Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.mft
File:                     DD1396EDDF83C9B378C187EF36EDFB9EA633C569.mft (raw, json)
Hash identifier:          oGQ0Sc/dbWVAT68T96aLH/qcggfwQsYVZWL1NbEx4Ec=
Subject key identifier:   FF:77:25:50:27:14:E9:32:1C:3B:D8:CB:9B:E8:78:4D:BF:3E:3A:1A
Authority key identifier: DD:13:96:ED:DF:83:C9:B3:78:C1:87:EF:36:ED:FB:9E:A6:33:C5:69
Certificate issuer:       /CN=DD1396EDDF83C9B378C187EF36EDFB9EA633C569
Certificate serial:       2077C48B511EF89E0E57B87D66309643A0ADDFC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.mft
Manifest number:          2C
Signing time:             Mon 15 Apr 2024 04:56:33 +0000
Manifest this update:     Mon 15 Apr 2024 04:51:33 +0000
Manifest next update:     Tue 16 Apr 2024 04:56:33 +0000
Files and hashes:         1: DD1396EDDF83C9B378C187EF36EDFB9EA633C569.crl (hash: dRF+l6s1iwNYHEGvpe+Y9Le8YfLv/pzI2fzQGOEEPLo=)
                          2: 32342e3135322e32382e302f32322d3332203d3e20323730353633.roa (hash: FwV+VGt8kA6cRwhuq0V5GMjtFjCGPXQ5HoXFl20qQ8Q=)
                          3: 323830343a366465383a3a2f33322d313238203d3e20323730353633.roa (hash: kaXdzCMtBf8rTEiS9hd/ui1uNjMNeh11eA4EjU2wYXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:77:c4:8b:51:1e:f8:9e:0e:57:b8:7d:66:30:96:43:a0:ad:df:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1396EDDF83C9B378C187EF36EDFB9EA633C569
        Validity
            Not Before: Apr 15 04:51:33 2024 GMT
            Not After : Apr 16 04:56:33 2024 GMT
        Subject: CN=FF7725502714E9321C3BD8CB9BE8784DBF3E3A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:49:6d:e2:30:d0:ad:4b:c2:b5:27:de:49:
                    67:32:42:06:7c:03:d9:be:5e:7f:1f:aa:37:04:96:
                    c1:32:53:14:b1:86:c5:80:45:26:7a:c1:6b:42:a3:
                    04:41:f1:fe:69:48:28:fb:c9:80:9f:b7:d9:be:c8:
                    cb:1d:cc:d7:fc:82:e5:29:83:71:5c:29:5a:1d:78:
                    f2:ef:c2:35:e0:cd:e8:11:3d:55:d7:2e:39:36:8d:
                    36:f7:59:d6:af:c9:d3:c5:53:90:28:dd:db:f4:b6:
                    dd:13:63:1b:63:9b:87:a3:7c:91:55:8a:40:b3:fe:
                    af:95:55:97:42:c0:ea:a4:3b:17:07:a8:f2:9a:fa:
                    00:08:c9:22:da:a8:4f:18:33:63:f2:71:c6:ff:7f:
                    4f:b5:77:72:5a:d6:a3:0e:2b:20:78:24:a3:54:b5:
                    69:bc:08:fe:61:97:47:ba:11:69:c4:77:24:4b:23:
                    a6:6c:7e:4a:66:6d:af:0a:43:ea:5c:60:29:ab:a3:
                    92:d9:d9:38:24:f9:88:97:23:93:98:6e:91:00:83:
                    ae:43:83:c8:1c:d3:63:ee:b1:69:2e:f0:37:2c:a5:
                    c7:39:ce:4a:e8:e3:a4:9a:09:97:cf:82:ee:61:92:
                    31:4d:d6:83:3e:d8:0a:4c:e4:42:86:43:62:3d:e8:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:25:50:27:14:E9:32:1C:3B:D8:CB:9B:E8:78:4D:BF:3E:3A:1A
            X509v3 Authority Key Identifier:
                keyid:DD:13:96:ED:DF:83:C9:B3:78:C1:87:EF:36:ED:FB:9E:A6:33:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/DD1396EDDF83C9B378C187EF36EDFB9EA633C569.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:55:7b:f6:26:43:69:cb:f5:d2:d0:a1:5e:8d:cd:38:3f:15:
         13:9e:bf:c5:74:dc:be:5d:77:f5:8b:95:6f:f5:9b:02:3f:f8:
         91:5e:50:88:e6:b4:4d:48:50:f6:49:5b:8e:c2:ba:84:f4:26:
         81:16:33:35:fa:94:ea:f7:4f:46:a0:be:55:7d:3a:84:b1:15:
         ee:7d:7c:3d:b7:cf:e3:5e:5e:53:21:c1:a4:1c:a6:3d:eb:01:
         bb:14:bd:f6:18:88:b0:c5:f7:2e:ad:52:6f:24:52:c5:f1:b4:
         74:38:7c:1c:74:b8:4c:73:ec:16:56:0c:c2:74:f4:ae:54:c1:
         32:66:8f:0d:e4:e8:b2:59:fd:a6:75:45:25:62:ea:ba:60:bd:
         23:f7:6c:b1:40:02:29:51:4e:f1:d1:c1:57:6a:c9:2b:43:37:
         b2:96:c4:ba:7c:aa:3d:fa:b1:56:a5:73:aa:a9:6a:65:8a:05:
         14:ef:80:dc:26:c8:46:6f:3b:a1:85:34:65:de:e3:ee:fe:da:
         55:e4:8e:61:e0:88:25:22:26:a4:85:32:cd:c5:b5:aa:47:8a:
         20:37:21:0c:eb:5f:c4:47:d9:91:36:d8:37:86:8c:c4:39:4b:
         16:c3:d2:2a:c3:a4:a6:8c:64:a1:d7:24:94:b6:8a:e3:03:73:
         b3:12:8e:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIHfEi1Ee+J4OV7h9ZjCWQ6Ct38EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQxMzk2RURERjgzQzlCMzc4QzE4N0VGMzZFREZCOUVB
NjMzQzU2OTAeFw0yNDA0MTUwNDUxMzNaFw0yNDA0MTYwNDU2MzNaMDMxMTAvBgNV
BAMTKEZGNzcyNTUwMjcxNEU5MzIxQzNCRDhDQjlCRTg3ODREQkYzRTNBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxYUlt4jDQrUvCtSfeSWcyQgZ8
A9m+Xn8fqjcElsEyUxSxhsWARSZ6wWtCowRB8f5pSCj7yYCft9m+yMsdzNf8guUp
g3FcKVodePLvwjXgzegRPVXXLjk2jTb3WdavydPFU5Ao3dv0tt0TYxtjm4ejfJFV
ikCz/q+VVZdCwOqkOxcHqPKa+gAIySLaqE8YM2Pyccb/f0+1d3Ja1qMOKyB4JKNU
tWm8CP5hl0e6EWnEdyRLI6Zsfkpmba8KQ+pcYCmro5LZ2Tgk+YiXI5OYbpEAg65D
g8gc02PusWku8Dcspcc5zkro46SaCZfPgu5hkjFN1oM+2ApM5EKGQ2I96GY/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/3clUCcU6TIcO9jLm+h4Tb8+OhowHwYDVR0j
BBgwFoAU3ROW7d+DybN4wYfvNu37nqYzxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNBZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12
SzgvMC9ERDEzOTZFRERGODNDOUIzNzhDMTg3RUYzNkVERkI5RUE2MzNDNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REMTM5NkVEREY4M0M5QjM3
OEMxODdFRjM2RURGQjlFQTYzM0M1NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlNBZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12SzgvMC9E
RDEzOTZFRERGODNDOUIzNzhDMTg3RUYzNkVERkI5RUE2MzNDNTY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKFV79iZDacv10tChXo3NOD8VE56/xXTcvl139YuVb/WbAj/4kV5QiOa0TUhQ
9klbjsK6hPQmgRYzNfqU6vdPRqC+VX06hLEV7n18PbfP415eUyHBpBymPesBuxS9
9hiIsMX3Lq1SbyRSxfG0dDh8HHS4THPsFlYMwnT0rlTBMmaPDeTosln9pnVFJWLq
umC9I/dssUACKVFO8dHBV2rJK0M3spbEunyqPfqxVqVzqqlqZYoFFO+A3CbIRm87
oYU0Zd7j7v7aVeSOYeCIJSImpIUyzcW1qkeKIDchDOtfxEfZkTbYN4aMxDlLFsPS
KsOkpoxkodcklLaK4wNzsxKOZw==
-----END CERTIFICATE-----