Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft
File:                     CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft (raw, json)
Hash identifier:          kZYBq4k43rCnplqUgabi4xVap+w4s6XrMIGzmjci27U=
Subject key identifier:   D0:B5:F1:81:DB:F5:94:AC:92:25:55:FE:91:C7:18:84:D9:54:AE:52
Authority key identifier: CD:34:30:34:DC:2C:83:57:9D:5C:18:F4:F6:F2:E2:C8:A7:00:B1:26
Certificate issuer:       /CN=CD343034DC2C83579D5C18F4F6F2E2C8A700B126
Certificate serial:       668F850F7AB7F652002AF6B1042990B7CBF7F406
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft
Manifest number:          1A
Signing time:             Thu 15 Feb 2024 17:53:30 +0000
Manifest this update:     Thu 15 Feb 2024 17:48:30 +0000
Manifest next update:     Fri 16 Feb 2024 19:54:30 +0000
Files and hashes:         1: 323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (hash: nMWUVsB+ew2/FNTNMS9jT5AsWc6jZlDashHBIyHMBAE=)
                          2: CD343034DC2C83579D5C18F4F6F2E2C8A700B126.crl (hash: Q0vrnc7QR6KBSI4UjRcQxUS070kqxqRonVkjtSXKzqM=)
                          3: 34352e372e3232342e302f32322d3234203d3e20323636363135.roa (hash: 8+xsuCzluixTTDkgoSgxRf7UcDj6LU8TTIurNAK5xt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:85:0f:7a:b7:f6:52:00:2a:f6:b1:04:29:90:b7:cb:f7:f4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD343034DC2C83579D5C18F4F6F2E2C8A700B126
        Validity
            Not Before: Feb 15 17:48:30 2024 GMT
            Not After : Feb 16 19:54:30 2024 GMT
        Subject: CN=D0B5F181DBF594AC922555FE91C71884D954AE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:ac:69:cb:7d:1e:cb:bd:25:b9:a7:74:22:
                    de:33:1e:56:c9:e9:b1:6d:b9:65:b4:93:ee:61:63:
                    1c:95:3a:a2:9e:44:0d:ff:ec:ac:fb:9a:64:51:3f:
                    7c:06:1e:5c:b4:29:16:3a:5f:66:3c:26:95:7f:13:
                    cc:ec:68:05:d3:49:85:24:5f:aa:80:61:20:96:cf:
                    a5:53:6f:23:fd:c9:86:1f:16:82:3f:09:5c:29:a6:
                    f2:5f:85:5a:b7:f0:e6:90:43:32:1b:e4:f4:6e:5e:
                    05:b5:cc:52:e9:67:3c:7b:e1:03:c4:12:7d:9b:81:
                    8c:e7:57:16:15:c6:89:f1:5c:f1:77:d4:71:8a:a0:
                    fc:54:1e:5e:e1:df:78:18:3f:13:9e:0f:79:27:fb:
                    5e:08:a3:de:e6:e4:32:6e:df:89:12:a3:07:ce:4b:
                    d8:94:e8:40:c2:45:5d:e3:40:a5:39:88:40:d7:55:
                    a6:61:2a:dc:b2:25:da:32:4b:07:64:11:40:0a:12:
                    5c:bd:69:a9:79:7f:aa:92:0a:0b:ad:42:d5:23:1a:
                    5e:ab:4c:4d:b8:a1:cb:f9:17:fc:16:0f:53:2a:88:
                    c1:a3:a0:e8:94:0b:9c:02:e0:37:7d:93:b6:3c:f3:
                    f6:97:e8:ee:ab:2d:a7:dc:7d:2e:80:30:e7:ca:12:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:F1:81:DB:F5:94:AC:92:25:55:FE:91:C7:18:84:D9:54:AE:52
