Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft
File:                     BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft (raw, json)
Hash identifier:          W69YRYISSaO+tWUjnQmTfh17g+ZM3QDD0JuGwgjGlcQ=
Subject key identifier:   F9:CA:F6:03:F1:4C:3B:84:06:6D:11:99:7B:4D:EB:2F:70:9A:3D:CE
Authority key identifier: BA:C1:65:3F:D3:B2:69:C0:9E:87:C9:6B:34:5F:41:B8:CB:C4:48:3A
Certificate issuer:       /CN=BAC1653FD3B269C09E87C96B345F41B8CBC4483A
Certificate serial:       67E0EF0407D592230DFAADA28239A343A5052C81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft
Manifest number:          4B
Signing time:             Tue 28 May 2024 15:33:58 +0000
Manifest this update:     Tue 28 May 2024 15:28:58 +0000
Manifest next update:     Wed 29 May 2024 18:44:58 +0000
Files and hashes:         1: 323830343a386632343a3a2f33322d313238203d3e20323733343730.roa (hash: gCuDuP2V8FeHqt1A23aCqgiRTU/fbMW+4YRPt1rYAVg=)
                          2: BAC1653FD3B269C09E87C96B345F41B8CBC4483A.crl (hash: 0VPIX9prin4MwICsh6Wz00izgW8VlpO1pJ1qmWLZShY=)
                          3: 34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa (hash: 9Lm0aOY3KYINUGAv6rsBmMG9wla4VI/41xwdbvSkJ4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e0:ef:04:07:d5:92:23:0d:fa:ad:a2:82:39:a3:43:a5:05:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAC1653FD3B269C09E87C96B345F41B8CBC4483A
        Validity
            Not Before: May 28 15:28:58 2024 GMT
            Not After : May 29 18:44:58 2024 GMT
        Subject: CN=F9CAF603F14C3B84066D11997B4DEB2F709A3DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:7d:bc:2e:51:3a:42:50:3b:6e:82:2c:c7:
                    eb:37:54:0e:20:03:06:b4:d0:ca:be:ec:43:16:e6:
                    76:ad:21:42:cc:19:cf:62:fb:3f:2c:ef:c4:00:84:
                    4f:e2:5e:ac:c9:d2:3e:43:60:de:bd:f2:5d:32:51:
                    c5:f1:d8:f8:d9:4d:43:6d:77:19:af:a2:78:07:42:
                    7e:9b:9d:8d:23:ed:08:1a:66:bb:80:6c:db:46:e5:
                    9f:eb:2c:fd:db:44:ae:0b:ba:38:18:82:c7:0a:fe:
                    5d:64:1b:01:9f:d3:13:9f:89:ad:d3:41:db:58:45:
                    2b:20:84:10:6c:83:96:02:c0:75:73:f6:1b:bc:ba:
                    5c:a4:1d:9b:73:ba:a0:c9:01:e0:6a:3f:ee:55:cb:
                    40:9d:53:be:fd:65:58:21:5d:44:6d:84:a6:0a:a5:
                    e3:4a:ac:6c:dc:4c:f1:46:6b:71:4f:3f:cf:60:74:
                    8d:a6:b4:28:71:8d:6e:45:72:47:c0:72:84:c6:34:
                    1d:c8:75:b4:01:7c:cf:7a:78:de:33:ba:ce:da:e0:
                    81:b6:64:51:b3:af:76:41:46:b7:d4:1e:ac:1d:ca:
                    03:49:68:39:6b:82:4f:21:5d:62:b3:55:5b:2e:5d:
                    27:4a:40:59:ab:f7:2f:fb:e8:8e:f8:a7:3f:64:05:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CA:F6:03:F1:4C:3B:84:06:6D:11:99:7B:4D:EB:2F:70:9A:3D:CE
