Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft
File:                     6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft (raw, json)
Hash identifier:          yTaKJuhlt8VD9NVa1vjRvdEnlO02eznx/4SsugfQAMg=
Subject key identifier:   9A:CF:4D:16:E7:01:28:C5:E3:D4:A8:56:B0:4F:3F:48:3E:F2:15:FD
Authority key identifier: 6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61
Certificate issuer:       /CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
Certificate serial:       0BD68B9B3F52DD0E2ECAAD4AB6077A3FD520544F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft
Manifest number:          0140
Signing time:             Fri 29 Dec 2023 20:04:18 +0000
Manifest this update:     Fri 29 Dec 2023 19:59:18 +0000
Manifest next update:     Sat 30 Dec 2023 21:37:18 +0000
Files and hashes:         1: 3137372e39332e38302e302f32312d3234203d3e20323633313432.roa (hash: /4g/jzfEixksX4sssIPPD2QiJGNFjEVC88BJOb07Gks=)
                          2: 6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.crl (hash: Evxw8ULEmrDbczbcbgtG9iQiItYmbH7g6OgHe/L91dY=)
                          3: 323830343a313736303a3a2f33322d3438203d3e20323633313432.roa (hash: r3nwdQOy5DnS1scKQpgL/qUPBTcIFpYOYEi/kAZbq4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d6:8b:9b:3f:52:dd:0e:2e:ca:ad:4a:b6:07:7a:3f:d5:20:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261
        Validity
            Not Before: Dec 29 19:59:18 2023 GMT
            Not After : Dec 30 21:37:18 2023 GMT
        Subject: CN=9ACF4D16E70128C5E3D4A856B04F3F483EF215FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:2e:2e:ef:f2:52:27:30:3b:64:7d:8c:98:
                    dd:84:86:cc:1d:1b:3a:88:0f:aa:32:a3:ad:f9:53:
                    5e:e5:d2:7a:52:70:c9:88:ac:b9:9d:71:80:12:43:
                    a7:6a:75:a6:2d:e8:7d:ac:fc:5a:86:77:47:29:19:
                    b1:ca:db:81:eb:20:8c:28:34:76:c1:b2:8d:6d:ff:
                    91:c2:5a:95:6b:8c:77:93:9f:83:ff:d4:48:bb:10:
                    39:41:9d:da:9d:fe:4e:5b:0f:3b:3b:b0:ff:97:cd:
                    e1:cf:f8:1b:fb:bc:d4:3e:b8:1a:9e:37:11:0e:7d:
                    a7:f0:53:a0:d2:c2:9d:f0:b9:06:28:74:ae:09:d1:
                    ef:3d:3c:8f:7a:2c:5c:95:4e:02:af:ce:bb:11:87:
                    57:b7:aa:6e:9a:d2:95:2c:62:d3:52:8c:20:c9:91:
                    da:33:82:62:50:bb:c1:15:cf:80:de:d6:ad:6e:7b:
                    aa:a9:ca:75:54:4d:d9:88:27:26:b1:85:c2:8b:61:
                    e4:2c:99:9b:99:ea:f7:bc:39:04:d0:1b:4a:70:f2:
                    c9:b0:a0:7b:f2:ed:53:05:d7:b2:a4:d2:68:71:79:
                    91:28:7c:25:82:51:83:c3:26:b8:63:0f:9d:b3:f8:
                    23:3e:5b:f9:30:30:8d:b8:54:73:b5:11:07:3d:32:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:4D:16:E7:01:28:C5:E3:D4:A8:56:B0:4F:3F:48:3E:F2:15:FD
