Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft
File:                     CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft (raw, json)
Hash identifier:          DboxQGOrjlqaUwGuJikznmX3Ny92QXW4cTOobvMu8UA=
Subject key identifier:   CC:28:11:AC:14:F0:27:AE:4E:81:C7:8A:E5:2C:22:FA:24:D5:D5:B8
Authority key identifier: CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6
Certificate issuer:       /CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
Certificate serial:       1DFC2AEE54318ECEA9C2AA3191CB252901ECAFD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft
Manifest number:          2B
Signing time:             Thu 03 Oct 2024 17:54:49 +0000
Manifest this update:     Thu 03 Oct 2024 17:49:49 +0000
Manifest next update:     Fri 04 Oct 2024 18:18:49 +0000
Files and hashes:         1: 323830343a393061633a383030303a3a2f33342d3334203d3e20323734353934.roa (hash: Z6vscm4m45SOaUerAtrd6GTI6eWRkzmeqmSF/1sM3Jk=)
                          2: 323830343a393061633a3a2f33342d3334203d3e20323734353934.roa (hash: e2qkpZ7DBvOWM4YXzV/w/LObF5mslBTRRQu+xnc51og=)
                          3: 323830343a393061633a3a2f33322d3332203d3e20323734353934.roa (hash: db174BsP9MzbzEYOt62SKA7Smf+6xHdRCMYlV0CK7qI=)
                          4: CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.crl (hash: wTYJWqbptlONRBunYE53cY6AsS3j8APD86ia7ZeOrj4=)
                          5: 323830343a393061633a343030303a3a2f33342d3334203d3e20323734353934.roa (hash: i1MSQR/BgjT+BCS4MdyeDvtL2nECQCvYG6ym5yEMydE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:2a:ee:54:31:8e:ce:a9:c2:aa:31:91:cb:25:29:01:ec:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF052CC17BE549AAF983B0B899F67FF9E8E92D6
        Validity
            Not Before: Oct  3 17:49:49 2024 GMT
            Not After : Oct  4 18:18:49 2024 GMT
        Subject: CN=CC2811AC14F027AE4E81C78AE52C22FA24D5D5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:1e:f4:a6:d2:e5:c1:d2:41:be:60:d6:a9:
                    70:c1:37:07:5b:6f:4c:62:2d:b2:95:25:14:f2:67:
                    78:0a:78:1d:06:11:e7:af:e6:13:ee:57:9c:84:a2:
                    91:94:44:aa:5d:f2:41:df:e3:0d:11:34:fa:c3:94:
                    1d:d2:1d:bc:71:18:15:af:e1:2e:fc:7f:04:73:35:
                    1d:d5:9e:2b:fa:a4:b3:4e:78:2e:5d:ea:4a:d4:2b:
                    f9:4d:b5:9c:cb:0a:0e:11:23:61:c8:14:62:ad:2c:
                    8d:c8:d5:8b:46:8e:9a:8f:64:12:49:4a:74:ca:f5:
                    46:ba:65:d7:f3:f5:37:9c:6c:ee:e0:fc:a6:60:cf:
                    0d:a8:53:01:9d:2c:29:ee:a7:23:eb:36:87:88:94:
                    0e:34:86:74:ab:99:0a:bb:e9:77:b2:ee:66:48:ed:
                    7c:0f:03:c1:f0:8a:2a:62:4f:22:a2:c4:32:0a:84:
                    ba:f3:2f:57:b8:de:82:8d:f8:7b:66:7c:fd:7c:e9:
                    d1:cf:a3:42:ad:8d:f0:ff:33:b8:64:9a:f9:2a:78:
                    13:8b:58:88:c2:92:95:e6:28:46:46:4d:5a:eb:ad:
                    8e:4f:98:db:2f:26:5e:19:f8:de:aa:07:d6:8e:8e:
