Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
File:                     06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft (raw, json)
Hash identifier:          +Qi+0r9bAV1nN2dSCPvpskbsvQw//P+l2KrmhmflYZ0=
Subject key identifier:   10:D4:8E:DA:74:B7:CE:C7:A9:0E:4C:E8:6B:97:B0:23:30:E5:60:7C
Authority key identifier: 06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB
Certificate issuer:       /CN=06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB
Certificate serial:       3AACFFC1D0F39FDFD476F1A209E8EA141E971DAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
Manifest number:          51
Signing time:             Fri 23 Feb 2024 06:05:02 +0000
Manifest this update:     Fri 23 Feb 2024 06:00:02 +0000
Manifest next update:     Sat 24 Feb 2024 06:45:02 +0000
Files and hashes:         1: 34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa (hash: rPcuukheHEknH3LA+viNE7n27cB0i0ZxXxOjwokVx3c=)
                          2: 323830343a343763633a3a2f33322d3332203d3e20323637303737.roa (hash: s6kViMrCDI/cCIs3Lae/cjaTITHsJE2Xma6DSpDn97E=)
                          3: 06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.crl (hash: /Lv2Vu7NkMu0OWRUgPkceZ5+/x/1/bqycPlkC3ZvL6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ac:ff:c1:d0:f3:9f:df:d4:76:f1:a2:09:e8:ea:14:1e:97:1d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB
        Validity
            Not Before: Feb 23 06:00:02 2024 GMT
            Not After : Feb 24 06:45:02 2024 GMT
        Subject: CN=10D48EDA74B7CEC7A90E4CE86B97B02330E5607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:c1:ae:26:84:d9:b2:85:3b:a0:53:58:72:
                    5b:30:d8:d3:88:ae:90:eb:d5:23:f7:c6:e7:37:e5:
                    86:35:34:eb:4f:e8:07:f2:5a:41:ac:2d:f8:90:8b:
                    3c:fa:2b:a0:f3:60:d2:55:00:cf:db:44:8b:df:70:
                    3c:d1:bc:d2:b9:44:8c:b9:f0:5f:3f:37:55:93:9e:
                    1e:f5:99:4e:31:73:60:f6:04:cc:6b:40:1e:a7:55:
                    dd:c0:4c:d8:ec:51:e2:34:0e:06:ce:21:f8:83:76:
                    81:ca:eb:1a:1e:65:75:d2:91:71:c0:21:68:18:f2:
                    0f:4c:70:a5:f0:4f:26:69:06:9a:68:94:f5:81:49:
                    b1:d1:87:9a:06:98:da:4d:c7:3b:80:ed:38:74:d7:
                    89:2c:bd:5a:13:90:93:1b:9c:a3:7b:87:58:79:91:
                    0a:38:22:1b:49:6f:0b:93:e8:3a:e7:2f:ec:fc:fb:
                    8e:6f:63:c4:99:78:c6:61:15:87:b9:02:58:6c:e6:
                    84:1d:03:bd:e0:07:70:74:88:83:cf:4d:2a:76:b2:
                    28:d3:b6:83:61:76:dd:c6:4c:9b:33:82:e5:0c:d0:
                    2b:b8:0e:b4:e5:1c:ae:ae:cd:d8:02:d9:db:e6:d8:
                    a6:06:84:f1:a2:2d:a4:78:d0:a9:6b:c7:82:ba:ef:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:8E:DA:74:B7:CE:C7:A9:0E:4C:E8:6B:97:B0:23:30:E5:60:7C
            X509v3 Authority Key Identifier:
                keyid:06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:5a:87:0c:dc:70:6b:fa:12:9a:66:be:7c:73:f5:c3:2f:
         a3:f4:2a:b0:ea:d5:2d:f1:c1:0d:b2:24:4e:30:0b:8e:ee:8d:
         01:d1:98:2a:99:3a:a1:34:13:1c:3f:7c:1f:94:f7:23:8e:63:
         36:97:73:cd:1d:ac:cf:6c:3d:e8:e3:83:65:32:e4:5d:01:d3:
         a6:e9:5f:59:80:8b:aa:82:2f:58:1a:b1:9c:fd:a6:46:1d:14:
         86:da:b2:12:5a:02:6b:ec:5f:5d:95:a2:88:06:c6:c0:74:94:
         1c:e0:c8:98:e3:c3:67:fe:64:b6:e0:7b:c1:e0:2b:73:91:e9:
         b3:79:37:2e:4a:d7:c0:1a:25:f5:75:18:67:b3:d5:7f:5a:b0:
         d5:84:5f:80:c9:70:5b:5b:ef:a9:8e:9e:54:6a:08:33:30:be:
         3a:a5:cc:7a:b3:03:cf:eb:12:02:a8:c6:58:01:59:4f:df:2f:
         73:ae:a7:09:e4:f8:f4:40:c7:51:1d:97:b7:7e:f9:a6:33:70:
         1f:23:59:40:9d:14:8c:64:8c:ed:11:2d:17:b6:46:fc:a9:68:
         ff:c2:b8:2c:d6:ca:f2:63:22:dd:78:b5:0e:51:2a:9f:51:65:
         60:ca:e8:1b:cb:81:95:8e:25:3d:54:04:c0:27:61:cd:fb:02:
         8b:50:d6:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOqz/wdDzn9/UdvGiCejqFB6XHaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDNTgxNkJBQjlGM0YzQUIxNENEQjBBNEYwOUY2RkRE
MDU2RDRGQjAeFw0yNDAyMjMwNjAwMDJaFw0yNDAyMjQwNjQ1MDJaMDMxMTAvBgNV
BAMTKDEwRDQ4RURBNzRCN0NFQzdBOTBFNENFODZCOTdCMDIzMzBFNTYwN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJsGuJoTZsoU7oFNYclsw2NOI
rpDr1SP3xuc35YY1NOtP6AfyWkGsLfiQizz6K6DzYNJVAM/bRIvfcDzRvNK5RIy5
8F8/N1WTnh71mU4xc2D2BMxrQB6nVd3ATNjsUeI0DgbOIfiDdoHK6xoeZXXSkXHA
IWgY8g9McKXwTyZpBppolPWBSbHRh5oGmNpNxzuA7Th014ksvVoTkJMbnKN7h1h5
kQo4IhtJbwuT6DrnL+z8+45vY8SZeMZhFYe5Alhs5oQdA73gB3B0iIPPTSp2sijT
toNhdt3GTJszguUM0Cu4DrTlHK6uzdgC2dvm2KYGhPGiLaR40Klrx4K676/TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUENSO2nS3zsepDkzoa5ewIzDlYHwwHwYDVR0j
BBgwFoAUBsWBa6ufPzqxTNsKTwn2/dBW1PswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL
MUovMC8wNkM1ODE2QkFCOUYzRjNBQjE0Q0RCMEE0RjA5RjZGREQwNTZENEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA2QzU4MTZCQUI5RjNGM0FC
MTRDREIwQTRGMDlGNkZERDA1NkQ0RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC8w
NkM1ODE2QkFCOUYzRjNBQjE0Q0RCMEE0RjA5RjZGREQwNTZENEZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALrlahwzccGv6Eppmvnxz9cMvo/QqsOrVLfHBDbIkTjALju6NAdGYKpk6oTQT
HD98H5T3I45jNpdzzR2sz2w96OODZTLkXQHTpulfWYCLqoIvWBqxnP2mRh0Uhtqy
EloCa+xfXZWiiAbGwHSUHODImOPDZ/5ktuB7weArc5Hps3k3LkrXwBol9XUYZ7PV
f1qw1YRfgMlwW1vvqY6eVGoIMzC+OqXMerMDz+sSAqjGWAFZT98vc66nCeT49EDH
UR2Xt375pjNwHyNZQJ0UjGSM7REtF7ZG/Klo/8K4LNbK8mMi3Xi1DlEqn1FlYMro
G8uBlY4lPVQEwCdhzfsCi1DW8g==
-----END CERTIFICATE-----