Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft
File:                     D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft (raw, json)
Hash identifier:          74rqjo97MJPIz9WAk4reJd78ocE8EHMJQDWsgFq/ZGE=
Subject key identifier:   A2:4A:1D:1F:29:C3:7B:10:01:CA:4D:6A:F3:9F:4D:88:52:F6:61:AC
Authority key identifier: D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD
Certificate issuer:       /CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
Certificate serial:       25E43FCDF3BF2C20C964D85A88704DD8A542338B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft
Manifest number:          011D
Signing time:             Mon 15 Apr 2024 02:12:33 +0000
Manifest this update:     Mon 15 Apr 2024 02:07:33 +0000
Manifest next update:     Tue 16 Apr 2024 03:20:33 +0000
Files and hashes:         1: 323830343a343865303a3a2f33322d3438203d3e20323637313530.roa (hash: A1MNDDiryyiMwe0PXxoejU2of/uF0d+XI/R2EM7q1Hg=)
                          2: D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.crl (hash: R12yGqLq9Z2JiEhGeP2Br1ur7ufcwpErktMGsKX53tk=)
                          3: 34352e3233302e35362e302f32322d3234203d3e20323637313530.roa (hash: KQ52k+4q5hGcK1fB1yNK0+21LkCzxTJkilyWhYQvTkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e4:3f:cd:f3:bf:2c:20:c9:64:d8:5a:88:70:4d:d8:a5:42:33:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
        Validity
            Not Before: Apr 15 02:07:33 2024 GMT
            Not After : Apr 16 03:20:33 2024 GMT
        Subject: CN=A24A1D1F29C37B1001CA4D6AF39F4D8852F661AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:d9:31:1c:55:9f:56:03:fe:57:e8:35:ae:
                    27:55:53:7d:3c:81:20:9b:a7:9f:97:8b:1e:21:d6:
                    c8:da:6f:be:64:bd:33:e9:70:c3:12:e1:c6:6a:0b:
                    fe:fe:03:ac:e1:31:87:c5:71:48:5a:6e:20:dc:bf:
                    46:02:0e:42:ca:2d:49:8c:56:4b:e7:d5:49:65:3e:
                    bc:52:2f:21:fd:8a:ae:4e:49:35:32:89:7e:f8:93:
                    b5:eb:a3:db:2a:00:33:fc:18:11:bb:ec:6c:d5:55:
                    90:ad:aa:19:7a:7a:ea:dd:24:18:a9:f5:be:ed:8c:
                    66:80:ae:ce:8d:e5:7a:b3:b9:20:0e:f3:7d:9e:98:
                    5a:0a:53:ea:cf:2b:15:b8:7e:08:59:ad:c6:c3:74:
                    cd:5f:5d:e5:fe:62:ae:93:66:38:a5:48:a2:55:25:
                    2e:c8:e4:ac:5e:41:b7:ad:5c:2b:70:4a:c2:20:84:
                    be:b6:cc:41:b0:8a:ef:e4:57:e8:67:b8:2e:f7:ac:
                    d4:58:35:6e:0d:66:77:6f:b6:f8:f1:ad:68:d3:1e:
                    06:7c:ce:23:20:40:c0:cd:bc:9d:07:ab:00:72:e4:
                    0f:35:33:dc:55:39:6e:19:25:0b:d8:28:78:06:5d:
                    41:bf:81:b4:c8:4f:18:a6:ab:6c:9f:a6:b8:fa:e3:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4A:1D:1F:29:C3:7B:10:01:CA:4D:6A:F3:9F:4D:88:52:F6:61:AC
