Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft
File:                     A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft (raw, json)
Hash identifier:          unRCw4tUBZux0yJ4mlP+bKEq4vgnjqwsAkfszWOzfMg=
Subject key identifier:   C0:65:D3:81:EA:50:9F:89:E3:4D:DF:BC:79:32:78:F6:50:CD:0E:E2
Authority key identifier: A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC
Certificate issuer:       /CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
Certificate serial:       084039E7853F65881EB9F4EE5B6FE1FA486EF908
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft
Manifest number:          95
Signing time:             Sun 14 Apr 2024 19:38:57 +0000
Manifest this update:     Sun 14 Apr 2024 19:33:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:09:57 +0000
Files and hashes:         1: A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.crl (hash: WJq1BIFgPKNGq7GxAiuwTMTzFc17uSbmdeCPs38PciA=)
                          2: 323830343a316366383a3a2f33322d313238203d3e203631363836.roa (hash: hEAri94o/DHJ1VVqTBACCguE6JPkOcpwn/QVNUwyWPs=)
                          3: 3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa (hash: 3usjjiLAIvLyOQdY75zDtB68+8InCkGf/KaEDVhtqv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:39:e7:85:3f:65:88:1e:b9:f4:ee:5b:6f:e1:fa:48:6e:f9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
        Validity
            Not Before: Apr 14 19:33:57 2024 GMT
            Not After : Apr 15 22:09:57 2024 GMT
        Subject: CN=C065D381EA509F89E34DDFBC793278F650CD0EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:07:30:3b:fb:b6:52:01:6c:0a:7f:c0:00:
                    6a:43:56:92:a4:9a:cb:b4:30:6e:87:42:e1:8c:f6:
                    7b:5a:64:5a:0e:db:e2:e6:3d:4e:64:c9:e7:59:df:
                    87:77:c7:df:8b:ab:b5:de:70:84:d7:ed:c8:55:18:
                    90:4c:13:fd:92:a4:b3:65:05:79:49:2a:fa:d6:52:
                    01:7d:66:bc:12:ba:de:ac:34:33:bc:f1:04:5e:aa:
                    55:e9:da:4f:e8:63:c3:28:3d:68:20:0d:a3:b5:16:
                    ad:1f:02:df:b4:5f:c9:88:1d:20:19:57:3c:eb:58:
                    57:b2:5f:46:69:42:42:06:4f:2f:a2:03:18:a0:de:
                    b8:fe:5e:b0:6f:17:ec:88:cf:b0:66:70:9f:45:da:
                    dd:b3:38:5c:8c:2a:42:fd:d6:94:35:ce:8e:b6:10:
                    7a:fe:60:e1:f6:81:55:18:1a:69:bb:e3:a7:44:17:
                    47:ff:90:b8:9e:ce:60:4a:51:0f:db:98:bd:c4:80:
                    53:8d:47:17:8c:26:d2:0b:99:75:05:94:1e:51:d6:
                    88:92:43:97:41:b4:11:b4:50:93:92:c2:54:7a:b4:
                    bd:58:e4:5a:8e:d0:24:5b:e1:1b:9e:d5:5d:7e:57:
                    11:9a:66:06:09:15:eb:ff:bf:14:9b:a2:6f:a6:ee:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:65:D3:81:EA:50:9F:89:E3:4D:DF:BC:79:32:78:F6:50:CD:0E:E2
