Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/491A075DC3235FD997380BAEC38A01043C84379B.mft
File:                     491A075DC3235FD997380BAEC38A01043C84379B.mft (raw, json)
Hash identifier:          U7Mob1rNBxp+kZcs4HGZvjs7CQExZZm+mwAGHwnvtFg=
Subject key identifier:   AB:F8:FF:17:25:AA:FF:F9:18:F8:72:A9:95:3F:EB:20:AA:A6:37:8C
Authority key identifier: 49:1A:07:5D:C3:23:5F:D9:97:38:0B:AE:C3:8A:01:04:3C:84:37:9B
Certificate issuer:       /CN=491A075DC3235FD997380BAEC38A01043C84379B
Certificate serial:       324DB3B9514DF13B71E25FE8A3BE89EA2CA94F2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/491A075DC3235FD997380BAEC38A01043C84379B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/491A075DC3235FD997380BAEC38A01043C84379B.mft
Manifest number:          DB
Signing time:             Sun 14 Apr 2024 21:52:31 +0000
Manifest this update:     Sun 14 Apr 2024 21:47:31 +0000
Manifest next update:     Tue 16 Apr 2024 01:00:31 +0000
Files and hashes:         1: 491A075DC3235FD997380BAEC38A01043C84379B.crl (hash: nzeCxF4qWYTtr8thbp5W/BV4OYxcPr3ef6WlE5bxGR4=)
                          2: 34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (hash: 76qOIWMPyaXzGG+gNnPx2Fyn5yrcWu0uHWvofc9dCco=)
                          3: 323830343a353966383a3a2f33322d3438203d3e20323638373337.roa (hash: TLvcYTWxj8ze0ddHKJdX1DEsQaAzyuSxz/8biPGpbBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:b3:b9:51:4d:f1:3b:71:e2:5f:e8:a3:be:89:ea:2c:a9:4f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491A075DC3235FD997380BAEC38A01043C84379B
        Validity
            Not Before: Apr 14 21:47:31 2024 GMT
            Not After : Apr 16 01:00:31 2024 GMT
        Subject: CN=ABF8FF1725AAFFF918F872A9953FEB20AAA6378C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:4f:4f:06:ad:a2:b8:c7:52:1e:c7:f4:df:
                    c6:e8:89:9b:6c:c4:5d:74:f4:11:28:25:24:a2:05:
                    d0:06:b5:c9:30:db:a0:a3:f8:94:96:f0:1a:3d:b5:
                    9c:76:59:ae:44:2a:5b:db:25:04:f4:16:17:b5:1b:
                    62:b5:68:94:71:b6:a2:15:2d:e9:c3:3c:aa:16:d4:
                    20:78:33:5e:e4:76:15:0d:d6:01:6f:7c:ff:a5:aa:
                    92:d3:85:28:2e:be:6c:23:b9:64:19:ba:9f:90:66:
                    97:31:c9:25:44:d8:6c:ca:ae:c0:c7:1d:cb:e5:f0:
                    ed:06:90:41:30:c0:31:a5:06:6a:2b:00:99:6a:1b:
                    05:cc:e9:96:d0:77:62:73:bb:08:ae:8f:da:7b:d3:
                    88:74:1a:68:d2:e4:e6:fe:df:5c:de:5e:7c:c1:84:
                    4a:d5:54:91:9c:fb:ad:d5:f3:19:ef:32:68:50:10:
                    53:c3:73:b9:38:0b:74:ad:1a:16:23:80:88:04:41:
                    c7:ea:8e:22:51:da:45:c1:d8:a5:af:ed:3a:d3:a1:
                    db:d0:ad:d0:17:f3:71:a5:b8:e4:7a:3c:e9:47:43:
                    eb:9b:85:ab:68:42:45:4b:af:a0:cd:4e:e9:69:36:
                    f0:44:af:47:2e:b5:aa:ed:d0:e8:41:59:cc:10:9d:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:FF:17:25:AA:FF:F9:18:F8:72:A9:95:3F:EB:20:AA:A6:37:8C
            X509v3 Authority Key Identifier:
