Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft
File:                     D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft (raw, json)
Hash identifier:          KYCyqll+M/h/AyI0kGgP607cm3UEP2ssl9QZHhIbfHs=
Subject key identifier:   5E:90:EB:98:AB:B2:D2:75:29:B6:8E:96:CE:88:BE:86:65:9E:21:2F
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Certificate issuer:       /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial:       2CD2E8B24001AC36F34039982A963033E007A393
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft
Manifest number:          3A
Signing time:             Thu 06 Jun 2024 04:20:16 +0000
Manifest this update:     Thu 06 Jun 2024 04:15:16 +0000
Manifest next update:     Fri 07 Jun 2024 08:18:16 +0000
Files and hashes:         1: 323830343a333934303a3a2f33322d3332203d3e20323636303231.roa (hash: UCD2b2ErRvOEf/jjFb8hif7dfJGk490CUqM9PCunq/E=)
                          2: 3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa (hash: aegwrQKUwDkUrDnH40tkM//BzRCqhxgq1K2Z37pZKUk=)
                          3: 3137302e3234352e33382e302f32342d3234203d3e20323636303231.roa (hash: TykgTcSrYUQkp/WWykJPT0teTh/wzd7vAPSYANOkAmA=)
                          4: 3137302e3234352e33362e302f32342d3234203d3e20323636303231.roa (hash: wH1v85nLgYYpH8VQnsAszEwCgXFyv7ZE06LH+F/JGSw=)
                          5: D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl (hash: 2gXJfn2C/EJE7PdNr0XYeUKgzi682UtOEUtLmQNXRSg=)
                          6: 3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa (hash: OKIYqD4mAIlkRAHGK4FbTLbcCGOTcpC2FE+rVIGY0HA=)
                          7: 3137302e3234352e33372e302f32342d3234203d3e20323636303231.roa (hash: wIkijtGy7nCwYS0X1WQ3zDM6u7xGip1Yr27i5DxoqcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d2:e8:b2:40:01:ac:36:f3:40:39:98:2a:96:30:33:e0:07:a3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Validity
            Not Before: Jun  6 04:15:16 2024 GMT
            Not After : Jun  7 08:18:16 2024 GMT
        Subject: CN=5E90EB98ABB2D27529B68E96CE88BE86659E212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:16:e2:a0:fd:3b:55:0c:2a:d8:1a:d1:46:
                    7a:a7:da:1d:10:12:fb:3e:07:be:60:da:01:84:2e:
                    dc:05:2d:a7:5f:e6:a9:e0:68:e2:92:23:06:78:82:
                    d1:2d:83:a4:78:09:f7:29:cf:12:d5:d6:7a:da:61:
                    92:d6:ff:1e:72:8a:b5:c1:3c:9b:b5:3f:68:3e:59:
                    0f:d5:5a:8e:95:d8:19:83:d8:64:32:b1:61:8c:8c:
                    58:38:67:54:f6:31:1b:c0:fd:78:c3:d9:2a:a0:64:
                    c4:76:8d:94:5f:96:8b:97:e0:e0:d5:68:30:14:fa:
                    7d:ed:ea:71:c1:18:fc:da:3a:9f:e9:03:30:ca:92:
                    97:be:93:81:c8:a2:15:b1:3f:3f:e6:47:8c:41:c4:
                    6f:ba:57:f1:b3:29:29:13:40:5a:24:a9:a1:7d:cf:
                    ec:4f:8d:7f:09:01:99:f9:b3:2c:dc:9c:33:84:00:
                    80:8b:b0:9f:fd:2f:d4:05:5e:d6:ff:8b:15:be:6d:
                    b8:1d:f4:ad:ba:41:9f:0c:53:2d:cc:90:1e:6a:33:
