Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.mft
File:                     BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.mft (raw, json)
Hash identifier:          jcAaH9gwW+i1hbvY9HOzZN846KMgufbvDsEZF8X0rQI=
Subject key identifier:   0D:72:00:D1:95:A6:72:7B:B1:13:D2:32:C3:B1:37:B7:7E:EE:27:31
Authority key identifier: BE:10:74:C8:8F:F8:A9:62:29:2C:8D:D9:A5:BD:DB:B5:96:94:BF:AC
Certificate issuer:       /CN=BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC
Certificate serial:       40FA97BAF265A8DD9A2C11914969B292919A2C22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.mft
Manifest number:          19
Signing time:             Thu 20 Jun 2024 10:17:23 +0000
Manifest this update:     Thu 20 Jun 2024 10:12:23 +0000
Manifest next update:     Fri 21 Jun 2024 13:17:23 +0000
Files and hashes:         1: BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.crl (hash: 5HhD3q+dkfKJ9aZy7wntvqXTnXoAStnAKmJ4svlhNAo=)
                          2: 323830343a363961383a3a2f33322d313238203d3e20323730323833.roa (hash: XN/0UD2j2M93I4fnxnnP+H5jUxSJWC6ZlFdaZeCGjDA=)
                          3: 3230312e37312e382e302f32322d3332203d3e20323730323833.roa (hash: WPk8P+3iJGAplcrnke0pcGpfq1GQsvczei4sWD7FIiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:97:ba:f2:65:a8:dd:9a:2c:11:91:49:69:b2:92:91:9a:2c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC
        Validity
            Not Before: Jun 20 10:12:23 2024 GMT
            Not After : Jun 21 13:17:23 2024 GMT
        Subject: CN=0D7200D195A6727BB113D232C3B137B77EEE2731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:4a:38:8b:7d:d6:08:d2:5a:d2:7b:5e:ce:
                    6d:66:f6:f2:b4:a1:8d:67:0b:9f:a7:51:f0:c0:8f:
                    de:2f:07:73:4f:13:7c:f3:33:b3:c0:5f:74:c6:e8:
                    9b:4f:46:91:bd:86:b0:ea:95:64:34:84:3c:bd:05:
                    63:c2:59:3a:29:7a:f4:1e:a9:3e:92:22:7a:a9:c2:
                    cc:03:7b:8b:31:f4:21:36:fb:ed:9b:7b:e0:6c:27:
                    92:84:d0:5c:e5:81:0e:39:ad:51:7b:39:ed:50:15:
                    a5:24:ab:58:28:26:cf:90:cc:cf:bb:f3:0e:19:c7:
                    e6:69:1b:70:0c:5d:5e:fc:b1:ec:85:b3:14:cf:d1:
                    bb:9d:13:9e:46:3c:c8:76:87:57:2d:e2:01:19:04:
                    24:34:d7:f3:41:4c:c3:2f:b0:bc:e2:6d:af:78:00:
                    42:dc:bd:a3:86:f9:6b:ad:d7:25:3c:b7:e2:b6:98:
                    a2:03:17:f9:68:6f:92:29:cf:5e:00:b5:e4:b6:e9:
                    58:d5:59:da:3d:07:f5:f9:7d:50:13:4c:c8:cb:bd:
                    1a:6f:fe:8a:c4:45:81:7c:21:0b:56:8d:5e:c7:e2:
                    fa:bd:34:0a:fc:30:7b:fa:1b:27:81:7e:bb:06:68:
                    5d:d1:29:89:52:5b:a7:2c:8e:b1:ac:a5:46:b9:48:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:00:D1:95:A6:72:7B:B1:13:D2:32:C3:B1:37:B7:7E:EE:27:31
