Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.mft
File:                     4BFA8C2A990E221C38D68568DF93251E9944A97D.mft (raw, json)
Hash identifier:          3gEMdT7qtSRx4VOg9TRXq5C0S/QTItnF8JKv/kJLA18=
Subject key identifier:   DB:15:7E:4D:33:87:6F:9D:B9:F8:ED:7A:72:F9:03:1A:DF:C9:A0:89
Authority key identifier: 4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Certificate issuer:       /CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
Certificate serial:       191D5D9BD6DFFF9FF504FB336DAD0250D4D7F7E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.mft
Manifest number:          01F3
Signing time:             Sun 14 Apr 2024 20:41:29 +0000
Manifest this update:     Sun 14 Apr 2024 20:36:29 +0000
Manifest next update:     Mon 15 Apr 2024 21:47:29 +0000
Files and hashes:         1: 4BFA8C2A990E221C38D68568DF93251E9944A97D.crl (hash: aSWtWObNIm50R9PZD3pUYwSy+Dnwss1yQFkncCGspSE=)
                          2: 3230312e37362e3130342e302f32312d3231203d3e20323632373932.roa (hash: wzow8CN5Fdts8u5SVPo5Q33XmqjygwTOFD3+XqnC0ts=)
                          3: 3230312e37362e39362e302f32322d3232203d3e20323632373932.roa (hash: P/4/gU1UwXP7KbLzDzM26ous6J6o7usxnVvhd31G/SY=)
                          4: 3230312e37362e39362e302f32312d3231203d3e20323632373932.roa (hash: idDamLjUVpJ9iFgEcz7BKYsGcp2IgkjyWZkX0MjeZSM=)
                          5: 3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa (hash: qFRMAQf+eybxGB4J4goOdBxFnLS/RlP0geqjaYbpwbs=)
                          6: 323830343a3232343a3a2f33322d3332203d3e20323632373932.roa (hash: oTzLf+fekwBt1+OqFmCii+fQpOn/0HMhiR6/qPgFSH0=)
                          7: 3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa (hash: q7W4uoqFZXLNpiuizxJrsGZXpNmOYHwRjGIU/Pj9smg=)
                          8: 3230312e37362e39362e302f32302d3230203d3e20323632373932.roa (hash: qYgMWWnZirjVnnN1/3CaRYyvU0vJGlg5akMSc7y+7vM=)
                          9: 3230312e37362e3130342e302f32322d3232203d3e20323632373932.roa (hash: PDmsTt7T63sJ6PyhIWXDTGHSlbasIJRwA3KH1o82EeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:5d:9b:d6:df:ff:9f:f5:04:fb:33:6d:ad:02:50:d4:d7:f7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Validity
            Not Before: Apr 14 20:36:29 2024 GMT
            Not After : Apr 15 21:47:29 2024 GMT
        Subject: CN=DB157E4D33876F9DB9F8ED7A72F9031ADFC9A089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:44:48:0b:e4:b7:62:6e:3b:16:6c:a7:ea:
                    48:f6:30:78:5a:bc:59:6f:f2:cc:81:c7:d5:8a:d9:
                    7f:90:a3:76:d6:23:70:c1:7d:90:af:9a:54:75:b4:
                    4d:08:b8:b7:5a:e0:68:c3:a6:19:c1:d4:f7:a3:ed:
                    5a:04:73:5d:7d:96:6c:39:0b:62:5a:e9:18:48:5c:
                    91:7a:b1:d1:e2:f5:0a:e0:f9:0b:45:b2:f8:33:b8:
                    f6:d3:f7:45:b9:c8:ed:00:17:a1:12:c2:f3:77:fa:
                    75:0b:8d:3b:a9:9b:86:ca:20:0f:c3:da:b2:69:5d:
                    02:6e:46:ce:5f:99:9b:48:4a:3f:7d:ef:76:81:2c:
                    3f:7e:76:6c:e9:81:de:6b:54:b5:f6:13:38:28:74:
                    e8:57:8e:94:43:4e:ab:46:ba:7b:c5:bf:6a:54:26:
                    2a:0e:0b:30:3d:b4:06:91:6c:cb:6f:57:0d:14:17:
                    ea:e8:31:65:c3:de:14:8c:ef:1a:72:0f:12:96:95:
                    e5:11:b8:5e:4a:22:0e:55:80:e0:ea:d9:54:fe:f8:
                    29:cd:8d:c8:f0:74:29:ac:30:82:c0:b0:13:96:49:
                    fb:b6:79:73:cf:37:63:0a:ce:f4:0b:e4:c3:c4:73:
                    17:85:f7:cf:a2:63:88:f9:f0:2c:b5:88:28:67:24:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:7E:4D:33:87:6F:9D:B9:F8:ED:7A:72:F9:03:1A:DF:C9:A0:89
            X509v3 Authority Key Identifier:
                keyid:4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:36:3f:47:3f:72:b4:50:a6:e4:89:7b:de:03:28:90:67:
         1c:79:f2:4c:09:79:b3:b8:0a:3a:9d:a0:ac:fa:6d:d5:62:69:
         ba:6d:83:34:fb:5a:13:b5:59:53:10:6c:32:8d:7f:b1:37:0d:
         43:f9:9b:2e:01:86:97:b0:e1:4a:e5:42:3f:59:e9:50:a1:25:
         8c:e0:96:bb:dd:64:ca:53:ea:e3:a8:36:43:c3:ef:4f:fa:21:
         9b:f3:48:6f:43:ec:cf:db:5f:02:72:01:0e:e3:1b:89:04:91:
         6e:2c:66:e4:f8:4f:e6:a9:ac:9d:80:6e:16:a2:92:e7:a3:7c:
         78:c4:a0:fd:1a:ce:f1:73:cc:c5:0f:26:e7:2f:fa:48:fa:65:
         44:5a:a3:2b:e9:73:ef:af:61:2b:62:ad:2c:30:8d:2a:31:9b:
         e7:5e:06:3b:43:f6:c9:6d:41:ae:90:aa:7b:96:a2:e6:d6:b6:
         af:4c:11:cd:1f:b3:e4:41:62:90:ff:20:97:ec:1d:a5:1b:59:
         16:d7:77:27:20:4c:f6:5f:3f:13:61:75:eb:1f:4e:c7:2c:a7:
         7d:b2:43:22:53:f8:1b:7d:cf:b8:5a:a1:b0:a2:f6:0c:bf:d6:
         62:35:3b:c1:d0:17:ab:56:b3:19:9a:8c:f0:a0:bd:a8:be:a8:
         76:c6:51:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGR1dm9bf/5/1BPszba0CUNTX9+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGQThDMkE5OTBFMjIxQzM4RDY4NTY4REY5MzI1MUU5
OTQ0QTk3RDAeFw0yNDA0MTQyMDM2MjlaFw0yNDA0MTUyMTQ3MjlaMDMxMTAvBgNV
BAMTKERCMTU3RTREMzM4NzZGOURCOUY4RUQ3QTcyRjkwMzFBREZDOUEwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZURIC+S3Ym47Fmyn6kj2MHha
vFlv8syBx9WK2X+Qo3bWI3DBfZCvmlR1tE0IuLda4GjDphnB1Pej7VoEc119lmw5
C2Ja6RhIXJF6sdHi9Qrg+QtFsvgzuPbT90W5yO0AF6ESwvN3+nULjTupm4bKIA/D
2rJpXQJuRs5fmZtISj9973aBLD9+dmzpgd5rVLX2EzgodOhXjpRDTqtGunvFv2pU
JioOCzA9tAaRbMtvVw0UF+roMWXD3hSM7xpyDxKWleURuF5KIg5VgODq2VT++CnN
jcjwdCmsMILAsBOWSfu2eXPPN2MKzvQL5MPEcxeF98+iY4j58Cy1iChnJDxJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2xV+TTOHb525+O16cvkDGt/JoIkwHwYDVR0j
BBgwFoAUS/qMKpkOIhw41oVo35MlHplEqX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMC80QkZBOEMyQTk5MEUyMjFDMzhENjg1NjhERjkzMjUxRTk5NDRBOTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCRkE4QzJBOTkwRTIyMUMz
OEQ2ODU2OERGOTMyNTFFOTk0NEE5N0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3OVMvMC80
QkZBOEMyQTk5MEUyMjFDMzhENjg1NjhERjkzMjUxRTk5NDRBOTdELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABGs2P0c/crRQpuSJe94DKJBnHHnyTAl5s7gKOp2grPpt1WJpum2DNPtaE7VZ
UxBsMo1/sTcNQ/mbLgGGl7DhSuVCP1npUKEljOCWu91kylPq46g2Q8PvT/ohm/NI
b0Psz9tfAnIBDuMbiQSRbixm5PhP5qmsnYBuFqKS56N8eMSg/RrO8XPMxQ8m5y/6
SPplRFqjK+lz769hK2KtLDCNKjGb514GO0P2yW1BrpCqe5ai5ta2r0wRzR+z5EFi
kP8gl+wdpRtZFtd3JyBM9l8/E2F16x9OxyynfbJDIlP4G33PuFqhsKL2DL/WYjU7
wdAXq1azGZqM8KC9qL6odsZRrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org