            X509v3 Authority Key Identifier:
                keyid:D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:87:12:57:88:59:db:f5:88:46:e9:04:c7:6e:27:70:1d:0b:
         75:3b:31:4f:36:68:19:1c:c0:45:7a:5c:a7:ba:a8:9f:d7:a6:
         38:91:0b:10:14:aa:25:20:e2:c8:65:b7:f3:03:2d:96:75:a5:
         fc:3d:45:25:a4:81:3a:d5:3e:b8:02:44:fd:6a:8d:9b:1b:59:
         16:4a:70:b0:46:03:95:dc:c1:2a:92:3e:fd:35:18:5a:22:2b:
         94:be:bb:ea:9d:3e:98:af:3f:25:f0:0a:f9:de:d4:f9:3d:ce:
         bf:f3:1a:f5:3e:f0:02:3c:28:ee:45:99:5f:01:6a:a8:a1:3d:
         27:e6:9e:66:14:da:39:52:4d:73:e5:81:f0:28:cd:76:c6:9c:
         72:cf:9e:18:54:e8:0d:34:f7:21:8f:fd:a1:2f:71:60:e1:3a:
         57:0a:cf:72:e4:1b:47:3a:2d:e6:5f:fd:b5:7f:a0:82:53:6b:
         69:fc:b3:97:4b:ae:3a:4f:c6:5c:9e:09:2b:81:9d:93:27:82:
         af:50:13:51:6a:f2:37:69:35:53:63:52:a0:7c:c7:c4:05:45:
         42:76:95:de:af:eb:1e:e0:4c:a4:5a:a4:f5:5b:23:8b:63:ea:
         ff:b3:e2:c4:cb:12:3b:b9:87:2d:4c:21:82:eb:4f:c7:9e:0f:
         b2:06:8e:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJeQ/zfO/LCDJZNhaiHBN2KVCM4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDRkM5RDQxRTgxQzZFQTE1OTU5Q0FDODBBQTI1Njcz
Njc2QUVERDAeFw0yNDA0MTUwMjA3MzNaFw0yNDA0MTYwMzIwMzNaMDMxMTAvBgNV
BAMTKEEyNEExRDFGMjlDMzdCMTAwMUNBNEQ2QUYzOUY0RDg4NTJGNjYxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtdkxHFWfVgP+V+g1ridVU308
gSCbp5+Xix4h1sjab75kvTPpcMMS4cZqC/7+A6zhMYfFcUhabiDcv0YCDkLKLUmM
Vkvn1UllPrxSLyH9iq5OSTUyiX74k7Xro9sqADP8GBG77GzVVZCtqhl6eurdJBip
9b7tjGaArs6N5XqzuSAO832emFoKU+rPKxW4fghZrcbDdM1fXeX+Yq6TZjilSKJV
JS7I5KxeQbetXCtwSsIghL62zEGwiu/kV+hnuC73rNRYNW4NZndvtvjxrWjTHgZ8
ziMgQMDNvJ0HqwBy5A81M9xVOW4ZJQvYKHgGXUG/gbTITximq2yfprj64+MDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUokodHynDexAByk1q859NiFL2YawwHwYDVR0j
BBgwFoAU2c/J1B6BxuoVlZysgKolZzZ2rt0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkQ0bWRSUUNRb1d0ZlZnZlRub3d0dXYyNTVYTnhkblh6ckwxdEFYVW1T
WmMvMC9EOUNGQzlENDFFODFDNkVBMTU5NTlDQUM4MEFBMjU2NzM2NzZBRURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5Q0ZDOUQ0MUU4MUM2RUEx
NTk1OUNBQzgwQUEyNTY3MzY3NkFFREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkQ0bWRSUUNRb1d0ZlZnZlRub3d0dXYyNTVYTnhkblh6ckwxdEFYVW1TWmMvMC9E
OUNGQzlENDFFODFDNkVBMTU5NTlDQUM4MEFBMjU2NzM2NzZBRURELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApYcSV4hZ2/WIRukEx24ncB0LdTsxTzZoGRzARXpcp7qon9emOJELEBSqJSDi
yGW38wMtlnWl/D1FJaSBOtU+uAJE/WqNmxtZFkpwsEYDldzBKpI+/TUYWiIrlL67
6p0+mK8/JfAK+d7U+T3Ov/Ma9T7wAjwo7kWZXwFqqKE9J+aeZhTaOVJNc+WB8CjN
dsaccs+eGFToDTT3IY/9oS9xYOE6VwrPcuQbRzot5l/9tX+gglNrafyzl0uuOk/G
XJ4JK4GdkyeCr1ATUWryN2k1U2NSoHzHxAVFQnaV3q/rHuBMpFqk9Vsji2Pq/7Pi
xMsSO7mHLUwhgutPx54PsgaOLw==
-----END CERTIFICATE-----