                keyid:49:1A:07:5D:C3:23:5F:D9:97:38:0B:AE:C3:8A:01:04:3C:84:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/491A075DC3235FD997380BAEC38A01043C84379B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/491A075DC3235FD997380BAEC38A01043C84379B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/491A075DC3235FD997380BAEC38A01043C84379B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:86:dc:f0:ff:74:c6:ce:cb:1f:a3:37:ff:ea:3f:26:dd:
         84:1d:42:ec:ac:ac:2a:2c:58:0d:fa:f7:ef:24:b8:a8:ff:74:
         ce:7b:ee:ef:3d:07:16:2a:eb:de:80:01:52:d9:a0:4f:9c:f1:
         a5:73:95:4f:9c:fa:8d:be:ff:3c:af:51:bb:0f:a9:14:47:05:
         f0:e9:6d:7d:15:d3:25:25:65:93:c5:45:0e:cb:c8:c0:1a:65:
         fe:0e:8d:82:91:13:4b:0f:6a:a5:7d:fd:63:e3:8d:80:aa:b1:
         19:97:d0:1f:68:b6:da:7f:52:68:84:9d:77:44:74:f9:3f:bc:
         5c:14:d4:dc:e0:b4:90:5f:1b:c4:ae:cc:95:6b:36:dc:41:f3:
         85:7f:3c:0a:06:eb:84:fb:2d:58:f0:68:bc:74:8b:4d:b6:ec:
         7c:73:af:ad:d5:98:4a:95:0b:d9:bf:e1:af:6f:8f:a3:8f:73:
         b2:4d:5b:3e:b5:a6:b9:fc:39:96:59:e5:84:46:f6:75:c5:71:
         5d:bb:89:bc:43:2e:cf:aa:c1:8d:a1:62:be:46:79:80:56:0b:
         d1:40:eb:68:d4:43:07:5c:b6:e3:84:15:18:40:b4:20:de:fb:
         de:fe:e8:e6:1f:91:9b:ae:24:24:d1:1d:1d:6d:6c:0f:ea:b4:
         37:bf:ed:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMk2zuVFN8Ttx4l/oo76J6iypTy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkxQTA3NURDMzIzNUZEOTk3MzgwQkFFQzM4QTAxMDQz
Qzg0Mzc5QjAeFw0yNDA0MTQyMTQ3MzFaFw0yNDA0MTYwMTAwMzFaMDMxMTAvBgNV
BAMTKEFCRjhGRjE3MjVBQUZGRjkxOEY4NzJBOTk1M0ZFQjIwQUFBNjM3OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAk9PBq2iuMdSHsf038boiZts
xF109BEoJSSiBdAGtckw26Cj+JSW8Bo9tZx2Wa5EKlvbJQT0Fhe1G2K1aJRxtqIV
LenDPKoW1CB4M17kdhUN1gFvfP+lqpLThSguvmwjuWQZup+QZpcxySVE2GzKrsDH
Hcvl8O0GkEEwwDGlBmorAJlqGwXM6ZbQd2Jzuwiuj9p704h0GmjS5Ob+31zeXnzB
hErVVJGc+63V8xnvMmhQEFPDc7k4C3StGhYjgIgEQcfqjiJR2kXB2KWv7TrTodvQ
rdAX83GluOR6POlHQ+ubhatoQkVLr6DNTulpNvBEr0cutart0OhBWcwQnWmLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUq/j/FyWq//kY+HKplT/rIKqmN4wwHwYDVR0j
BBgwFoAUSRoHXcMjX9mXOAuuw4oBBDyEN5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtuOHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2
aUsvMC80OTFBMDc1REMzMjM1RkQ5OTczODBCQUVDMzhBMDEwNDNDODQzNzlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5MUEwNzVEQzMyMzVGRDk5
NzM4MEJBRUMzOEEwMTA0M0M4NDM3OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEtuOHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2aUsvMC80
OTFBMDc1REMzMjM1RkQ5OTczODBCQUVDMzhBMDEwNDNDODQzNzlCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMXyG3PD/dMbOyx+jN//qPybdhB1C7KysKixYDfr37yS4qP90znvu7z0HFirr
3oABUtmgT5zxpXOVT5z6jb7/PK9Ruw+pFEcF8OltfRXTJSVlk8VFDsvIwBpl/g6N
gpETSw9qpX39Y+ONgKqxGZfQH2i22n9SaISdd0R0+T+8XBTU3OC0kF8bxK7MlWs2
3EHzhX88CgbrhPstWPBovHSLTbbsfHOvrdWYSpUL2b/hr2+Po49zsk1bPrWmufw5
llnlhEb2dcVxXbuJvEMuz6rBjaFivkZ5gFYL0UDraNRDB1y244QVGEC0IN773v7o
5h+Rm64kJNEdHW1sD+q0N7/tXg==
-----END CERTIFICATE-----