                    7a:9c:73:fc:45:d5:34:30:80:af:af:df:52:08:65:
                    79:db:6c:b3:dc:52:20:a4:c7:72:71:be:c5:3d:55:
                    6b:34:7e:c8:12:90:78:27:e2:d3:0e:62:23:fb:a6:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:EB:98:AB:B2:D2:75:29:B6:8E:96:CE:88:BE:86:65:9E:21:2F
            X509v3 Authority Key Identifier:
                keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:10:f6:d2:d5:0d:72:02:e6:e8:b3:42:85:1e:e0:8d:7a:
         93:6c:9d:db:f2:17:a8:f4:52:ec:f8:cb:9e:4f:98:ef:9a:a0:
         a9:a9:6c:13:6c:f3:53:fd:ec:c9:7d:ed:f4:d2:40:e8:54:7e:
         3b:60:1d:ee:23:10:4d:3d:bd:b9:3f:f0:a3:3e:aa:fb:cc:4f:
         36:76:9e:c4:c5:0e:60:fe:67:ca:22:83:78:ff:c3:15:71:a5:
         cc:40:cf:dd:96:1f:0d:12:91:80:42:c5:ba:7d:4f:bb:7e:89:
         39:87:66:05:3e:c5:f9:d0:70:68:81:c5:54:81:84:87:86:74:
         b7:bc:df:95:bb:ea:e2:5b:33:3e:0a:12:39:4f:c2:a7:e0:9e:
         4c:74:1c:42:70:32:e1:75:f6:26:66:a2:41:53:d7:ca:bd:8a:
         75:44:a7:8a:8c:6a:e6:0e:44:29:32:e8:2c:93:04:fe:4b:10:
         b8:a4:2b:81:3b:dc:fb:58:e0:44:43:a0:e5:52:6c:53:54:01:
         01:70:67:63:78:c4:4d:6b:3f:e8:7b:c2:79:a8:8a:6d:b5:1b:
         6c:c7:2d:94:06:12:73:a5:ea:df:4c:5b:a9:13:75:49:55:ad:
         96:a2:5f:26:d2:fb:cc:6b:a2:fe:d9:34:3d:1e:8f:06:dc:0b:
         52:c2:d6:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULNLoskABrDbzQDmYKpYwM+AHo5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDQTk3NEU5MTk0MjU1NEY4RjdGMjVDOTc5MkExQkNE
RUIzNzU4QzAeFw0yNDA2MDYwNDE1MTZaFw0yNDA2MDcwODE4MTZaMDMxMTAvBgNV
BAMTKDVFOTBFQjk4QUJCMkQyNzUyOUI2OEU5NkNFODhCRTg2NjU5RTIxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzBbioP07VQwq2BrRRnqn2h0Q
Evs+B75g2gGELtwFLadf5qngaOKSIwZ4gtEtg6R4CfcpzxLV1nraYZLW/x5yirXB
PJu1P2g+WQ/VWo6V2BmD2GQysWGMjFg4Z1T2MRvA/XjD2SqgZMR2jZRflouX4ODV
aDAU+n3t6nHBGPzaOp/pAzDKkpe+k4HIohWxPz/mR4xBxG+6V/GzKSkTQFokqaF9
z+xPjX8JAZn5syzcnDOEAICLsJ/9L9QFXtb/ixW+bbgd9K26QZ8MUy3MkB5qM3qc
c/xF1TQwgK+v31IIZXnbbLPcUiCkx3JxvsU9VWs0fsgSkHgn4tMOYiP7plWNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXpDrmKuy0nUpto6Wzoi+hmWeIS8wHwYDVR0j
BBgwFoAU1cqXTpGUJVT49/Jcl5KhvN6zdYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC9ENUNBOTc0RTkxOTQyNTU0RjhGN0YyNUM5NzkyQTFCQ0RFQjM3NThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1Q0E5NzRFOTE5NDI1NTRG
OEY3RjI1Qzk3OTJBMUJDREVCMzc1OEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXlaNWEvMC9E
NUNBOTc0RTkxOTQyNTU0RjhGN0YyNUM5NzkyQTFCQ0RFQjM3NThDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACzYQ9tLVDXIC5uizQoUe4I16k2yd2/IXqPRS7PjLnk+Y75qgqalsE2zzU/3s
yX3t9NJA6FR+O2Ad7iMQTT29uT/woz6q+8xPNnaexMUOYP5nyiKDeP/DFXGlzEDP
3ZYfDRKRgELFun1Pu36JOYdmBT7F+dBwaIHFVIGEh4Z0t7zflbvq4lszPgoSOU/C
p+CeTHQcQnAy4XX2JmaiQVPXyr2KdUSnioxq5g5EKTLoLJME/ksQuKQrgTvc+1jg
REOg5VJsU1QBAXBnY3jETWs/6HvCeaiKbbUbbMctlAYSc6Xq30xbqRN1SVWtlqJf
JtL7zGui/tk0PR6PBtwLUsLWbg==
-----END CERTIFICATE-----
Generated at Sat Jun 8 00:04:04 2024 by rpki-client on console-ams.rpki-client.org