Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.mft
File:                     DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.mft (raw, json)
Hash identifier:          vvsh/ZqnMjHxwuGaNESyh6KhbzIho4PX2uYBYyktbkE=
Subject key identifier:   21:C7:32:87:60:22:9A:55:69:2B:B6:23:3C:11:59:6A:67:A0:CE:F7
Authority key identifier: DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F
Certificate issuer:       /CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
Certificate serial:       3EBD4C6D4944090DE2ABBD9D94520DB02E8D70A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.mft
Manifest number:          09
Signing time:             Mon 15 Apr 2024 05:18:25 +0000
Manifest this update:     Mon 15 Apr 2024 05:13:25 +0000
Manifest next update:     Tue 16 Apr 2024 08:56:25 +0000
Files and hashes:         1: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (hash: Mr+TQzsaLIOVUnj8XGcdPfD0ZQUokwFifIhiwKxq3Qc=)
                          2: DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.crl (hash: pHqKWlhe8CO8MwHHSG8BEmDTLD/Ct+Vl5uXmM1MiSIs=)
                          3: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (hash: ModPs1Dvz2kctzhvsJaDD+i9dF3ko7sXK6DvaKMGFoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bd:4c:6d:49:44:09:0d:e2:ab:bd:9d:94:52:0d:b0:2e:8d:70:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
        Validity
            Not Before: Apr 15 05:13:25 2024 GMT
            Not After : Apr 16 08:56:25 2024 GMT
        Subject: CN=21C7328760229A55692BB6233C11596A67A0CEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:81:da:a2:81:78:c8:b8:bb:8d:e8:8b:b8:
                    95:95:c2:6d:10:6b:5a:ef:f5:9b:e2:e4:3e:82:4a:
                    dd:b0:bb:4e:8a:65:bb:72:31:09:1a:ee:bc:94:06:
                    f7:d0:06:d2:29:de:9e:7a:da:9c:77:5c:9c:09:5a:
                    6a:be:6e:77:64:30:c1:9b:35:f1:6a:7a:1c:b6:4a:
                    cd:be:af:f6:6e:f7:10:c6:8d:9b:14:ed:48:8a:a0:
                    cf:31:d6:1d:c8:12:f2:ce:7c:59:61:99:43:73:a1:
                    95:91:4a:d2:99:45:34:ab:f1:d0:a5:cc:47:ce:7c:
                    d3:9f:a9:14:03:00:d1:49:0b:69:a9:89:58:8f:01:
                    5b:91:c6:09:38:c4:f4:b0:09:b5:f5:e9:69:a8:08:
                    89:e6:3d:26:2b:9f:ba:8b:f2:55:d0:0d:a1:8d:ed:
                    38:32:f3:c0:e9:87:62:50:ba:b2:56:03:60:db:9f:
                    da:9d:c1:88:c8:e2:57:66:6d:08:ee:4b:b1:a7:d1:
                    ab:10:fc:42:14:59:cb:da:d9:c0:ba:8e:b9:0e:a7:
                    d1:01:fa:54:46:31:e5:f7:66:b5:a4:25:c4:d4:ac:
                    83:9d:f5:d4:c6:37:0e:80:74:2b:3e:0a:b4:f1:c0:
                    a5:f5:7b:d0:a7:d9:cd:4b:71:d5:d4:bc:83:92:3b:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C7:32:87:60:22:9A:55:69:2B:B6:23:3C:11:59:6A:67:A0:CE:F7
