Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.mft
File:                     D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.mft (raw, json)
Hash identifier:          Vsy713T1D329TS8NunuDnYxVgNYtHoXHb4y1aflcD00=
Subject key identifier:   52:4C:86:47:09:06:92:33:FC:B3:A9:2F:17:74:75:BC:0A:E7:92:FD
Authority key identifier: D3:D5:97:60:DF:2C:9A:2F:A0:3C:BD:55:A8:B9:5A:AA:BC:C5:B4:2B
Certificate issuer:       /CN=D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B
Certificate serial:       5034327CF873ADF39827A47B021D2D7FC15399A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.mft
Manifest number:          2C
Signing time:             Sat 02 Dec 2023 04:40:36 +0000
Manifest this update:     Sat 02 Dec 2023 04:35:36 +0000
Manifest next update:     Sun 03 Dec 2023 05:09:36 +0000
Files and hashes:         1: 323830343a366137383a3a2f33332d3333203d3e20323730333338.roa (hash: oTU5Y2GCrsF9CWnPPBKQ9EjYq5pSre4iCNBuWCO3s8k=)
                          2: D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.crl (hash: w+108EGtJRn7EOdMrYPU6PoYOh4nX6Uol3Ig2a5wk1I=)
                          3: 3139302e3131322e3133332e302f32342d3234203d3e20323730333338.roa (hash: WZ/fkyz4NUGi2o9XtnX8rWgVHxqYsJv2m7C6KYuu7Ng=)
                          4: 3139302e3131322e3133352e302f32342d3234203d3e20323730333338.roa (hash: 3pvFotabJ6whnX4zLr33pq8Evt9XLDTO9BLF/Y1q2RE=)
                          5: 323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa (hash: tBzOZ3VYuxyUbFCo07vjqBwH3wnAPBfEKRZ+sR21hXQ=)
                          6: 3139302e3131322e3133322e302f32322d3232203d3e20323730333338.roa (hash: IJVvewukX+cC80/Gzh2lV7J6cDzk0vm2b1/oXE7eSf8=)
                          7: 3139302e3131322e3133342e302f32342d3234203d3e20323730333338.roa (hash: 2Sij/NH2/BquEQUNlaLS36lvGsFf1TYIGRHzPc2RvQQ=)
                          8: 323830343a366137383a3a2f33322d3332203d3e20323730333338.roa (hash: uClJxOdmUjbJvyduhYhgcFDPW/Rs2Ob3JJU8TKS+zXc=)
                          9: 3139302e3131322e3133322e302f32342d3234203d3e20323730333338.roa (hash: l/IJYHt7KxX7EbOkqbaEH1AjHktX+tfnIYoTzDoIgBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:34:32:7c:f8:73:ad:f3:98:27:a4:7b:02:1d:2d:7f:c1:53:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B
        Validity
            Not Before: Dec  2 04:35:36 2023 GMT
            Not After : Dec  3 05:09:36 2023 GMT
        Subject: CN=524C864709069233FCB3A92F177475BC0AE792FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:47:a3:fb:d4:79:34:40:9e:da:32:4f:3d:
                    e6:57:e4:02:dd:21:10:84:54:ba:46:2a:38:28:4c:
                    bf:f9:21:8e:27:e6:29:4f:58:ba:0d:61:71:f4:ad:
                    62:44:5b:42:c5:67:50:71:6c:54:21:f2:1c:bf:94:
                    87:cf:6c:3f:31:ce:be:20:99:50:0e:d6:a1:f6:d1:
                    0e:19:df:2f:50:8f:6e:08:0f:56:56:b4:f4:c7:c6:
                    18:1c:81:43:10:52:37:45:2d:fb:a7:74:2e:a0:0e:
                    6d:f1:1c:99:fd:30:9c:7e:36:c9:10:99:2d:45:63:
                    21:e9:03:69:d8:60:24:5d:c4:54:36:78:3d:0f:c9:
                    24:91:aa:3d:b5:06:22:f0:ae:a3:ad:74:11:7f:ad:
                    18:c8:92:71:6b:66:b6:22:7f:7a:2a:1a:b7:03:ae:
                    1d:17:1b:a9:03:31:83:27:90:cb:3e:c0:0f:a6:99:
                    72:fb:de:70:72:06:69:59:11:1b:58:fb:83:68:3c:
                    5f:75:60:ea:9d:83:81:7e:8f:89:a3:f3:15:15:6c:
                    45:62:ad:53:2d:d8:bf:a0:5c:ae:10:55:aa:58:75:
                    82:f3:b3:f4:32:d4:87:e6:9c:34:8e:5d:94:02:c1:
                    eb:af:3b:c3:df:88:4f:a2:7f:54:d7:ca:c8:ea:65:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:86:47:09:06:92:33:FC:B3:A9:2F:17:74:75:BC:0A:E7:92:FD
            X509v3 Authority Key Identifier:
                keyid:D3:D5:97:60:DF:2C:9A:2F:A0:3C:BD:55:A8:B9:5A:AA:BC:C5:B4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/D3D59760DF2C9A2FA03CBD55A8B95AAABCC5B42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d4:f9:ab:b4:91:40:34:da:2a:26:ab:a3:d0:3a:72:9d:12:
         8e:17:78:84:92:10:ec:ba:87:2a:36:23:d4:03:25:70:6e:b6:
         cd:d1:21:5b:48:d4:33:c3:fb:2b:e9:0d:78:87:94:95:af:ab:
         bb:af:d0:23:bf:a4:ea:9f:e4:4e:e8:8f:f2:33:c8:c2:38:20:
         2f:c1:a6:f1:61:26:a7:48:a2:8d:68:1b:0a:98:a8:05:2c:32:
         a9:3a:e8:e7:5d:aa:36:d3:71:2f:7d:ab:3e:ab:70:04:3a:a0:
         43:05:c5:54:e0:66:61:9b:dc:63:21:ea:81:51:8c:ab:05:9e:
         a6:68:d3:52:c3:51:c9:79:5d:90:00:60:c2:08:0b:93:87:8b:
         0b:7a:ce:34:28:ca:ce:61:d8:42:24:18:88:70:a6:5f:c7:31:
         e8:4c:0a:5d:e6:b3:9c:5b:d9:8a:d0:f3:31:f3:9f:55:04:82:
         7a:59:9b:57:cc:b1:cf:1f:97:a7:b9:1d:fb:10:28:df:fb:97:
         d2:70:8b:82:bc:32:a9:99:56:f6:11:af:6a:47:e0:d2:b4:4f:
         cf:c0:68:0b:91:c3:4f:b5:94:7b:78:99:d7:c2:3f:29:21:62:
         92:e5:b1:01:cb:d6:92:8d:8b:68:65:51:79:f3:25:69:25:23:
         b4:5b:a6:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUDQyfPhzrfOYJ6R7Ah0tf8FTmaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNENTk3NjBERjJDOUEyRkEwM0NCRDU1QThCOTVBQUFC
Q0M1QjQyQjAeFw0yMzEyMDIwNDM1MzZaFw0yMzEyMDMwNTA5MzZaMDMxMTAvBgNV
BAMTKDUyNEM4NjQ3MDkwNjkyMzNGQ0IzQTkyRjE3NzQ3NUJDMEFFNzkyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdUej+9R5NECe2jJPPeZX5ALd
IRCEVLpGKjgoTL/5IY4n5ilPWLoNYXH0rWJEW0LFZ1BxbFQh8hy/lIfPbD8xzr4g
mVAO1qH20Q4Z3y9Qj24ID1ZWtPTHxhgcgUMQUjdFLfundC6gDm3xHJn9MJx+NskQ
mS1FYyHpA2nYYCRdxFQ2eD0PySSRqj21BiLwrqOtdBF/rRjIknFrZrYif3oqGrcD
rh0XG6kDMYMnkMs+wA+mmXL73nByBmlZERtY+4NoPF91YOqdg4F+j4mj8xUVbEVi
rVMt2L+gXK4QVapYdYLzs/Qy1IfmnDSOXZQCweuvO8PfiE+if1TXysjqZcVxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUkyGRwkGkjP8s6kvF3R1vArnkv0wHwYDVR0j
BBgwFoAU09WXYN8smi+gPL1VqLlaqrzFtCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoxUDdMV3JiSExadVBUWkJCRkFyZTdNMko2Q1hSemhGaTgxRTN5ZlpB
NngvMC9EM0Q1OTc2MERGMkM5QTJGQTAzQ0JENTVBOEI5NUFBQUJDQzVCNDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzRDU5NzYwREYyQzlBMkZB
MDNDQkQ1NUE4Qjk1QUFBQkNDNUI0MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHoxUDdMV3JiSExadVBUWkJCRkFyZTdNMko2Q1hSemhGaTgxRTN5ZlpBNngvMC9E
M0Q1OTc2MERGMkM5QTJGQTAzQ0JENTVBOEI5NUFBQUJDQzVCNDJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVtT5q7SRQDTaKiaro9A6cp0Sjhd4hJIQ7LqHKjYj1AMlcG62zdEhW0jUM8P7
K+kNeIeUla+ru6/QI7+k6p/kTuiP8jPIwjggL8Gm8WEmp0iijWgbCpioBSwyqTro
512qNtNxL32rPqtwBDqgQwXFVOBmYZvcYyHqgVGMqwWepmjTUsNRyXldkABgwggL
k4eLC3rONCjKzmHYQiQYiHCmX8cx6EwKXeaznFvZitDzMfOfVQSCelmbV8yxzx+X
p7kd+xAo3/uX0nCLgrwyqZlW9hGvakfg0rRPz8BoC5HDT7WUe3iZ18I/KSFikuWx
AcvWko2LaGVRefMlaSUjtFumFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org