Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft
File:                     5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft (raw, json)
Hash identifier:          9x5N3G3D4BIldHZlPv/OyhWXOuXm4MOPDylyz3Vyu9I=
Subject key identifier:   81:89:39:73:DA:99:69:6E:5D:70:33:33:D6:1C:3A:93:0B:58:0C:99
Authority key identifier: 5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Certificate issuer:       /CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Certificate serial:       1D99CA2A2DFA42183A32B5BE2C34E8A5EE88899B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft
Manifest number:          0185
Signing time:             Mon 15 Apr 2024 08:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:25:00 +0000
Files and hashes:         1: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: R1XludmtN/YF6WewllYg62aI7HGK8ktQIJHSRbWRelw=)
                          2: 3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (hash: Fo4atPrDtN0Z1c1SQqsyIrdteVZa9xgGGdGl2zR+jgs=)
                          3: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (hash: OkYcjJZmEoVcFkUZJMms8f5HrFe6ME13/ZL9pvAydPM=)
                          4: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: GtYZKlhxGiOBDGuOGRBs3mkluPJViT7si8HUJnDFDy8=)
                          5: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: IkVCM5LMKRqQApzg/8993CGDn/tkLyA0CFyEsO8IeTc=)
                          6: 5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl (hash: F5yan8lPRNSnK1MyGr/wtrtnv2ZyB4yxgYkAyLuAM2k=)
                          7: 3137372e38342e34322e302f32332d3233203d3e203532373038.roa (hash: Ieldal3MsBItDtYWz+F2dphJjYWZFA2aMTa61XHxwI8=)
                          8: 3137372e38342e34302e302f32332d3233203d3e203532373038.roa (hash: 5mRExdEKgqsAjYfkGPNMIRoXBbYJ/xv0adjFC7id/P0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:ca:2a:2d:fa:42:18:3a:32:b5:be:2c:34:e8:a5:ee:88:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
        Validity
            Not Before: Apr 15 08:05:00 2024 GMT
            Not After : Apr 16 11:25:00 2024 GMT
        Subject: CN=81893973DA99696E5D703333D61C3A930B580C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5a:df:39:f5:d3:30:44:89:df:20:dd:87:59:
                    21:eb:18:5a:43:f0:2a:ef:b3:4f:27:fd:5a:77:ef:
                    3e:10:b1:a6:9a:33:43:93:84:16:15:de:8c:d7:04:
                    f7:16:e7:c2:7a:44:43:5e:b0:6a:3c:f5:5b:68:13:
                    49:c6:6d:49:bd:9c:68:8d:3c:dc:d6:e8:f3:f0:e6:
                    3d:c3:a0:53:40:82:24:de:15:1b:25:72:b6:32:d6:
                    96:ce:03:3e:eb:21:fe:c5:08:31:1c:e1:d4:66:c2:
                    ea:03:fa:3f:10:2d:ac:e6:be:26:ce:6e:16:10:e7:
                    f2:cd:5c:c3:4e:2d:56:41:7d:d9:f4:0f:72:b9:b4:
                    e5:59:9d:55:03:fc:54:d3:df:2f:e3:e9:36:36:2e:
                    83:83:6b:cf:3d:48:17:fd:bb:92:36:95:66:46:da:
                    47:58:10:e6:27:13:09:7e:a4:9d:4e:35:8a:56:b3:
                    fa:a4:d4:d8:01:12:d5:5b:69:ae:ff:1c:12:33:29:
                    07:04:7a:b6:40:30:c6:03:77:ef:91:39:9b:26:8b:
                    96:7a:3e:23:63:e3:82:34:37:63:87:92:88:26:21:
                    46:34:c7:aa:48:dc:af:1e:72:51:1e:5f:25:65:ce:
                    9a:10:bb:9e:80:03:0f:6f:7e:36:94:5e:2d:b3:08:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:39:73:DA:99:69:6E:5D:70:33:33:D6:1C:3A:93:0B:58:0C:99
            X509v3 Authority Key Identifier:
                keyid:5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:95:65:29:85:98:6c:0a:30:bf:18:f2:ea:0e:2a:28:ab:af:
         4f:fe:bd:72:73:a7:2c:46:c4:39:2d:7e:bf:60:7b:b7:67:36:
         de:39:88:c0:19:c4:27:fa:63:c5:1c:4b:b1:fd:15:87:1d:b0:
         52:7f:82:50:19:8d:43:16:f2:4f:26:aa:f8:6f:91:ba:37:fd:
         1a:b9:59:02:cf:b8:05:f7:17:ab:9a:1e:00:6b:c0:39:d6:06:
         2c:46:97:5f:36:5e:38:64:87:08:88:c8:79:f5:91:bc:20:f8:
         10:13:9e:93:50:4f:2e:8b:76:ee:df:98:b6:68:69:70:9d:d5:
         ab:dc:23:a0:a8:93:44:8f:fd:7f:6d:8e:5f:aa:9d:d7:f0:f6:
         9b:6d:97:06:f5:8a:9f:4e:0d:84:e1:0e:46:e9:e0:3b:e7:2c:
         27:50:b0:ef:17:94:a2:e0:11:8e:eb:ee:56:47:06:a9:b3:c4:
         87:05:eb:a5:d0:b8:ab:ac:de:00:01:b8:dd:ef:38:e5:17:d5:
         78:98:da:f8:45:bb:e6:8d:ac:d2:fc:bd:19:13:d5:0d:c5:89:
         58:4d:90:0d:2f:15:1e:97:f1:54:1d:48:53:0f:de:29:71:f3:
         dd:cf:e6:e4:d2:66:a4:4d:5f:c6:c1:f3:71:c2:a5:41:91:2d:
         eb:7d:20:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHZnKKi36Qhg6MrW+LDTope6IiZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QjVDQjlFRUYyMzk0NzM3MERBMDNFNzFENkIwNTFD
QjVDNzY0MTAeFw0yNDA0MTUwODA1MDBaFw0yNDA0MTYxMTI1MDBaMDMxMTAvBgNV
BAMTKDgxODkzOTczREE5OTY5NkU1RDcwMzMzM0Q2MUMzQTkzMEI1ODBDOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWt859dMwRInfIN2HWSHrGFpD
8Crvs08n/Vp37z4QsaaaM0OThBYV3ozXBPcW58J6RENesGo89VtoE0nGbUm9nGiN
PNzW6PPw5j3DoFNAgiTeFRslcrYy1pbOAz7rIf7FCDEc4dRmwuoD+j8QLazmvibO
bhYQ5/LNXMNOLVZBfdn0D3K5tOVZnVUD/FTT3y/j6TY2LoODa889SBf9u5I2lWZG
2kdYEOYnEwl+pJ1ONYpWs/qk1NgBEtVbaa7/HBIzKQcEerZAMMYDd++ROZsmi5Z6
PiNj44I0N2OHkogmIUY0x6pI3K8eclEeXyVlzpoQu56AAw9vfjaUXi2zCBvpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgYk5c9qZaW5dcDMz1hw6kwtYDJkwHwYDVR0j
BBgwFoAUW1tcue7yOUc3DaA+cdawUctcdkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMC81QjVCNUNCOUVFRjIzOTQ3MzcwREEwM0U3MUQ2QjA1MUNCNUM3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUI1Q0I5RUVGMjM5NDcz
NzBEQTAzRTcxRDZCMDUxQ0I1Qzc2NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhVZ00vMC81
QjVCNUNCOUVFRjIzOTQ3MzcwREEwM0U3MUQ2QjA1MUNCNUM3NjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP5VlKYWYbAowvxjy6g4qKKuvT/69cnOnLEbEOS1+v2B7t2c23jmIwBnEJ/pj
xRxLsf0Vhx2wUn+CUBmNQxbyTyaq+G+Rujf9GrlZAs+4BfcXq5oeAGvAOdYGLEaX
XzZeOGSHCIjIefWRvCD4EBOek1BPLot27t+YtmhpcJ3Vq9wjoKiTRI/9f22OX6qd
1/D2m22XBvWKn04NhOEORungO+csJ1Cw7xeUouARjuvuVkcGqbPEhwXrpdC4q6ze
AAG43e845RfVeJja+EW75o2s0vy9GRPVDcWJWE2QDS8VHpfxVB1IUw/eKXHz3c/m
5NJmpE1fxsHzccKlQZEt630gxw==
-----END CERTIFICATE-----