Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.mft
File:                     5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.mft (raw, json)
Hash identifier:          eWhvd+g2HuEXMbCmiMbkuTIgxeJ/vqWMAW5fF+dmZZU=
Subject key identifier:   CB:7C:A6:0B:1D:06:69:F4:01:C4:47:17:17:46:9D:98:A8:4F:6E:4C
Authority key identifier: 5A:B1:08:CE:67:59:7A:8E:28:D0:CB:37:11:6A:18:9B:3C:9C:BF:2E
Certificate issuer:       /CN=5AB108CE67597A8E28D0CB37116A189B3C9CBF2E
Certificate serial:       112115C032BD7925928FB8B32E57183EDE8E770A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.mft
Manifest number:          0307
Signing time:             Wed 22 Mar 2023 19:12:09 +0000
Manifest this update:     Wed 22 Mar 2023 19:07:09 +0000
Manifest next update:     Thu 23 Mar 2023 19:23:09 +0000
Files and hashes:         1: 3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa (hash: K71ajwJCQ/Y0lUJ9rXVqP3M90Z+AEZNw/RY1aCqUwRc=)
                          2: 5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.crl (hash: olR5a3c1GTjl+ZwHNgpG1kQbaLHCwPqkeg+mAo8JiuI=)
                          3: 323830343a373135303a3a2f33322d3332203d3e20323730373831.roa (hash: 0CMPdNVyJKQ3nTVRP/bJaHBK9LtE5xU8IJ6PzwjtVDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:21:15:c0:32:bd:79:25:92:8f:b8:b3:2e:57:18:3e:de:8e:77:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB108CE67597A8E28D0CB37116A189B3C9CBF2E
        Validity
            Not Before: Mar 22 19:07:09 2023 GMT
            Not After : Mar 23 19:23:09 2023 GMT
        Subject: CN=CB7CA60B1D0669F401C4471717469D98A84F6E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6a:16:20:01:0d:66:69:40:cc:0f:01:e0:fd:
                    54:c5:24:aa:2c:b1:c8:e4:90:1b:45:a8:b3:4a:1a:
                    0f:b4:e5:2c:20:4c:cc:1c:46:0d:81:59:dc:b7:64:
                    70:3b:b9:8c:25:09:5e:4f:e6:20:27:5e:b3:da:04:
                    a5:d8:5c:d9:dd:ee:59:5f:50:b1:34:d7:7e:41:1c:
                    b3:54:2d:0e:17:d4:6d:4a:05:f2:87:17:31:26:82:
                    08:12:2e:94:20:99:e9:f2:cb:cb:55:56:da:4b:be:
                    ab:4e:f4:a5:65:b6:0b:1a:f1:64:34:4c:22:7c:81:
                    12:8c:7b:55:0e:33:8d:d1:2d:c7:7c:db:93:de:89:
                    2c:15:96:aa:0d:06:43:54:2e:35:1e:6c:cf:e6:88:
                    c9:41:e7:b4:e0:e1:4f:d7:86:23:ca:9c:98:ab:e9:
                    ec:dd:81:88:cf:46:f6:e9:b9:85:b5:6f:0a:74:8a:
                    79:63:1b:2b:b1:b9:0b:a3:76:99:5c:b2:d7:ba:c2:
                    f2:be:75:56:b4:80:d6:5c:c3:2f:e1:2d:20:92:e7:
                    14:5f:6a:a0:34:03:c3:e3:16:c7:b1:21:de:63:9b:
                    5a:55:d7:e3:1d:05:9c:00:64:5d:0f:77:59:eb:a5:
                    be:97:86:e6:36:5d:10:16:44:37:67:1f:a5:1c:80:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:A6:0B:1D:06:69:F4:01:C4:47:17:17:46:9D:98:A8:4F:6E:4C
