Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft
File:                     5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft (raw, json)
Hash identifier:          PQesVSJdeBmYjyoYwqoN0CXqsF8tvkmsQ4/JYo0qj7o=
Subject key identifier:   4C:CE:66:30:6D:FE:8B:62:C3:98:7A:0A:E1:29:B6:10:00:D3:37:F7
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Certificate issuer:       /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial:       026F5720570C44FD5D210F2F5AF5B30F8841A076
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft
Manifest number:          0295
Signing time:             Sun 14 Apr 2024 23:23:14 +0000
Manifest this update:     Sun 14 Apr 2024 23:18:14 +0000
Manifest next update:     Tue 16 Apr 2024 02:02:14 +0000
Files and hashes:         1: 5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl (hash: fa+3k0onPvxVQvo4LMrdlQQStk+JAwj49F44Qq3gYm0=)
                          2: 3133382e3132322e32302e302f32322d3234203d3e20323634333038.roa (hash: ScMaShlogN6ltDLgyRYNxKgpUhR4yYSODHHkXK1Vok0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6f:57:20:57:0c:44:fd:5d:21:0f:2f:5a:f5:b3:0f:88:41:a0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Validity
            Not Before: Apr 14 23:18:14 2024 GMT
            Not After : Apr 16 02:02:14 2024 GMT
        Subject: CN=4CCE66306DFE8B62C3987A0AE129B61000D337F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:b8:84:48:a4:6e:ce:57:ed:e2:00:9a:2e:
                    b2:e4:81:b7:12:89:7c:37:0f:bc:e9:50:b1:0c:45:
                    c0:b9:e2:84:40:d9:1f:c8:0e:96:f2:52:60:f4:a1:
                    08:bd:04:ba:52:ad:fc:94:b0:55:e7:15:42:47:bb:
                    fe:e4:1d:d4:cd:8e:f9:34:dd:5e:1e:7d:af:be:9b:
                    e4:59:5d:63:1d:8d:fe:03:bd:cf:db:d2:0f:75:0c:
                    2f:9d:41:1a:90:86:1d:d8:77:fb:db:dd:05:fa:e8:
                    a5:50:26:7b:99:75:2f:0e:a4:8d:4c:2e:53:94:da:
                    46:75:8b:39:83:23:1d:8e:f6:aa:fd:5e:b1:2d:23:
                    bc:77:f1:e2:2d:bf:a5:18:b5:5e:b4:9f:ad:29:a7:
                    0e:bf:85:56:3d:21:0b:69:92:4f:f0:7c:f2:cd:ac:
                    9c:16:91:92:39:c5:1a:22:a9:b0:63:9f:27:3e:eb:
                    be:78:b4:f7:47:65:d8:c3:53:19:de:59:98:9c:68:
                    b2:d7:89:c7:f5:5c:41:1c:e3:6a:dd:53:29:89:82:
                    6e:7e:11:1a:81:f0:22:05:bc:d3:75:6e:6a:8f:c2:
                    68:09:55:98:51:61:2b:22:52:09:72:cd:f3:57:d9:
                    7c:4f:e4:d6:78:c4:e1:0c:7d:67:4c:e1:15:03:f7:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CE:66:30:6D:FE:8B:62:C3:98:7A:0A:E1:29:B6:10:00:D3:37:F7
            X509v3 Authority Key Identifier:
                keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:51:e1:57:0c:07:98:60:0b:91:6d:39:d8:3c:1d:fe:0e:00:
         78:9f:cc:34:8b:b5:00:ae:10:1b:f1:2d:5e:93:69:5a:b1:af:
         1a:ab:fb:49:65:07:9f:94:41:eb:4f:1c:1e:c8:91:3b:a6:42:
         e7:e2:54:4b:3f:46:cc:5d:86:bf:1b:cc:99:05:80:2c:af:58:
         1a:5a:cd:28:24:d5:1e:b5:03:bb:78:0f:8a:11:69:b4:44:13:
         a7:fe:37:aa:18:f6:c3:99:98:02:11:66:eb:66:f5:d2:03:42:
         1d:ca:6a:59:0e:36:a8:ec:a3:b8:40:72:7e:a1:12:17:b2:9e:
         b5:d9:ee:a7:74:f4:6a:87:59:2c:47:d9:0a:44:6c:26:fc:56:
         a6:ca:1c:e7:38:f0:99:5a:92:a5:2b:52:df:1a:0b:2b:8d:c2:
         6d:f9:cc:d2:52:c5:3d:f4:de:1b:8e:70:e4:53:5f:7f:aa:10:
         50:69:13:e1:59:e8:61:a2:e5:98:ad:b9:ba:0e:a4:83:b2:31:
         36:e7:c0:df:05:2a:57:57:98:b0:0b:99:ba:bd:83:e4:89:3f:
         43:d3:49:a5:07:b5:17:8d:d7:06:22:62:4e:0a:cc:3a:7a:e3:
         8f:fe:1a:9a:61:07:64:11:e2:b8:14:3c:84:50:db:0e:d6:06:
         a3:34:e6:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAm9XIFcMRP1dIQ8vWvWzD4hBoHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxRkFGQjBCMkEzMEQwQThEQzBGNkVGQzEwNUY2QUVB
ODlFRDIzNjAeFw0yNDA0MTQyMzE4MTRaFw0yNDA0MTYwMjAyMTRaMDMxMTAvBgNV
BAMTKDRDQ0U2NjMwNkRGRThCNjJDMzk4N0EwQUUxMjlCNjEwMDBEMzM3RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KbiESKRuzlft4gCaLrLkgbcS
iXw3D7zpULEMRcC54oRA2R/IDpbyUmD0oQi9BLpSrfyUsFXnFUJHu/7kHdTNjvk0
3V4efa++m+RZXWMdjf4Dvc/b0g91DC+dQRqQhh3Yd/vb3QX66KVQJnuZdS8OpI1M
LlOU2kZ1izmDIx2O9qr9XrEtI7x38eItv6UYtV60n60ppw6/hVY9IQtpkk/wfPLN
rJwWkZI5xRoiqbBjnyc+6754tPdHZdjDUxneWZicaLLXicf1XEEc42rdUymJgm5+
ERqB8CIFvNN1bmqPwmgJVZhRYSsiUglyzfNX2XxP5NZ4xOEMfWdM4RUD92ADAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTM5mMG3+i2LDmHoK4Sm2EADTN/cwHwYDVR0j
BBgwFoAUXR+vsLKjDQqNwPbvwQX2rqie0jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVmN2RVZThzazZkUjdzb3pOTkxvdFJrZUU1TjV4czlRZEJMNjZSZmpw
b3kvMC81RDFGQUZCMEIyQTMwRDBBOERDMEY2RUZDMTA1RjZBRUE4OUVEMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEMUZBRkIwQjJBMzBEMEE4
REMwRjZFRkMxMDVGNkFFQTg5RUQyMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWVmN2RVZThzazZkUjdzb3pOTkxvdFJrZUU1TjV4czlRZEJMNjZSZmpwb3kvMC81
RDFGQUZCMEIyQTMwRDBBOERDMEY2RUZDMTA1RjZBRUE4OUVEMjM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyFHhVwwHmGALkW052Dwd/g4AeJ/MNIu1AK4QG/EtXpNpWrGvGqv7SWUHn5RB
608cHsiRO6ZC5+JUSz9GzF2GvxvMmQWALK9YGlrNKCTVHrUDu3gPihFptEQTp/43
qhj2w5mYAhFm62b10gNCHcpqWQ42qOyjuEByfqESF7Ketdnup3T0aodZLEfZCkRs
JvxWpsoc5zjwmVqSpStS3xoLK43CbfnM0lLFPfTeG45w5FNff6oQUGkT4VnoYaLl
mK25ug6kg7IxNufA3wUqV1eYsAuZur2D5Ik/Q9NJpQe1F43XBiJiTgrMOnrjj/4a
mmEHZBHiuBQ8hFDbDtYGozTmbg==
-----END CERTIFICATE-----