            X509v3 Authority Key Identifier:
                keyid:BA:C1:65:3F:D3:B2:69:C0:9E:87:C9:6B:34:5F:41:B8:CB:C4:48:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/1/BAC1653FD3B269C09E87C96B345F41B8CBC4483A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:86:84:21:18:81:b3:fb:8f:b7:da:c4:e3:c9:ad:4d:b6:7e:
         63:17:31:89:c6:0e:ee:ce:81:dd:9c:6f:f3:b4:05:55:79:4f:
         d2:43:f8:de:ff:36:ea:a7:00:61:6d:7b:8d:66:52:7f:01:1d:
         34:a1:6b:7a:20:1f:96:5a:c4:a8:db:2d:9c:10:3b:6d:b3:6e:
         89:39:63:c7:c1:b1:93:87:2c:a9:7f:18:cb:62:91:4c:bf:a1:
         8a:39:bd:85:12:5d:8d:cd:ee:ad:11:9b:39:c4:ea:38:fb:55:
         34:c6:8b:71:d6:8c:b4:7e:68:c6:43:f9:2b:1a:6f:e9:05:fb:
         a6:14:fb:12:92:9b:ac:6e:ac:af:89:d2:27:93:10:fd:93:88:
         94:c3:be:9c:da:39:28:63:1b:a2:1d:37:28:94:dd:05:73:e3:
         77:35:7b:4c:c8:9a:01:cd:67:87:4c:c6:bf:f7:e8:4f:24:7a:
         9a:75:60:91:c0:0c:23:ec:3a:0c:47:04:bd:55:36:2b:3d:5d:
         97:f0:f9:75:c2:9a:a2:61:3b:13:53:e1:83:03:5b:b5:21:3f:
         a1:04:2f:79:e9:b5:4d:6a:5d:cd:ce:be:2d:9c:cd:4c:6f:c0:
         a2:5f:cc:66:8a:2b:c0:25:91:23:b3:83:fd:82:fd:a6:07:5a:
         fb:1e:8e:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ+DvBAfVkiMN+q2igjmjQ6UFLIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFDMTY1M0ZEM0IyNjlDMDlFODdDOTZCMzQ1RjQxQjhD
QkM0NDgzQTAeFw0yNDA1MjgxNTI4NThaFw0yNDA1MjkxODQ0NThaMDMxMTAvBgNV
BAMTKEY5Q0FGNjAzRjE0QzNCODQwNjZEMTE5OTdCNERFQjJGNzA5QTNEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLX28LlE6QlA7boIsx+s3VA4g
Awa00Mq+7EMW5natIULMGc9i+z8s78QAhE/iXqzJ0j5DYN698l0yUcXx2PjZTUNt
dxmvongHQn6bnY0j7QgaZruAbNtG5Z/rLP3bRK4LujgYgscK/l1kGwGf0xOfia3T
QdtYRSsghBBsg5YCwHVz9hu8ulykHZtzuqDJAeBqP+5Vy0CdU779ZVghXURthKYK
peNKrGzcTPFGa3FPP89gdI2mtChxjW5FckfAcoTGNB3IdbQBfM96eN4zus7a4IG2
ZFGzr3ZBRrfUHqwdygNJaDlrgk8hXWKzVVsuXSdKQFmr9y/76I74pz9kBRKdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+cr2A/FMO4QGbRGZe03rL3CaPc4wHwYDVR0j
BBgwFoAUusFlP9OyacCeh8lrNF9BuMvESDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlhnN0RBTjg5ZGV4MnJza28xS0ZVSk1pVHA5dUM4TDVoOTRYemtoc2dM
em8vMS9CQUMxNjUzRkQzQjI2OUMwOUU4N0M5NkIzNDVGNDFCOENCQzQ0ODNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQzE2NTNGRDNCMjY5QzA5
RTg3Qzk2QjM0NUY0MUI4Q0JDNDQ4M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlhnN0RBTjg5ZGV4MnJza28xS0ZVSk1pVHA5dUM4TDVoOTRYemtoc2dMem8vMS9C
QUMxNjUzRkQzQjI2OUMwOUU4N0M5NkIzNDVGNDFCOENCQzQ0ODNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaIaEIRiBs/uPt9rE48mtTbZ+YxcxicYO7s6B3Zxv87QFVXlP0kP43v826qcA
YW17jWZSfwEdNKFreiAfllrEqNstnBA7bbNuiTljx8Gxk4csqX8Yy2KRTL+hijm9
hRJdjc3urRGbOcTqOPtVNMaLcdaMtH5oxkP5Kxpv6QX7phT7EpKbrG6sr4nSJ5MQ
/ZOIlMO+nNo5KGMboh03KJTdBXPjdzV7TMiaAc1nh0zGv/foTyR6mnVgkcAMI+w6
DEcEvVU2Kz1dl/D5dcKaomE7E1PhgwNbtSE/oQQveem1TWpdzc6+LZzNTG/Aol/M
ZoorwCWRI7OD/YL9pgda+x6OpA==
-----END CERTIFICATE-----