                    ea:9a:c7:1f:04:a9:1a:84:c9:9b:a3:c3:10:22:43:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:11:AC:14:F0:27:AE:4E:81:C7:8A:E5:2C:22:FA:24:D5:D5:B8
            X509v3 Authority Key Identifier:
                keyid:CB:F0:52:CC:17:BE:54:9A:AF:98:3B:0B:89:9F:67:FF:9E:8E:92:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHnau4FXhx6MhTmFvMJdfmbq2CCaNctnm8P1WAPQzYkc/0/CBF052CC17BE549AAF983B0B899F67FF9E8E92D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:84:86:d3:81:03:ae:0c:16:57:93:48:f4:b6:1f:d3:57:
         bd:54:3a:76:7e:68:41:86:4b:ab:47:fd:75:f1:2c:2d:33:7b:
         13:96:a0:10:d6:ad:a9:26:f8:71:45:f8:55:45:2d:5c:50:f5:
         07:e5:b2:60:2d:53:04:ba:61:fa:03:38:b7:18:cd:ae:d8:89:
         f7:de:0c:b9:32:58:5a:e8:5d:d5:6b:fa:01:a1:6a:87:9f:c0:
         ec:02:fc:3e:32:ec:d7:ac:3d:3c:96:0c:67:2e:8d:92:e3:3f:
         4a:6f:07:3c:2b:4f:ef:8f:b1:83:00:f4:83:84:e6:8a:93:85:
         fe:6c:52:cc:66:c6:3a:7f:e3:ba:af:33:cf:71:17:c2:7b:a1:
         e8:da:79:f2:6f:07:49:95:b0:d2:68:2f:2d:5f:27:00:57:b3:
         d2:27:65:27:4e:3c:23:fd:c1:51:cc:7b:b0:2a:28:eb:b9:2b:
         fb:c0:00:dc:ca:e1:db:bd:33:2c:1b:21:af:93:de:43:61:40:
         c6:b9:f5:a0:86:5a:2c:5e:32:b4:5b:42:2d:7a:12:b0:7d:6b:
         d7:1d:d0:3c:5c:6a:1d:c1:e2:f0:51:8b:38:eb:4c:8f:8e:1d:
         70:0d:a8:2f:9f:a4:8c:b8:e7:4c:f9:32:c4:75:99:40:f4:6f:
         35:f5:0c:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHfwq7lQxjs6pwqoxkcslKQHsr9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JGMDUyQ0MxN0JFNTQ5QUFGOTgzQjBCODk5RjY3RkY5
RThFOTJENjAeFw0yNDEwMDMxNzQ5NDlaFw0yNDEwMDQxODE4NDlaMDMxMTAvBgNV
BAMTKENDMjgxMUFDMTRGMDI3QUU0RTgxQzc4QUU1MkMyMkZBMjRENUQ1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxdR70ptLlwdJBvmDWqXDBNwdb
b0xiLbKVJRTyZ3gKeB0GEeev5hPuV5yEopGURKpd8kHf4w0RNPrDlB3SHbxxGBWv
4S78fwRzNR3Vniv6pLNOeC5d6krUK/lNtZzLCg4RI2HIFGKtLI3I1YtGjpqPZBJJ
SnTK9Ua6Zdfz9TecbO7g/KZgzw2oUwGdLCnupyPrNoeIlA40hnSrmQq76Xey7mZI
7XwPA8HwiipiTyKixDIKhLrzL1e43oKN+HtmfP186dHPo0KtjfD/M7hkmvkqeBOL
WIjCkpXmKEZGTVrrrY5PmNsvJl4Z+N6qB9aOjuqaxx8EqRqEyZujwxAiQ9LRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzCgRrBTwJ65OgceK5Swi+iTV1bgwHwYDVR0j
BBgwFoAUy/BSzBe+VJqvmDsLiZ9n/56OktYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhuYXU0RlhoeDZNaFRtRnZNSmRmbWJxMkNDYU5jdG5tOFAxV0FQUXpZ
a2MvMC9DQkYwNTJDQzE3QkU1NDlBQUY5ODNCMEI4OTlGNjdGRjlFOEU5MkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRjA1MkNDMTdCRTU0OUFB
Rjk4M0IwQjg5OUY2N0ZGOUU4RTkyRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUhuYXU0RlhoeDZNaFRtRnZNSmRmbWJxMkNDYU5jdG5tOFAxV0FQUXpZa2MvMC9D
QkYwNTJDQzE3QkU1NDlBQUY5ODNCMEI4OTlGNjdGRjlFOEU5MkQ2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP9uEhtOBA64MFleTSPS2H9NXvVQ6dn5oQYZLq0f9dfEsLTN7E5agENatqSb4
cUX4VUUtXFD1B+WyYC1TBLph+gM4txjNrtiJ994MuTJYWuhd1Wv6AaFqh5/A7AL8
PjLs16w9PJYMZy6NkuM/Sm8HPCtP74+xgwD0g4TmipOF/mxSzGbGOn/juq8zz3EX
wnuh6Np58m8HSZWw0mgvLV8nAFez0idlJ048I/3BUcx7sCoo67kr+8AA3Mrh270z
LBshr5PeQ2FAxrn1oIZaLF4ytFtCLXoSsH1r1x3QPFxqHcHi8FGLOOtMj44dcA2o
L5+kjLjnTPkyxHWZQPRvNfUMkQ==
-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org