            X509v3 Authority Key Identifier:
                keyid:DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:81:bd:92:f6:fa:d1:1a:e2:00:6d:34:b9:21:97:ff:fd:4a:
         6a:b0:02:5b:bc:54:8c:57:6f:42:95:4f:2b:13:93:12:e1:7f:
         0d:96:1a:41:22:8f:d3:48:a1:a2:6a:a9:b4:c5:aa:ea:7b:a4:
         46:07:d0:cd:e9:c7:89:44:ed:38:66:b0:fd:5f:2d:7a:ed:47:
         12:c8:0f:0f:bc:91:a4:7a:9f:08:0b:8f:12:05:76:25:fe:76:
         00:90:16:81:ef:c8:5c:04:6e:a8:51:63:30:92:35:77:75:ee:
         66:55:73:7f:f7:61:e8:c9:ab:ee:9d:fe:c9:ca:8d:b0:74:02:
         5d:b8:ab:00:88:a3:d7:55:a1:c4:ac:2b:87:ce:43:dd:08:df:
         d2:aa:9f:e1:af:f7:de:e2:c1:59:7a:cb:5d:c2:d1:16:82:f5:
         01:03:e6:27:5c:f0:2b:df:ac:6c:04:55:38:74:77:29:26:23:
         89:2c:26:da:fd:2b:27:2c:f8:35:42:04:70:c3:1e:66:67:1d:
         0d:e6:f7:66:2c:1e:1a:e9:d6:63:0e:4c:57:c5:5e:42:bc:13:
         dc:b5:13:09:50:72:3e:e7:1b:3f:fd:ee:f4:e0:60:1f:0c:49:
         63:b7:83:b8:c1:f0:f1:b8:6f:77:8b:bb:03:37:5c:8f:71:94:
         55:12:c0:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPr1MbUlECQ3iq72dlFINsC6NcKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4OUUxQUUyMkY3RTVCNDZCNTI0RjNERTAwODQ5Mjk4
NzBGRUEzRjAeFw0yNDA0MTUwNTEzMjVaFw0yNDA0MTYwODU2MjVaMDMxMTAvBgNV
BAMTKDIxQzczMjg3NjAyMjlBNTU2OTJCQjYyMzNDMTE1OTZBNjdBMENFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwYHaooF4yLi7jeiLuJWVwm0Q
a1rv9Zvi5D6CSt2wu06KZbtyMQka7ryUBvfQBtIp3p562px3XJwJWmq+bndkMMGb
NfFqehy2Ss2+r/Zu9xDGjZsU7UiKoM8x1h3IEvLOfFlhmUNzoZWRStKZRTSr8dCl
zEfOfNOfqRQDANFJC2mpiViPAVuRxgk4xPSwCbX16WmoCInmPSYrn7qL8lXQDaGN
7Tgy88Dph2JQurJWA2Dbn9qdwYjI4ldmbQjuS7Gn0asQ/EIUWcva2cC6jrkOp9EB
+lRGMeX3ZrWkJcTUrIOd9dTGNw6AdCs+CrTxwKX1e9Cn2c1LcdXUvIOSO+S5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIccyh2AimlVpK7YjPBFZamegzvcwHwYDVR0j
BBgwFoAU24nhriL35bRrUk894AhJKYcP6j8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFSdTNYS3c3YUhuNGNDNlJyVmVKZjJBUWhTRWRNaGNiaHVwODJrNzNG
SlkvMS9EQjg5RTFBRTIyRjdFNUI0NkI1MjRGM0RFMDA4NDkyOTg3MEZFQTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCODlFMUFFMjJGN0U1QjQ2
QjUyNEYzREUwMDg0OTI5ODcwRkVBM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUFSdTNYS3c3YUhuNGNDNlJyVmVKZjJBUWhTRWRNaGNiaHVwODJrNzNGSlkvMS9E
Qjg5RTFBRTIyRjdFNUI0NkI1MjRGM0RFMDA4NDkyOTg3MEZFQTNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZIG9kvb60RriAG00uSGX//1KarACW7xUjFdvQpVPKxOTEuF/DZYaQSKP00ih
omqptMWq6nukRgfQzenHiUTtOGaw/V8teu1HEsgPD7yRpHqfCAuPEgV2Jf52AJAW
ge/IXARuqFFjMJI1d3XuZlVzf/dh6Mmr7p3+ycqNsHQCXbirAIij11WhxKwrh85D
3Qjf0qqf4a/33uLBWXrLXcLRFoL1AQPmJ1zwK9+sbARVOHR3KSYjiSwm2v0rJyz4
NUIEcMMeZmcdDeb3ZiweGunWYw5MV8VeQrwT3LUTCVByPucbP/3u9OBgHwxJY7eD
uMHw8bhvd4u7Azdcj3GUVRLANg==
-----END CERTIFICATE-----