Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/0F772FA5073A38613493D55980628295F5667AA6.mft
File:                     0F772FA5073A38613493D55980628295F5667AA6.mft (raw, json)
Hash identifier:          c7ZkjudNywbI+EeQ1CtopGsaH+qU4hMJO87FZHlpolw=
Subject key identifier:   84:4E:A1:71:4B:9D:4A:BE:7B:72:2B:6B:1C:97:C9:26:B8:F6:54:D1
Authority key identifier: 0F:77:2F:A5:07:3A:38:61:34:93:D5:59:80:62:82:95:F5:66:7A:A6
Certificate issuer:       /CN=0F772FA5073A38613493D55980628295F5667AA6
Certificate serial:       3B1A525CAB692DFF4E993934822820BE19D82603
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F772FA5073A38613493D55980628295F5667AA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/0F772FA5073A38613493D55980628295F5667AA6.mft
Manifest number:          1E
Signing time:             Mon 05 Feb 2024 10:16:57 +0000
Manifest this update:     Mon 05 Feb 2024 10:11:57 +0000
Manifest next update:     Tue 06 Feb 2024 10:46:57 +0000
Files and hashes:         1: 3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa (hash: ab/G+VJIJD+A92rpxuEBmdi5DTka8Saz1awsqeul+7E=)
                          2: 0F772FA5073A38613493D55980628295F5667AA6.crl (hash: ZkClXx2ESbnn57httfgcwnatSjcZAVh6u3Vtd9e7ZBI=)
                          3: 323830343a373264303a3a2f33322d3332203d3e20323730383737.roa (hash: ZQu3vVAMimfLFIkSPpbPzobjZZ9wi3sBPoJEvsjS0/s=)
                          4: 3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa (hash: j4m2HT+4fuEez0B8a8W1MsqNGxGk8zoOEB/HVvf6ESg=)
                          5: 323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa (hash: 966XTsIc6czeoA+nkU2FutSaVfPVrSYFw/MF5AgXlQc=)
                          6: 3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa (hash: iLeG+2J1SlmTbY6Iz1dk+qLsAgq85Y79l73+QGN2oyc=)
                          7: 3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa (hash: LdY+SUh0krlKGL0Hoe+Jtq8+tAWtEiBpll7reFcb7cc=)
                          8: 3133382e3138352e38392e302f32342d3234203d3e20323730383737.roa (hash: ZiIOztDYvoE40NzGKfqsg4n9jClvK5zn5hzC5lBMwAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1a:52:5c:ab:69:2d:ff:4e:99:39:34:82:28:20:be:19:d8:26:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F772FA5073A38613493D55980628295F5667AA6
        Validity
            Not Before: Feb  5 10:11:57 2024 GMT
            Not After : Feb  6 10:46:57 2024 GMT
        Subject: CN=844EA1714B9D4ABE7B722B6B1C97C926B8F654D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:d9:83:8f:bc:17:aa:44:1b:f0:c6:2d:b1:
                    93:b3:a9:af:ec:28:3d:f1:59:ba:39:4b:b4:62:18:
                    94:98:95:0a:42:fe:3b:3e:1d:35:bb:8b:2f:d0:4e:
                    51:e3:58:44:c7:1c:dd:c8:82:84:e8:00:b7:2b:ca:
                    9a:ef:5e:c6:a3:0e:73:d1:07:8c:54:d4:5f:08:cc:
                    a5:86:23:c1:0c:2e:85:36:b8:be:1f:d5:e6:b4:24:
                    5b:dd:db:63:4d:1c:d8:90:39:f1:7b:eb:20:0a:b3:
                    92:07:a5:3e:e9:db:e4:cf:ae:bc:dc:f0:33:a3:2b:
                    eb:3c:a3:ef:9f:67:89:0d:cf:34:cd:e2:26:54:99:
                    70:4e:16:a6:f6:9c:a0:2b:d9:22:b6:06:ae:fb:08:
                    1d:9e:54:79:fa:bc:e1:74:dc:46:27:a7:3f:b6:cb:
                    6a:1b:07:ed:1f:3d:f0:25:f5:c6:53:90:6c:17:07:
                    69:aa:86:98:4c:b2:42:f0:6f:e5:5a:41:7c:29:7f:
                    39:ca:8d:66:ad:83:4f:b0:b5:90:97:cd:a0:7f:98:
                    bd:a5:da:92:25:d3:89:c5:1a:d8:cb:48:c0:16:3a:
                    d3:9d:51:d1:a4:de:80:15:8b:37:40:d9:44:78:9c:
                    4c:2d:7c:cf:d8:4c:21:4a:eb:7f:97:39:6f:a8:40:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:A1:71:4B:9D:4A:BE:7B:72:2B:6B:1C:97:C9:26:B8:F6:54:D1
            X509v3 Authority Key Identifier:
                keyid:0F:77:2F:A5:07:3A:38:61:34:93:D5:59:80:62:82:95:F5:66:7A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/0F772FA5073A38613493D55980628295F5667AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F772FA5073A38613493D55980628295F5667AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/0F772FA5073A38613493D55980628295F5667AA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e1:2f:33:35:14:aa:13:8e:b3:ac:39:d4:3d:53:70:66:55:
         8c:8c:8d:a9:da:33:be:a8:ff:40:90:bf:bc:31:54:be:1f:ec:
         f8:f7:41:7e:a5:91:29:28:2e:d7:02:74:1c:cc:12:9f:4d:88:
         26:14:7f:0e:c5:a2:37:87:de:fe:35:79:6a:fc:46:60:14:a2:
         68:07:f0:0a:49:6b:d7:f7:af:79:84:b2:af:de:45:23:07:9d:
         16:cc:5f:09:f0:8c:8e:20:4c:12:f4:2b:8e:18:96:25:c7:50:
         40:64:60:e2:b1:1c:85:a7:2f:64:09:ef:79:6c:e7:d5:15:3d:
         d5:3a:54:57:c2:4e:10:43:0b:27:08:a2:75:ec:59:01:0d:9f:
         22:ec:d0:a5:88:50:13:3c:4e:ae:ee:1b:e7:4a:f1:d2:35:0e:
         a5:7f:6e:77:5a:12:4a:68:76:31:fa:9e:19:64:65:07:37:c8:
         e8:7c:48:77:17:d2:a9:45:73:9d:a1:a3:c1:c8:1e:01:3a:6b:
         50:2c:80:5f:63:35:ff:6d:9c:83:00:d1:b9:df:f0:55:8d:b5:
         25:af:a0:76:4b:a8:83:f9:16:be:73:4d:ca:8f:f5:09:e9:6d:
         8f:bb:7a:ad:f3:79:42:d8:3f:76:d8:63:eb:f8:b3:50:4a:fa:
         a3:b7:29:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOxpSXKtpLf9OmTk0giggvhnYJgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3NzJGQTUwNzNBMzg2MTM0OTNENTU5ODA2MjgyOTVG
NTY2N0FBNjAeFw0yNDAyMDUxMDExNTdaFw0yNDAyMDYxMDQ2NTdaMDMxMTAvBgNV
BAMTKDg0NEVBMTcxNEI5RDRBQkU3QjcyMkI2QjFDOTdDOTI2QjhGNjU0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LNmDj7wXqkQb8MYtsZOzqa/s
KD3xWbo5S7RiGJSYlQpC/js+HTW7iy/QTlHjWETHHN3IgoToALcryprvXsajDnPR
B4xU1F8IzKWGI8EMLoU2uL4f1ea0JFvd22NNHNiQOfF76yAKs5IHpT7p2+TPrrzc
8DOjK+s8o++fZ4kNzzTN4iZUmXBOFqb2nKAr2SK2Bq77CB2eVHn6vOF03EYnpz+2
y2obB+0fPfAl9cZTkGwXB2mqhphMskLwb+VaQXwpfznKjWatg0+wtZCXzaB/mL2l
2pIl04nFGtjLSMAWOtOdUdGk3oAVizdA2UR4nEwtfM/YTCFK63+XOW+oQA4/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhE6hcUudSr57citrHJfJJrj2VNEwHwYDVR0j
BBgwFoAUD3cvpQc6OGE0k9VZgGKClfVmeqYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5B
RXQvMC8wRjc3MkZBNTA3M0EzODYxMzQ5M0Q1NTk4MDYyODI5NUY1NjY3QUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGNzcyRkE1MDczQTM4NjEz
NDkzRDU1OTgwNjI4Mjk1RjU2NjdBQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5BRXQvMC8w
Rjc3MkZBNTA3M0EzODYxMzQ5M0Q1NTk4MDYyODI5NUY1NjY3QUE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAguEvMzUUqhOOs6w51D1TcGZVjIyNqdozvqj/QJC/vDFUvh/s+PdBfqWRKSgu
1wJ0HMwSn02IJhR/DsWiN4fe/jV5avxGYBSiaAfwCklr1/eveYSyr95FIwedFsxf
CfCMjiBMEvQrjhiWJcdQQGRg4rEchacvZAnveWzn1RU91TpUV8JOEEMLJwiidexZ
AQ2fIuzQpYhQEzxOru4b50rx0jUOpX9ud1oSSmh2MfqeGWRlBzfI6HxIdxfSqUVz
naGjwcgeATprUCyAX2M1/22cgwDRud/wVY21Ja+gdkuog/kWvnNNyo/1Celtj7t6
rfN5Qtg/dthj6/izUEr6o7cp6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org