Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.mft
File:                     7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.mft (raw, json)
Hash identifier:          c2XRAJ3NtopsZ6fVPifK61kP6IOOZmZacOjnzFFmY3s=
Subject key identifier:   DB:B0:A9:4D:F5:75:0F:D8:EC:66:8D:81:4C:87:F9:32:85:11:33:AD
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Certificate issuer:       /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial:       74B5B545022E1208718EFAF1ACEA308AB83E7CA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.mft
Manifest number:          C0
Signing time:             Tue 15 Aug 2023 10:10:03 +0000
Manifest this update:     Tue 15 Aug 2023 10:05:03 +0000
Manifest next update:     Wed 16 Aug 2023 13:14:03 +0000
Files and hashes:         1: 7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl (hash: WeyDmCby1eGJg0NF9NhfJcmL+ActpzC5Usn0+BFBp1Q=)
                          2: 323830343a333431383a633030303a3a2f33342d313238203d3e20323635343335.roa (hash: +2aIBEI8WZNu2YubyRCpKz4zsqkQw11+FAL39K181PY=)
                          3: 323830343a333431383a343030303a3a2f33342d313238203d3e20323635343335.roa (hash: fFUqBF+f84Q7vdKyAkXXSP85YhAsPUMQtwu0cHWGReo=)
                          4: 3136382e3139352e3135322e302f32332d3233203d3e20323635343335.roa (hash: vXU7UeI+5WUmJQOlEtR3zRHPbKnJDZxIeIKwHbwLa2s=)
                          5: 3136382e3139352e3135332e302f32342d3332203d3e20323635343335.roa (hash: 55w9zwQKPlPhbvNrHkFUA9FMhd3WNM+hJpHV8TQ2Gtc=)
                          6: 3136382e3139352e3135322e302f32342d3332203d3e20323635343335.roa (hash: 76SaW+VF+yZwCHIVCuQBoezRZkjVGCJHgDYw6Giem+4=)
                          7: 323830343a333431383a383030303a3a2f33342d313238203d3e20323635343335.roa (hash: 52/6fmY06+87MVAZsixlMmKpLLePvllZe6YyuY0iF/w=)
                          8: 3136382e3139352e3135342e302f32332d3332203d3e20323635343335.roa (hash: ybdS8HBZ3kzzqfr1QXDGkyGw/ud7pAHDLps5TWtdhLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b5:b5:45:02:2e:12:08:71:8e:fa:f1:ac:ea:30:8a:b8:3e:7c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
        Validity
            Not Before: Aug 15 10:05:03 2023 GMT
            Not After : Aug 16 13:14:03 2023 GMT
        Subject: CN=DBB0A94DF5750FD8EC668D814C87F932851133AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:91:70:a7:eb:6b:ff:ed:75:28:06:cf:5c:
                    14:3f:12:64:94:a4:47:94:c3:cd:96:d3:7f:95:7a:
                    bf:fc:3a:56:b0:67:b9:7f:41:42:2d:3d:1c:45:8e:
                    e1:1c:94:03:11:61:fb:d7:73:4b:ab:83:c8:cd:63:
                    45:38:f1:7f:ad:bd:ef:f1:f2:5b:ef:ff:6e:fc:57:
                    a1:4f:ef:d3:da:e6:20:96:e2:03:96:10:0c:f9:2a:
                    60:ad:bc:f1:26:d2:b3:c3:ca:81:a8:49:9f:22:cb:
                    ea:56:06:16:96:c2:d9:fd:1b:8d:ba:e0:12:d1:e9:
                    0b:b0:48:3b:93:bb:4d:1e:ac:68:31:f0:16:5b:76:
                    8e:f8:8b:3d:17:85:e4:6a:de:46:aa:10:d4:ae:8b:
                    e6:ff:9c:6e:05:e4:ea:48:4a:a2:80:1b:02:af:3e:
                    ff:10:45:f6:e0:43:e6:bf:23:9a:b1:5b:1d:5c:38:
                    15:09:43:97:82:f3:52:90:b9:e2:d1:1c:8e:b9:7f:
                    8f:42:3a:1c:ef:4c:ce:e3:d3:32:c6:7b:ad:d8:1e:
                    06:c6:9c:0d:7d:84:9a:e9:d4:31:f0:d4:4a:4b:72:
                    4d:9b:8f:37:6c:95:3f:85:03:62:60:87:9d:2e:d0:
                    2a:ec:2f:fc:23:fd:e4:0b:ae:4e:2e:66:50:7c:59:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:A9:4D:F5:75:0F:D8:EC:66:8D:81:4C:87:F9:32:85:11:33:AD
            X509v3 Authority Key Identifier:
                keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:24:b3:2e:85:5b:37:ed:ab:61:a2:4e:47:50:7d:af:28:ab:
         64:27:a6:c5:f3:d6:05:e7:54:f9:7f:8c:b8:fa:e3:eb:ed:dc:
         ec:87:c2:9c:c3:9d:7e:9e:95:c7:3c:49:7a:31:9f:c1:43:bd:
         15:82:a4:61:e7:9c:9f:cf:5a:39:47:b0:d7:36:3c:3e:fb:7f:
         4e:ea:2a:6e:be:16:8f:c6:31:91:ef:f3:ed:40:17:24:03:31:
         a5:1b:c2:b5:e5:92:86:45:96:ac:3d:01:b4:cd:1d:a8:1f:7b:
         0e:5e:78:fc:a2:af:86:82:2f:ac:dd:f0:11:63:ba:b8:57:d3:
         2a:8a:76:b2:ad:e6:0e:72:22:fc:db:6e:ac:19:26:5d:dc:1f:
         e2:70:c2:bc:fa:13:96:f3:ab:40:7e:ce:42:11:0b:05:20:0a:
         a1:e7:b2:90:c2:15:e3:ea:b8:c8:31:8c:d8:04:09:f4:8a:d1:
         ce:b2:b2:6d:70:85:ac:b5:8d:5f:5e:c9:0d:2e:0e:fc:1f:47:
         ab:e5:0c:9b:c9:7b:85:ac:d6:0e:03:16:5f:f5:dc:ed:88:80:
         4a:b2:b3:be:75:6c:69:21:f6:8f:2a:44:5e:06:93:8e:57:c0:
         f8:80:1a:fa:86:32:1d:aa:ab:f4:ed:2b:8a:2c:d5:a1:19:07:
         b2:80:f1:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdLW1RQIuEghxjvrxrOowirg+fKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FDM0Y4NkJCQjQxNEJBQ0U3OThDMzRCQkYyNDhBQkZG
RTQ4Q0I5QjAeFw0yMzA4MTUxMDA1MDNaFw0yMzA4MTYxMzE0MDNaMDMxMTAvBgNV
BAMTKERCQjBBOTRERjU3NTBGRDhFQzY2OEQ4MTRDODdGOTMyODUxMTMzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bZFwp+tr/+11KAbPXBQ/EmSU
pEeUw82W03+Ver/8OlawZ7l/QUItPRxFjuEclAMRYfvXc0urg8jNY0U48X+tve/x
8lvv/278V6FP79Pa5iCW4gOWEAz5KmCtvPEm0rPDyoGoSZ8iy+pWBhaWwtn9G426
4BLR6QuwSDuTu00erGgx8BZbdo74iz0XheRq3kaqENSui+b/nG4F5OpISqKAGwKv
Pv8QRfbgQ+a/I5qxWx1cOBUJQ5eC81KQueLRHI65f49COhzvTM7j0zLGe63YHgbG
nA19hJrp1DHw1EpLck2bjzdslT+FA2Jgh50u0CrsL/wj/eQLrk4uZlB8WSxZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU27CpTfV1D9jsZo2BTIf5MoURM60wHwYDVR0j
BBgwFoAUesP4a7tBS6znmMNLvySKv/5Iy5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVEzcERXR285dG9KTU51dWs1RUhmVzVOTkx4eFRTS3FEYmtOVDhKU0sz
MUUvMC83QUMzRjg2QkJCNDE0QkFDRTc5OEMzNEJCRjI0OEFCRkZFNDhDQjlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQzNGODZCQkI0MTRCQUNF
Nzk4QzM0QkJGMjQ4QUJGRkU0OENCOUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVEzcERXR285dG9KTU51dWs1RUhmVzVOTkx4eFRTS3FEYmtOVDhKU0szMUUvMC83
QUMzRjg2QkJCNDE0QkFDRTc5OEMzNEJCRjI0OEFCRkZFNDhDQjlCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcySzLoVbN+2rYaJOR1B9ryirZCemxfPWBedU+X+MuPrj6+3c7IfCnMOdfp6V
xzxJejGfwUO9FYKkYeecn89aOUew1zY8Pvt/Tuoqbr4Wj8Yxke/z7UAXJAMxpRvC
teWShkWWrD0BtM0dqB97Dl54/KKvhoIvrN3wEWO6uFfTKop2sq3mDnIi/NturBkm
Xdwf4nDCvPoTlvOrQH7OQhELBSAKoeeykMIV4+q4yDGM2AQJ9IrRzrKybXCFrLWN
X17JDS4O/B9Hq+UMm8l7hazWDgMWX/Xc7YiASrKzvnVsaSH2jypEXgaTjlfA+IAa
+oYyHaqr9O0riizVoRkHsoDxOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org