:da:20:c9:13:8a:b0:c8:87:
         d9:1c:2d:39:a5:a2:04:b2:77:09:2d:39:6e:e1:77:be:55:b8:
         dd:65:53:1d:77:ba:9d:e6:d0:59:bc:d5:e1:a3:1a:64:5d:40:
         48:29:df:4f:05:fc:7d:e7:88:77:87:c4:77:88:39:fe:e2:de:
         5a:71:55:b7:9c:39:2a:c1:68:e2:a1:ce:5c:40:8c:28:ce:8b:
         95:69:64:c4:aa:99:54:ec:5a:2e:9a:1e:c6:be:a4:bf:35:2e:
         60:0a:b1:04:8f:a6:7c:fc:de:33:bb:ce:c3:03:bc:02:ac:d5:
         50:9b:59:41:d1:23:9f:40:10:e8:e9:4a:62:bf:5e:0e:d5:1f:
         a0:10:5a:86:56:ba:f6:de:e6:a7:91:9f:29:45:b8:7f:f8:93:
         79:53:25:bf:dc:67:8c:28:93:b2:dc:c2:52:e4:58:fb:24:41:
         27:42:9b:1f:2f:57:3f:5e:8c:a9:07:30:8f:a0:4c:91:2b:a7:
         50:5d:e7:35:24:2f:58:6e:09:2a:2b:fa:e0:16:3a:67:22:2d:
         64:e0:51:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOvoANtITm4sLRq3AIohb81m2gE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGRTM3OEJENEU3QjNFOUFGMUM0N0QyNDU2MjQxNzhE
QzRFOTcwOTAeFw0yNDA0MTUwNDIwMjdaFw0yNDA0MTYwNDUwMjdaMDMxMTAvBgNV
BAMTKEU2NEI0MjI1RjQzOTNGQkY1QTkzNjIyN0YxMzZFOUU4MjA4QjQ2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3J44C+efdzQ/zZrnw9taeDPp1
JGp94biqyk+2NMJEaILSN9dCW/PoAWRz12Uj/0J2n1nfuiAIvuTcBrIHaRVpKb5t
Rp/swaSDhMA6EN6rmehQ76qIXOdnXvuwUFb7jgXkLJ30xHGSw+4e0cXEOZnJYYM7
dV1Ypm83v6koZDvU/zpOoAScobNoeDU9JOKHpSTCMZBBYrG57vgKn9k9f+bHDpV+
Inl5Dy+scGoqxuCOC2qnjY2ztCmIENIw/W08Qf5WPKkZSu8As9igp1kOG9su6cAy
UsAj6rNHA91gKmZNd6No6WmtkphLUAaRULcTT3cqc2+M5AoukC1twP4+AHK9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5ktCJfQ5P79ak2In8Tbp6CCLRnQwHwYDVR0j
BBgwFoAU0/43i9Tns+mvHEfSRWJBeNxOlwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VmN3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRD
ZG4vMC9EM0ZFMzc4QkQ0RTdCM0U5QUYxQzQ3RDI0NTYyNDE3OERDNEU5NzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzRkUzNzhCRDRFN0IzRTlB
RjFDNDdEMjQ1NjI0MTc4REM0RTk3MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1VmN3FKMVFWcDhIZG9GN2I2VW5QUjI1QzdnZjNoemNCRk5FSDNkNDRDZG4vMC9E
M0ZFMzc4QkQ0RTdCM0U5QUYxQzQ3RDI0NTYyNDE3OERDNEU5NzA5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZu/7Mybdmf5fW+WZnjQkufMnL71TEClnl9ifpMEiRzqM6WgNGTQxyWs5SWZm
ANogyROKsMiH2RwtOaWiBLJ3CS05buF3vlW43WVTHXe6nebQWbzV4aMaZF1ASCnf
TwX8feeId4fEd4g5/uLeWnFVt5w5KsFo4qHOXECMKM6LlWlkxKqZVOxaLpoexr6k
vzUuYAqxBI+mfPzeM7vOwwO8AqzVUJtZQdEjn0AQ6OlKYr9eDtUfoBBahla69t7m
p5GfKUW4f/iTeVMlv9xnjCiTstzCUuRY+yRBJ0KbHy9XP16MqQcwj6BMkSunUF3n
NSQvWG4JKiv64BY6ZyItZOBR9A==
-----END CERTIFICATE-----