            X509v3 Authority Key Identifier:
                keyid:A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:54:05:fc:77:44:8b:53:16:ee:96:8f:89:e9:f3:9b:c8:b6:
         08:0e:c8:86:3e:8c:8f:f5:1b:91:d9:74:12:af:22:51:a3:4e:
         72:86:ad:8f:83:a0:9f:71:29:b1:b3:85:c8:db:5f:8a:1a:cb:
         85:38:e6:87:be:83:ff:df:35:1e:ec:14:3a:63:3e:51:32:3f:
         4c:69:54:0e:d4:0e:7b:06:66:88:c0:72:c8:e5:fa:f6:ce:04:
         f0:d1:1a:e2:1f:59:fc:ab:9e:79:08:c5:f1:37:6a:6f:31:8a:
         47:34:dd:f4:38:5f:1c:16:3a:2b:e6:28:f0:dc:97:29:08:93:
         61:60:2d:bc:22:88:2c:aa:00:f1:36:1f:ad:a8:42:8d:01:9a:
         17:e9:40:6f:d2:63:5b:32:f6:dc:17:91:a3:2e:f7:73:8e:13:
         f2:90:33:0e:e8:e3:e3:51:94:68:6d:4b:21:5b:2d:2b:1e:96:
         02:ab:a9:7d:4e:02:e4:1a:2e:28:00:75:10:9c:50:e3:07:8f:
         09:5b:0c:e1:43:b2:70:94:50:99:1c:56:1a:b9:99:0f:4b:c5:
         ee:5f:ac:3a:e2:da:c2:08:45:8b:7d:5f:d8:e6:d0:2b:e2:fe:
         f1:7b:1c:33:79:6b:51:b8:e9:72:79:e5:6e:dd:ea:36:8c:dc:
         db:dd:11:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCEA554U/ZYgeufTuW2/h+khu+QgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIzRTlCOTAxMzc0MTZBQjZBRDMzQkMyMEU2NURCNUI5
MUZERTZBQzAeFw0yNDA0MTQxOTMzNTdaFw0yNDA0MTUyMjA5NTdaMDMxMTAvBgNV
BAMTKEMwNjVEMzgxRUE1MDlGODlFMzREREZCQzc5MzI3OEY2NTBDRDBFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanwcwO/u2UgFsCn/AAGpDVpKk
msu0MG6HQuGM9ntaZFoO2+LmPU5kyedZ34d3x9+Lq7XecITX7chVGJBME/2SpLNl
BXlJKvrWUgF9ZrwSut6sNDO88QReqlXp2k/oY8MoPWggDaO1Fq0fAt+0X8mIHSAZ
VzzrWFeyX0ZpQkIGTy+iAxig3rj+XrBvF+yIz7BmcJ9F2t2zOFyMKkL91pQ1zo62
EHr+YOH2gVUYGmm746dEF0f/kLiezmBKUQ/bmL3EgFONRxeMJtILmXUFlB5R1oiS
Q5dBtBG0UJOSwlR6tL1Y5FqO0CRb4Rue1V1+VxGaZgYJFev/vxSbom+m7hJfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwGXTgepQn4njTd+8eTJ49lDNDuIwHwYDVR0j
BBgwFoAUoj6bkBN0Fqtq0zvCDmXbW5H95qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2RXU2tmVEFjQk4xREFBYTdWbjdBYXkzenZzclQxam5TUVlEYVM5ZXhW
OGcvMC9BMjNFOUI5MDEzNzQxNkFCNkFEMzNCQzIwRTY1REI1QjkxRkRFNkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyM0U5QjkwMTM3NDE2QUI2
QUQzM0JDMjBFNjVEQjVCOTFGREU2QUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2RXU2tmVEFjQk4xREFBYTdWbjdBYXkzenZzclQxam5TUVlEYVM5ZXhWOGcvMC9B
MjNFOUI5MDEzNzQxNkFCNkFEMzNCQzIwRTY1REI1QjkxRkRFNkFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeVQF/HdEi1MW7paPienzm8i2CA7Ihj6Mj/Ubkdl0Eq8iUaNOcoatj4Ogn3Ep
sbOFyNtfihrLhTjmh76D/981HuwUOmM+UTI/TGlUDtQOewZmiMByyOX69s4E8NEa
4h9Z/KueeQjF8TdqbzGKRzTd9DhfHBY6K+Yo8NyXKQiTYWAtvCKILKoA8TYfrahC
jQGaF+lAb9JjWzL23BeRoy73c44T8pAzDujj41GUaG1LIVstKx6WAqupfU4C5Bou
KAB1EJxQ4wePCVsM4UOycJRQmRxWGrmZD0vF7l+sOuLawghFi31f2ObQK+L+8Xsc
M3lrUbjpcnnlbt3qNozc290R4w==
-----END CERTIFICATE-----