Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.mft
File:                     47F21865C67AD13D2144340B5BB71F3468C03689.mft (raw, json)
Hash identifier:          ZAlJa4pvHms1wJDbFZF4oHWEupeL/ZU+AARKfS0BSag=
Subject key identifier:   EC:7E:76:D7:45:5B:8B:43:14:3F:A3:B8:14:77:8D:F2:1C:E3:1A:74
Authority key identifier: 47:F2:18:65:C6:7A:D1:3D:21:44:34:0B:5B:B7:1F:34:68:C0:36:89
Certificate issuer:       /CN=47F21865C67AD13D2144340B5BB71F3468C03689
Certificate serial:       6F3BED6A417751071D8F0C6A52D9FDADEC59C885
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F21865C67AD13D2144340B5BB71F3468C03689.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.mft
Manifest number:          1A
Signing time:             Fri 08 Apr 2022 07:00:00 +0000
Manifest this update:     Fri 08 Apr 2022 06:55:00 +0000
Manifest next update:     Sat 09 Apr 2022 10:37:00 +0000
Files and hashes:         1: 3136382e3232382e3138342e302f32322d3234203d3e20323634393237.roa (hash: B6MWusluBvqSqV9E5qCqmRhRKonzrIYvIwrx3C/p4SY=)
                          2: 323830343a333030383a3a2f33322d3332203d3e20323634393237.roa (hash: 1fa1Urh8HUBEIQ9YrW4dvLdC7XU0vYgYPii29w6mVu8=)
                          3: 47F21865C67AD13D2144340B5BB71F3468C03689.crl (hash: tF8fPxcMSl3PsWXLtTwtjigL0BZKIYH2iS/EhZAGT3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3b:ed:6a:41:77:51:07:1d:8f:0c:6a:52:d9:fd:ad:ec:59:c8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F21865C67AD13D2144340B5BB71F3468C03689
        Validity
            Not Before: Apr  8 06:55:00 2022 GMT
            Not After : Apr  9 10:37:00 2022 GMT
        Subject: CN=EC7E76D7455B8B43143FA3B814778DF21CE31A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:bf:a5:17:83:f4:af:54:1d:cc:1c:3f:9c:
                    58:6d:03:cb:b6:99:e1:2b:60:05:8e:52:b1:6d:70:
                    01:43:f8:a6:8b:3c:68:8f:c3:01:da:f0:75:cb:66:
                    19:c7:0c:94:60:26:63:27:00:9d:90:d4:ae:ca:9b:
                    7f:0f:95:af:9b:04:e8:f6:00:55:8b:22:bd:bd:30:
                    e4:39:66:83:63:7d:c4:19:2f:3b:43:39:0e:26:d5:
                    00:12:a5:53:50:87:99:64:da:a7:ad:04:a1:bf:06:
                    81:c6:9a:16:b5:80:b9:ce:5a:c6:82:bc:bc:76:ca:
                    ff:68:20:61:03:36:11:87:52:1d:e6:e6:f4:a2:3a:
                    9c:f0:20:9a:80:bf:f5:bb:a8:53:c1:96:9e:9a:de:
                    f4:41:45:ee:d2:91:06:7a:67:75:c1:be:84:eb:f1:
                    91:e6:cc:6e:f6:63:87:c9:40:55:31:b3:f3:39:91:
                    4e:45:24:6b:9b:cc:10:28:61:80:f5:23:b6:0c:da:
                    39:bf:c6:0a:c6:e4:b9:3c:05:7a:94:61:78:70:17:
                    97:9e:a5:e9:42:3c:ab:05:9b:43:7c:3e:96:96:3c:
                    5d:87:a4:2b:04:e0:03:f9:82:22:cd:25:2e:9c:b0:
                    20:d8:c5:99:62:03:ac:c3:28:a3:d4:c6:f9:1c:f4:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:76:D7:45:5B:8B:43:14:3F:A3:B8:14:77:8D:F2:1C:E3:1A:74
