Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.mft
File:                     D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.mft (raw, json)
Hash identifier:          3vkgkvvw7mqwusq6M3YiQE53KS69apHAqL2p7KcrZog=
Subject key identifier:   B9:A9:C8:15:49:F6:AD:8D:72:C8:B8:B4:2F:15:5F:24:E7:4C:A5:43
Authority key identifier: D2:29:FD:3B:0E:20:6E:DD:EC:D6:4C:B0:88:F2:CA:5D:99:F5:CB:29
Certificate issuer:       /CN=D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29
Certificate serial:       7B3E4CF5CE2AF845D80114D1DF54C6E1F517A985
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.mft
Manifest number:          14
Signing time:             Wed 19 Jun 2024 20:08:48 +0000
Manifest this update:     Wed 19 Jun 2024 20:03:48 +0000
Manifest next update:     Thu 20 Jun 2024 21:23:48 +0000
Files and hashes:         1: 3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (hash: 70ouJYShufzbj3mow7ovZmOs/D0qIWkGIM2XOKYi5uQ=)
                          2: 323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (hash: D/Q6oSHrjjjs/JyndvpN5VPsLA5yzkDrFyl9QHBOkSE=)
                          3: D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.crl (hash: e6wAlBPUf2gk0w6h8HUGksgOOAi+CLRFftiO2o48m/Q=)
                          4: 3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (hash: CLZOMXrJ4AIkuKncSRy+HpX1vJMEYM+CRWvutZyy9N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:4c:f5:ce:2a:f8:45:d8:01:14:d1:df:54:c6:e1:f5:17:a9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29
        Validity
            Not Before: Jun 19 20:03:48 2024 GMT
            Not After : Jun 20 21:23:48 2024 GMT
        Subject: CN=B9A9C81549F6AD8D72C8B8B42F155F24E74CA543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:2d:d9:75:51:6d:59:7e:ec:a0:c0:c8:88:
                    59:ae:47:c0:68:d9:2d:49:5a:28:2a:e8:1a:b3:f7:
                    f0:e3:29:2c:44:be:5a:dd:3f:f1:71:ff:c2:0c:18:
                    6d:32:ec:a1:2b:d2:44:e7:45:60:9b:5e:51:3f:2a:
                    c5:c4:cb:b2:45:6f:da:78:58:ba:0d:a7:50:b9:5a:
                    79:57:89:78:0f:2c:2a:83:1c:61:fc:65:27:a0:af:
                    fb:8b:de:fc:c6:8b:62:35:20:b3:e6:bf:42:72:87:
                    22:44:40:70:ec:9f:67:b9:31:11:f2:60:59:d8:ea:
                    71:c1:33:bb:c0:3b:d8:6e:8a:ed:18:a2:b9:3b:f2:
                    f9:7c:a2:d1:38:8d:b1:47:69:0d:e9:c9:1f:56:cb:
                    1d:e6:a4:d6:f3:9f:a6:15:14:53:e1:57:3c:41:ec:
                    b6:d4:cc:5e:68:bb:c7:5f:dc:8e:21:75:5f:3c:a2:
                    f4:dd:e4:28:39:12:6e:5c:5a:2f:3b:34:5a:d9:bd:
                    46:57:5a:03:e2:f4:60:d5:b9:bf:d4:01:d7:d9:6d:
                    3e:7c:07:bc:38:10:66:3e:e9:95:b8:db:95:cf:ea:
                    bc:42:b7:18:d3:5d:92:74:0b:fd:b5:be:4e:96:49:
                    4d:db:96:2f:9b:03:9d:e6:91:de:dc:8a:a2:08:62:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:C8:15:49:F6:AD:8D:72:C8:B8:B4:2F:15:5F:24:E7:4C:A5:43
            X509v3 Authority Key Identifier:
                keyid:D2:29:FD:3B:0E:20:6E:DD:EC:D6:4C:B0:88:F2:CA:5D:99:F5:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:7d:a6:9a:b7:f0:40:7d:38:3f:88:86:3f:2e:12:84:d0:
         73:45:62:d7:de:c3:7f:06:dc:7c:50:48:2d:49:d0:bf:20:3d:
         c7:2a:d0:ea:69:cd:d9:1f:d6:91:fe:5f:7e:25:5c:1b:8f:07:
         38:33:e6:db:59:a3:47:1d:8d:5e:c7:94:a0:44:1a:91:59:68:
         35:56:51:86:c0:3a:12:ba:11:ab:62:6d:14:7d:ab:5d:64:17:
         30:bb:cb:4b:c1:d9:44:95:b5:29:4d:cb:cb:42:cb:27:2c:2f:
         7a:61:93:1f:72:98:0c:17:57:ae:47:e6:2f:66:80:a4:62:ba:
         11:d3:73:78:7a:4e:d9:a7:79:ca:c6:c1:3b:4f:8e:a5:e4:20:
         d7:a7:c6:3f:f3:73:1a:d1:a3:ee:23:d5:26:35:ab:50:fe:e0:
         bb:a6:79:0d:9a:2b:b3:3c:b8:87:f6:d2:64:e7:66:91:ee:cf:
         28:ec:eb:5e:e4:49:e9:f5:0f:e9:14:c7:6d:2f:64:e5:16:e8:
         7c:4d:93:b4:f5:d6:d1:a4:60:e2:cb:fd:18:31:c2:8a:1a:a2:
         ae:14:d5:a7:82:63:da:d6:d2:e2:3f:19:f9:b3:d3:01:97:c6:
         29:e5:bd:d6:cf:12:e9:29:a6:82:0f:92:44:dd:a7:c7:8a:db:
         c6:9e:b3:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUez5M9c4q+EXYARTR31TG4fUXqYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIyOUZEM0IwRTIwNkVEREVDRDY0Q0IwODhGMkNBNUQ5
OUY1Q0IyOTAeFw0yNDA2MTkyMDAzNDhaFw0yNDA2MjAyMTIzNDhaMDMxMTAvBgNV
BAMTKEI5QTlDODE1NDlGNkFEOEQ3MkM4QjhCNDJGMTU1RjI0RTc0Q0E1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaS3ZdVFtWX7soMDIiFmuR8Bo
2S1JWigq6Bqz9/DjKSxEvlrdP/Fx/8IMGG0y7KEr0kTnRWCbXlE/KsXEy7JFb9p4
WLoNp1C5WnlXiXgPLCqDHGH8ZSegr/uL3vzGi2I1ILPmv0JyhyJEQHDsn2e5MRHy
YFnY6nHBM7vAO9huiu0York78vl8otE4jbFHaQ3pyR9Wyx3mpNbzn6YVFFPhVzxB
7LbUzF5ou8df3I4hdV88ovTd5Cg5Em5cWi87NFrZvUZXWgPi9GDVub/UAdfZbT58
B7w4EGY+6ZW425XP6rxCtxjTXZJ0C/21vk6WSU3bli+bA53mkd7ciqIIYtCJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuanIFUn2rY1yyLi0LxVfJOdMpUMwHwYDVR0j
BBgwFoAU0in9Ow4gbt3s1kywiPLKXZn1yykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC9EMjI5RkQzQjBFMjA2RURERUNENjRDQjA4OEYyQ0E1RDk5RjVDQjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjlGRDNCMEUyMDZFRERF
Q0Q2NENCMDg4RjJDQTVEOTlGNUNCMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC9E
MjI5RkQzQjBFMjA2RURERUNENjRDQjA4OEYyQ0E1RDk5RjVDQjI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXp9ppq38EB9OD+Ihj8uEoTQc0Vi197DfwbcfFBILUnQvyA9xyrQ6mnN2R/W
kf5ffiVcG48HODPm21mjRx2NXseUoEQakVloNVZRhsA6EroRq2JtFH2rXWQXMLvL
S8HZRJW1KU3Ly0LLJywvemGTH3KYDBdXrkfmL2aApGK6EdNzeHpO2ad5ysbBO0+O
peQg16fGP/NzGtGj7iPVJjWrUP7gu6Z5DZorszy4h/bSZOdmke7PKOzrXuRJ6fUP
6RTHbS9k5RbofE2TtPXW0aRg4sv9GDHCihqirhTVp4Jj2tbS4j8Z+bPTAZfGKeW9
1s8S6Smmgg+SRN2nx4rbxp6zvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 20 03:53:32 2024 by rpki-client on console-ams.rpki-client.org