            X509v3 Authority Key Identifier:
                keyid:6A:F5:CB:B0:65:30:2A:9D:3D:BE:1E:97:B9:C2:CB:E2:1C:26:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/6AF5CBB065302A9D3DBE1E97B9C2CBE21C26F261.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:fa:e6:da:02:19:35:bb:28:0b:e2:3b:59:b0:8a:29:2c:
         b1:ee:1b:5a:47:b2:9c:13:31:0f:fa:5b:bb:8b:a2:2c:0f:c4:
         94:ab:a8:f7:3a:aa:6d:d6:04:98:cd:23:f6:59:b1:b8:4e:2e:
         f6:a4:60:22:e0:73:77:eb:ee:62:b7:e2:15:84:02:c2:67:09:
         70:a1:77:10:be:38:a2:13:f1:c5:a5:60:0b:2c:b8:70:f3:4e:
         c3:0d:90:2f:ac:16:57:32:89:65:0e:3f:2c:a8:d4:01:91:60:
         2d:04:41:f1:67:67:93:be:d4:a0:60:17:c2:fe:a6:8f:ea:36:
         33:73:ce:2f:9a:f5:07:67:1f:88:66:80:2e:54:44:7d:dc:4c:
         ba:1d:fb:17:b9:eb:3e:06:e7:3a:b2:82:2f:65:9d:dd:9d:7f:
         f9:e7:07:a7:3e:e3:61:89:27:ee:7c:4e:3d:c4:2e:32:ec:6b:
         80:b2:53:d0:56:d8:1c:34:a4:14:2e:5e:75:9f:34:87:fa:5a:
         28:d5:21:ea:ab:e4:67:42:25:db:a6:6f:10:8e:40:65:81:5b:
         c2:b9:10:c6:31:9b:ff:75:77:11:cc:6e:2c:1f:d7:24:eb:55:
         b3:7a:fe:fb:0c:ea:2b:37:f3:27:1c:1f:33:65:72:b8:ca:b6:
         b1:75:fd:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC9aLmz9S3Q4uyq1Ktgd6P9UgVE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGNUNCQjA2NTMwMkE5RDNEQkUxRTk3QjlDMkNCRTIx
QzI2RjI2MTAeFw0yMzEyMjkxOTU5MThaFw0yMzEyMzAyMTM3MThaMDMxMTAvBgNV
BAMTKDlBQ0Y0RDE2RTcwMTI4QzVFM0Q0QTg1NkIwNEYzRjQ4M0VGMjE1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEry4u7/JSJzA7ZH2MmN2Ehswd
GzqID6oyo635U17l0npScMmIrLmdcYASQ6dqdaYt6H2s/FqGd0cpGbHK24HrIIwo
NHbBso1t/5HCWpVrjHeTn4P/1Ei7EDlBndqd/k5bDzs7sP+XzeHP+Bv7vNQ+uBqe
NxEOfafwU6DSwp3wuQYodK4J0e89PI96LFyVTgKvzrsRh1e3qm6a0pUsYtNSjCDJ
kdozgmJQu8EVz4De1q1ue6qpynVUTdmIJyaxhcKLYeQsmZuZ6ve8OQTQG0pw8smw
oHvy7VMF17Kk0mhxeZEofCWCUYPDJrhjD52z+CM+W/kwMI24VHO1EQc9MmJ3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUms9NFucBKMXj1KhWsE8/SD7yFf0wHwYDVR0j
BBgwFoAUavXLsGUwKp09vh6XucLL4hwm8mEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4
c1kvMC82QUY1Q0JCMDY1MzAyQTlEM0RCRTFFOTdCOUMyQ0JFMjFDMjZGMjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBRjVDQkIwNjUzMDJBOUQz
REJFMUU5N0I5QzJDQkUyMUMyNkYyNjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4c1kvMC82
QUY1Q0JCMDY1MzAyQTlEM0RCRTFFOTdCOUMyQ0JFMjFDMjZGMjYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg7P65toCGTW7KAviO1mwiiksse4bWkeynBMxD/pbu4uiLA/ElKuo9zqqbdYE
mM0j9lmxuE4u9qRgIuBzd+vuYrfiFYQCwmcJcKF3EL44ohPxxaVgCyy4cPNOww2Q
L6wWVzKJZQ4/LKjUAZFgLQRB8Wdnk77UoGAXwv6mj+o2M3POL5r1B2cfiGaALlRE
fdxMuh37F7nrPgbnOrKCL2Wd3Z1/+ecHpz7jYYkn7nxOPcQuMuxrgLJT0FbYHDSk
FC5edZ80h/paKNUh6qvkZ0Il26ZvEI5AZYFbwrkQxjGb/3V3EcxuLB/XJOtVs3r+
+wzqKzfzJxwfM2VyuMq2sXX9vA==
-----END CERTIFICATE-----