            X509v3 Authority Key Identifier:
                keyid:47:F2:18:65:C6:7A:D1:3D:21:44:34:0B:5B:B7:1F:34:68:C0:36:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F21865C67AD13D2144340B5BB71F3468C03689.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:23:d9:bb:b2:22:e4:5e:23:4c:cf:28:7c:a9:d1:dd:98:45:
         dd:54:f0:92:6d:23:2b:ab:11:4b:0b:d3:a9:64:8d:8d:e2:89:
         a3:f6:3a:4d:90:34:1c:4a:6b:84:38:4f:db:86:79:b7:8f:47:
         36:53:eb:2f:ae:a1:08:65:53:77:45:26:f1:7d:7d:94:76:30:
         0b:1f:53:c4:d5:4c:c6:6d:dc:c2:f0:ef:1d:19:a2:f1:d0:d7:
         8a:26:83:58:57:15:0b:fe:20:32:63:15:95:43:36:1c:1d:23:
         6c:b6:00:29:a3:26:b8:c8:d8:fb:cf:1d:11:57:ff:c0:68:e9:
         83:d7:3c:65:84:5a:25:06:cc:d2:fe:0d:ff:13:39:c1:59:2d:
         f6:e4:51:b9:99:9f:e5:79:64:b1:fd:b2:64:7f:ed:df:1e:18:
         5f:c9:b7:31:d8:8d:b7:f2:81:1f:51:d2:bc:4a:48:1a:ef:e8:
         f6:84:b0:f5:5c:8e:dd:70:01:e2:96:be:c7:1e:4f:00:9a:c3:
         b9:fc:21:cb:2a:47:a9:cd:28:79:76:73:bc:88:65:4d:0e:49:
         58:34:60:a3:f9:da:3d:6a:30:d7:a3:93:5e:1b:df:b7:8f:0e:
         03:49:16:6d:ef:06:4f:d1:d2:4b:89:bc:4c:b1:60:2f:13:ae:
         94:62:b7:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbzvtakF3UQcdjwxqUtn9rexZyIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGMjE4NjVDNjdBRDEzRDIxNDQzNDBCNUJCNzFGMzQ2
OEMwMzY4OTAeFw0yMjA0MDgwNjU1MDBaFw0yMjA0MDkxMDM3MDBaMDMxMTAvBgNV
BAMTKEVDN0U3NkQ3NDU1QjhCNDMxNDNGQTNCODE0Nzc4REYyMUNFMzFBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50b+lF4P0r1QdzBw/nFhtA8u2
meErYAWOUrFtcAFD+KaLPGiPwwHa8HXLZhnHDJRgJmMnAJ2Q1K7Km38Pla+bBOj2
AFWLIr29MOQ5ZoNjfcQZLztDOQ4m1QASpVNQh5lk2qetBKG/BoHGmha1gLnOWsaC
vLx2yv9oIGEDNhGHUh3m5vSiOpzwIJqAv/W7qFPBlp6a3vRBRe7SkQZ6Z3XBvoTr
8ZHmzG72Y4fJQFUxs/M5kU5FJGubzBAoYYD1I7YM2jm/xgrG5Lk8BXqUYXhwF5ee
pelCPKsFm0N8PpaWPF2HpCsE4AP5giLNJS6csCDYxZliA6zDKKPUxvkc9NpNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7H5210Vbi0MUP6O4FHeN8hzjGnQwHwYDVR0j
BBgwFoAUR/IYZcZ60T0hRDQLW7cfNGjANokwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC80N0YyMTg2NUM2N0FEMTNEMjE0NDM0MEI1QkI3MUYzNDY4QzAzNjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RjIxODY1QzY3QUQxM0Qy
MTQ0MzQwQjVCQjcxRjM0NjhDMDM2ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRGWUsvMC80
N0YyMTg2NUM2N0FEMTNEMjE0NDM0MEI1QkI3MUYzNDY4QzAzNjg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApiPZu7Ii5F4jTM8ofKnR3ZhF3VTwkm0jK6sRSwvTqWSNjeKJo/Y6TZA0HEpr
hDhP24Z5t49HNlPrL66hCGVTd0Um8X19lHYwCx9TxNVMxm3cwvDvHRmi8dDXiiaD
WFcVC/4gMmMVlUM2HB0jbLYAKaMmuMjY+88dEVf/wGjpg9c8ZYRaJQbM0v4N/xM5
wVkt9uRRuZmf5Xlksf2yZH/t3x4YX8m3MdiNt/KBH1HSvEpIGu/o9oSw9VyO3XAB
4pa+xx5PAJrDufwhyypHqc0oeXZzvIhlTQ5JWDRgo/naPWow16OTXhvft48OA0kW
be8GT9HSS4m8TLFgLxOulGK3UA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org