            X509v3 Authority Key Identifier:
                keyid:5A:B1:08:CE:67:59:7A:8E:28:D0:CB:37:11:6A:18:9B:3C:9C:BF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:51:b7:80:54:22:a5:78:18:1a:01:8b:0c:45:ac:c8:9c:
         c4:fc:17:45:21:12:90:c3:ce:e1:84:25:02:8f:57:ea:1b:a6:
         41:67:45:0c:ff:e6:e5:3f:be:02:24:15:86:0c:44:f9:78:68:
         62:24:e5:00:f5:6b:ae:c4:0f:a5:74:00:01:39:a8:5e:8a:1a:
         2d:86:92:13:97:cf:ce:76:31:96:43:7b:b7:96:25:65:46:c0:
         08:4b:52:29:19:78:1d:eb:95:93:5b:57:5e:f2:74:80:c2:09:
         fc:95:94:01:3f:6f:d6:86:9c:b0:e3:29:87:64:cd:f9:7b:0d:
         03:95:e4:fd:d7:72:09:02:85:f9:a9:9d:e5:47:55:2c:1c:33:
         1c:45:94:11:78:6f:e1:c7:f1:ee:f5:a8:12:ae:d1:5d:3f:2a:
         60:52:51:1f:b9:b8:bd:45:a3:88:86:e5:f2:fd:d8:cf:94:e2:
         22:ab:46:0b:27:4e:45:13:ac:50:9b:78:8d:da:6d:6c:fe:dd:
         be:92:92:10:0a:e4:eb:8d:37:ed:a2:65:96:c3:00:80:c0:c1:
         c7:df:c5:63:43:01:ac:39:40:92:a3:bb:a8:f3:79:70:51:d6:
         55:2d:0d:40:0b:f2:14:8d:04:3c:e9:32:1a:01:83:35:97:03:
         a5:56:b5:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUESEVwDK9eSWSj7izLlcYPt6OdwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCMTA4Q0U2NzU5N0E4RTI4RDBDQjM3MTE2QTE4OUIz
QzlDQkYyRTAeFw0yMzAzMjIxOTA3MDlaFw0yMzAzMjMxOTIzMDlaMDMxMTAvBgNV
BAMTKENCN0NBNjBCMUQwNjY5RjQwMUM0NDcxNzE3NDY5RDk4QTg0RjZFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyahYgAQ1maUDMDwHg/VTFJKos
scjkkBtFqLNKGg+05SwgTMwcRg2BWdy3ZHA7uYwlCV5P5iAnXrPaBKXYXNnd7llf
ULE0135BHLNULQ4X1G1KBfKHFzEmgggSLpQgmenyy8tVVtpLvqtO9KVltgsa8WQ0
TCJ8gRKMe1UOM43RLcd825PeiSwVlqoNBkNULjUebM/miMlB57Tg4U/XhiPKnJir
6ezdgYjPRvbpuYW1bwp0inljGyuxuQujdplcste6wvK+dVa0gNZcwy/hLSCS5xRf
aqA0A8PjFsexId5jm1pV1+MdBZwAZF0Pd1nrpb6XhuY2XRAWRDdnH6UcgFgRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUy3ymCx0GafQBxEcXF0admKhPbkwwHwYDVR0j
BBgwFoAUWrEIzmdZeo4o0Ms3EWoYmzycvy4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE0yZWZBeUZTeTlwRFFvU1NRREhCVlRwb25ydndFUmd0bng4Sjd1SlRw
SnYvMC81QUIxMDhDRTY3NTk3QThFMjhEMENCMzcxMTZBMTg5QjNDOUNCRjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBQjEwOENFNjc1OTdBOEUy
OEQwQ0IzNzExNkExODlCM0M5Q0JGMkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OE0yZWZBeUZTeTlwRFFvU1NRREhCVlRwb25ydndFUmd0bng4Sjd1SlRwSnYvMC81
QUIxMDhDRTY3NTk3QThFMjhEMENCMzcxMTZBMTg5QjNDOUNCRjJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArltRt4BUIqV4GBoBiwxFrMicxPwXRSESkMPO4YQlAo9X6humQWdFDP/m5T++
AiQVhgxE+XhoYiTlAPVrrsQPpXQAATmoXooaLYaSE5fPznYxlkN7t5YlZUbACEtS
KRl4HeuVk1tXXvJ0gMIJ/JWUAT9v1oacsOMph2TN+XsNA5Xk/ddyCQKF+amd5UdV
LBwzHEWUEXhv4cfx7vWoEq7RXT8qYFJRH7m4vUWjiIbl8v3Yz5TiIqtGCydORROs
UJt4jdptbP7dvpKSEArk64037aJllsMAgMDBx9/FY0MBrDlAkqO7qPN5cFHWVS0N
QAvyFI0EPOkyGgGDNZcDpVa1xw==
-----END CERTIFICATE-----