            X509v3 Authority Key Identifier:
                keyid:CD:34:30:34:DC:2C:83:57:9D:5C:18:F4:F6:F2:E2:C8:A7:00:B1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:86:d9:b6:d7:59:d0:83:cf:3e:9b:9d:17:88:83:ed:e8:
         c4:98:d3:45:79:92:66:dc:f0:da:56:0f:5a:82:7a:35:d7:63:
         cb:9f:4d:9f:f2:bd:87:51:6a:a2:fe:3e:f2:6d:cd:e6:97:42:
         d3:3d:07:5f:96:35:4a:5a:df:b6:28:9c:ff:cf:5e:06:14:73:
         bd:f1:8b:de:aa:ce:e7:76:0e:db:d6:7b:99:16:a7:45:19:a9:
         21:77:f0:63:f4:fd:b8:6d:42:b2:4e:73:58:36:05:0c:09:89:
         bb:5b:96:9d:c4:72:af:19:5f:a2:a1:69:52:9c:78:94:97:7a:
         8f:f8:44:00:0b:4d:17:29:c3:90:b5:53:65:02:d9:d7:c5:78:
         3d:02:c2:46:fa:2d:db:a4:ab:c9:14:6f:cd:bc:9b:31:25:f6:
         7b:8d:34:55:8d:3f:19:fd:c6:16:a4:c6:8e:f1:b1:21:45:25:
         f4:29:5e:ea:c6:3d:7f:03:e7:4f:18:26:c0:97:e9:e0:38:07:
         fc:05:bf:ff:b6:66:73:3a:c8:7f:db:1b:42:2e:90:ae:b0:39:
         32:a1:ca:3c:e9:86:00:8f:04:a6:6d:1e:d3:13:e7:95:26:b6:
         08:95:a1:67:73:11:e7:b3:9d:79:1b:cb:4f:3f:7c:48:23:b4:
         b0:46:cc:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZo+FD3q39lIAKvaxBCmQt8v39AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzNDMwMzREQzJDODM1NzlENUMxOEY0RjZGMkUyQzhB
NzAwQjEyNjAeFw0yNDAyMTUxNzQ4MzBaFw0yNDAyMTYxOTU0MzBaMDMxMTAvBgNV
BAMTKEQwQjVGMTgxREJGNTk0QUM5MjI1NTVGRTkxQzcxODg0RDk1NEFFNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eKxpy30ey70luad0It4zHlbJ
6bFtuWW0k+5hYxyVOqKeRA3/7Kz7mmRRP3wGHly0KRY6X2Y8JpV/E8zsaAXTSYUk
X6qAYSCWz6VTbyP9yYYfFoI/CVwppvJfhVq38OaQQzIb5PRuXgW1zFLpZzx74QPE
En2bgYznVxYVxonxXPF31HGKoPxUHl7h33gYPxOeD3kn+14Io97m5DJu34kSowfO
S9iU6EDCRV3jQKU5iEDXVaZhKtyyJdoySwdkEUAKEly9aal5f6qSCgutQtUjGl6r
TE24ocv5F/wWD1MqiMGjoOiUC5wC4Dd9k7Y88/aX6O6rLafcfS6AMOfKEuDjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0LXxgdv1lKySJVX+kccYhNlUrlIwHwYDVR0j
BBgwFoAUzTQwNNwsg1edXBj09vLiyKcAsSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWdrRFZWak1RaGRqa2NzeUNDOVVaMllDNGdNdmhYa3VoZ294ZkJmVlE0
cXgvMC9DRDM0MzAzNERDMkM4MzU3OUQ1QzE4RjRGNkYyRTJDOEE3MDBCMTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEMzQzMDM0REMyQzgzNTc5
RDVDMThGNEY2RjJFMkM4QTcwMEIxMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWdrRFZWak1RaGRqa2NzeUNDOVVaMllDNGdNdmhYa3VoZ294ZkJmVlE0cXgvMC9D
RDM0MzAzNERDMkM4MzU3OUQ1QzE4RjRGNkYyRTJDOEE3MDBCMTI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWjaG2bbXWdCDzz6bnReIg+3oxJjTRXmSZtzw2lYPWoJ6Nddjy59Nn/K9h1Fq
ov4+8m3N5pdC0z0HX5Y1Slrftiic/89eBhRzvfGL3qrO53YO29Z7mRanRRmpIXfw
Y/T9uG1Csk5zWDYFDAmJu1uWncRyrxlfoqFpUpx4lJd6j/hEAAtNFynDkLVTZQLZ
18V4PQLCRvot26SryRRvzbybMSX2e400VY0/Gf3GFqTGjvGxIUUl9Cle6sY9fwPn
TxgmwJfp4DgH/AW//7ZmczrIf9sbQi6QrrA5MqHKPOmGAI8Epm0e0xPnlSa2CJWh
Z3MR57OdeRvLTz98SCO0sEbMzw==
-----END CERTIFICATE-----