Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft
File:                     A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft (raw, json)
Hash identifier:          hVUKewBS6oEQbB3RQ2CIhJc6zoe5EzBLxTUD6+wb+3c=
Subject key identifier:   07:23:CB:35:33:8B:CC:0C:A5:43:FA:2A:21:47:FA:8A:58:6D:4E:ED
Authority key identifier: A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
Certificate issuer:       /CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
Certificate serial:       3A5D713FDE46DB4127310B75687102B7DF8C0E14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft
Manifest number:          026A
Signing time:             Wed 04 Jan 2023 04:59:49 +0000
Manifest this update:     Wed 04 Jan 2023 04:54:49 +0000
Manifest next update:     Thu 05 Jan 2023 07:15:49 +0000
Files and hashes:         1: 34352e3232362e37362e302f32342d3234203d3e20323636393834.roa (hash: VkOaibwC+g/wSLgftIW+6QVuVlKCBTJmYfxpfA+mebU=)
                          2: 34352e3232362e37362e302f32322d3232203d3e20323636393834.roa (hash: YNKaHNcMcOI9fjkyLBhSYj0BaZjL0yAellQu3J9ehng=)
                          3: 34352e3232362e37382e302f32342d3234203d3e20323636393834.roa (hash: eQ5IPD2DhlIZh4X4EVOXRI1sBsLig9Om1RKpYoAHGno=)
                          4: A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.crl (hash: hjfcFwJFSNPrqBqqLYop4liNtkSq4BLQomq0XhlMPao=)
                          5: 34352e3232362e37392e302f32342d3234203d3e20323636393834.roa (hash: Cxs+RBr/cqr1s0FdbgXRi+zwImwqHhqfnNQxD8407vw=)
                          6: 34352e3232362e37372e302f32342d3234203d3e20323636393834.roa (hash: DFeyxz9QCDx42EAahEowUMU7/STygzvhRjBbc1LHleE=)
                          7: 34352e3232362e37362e302f32332d3233203d3e20323636393834.roa (hash: U5/NM45McHBExW4LcWRRUZdbV020JbqnKETRwcvX5E4=)
                          8: 323830343a343635383a3a2f33322d3332203d3e20323636393834.roa (hash: NU4A2/Lzlpfb4wyX+uDOvTmCcTkHd1cUscJ/Sow9fL0=)
                          9: 34352e3232362e37382e302f32332d3233203d3e20323636393834.roa (hash: /uuaiSWTgX0Rmlk0oSvtEBW/JPvydBcFoQDaA9SqmDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5d:71:3f:de:46:db:41:27:31:0b:75:68:71:02:b7:df:8c:0e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
        Validity
            Not Before: Jan  4 04:54:49 2023 GMT
            Not After : Jan  5 07:15:49 2023 GMT
        Subject: CN=0723CB35338BCC0CA543FA2A2147FA8A586D4EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:1d:66:73:29:a3:2a:57:6f:8c:02:62:12:
                    1f:b8:e9:12:43:5e:69:6d:3d:98:f4:52:a7:fa:35:
                    72:65:dc:47:1e:03:34:18:33:01:27:ca:cc:98:6a:
                    ec:55:5b:88:13:ad:20:47:5d:28:67:97:01:e6:c1:
                    23:9d:dc:bd:30:81:96:1b:22:f2:e0:7f:55:46:64:
                    8a:66:7f:fc:af:cc:67:41:5b:b5:9c:24:97:94:b0:
                    c3:da:89:1c:1d:91:0e:b3:41:75:7f:06:f2:03:12:
                    0d:ba:7f:7a:36:bb:6d:b3:af:46:56:ca:4d:01:50:
                    b0:b0:b2:87:d0:34:58:fe:55:ca:7e:c9:e2:39:a5:
                    fb:1e:4a:0e:d5:27:72:9a:63:8e:bc:16:e1:af:b3:
                    b6:8b:b4:8d:5d:3b:22:1a:04:77:85:a7:1d:6b:67:
                    0b:52:10:d2:b4:58:cd:18:40:27:1e:fc:06:d3:e4:
                    b9:4c:eb:a0:e1:38:6a:fc:c0:99:cc:0a:a8:d4:b7:
                    2e:c8:7f:14:14:c0:10:cf:db:22:17:68:b9:4b:0a:
                    1c:37:31:68:b7:fb:02:11:d4:58:d4:fb:a0:d7:c9:
                    eb:64:73:df:26:40:a7:7c:6d:14:d5:fd:eb:aa:f5:
                    ae:9c:52:3d:08:b2:77:5c:4f:80:70:4f:b8:83:6e:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:CB:35:33:8B:CC:0C:A5:43:FA:2A:21:47:FA:8A:58:6D:4E:ED
            X509v3 Authority Key Identifier:
                keyid:A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:15:3b:df:bd:65:7a:14:72:fd:a5:3f:a4:ed:9a:55:91:d7:
         2b:4a:c8:6d:c8:fc:2d:a8:27:d3:6e:d8:59:73:4f:03:f4:79:
         5d:ed:a8:d7:cb:19:a3:69:d4:d7:a3:7c:b8:3a:10:04:86:76:
         c6:c8:0a:6c:f8:86:33:7e:b4:4f:d7:1f:90:0f:7a:6d:80:4d:
         2c:4e:6b:13:c4:8e:e7:a1:11:0a:fa:09:b5:ad:5a:63:a6:33:
         41:9d:48:4f:b6:7b:c1:68:56:99:24:7e:af:11:67:d6:05:c8:
         9e:24:dd:e6:f2:3e:03:2c:ff:f8:b3:4b:54:b6:fa:b5:d7:1d:
         17:51:2d:5d:c4:d0:50:59:39:16:04:57:df:78:24:7c:73:f7:
         7d:ef:d4:fb:d3:cf:f4:ad:78:37:6e:44:63:4d:f3:41:4a:23:
         6a:de:51:ef:99:3a:21:9d:4d:e9:31:93:59:51:ce:10:a7:35:
         8e:1a:8e:ba:23:c0:b5:a1:ee:d6:8e:3b:c0:5a:e0:e6:ff:6b:
         12:bd:03:98:80:a3:cf:c7:a3:1e:b9:29:ab:2d:b3:51:6f:1b:
         ae:d3:13:fd:d3:94:ee:0a:27:da:ec:f7:f9:cf:66:99:d6:f1:
         02:f0:dc:df:03:60:30:17:8b:fc:a1:e1:15:c7:60:f5:f9:20:
         68:31:bd:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOl1xP95G20EnMQt1aHECt9+MDhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBERkVGMTRFM0YyQ0JERDFEM0U0QTg1REQ4RTlFNjY5
NEZDQ0VERjAeFw0yMzAxMDQwNDU0NDlaFw0yMzAxMDUwNzE1NDlaMDMxMTAvBgNV
BAMTKDA3MjNDQjM1MzM4QkNDMENBNTQzRkEyQTIxNDdGQThBNTg2RDRFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBB1mcymjKldvjAJiEh+46RJD
XmltPZj0Uqf6NXJl3EceAzQYMwEnysyYauxVW4gTrSBHXShnlwHmwSOd3L0wgZYb
IvLgf1VGZIpmf/yvzGdBW7WcJJeUsMPaiRwdkQ6zQXV/BvIDEg26f3o2u22zr0ZW
yk0BULCwsofQNFj+Vcp+yeI5pfseSg7VJ3KaY468FuGvs7aLtI1dOyIaBHeFpx1r
ZwtSENK0WM0YQCce/AbT5LlM66DhOGr8wJnMCqjUty7IfxQUwBDP2yIXaLlLChw3
MWi3+wIR1FjU+6DXyetkc98mQKd8bRTV/euq9a6cUj0IsndcT4BwT7iDbsTlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUByPLNTOLzAylQ/oqIUf6ilhtTu0wHwYDVR0j
BBgwFoAUoN/vFOPyy90dPkqF3Y6eZpT8zt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJjY1k5ajNOTEh5U2JaZmkxRXREbVZqRzVhMnJQS0VVYVB6eU54dGhN
dEYvMC9BMERGRUYxNEUzRjJDQkREMUQzRTRBODVERDhFOUU2Njk0RkNDRURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwREZFRjE0RTNGMkNCREQx
RDNFNEE4NUREOEU5RTY2OTRGQ0NFREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlJjY1k5ajNOTEh5U2JaZmkxRXREbVZqRzVhMnJQS0VVYVB6eU54dGhNdEYvMC9B
MERGRUYxNEUzRjJDQkREMUQzRTRBODVERDhFOUU2Njk0RkNDRURGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQRU7371lehRy/aU/pO2aVZHXK0rIbcj8Lagn027YWXNPA/R5Xe2o18sZo2nU
16N8uDoQBIZ2xsgKbPiGM360T9cfkA96bYBNLE5rE8SO56ERCvoJta1aY6YzQZ1I
T7Z7wWhWmSR+rxFn1gXIniTd5vI+Ayz/+LNLVLb6tdcdF1EtXcTQUFk5FgRX33gk
fHP3fe/U+9PP9K14N25EY03zQUojat5R75k6IZ1N6TGTWVHOEKc1jhqOuiPAtaHu
1o47wFrg5v9rEr0DmICjz8ejHrkpqy2zUW8brtMT/dOU7gon2uz3+c9mmdbxAvDc
3wNgMBeL/KHhFcdg9fkgaDG9Xg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org