            X509v3 Authority Key Identifier:
                keyid:BE:10:74:C8:8F:F8:A9:62:29:2C:8D:D9:A5:BD:DB:B5:96:94:BF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/BE1074C88FF8A962292C8DD9A5BDDBB59694BFAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:31:99:30:fa:c8:65:68:03:30:67:bd:5d:e3:d6:d5:eb:
         03:4a:c9:24:03:10:ae:c4:31:ea:c1:fb:bb:e5:fd:ac:7c:1e:
         30:ab:80:30:e8:7e:9f:c9:55:c7:ea:ba:ed:58:db:56:ab:d0:
         6a:81:6e:78:f9:7d:d6:9a:a4:21:2c:76:a0:13:1f:e6:93:aa:
         2a:39:54:76:13:1b:41:40:8c:b8:87:19:bc:8a:5c:9a:6e:1e:
         88:6c:5d:52:e0:d9:2d:7a:f4:dc:66:11:a8:d1:24:2e:e6:72:
         c2:2f:d1:3b:e7:91:dd:7e:9e:e5:10:9d:23:47:a7:21:9e:82:
         7a:9f:db:04:19:96:77:50:06:9e:41:28:36:48:0c:b6:11:cd:
         85:8e:84:5a:29:cf:19:dd:0b:08:17:77:2b:b6:dc:d7:dc:be:
         59:75:95:d3:01:38:f9:de:83:6f:57:10:cd:fa:24:90:68:48:
         83:80:17:f4:01:02:59:df:49:76:9d:a5:8d:49:9e:d4:8c:de:
         6f:38:9c:0c:74:9c:60:70:64:f6:7a:4b:5a:a6:e1:f1:75:6d:
         d3:28:11:3a:b7:02:d9:72:76:78:f8:86:de:ce:2d:56:6a:8d:
         8d:7c:df:54:bf:92:67:59:82:fb:ac:7a:e8:2d:98:e1:1e:5c:
         b6:75:95:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQPqXuvJlqN2aLBGRSWmykpGaLCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUxMDc0Qzg4RkY4QTk2MjI5MkM4REQ5QTVCRERCQjU5
Njk0QkZBQzAeFw0yNDA2MjAxMDEyMjNaFw0yNDA2MjExMzE3MjNaMDMxMTAvBgNV
BAMTKDBENzIwMEQxOTVBNjcyN0JCMTEzRDIzMkMzQjEzN0I3N0VFRTI3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZT0o4i33WCNJa0ntezm1m9vK0
oY1nC5+nUfDAj94vB3NPE3zzM7PAX3TG6JtPRpG9hrDqlWQ0hDy9BWPCWTopevQe
qT6SInqpwswDe4sx9CE2++2be+BsJ5KE0FzlgQ45rVF7Oe1QFaUkq1goJs+QzM+7
8w4Zx+ZpG3AMXV78seyFsxTP0budE55GPMh2h1ct4gEZBCQ01/NBTMMvsLziba94
AELcvaOG+Wut1yU8t+K2mKIDF/lob5Ipz14AteS26VjVWdo9B/X5fVATTMjLvRpv
/orERYF8IQtWjV7H4vq9NAr8MHv6GyeBfrsGaF3RKYlSW6csjrGspUa5SPXfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDXIA0ZWmcnuxE9Iyw7E3t37uJzEwHwYDVR0j
BBgwFoAUvhB0yI/4qWIpLI3Zpb3btZaUv6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZvZXlnRHNxY2l4TEFvdThuajJ1ejVjcUppV1FSaWRYTjlTOFZEeGZG
c2EvMC9CRTEwNzRDODhGRjhBOTYyMjkyQzhERDlBNUJEREJCNTk2OTRCRkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMTA3NEM4OEZGOEE5NjIy
OTJDOEREOUE1QkREQkI1OTY5NEJGQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVZvZXlnRHNxY2l4TEFvdThuajJ1ejVjcUppV1FSaWRYTjlTOFZEeGZGc2EvMC9C
RTEwNzRDODhGRjhBOTYyMjkyQzhERDlBNUJEREJCNTk2OTRCRkFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGkwxmTD6yGVoAzBnvV3j1tXrA0rJJAMQrsQx6sH7u+X9rHweMKuAMOh+n8lV
x+q67VjbVqvQaoFuePl91pqkISx2oBMf5pOqKjlUdhMbQUCMuIcZvIpcmm4eiGxd
UuDZLXr03GYRqNEkLuZywi/RO+eR3X6e5RCdI0enIZ6Cep/bBBmWd1AGnkEoNkgM
thHNhY6EWinPGd0LCBd3K7bc19y+WXWV0wE4+d6Db1cQzfokkGhIg4AX9AECWd9J
dp2ljUme1IzebzicDHScYHBk9npLWqbh8XVt0ygROrcC2XJ2ePiG3s4tVmqNjXzf
VL+SZ1mC+6x66C2Y4R5ctnWVzA==
-----END CERTIFICATE-----