Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.mft
File:                     5CB9E888F81253676155F413B2AE484B47AF5245.mft (raw, json)
Hash identifier:          BnItArZNIXVZi/zj8GFJQYNX+Zo7U3cFfnCFjTVuz+Q=
Subject key identifier:   DA:16:E6:29:6F:B5:E4:E0:B7:B5:BC:32:98:C5:36:0F:C4:4F:56:21
Authority key identifier: 5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45
Certificate issuer:       /CN=5CB9E888F81253676155F413B2AE484B47AF5245
Certificate serial:       3C419E6E958FDEF9570A464C1E9861761C1E6755
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.mft
Manifest number:          01EF
Signing time:             Mon 15 Apr 2024 00:57:31 +0000
Manifest this update:     Mon 15 Apr 2024 00:52:31 +0000
Manifest next update:     Tue 16 Apr 2024 02:49:31 +0000
Files and hashes:         1: 5CB9E888F81253676155F413B2AE484B47AF5245.crl (hash: AKWpEJ9VJez2bY0c4ItbIvvvYzHVoDhiFilVkvTQ4IA=)
                          2: 323830343a313138633a3a2f33322d3430203d3e203533313832.roa (hash: Jf6GYEXzGuf/madC/2uGkUKwSaKa0HSgw61Tdo8hgNU=)
                          3: 3138362e3232372e31362e302f32302d3234203d3e203533313832.roa (hash: 32Mxl6+r3TpOJTqBxY5am7N5PPtDAAULURmLWPlQzM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:41:9e:6e:95:8f:de:f9:57:0a:46:4c:1e:98:61:76:1c:1e:67:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9E888F81253676155F413B2AE484B47AF5245
        Validity
            Not Before: Apr 15 00:52:31 2024 GMT
            Not After : Apr 16 02:49:31 2024 GMT
        Subject: CN=DA16E6296FB5E4E0B7B5BC3298C5360FC44F5621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:b4:45:8e:3d:3f:07:65:51:73:c5:05:5f:
                    db:d0:38:81:d4:eb:88:61:e6:5a:a7:19:2f:95:87:
                    26:75:15:34:59:1c:9a:5a:3b:7a:b0:e9:34:ba:dc:
                    db:4d:89:c1:7b:5f:fb:fa:4b:24:c0:be:a9:43:21:
                    89:87:c6:09:37:47:89:8c:17:48:88:0a:5a:47:b1:
                    1e:b4:2f:33:84:2d:7f:2b:fa:03:2f:96:42:50:24:
                    7b:dd:99:35:67:d6:78:58:80:f6:0a:43:7e:43:87:
                    38:34:3b:f4:cb:50:19:7b:83:c5:7b:2d:e9:a5:14:
                    48:e6:34:61:84:28:40:8c:89:08:7d:d8:f2:e4:b0:
                    62:de:8c:15:b3:78:a7:37:ae:28:d9:d8:39:dc:82:
                    85:e4:0d:eb:65:fd:14:5b:d9:ce:f3:c1:69:9f:ca:
                    82:91:4a:9f:19:64:4b:e8:81:ca:9a:21:db:8b:99:
                    0e:7b:39:e0:62:e7:0e:69:4f:a6:97:66:2b:67:de:
                    00:42:4b:51:d4:59:6c:3c:fe:da:e0:1c:e8:2a:11:
                    ac:b4:62:05:2e:83:43:59:88:01:d0:53:88:3a:80:
                    c9:dc:35:e9:94:0d:2c:a0:93:5d:e8:0b:a0:5a:fe:
                    ad:bb:8e:7c:52:bc:3c:f6:4c:2b:a2:ed:d8:74:97:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:E6:29:6F:B5:E4:E0:B7:B5:BC:32:98:C5:36:0F:C4:4F:56:21
