Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.mft
File:                     85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.mft (raw, json)
Hash identifier:          lTRiPDtH91k9AaD3o4PSaNzRqy0qYG0d+ri7a/TQF6k=
Subject key identifier:   4D:A7:82:FD:35:DE:9B:67:24:5E:36:20:BC:07:28:E3:5F:9B:BA:CD
Authority key identifier: 85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D
Certificate issuer:       /CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
Certificate serial:       237679CB32C6C8307B4B7A531B0D3BB62129C348
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.mft
Manifest number:          0395
Signing time:             Mon 11 Mar 2024 11:44:07 +0000
Manifest this update:     Mon 11 Mar 2024 11:39:07 +0000
Manifest next update:     Tue 12 Mar 2024 15:23:07 +0000
Files and hashes:         1: 3138312e3233322e3235302e302f32342d3234203d3e20323731353431.roa (hash: RzvuKmF2zHtSYGvDZpSice3mIn6sWE8stqnIddagn4I=)
                          2: 323830313a38303a336537303a3a2f34382d3438203d3e20323731353431.roa (hash: 7UHvT5ijDw0xOKp7PxDpM9Y2N8WuUmEYKnyEKBO1i6E=)
                          3: 3138312e3233322e3235312e302f32342d3234203d3e20323731353431.roa (hash: TSotTLguh/p22KYLMTmFK7+IpJEbF+v3kZzCOKW85ys=)
                          4: 323830313a38303a336537313a3a2f34382d3438203d3e20323731353431.roa (hash: i4X0WjU+Yr+Juqcg2vH9V7JLqoBMqioufJdJmV9/yWc=)
                          5: 85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl (hash: C04+dEwS3JpFW7LkqT5jqQ9UuD9pjSnXdIMOpgiEvls=)
                          6: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: GCRvhGZG2COt1sDaUOlk2e9mnyVwsrRRf8ru7URe/4k=)
                          7: 3138312e3233322e3235302e302f32332d3233203d3e20323731353431.roa (hash: qog2BPfw40V0qD/wioceI+Y6mLUDR9sIyRJEKm5/rHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:76:79:cb:32:c6:c8:30:7b:4b:7a:53:1b:0d:3b:b6:21:29:c3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
        Validity
            Not Before: Mar 11 11:39:07 2024 GMT
            Not After : Mar 12 15:23:07 2024 GMT
        Subject: CN=4DA782FD35DE9B67245E3620BC0728E35F9BBACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:9f:62:30:a7:82:89:84:ec:85:8c:63:f4:
                    a9:04:5a:ce:2f:d7:85:a2:3e:6d:03:c4:51:68:7a:
                    94:3a:70:e6:91:cf:78:af:59:77:36:7c:09:d8:3a:
                    e7:c8:ec:19:ed:15:4e:8a:4a:09:38:09:58:a7:a2:
                    da:03:62:51:b4:54:15:b2:53:95:f6:4d:e9:e9:f3:
                    d8:90:50:4f:43:70:cb:03:b7:9a:62:a3:61:3d:82:
                    5a:04:45:da:a7:87:e1:6f:29:f4:cc:e5:d1:b2:62:
                    3b:65:41:7f:03:03:cb:c7:54:f4:5b:92:18:b7:a8:
                    90:2e:0d:78:93:da:ac:7c:96:c9:a4:bc:cc:d3:75:
                    2a:59:d7:6b:d4:4f:25:b1:49:84:a0:a4:b7:df:dc:
                    98:72:6b:21:d1:64:ea:2c:fc:c1:9d:49:21:b5:d3:
                    ff:3b:c6:8f:86:78:27:17:6e:7d:2b:86:9c:53:7d:
                    e4:fc:68:d8:9f:46:18:f0:11:af:78:ec:5b:f7:62:
                    f7:50:8d:b4:87:d1:db:59:c9:02:0e:0f:4c:95:85:
                    dc:a4:7b:31:b4:5c:ae:26:6e:a4:b7:ad:c7:ac:8e:
                    d4:aa:75:6c:43:78:ec:e0:37:4a:72:f2:86:52:15:
                    66:ec:4d:a5:95:70:65:45:2f:49:4b:24:bf:11:25:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A7:82:FD:35:DE:9B:67:24:5E:36:20:BC:07:28:E3:5F:9B:BA:CD
            X509v3 Authority Key Identifier:
                keyid:85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:5a:46:4b:91:89:7a:0f:84:cd:69:c7:a1:f5:4e:9a:2c:
         9b:1b:14:d2:61:cc:55:b4:16:a6:f8:c6:8c:6b:71:45:60:ea:
         58:55:4d:df:30:ad:42:7a:ad:5a:c0:68:04:3a:d6:63:5c:cc:
         2e:52:39:ea:6f:c7:aa:49:e0:2c:c3:f0:2a:09:02:48:5b:fb:
         42:c2:3b:73:33:11:fd:5d:f3:59:83:60:8a:c5:67:4f:d9:c6:
         21:0e:8b:87:95:90:be:d4:b9:05:c6:5a:e3:43:e7:9f:0b:5f:
         ef:3d:0f:b2:49:d0:30:df:cd:29:cb:38:85:ac:b9:06:f1:89:
         6c:e7:7e:a7:8c:6d:f5:c4:26:e4:5d:c8:54:e9:4c:26:97:a2:
         f0:66:c4:b2:73:2a:b2:e6:0e:6c:fe:d9:5e:00:70:4b:64:39:
         52:6f:e2:05:38:87:e1:25:69:60:a0:36:c2:d6:1c:bd:49:80:
         27:a1:75:82:f0:1a:00:d3:96:00:d4:69:be:25:9c:67:8a:3d:
         70:19:01:d7:c2:c5:3d:8f:db:a5:eb:d3:d5:0e:ed:2a:1e:63:
         63:be:64:25:36:94:8a:2d:56:46:08:2c:a5:df:a6:cf:66:d7:
         0c:86:a9:ad:7d:60:9c:86:4f:f5:f4:2a:95:b2:9f:78:c5:b6:
         df:f1:b6:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI3Z5yzLGyDB7S3pTGw07tiEpw0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2NjFENEJCNUQwQzlERDM1RkE5MUYxMTY3OUU5MDJF
QjY2QUY0RDAeFw0yNDAzMTExMTM5MDdaFw0yNDAzMTIxNTIzMDdaMDMxMTAvBgNV
BAMTKDREQTc4MkZEMzVERTlCNjcyNDVFMzYyMEJDMDcyOEUzNUY5QkJBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwAJ9iMKeCiYTshYxj9KkEWs4v
14WiPm0DxFFoepQ6cOaRz3ivWXc2fAnYOufI7BntFU6KSgk4CVinotoDYlG0VBWy
U5X2Tenp89iQUE9DcMsDt5pio2E9gloERdqnh+FvKfTM5dGyYjtlQX8DA8vHVPRb
khi3qJAuDXiT2qx8lsmkvMzTdSpZ12vUTyWxSYSgpLff3JhyayHRZOos/MGdSSG1
0/87xo+GeCcXbn0rhpxTfeT8aNifRhjwEa947Fv3YvdQjbSH0dtZyQIOD0yVhdyk
ezG0XK4mbqS3rcesjtSqdWxDeOzgN0py8oZSFWbsTaWVcGVFL0lLJL8RJQDZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTaeC/TXem2ckXjYgvAco41+bus0wHwYDVR0j
BBgwFoAUhWYdS7XQyd01+pHxFnnpAutmr00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY
RkEvMC84NTY2MUQ0QkI1RDBDOUREMzVGQTkxRjExNjc5RTkwMkVCNjZBRjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1NjYxRDRCQjVEMEM5REQz
NUZBOTFGMTE2NzlFOTAyRUI2NkFGNEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMC84
NTY2MUQ0QkI1RDBDOUREMzVGQTkxRjExNjc5RTkwMkVCNjZBRjRELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcPpaRkuRiXoPhM1px6H1TposmxsU0mHMVbQWpvjGjGtxRWDqWFVN3zCtQnqt
WsBoBDrWY1zMLlI56m/HqkngLMPwKgkCSFv7QsI7czMR/V3zWYNgisVnT9nGIQ6L
h5WQvtS5BcZa40Pnnwtf7z0PsknQMN/NKcs4hay5BvGJbOd+p4xt9cQm5F3IVOlM
Jpei8GbEsnMqsuYObP7ZXgBwS2Q5Um/iBTiH4SVpYKA2wtYcvUmAJ6F1gvAaANOW
ANRpviWcZ4o9cBkB18LFPY/bpevT1Q7tKh5jY75kJTaUii1WRggspd+mz2bXDIap
rX1gnIZP9fQqlbKfeMW23/G2CQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org