            X509v3 Authority Key Identifier:
                keyid:5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:08:76:8e:c7:0d:fd:a3:e0:7f:50:10:c8:85:4c:ac:86:29:
         b5:99:60:6a:aa:83:a8:cc:4a:b2:e1:c6:9d:75:b6:ac:54:1e:
         1d:c6:c9:89:8d:4c:11:64:15:28:f5:3a:9d:35:af:b4:f9:1b:
         00:a4:8b:7c:dc:0a:f5:14:c6:af:a7:17:3b:58:70:69:69:6d:
         8b:40:6d:dc:08:4a:0b:60:af:b1:26:a2:46:47:24:81:60:d9:
         6d:8e:33:e7:df:4e:70:a9:38:11:a9:1b:0b:50:dd:28:09:d2:
         db:01:e3:49:10:99:af:83:57:a0:01:03:21:d2:54:e1:49:58:
         bd:5e:f7:21:3c:2d:1c:89:3b:03:b7:83:14:61:69:c7:e8:03:
         09:a8:18:56:a7:3c:81:73:e4:e3:35:7a:d6:fb:5e:3a:06:12:
         82:9e:ee:53:ec:51:93:c0:60:50:8a:4b:0b:b3:97:78:31:c1:
         c4:93:e9:3b:76:fe:95:8b:ab:09:d9:6a:70:3c:34:1f:cf:e2:
         49:3c:5f:4d:94:5c:80:cd:74:78:f1:98:cb:86:36:18:92:3e:
         1d:6c:e1:02:d8:de:dc:15:32:d4:87:f7:80:ef:a6:d6:bf:08:
         6f:36:08:7a:c1:5e:83:27:d3:ed:98:70:17:66:d6:d8:b1:fe:
         c5:88:87:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPEGebpWP3vlXCkZMHphhdhweZ1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCOUU4ODhGODEyNTM2NzYxNTVGNDEzQjJBRTQ4NEI0
N0FGNTI0NTAeFw0yNDA0MTUwMDUyMzFaFw0yNDA0MTYwMjQ5MzFaMDMxMTAvBgNV
BAMTKERBMTZFNjI5NkZCNUU0RTBCN0I1QkMzMjk4QzUzNjBGQzQ0RjU2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/LRFjj0/B2VRc8UFX9vQOIHU
64hh5lqnGS+VhyZ1FTRZHJpaO3qw6TS63NtNicF7X/v6SyTAvqlDIYmHxgk3R4mM
F0iIClpHsR60LzOELX8r+gMvlkJQJHvdmTVn1nhYgPYKQ35Dhzg0O/TLUBl7g8V7
LemlFEjmNGGEKECMiQh92PLksGLejBWzeKc3rijZ2DncgoXkDetl/RRb2c7zwWmf
yoKRSp8ZZEvogcqaIduLmQ57OeBi5w5pT6aXZitn3gBCS1HUWWw8/trgHOgqEay0
YgUug0NZiAHQU4g6gMncNemUDSygk13oC6Ba/q27jnxSvDz2TCui7dh0l2CJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2hbmKW+15OC3tbwymMU2D8RPViEwHwYDVR0j
BBgwFoAUXLnoiPgSU2dhVfQTsq5IS0evUkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJXOFdGbVpjOXNGN3l5YkZMQlV2cm9FdjVONEV4VWtwYWVuaUtrdWJX
WngvMC81Q0I5RTg4OEY4MTI1MzY3NjE1NUY0MTNCMkFFNDg0QjQ3QUY1MjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDQjlFODg4RjgxMjUzNjc2
MTU1RjQxM0IyQUU0ODRCNDdBRjUyNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVJXOFdGbVpjOXNGN3l5YkZMQlV2cm9FdjVONEV4VWtwYWVuaUtrdWJXWngvMC81
Q0I5RTg4OEY4MTI1MzY3NjE1NUY0MTNCMkFFNDg0QjQ3QUY1MjQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmQh2jscN/aPgf1AQyIVMrIYptZlgaqqDqMxKsuHGnXW2rFQeHcbJiY1MEWQV
KPU6nTWvtPkbAKSLfNwK9RTGr6cXO1hwaWlti0Bt3AhKC2CvsSaiRkckgWDZbY4z
599OcKk4EakbC1DdKAnS2wHjSRCZr4NXoAEDIdJU4UlYvV73ITwtHIk7A7eDFGFp
x+gDCagYVqc8gXPk4zV61vteOgYSgp7uU+xRk8BgUIpLC7OXeDHBxJPpO3b+lYur
CdlqcDw0H8/iSTxfTZRcgM10ePGYy4Y2GJI+HWzhAtje3BUy1If3gO+m1r8IbzYI
esFegyfT7ZhwF2bW2LH+xYiHBQ==
-----END CERTIFICATE-----