Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.mft
File:                     8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.mft (raw, json)
Hash identifier:          eu9pb0eUAFOysOT4YfA36DSuOItKHcvHko1CSq6/CNk=
Subject key identifier:   B9:89:DF:CF:07:AA:F7:DA:6D:65:53:AF:52:2D:F3:23:6F:91:77:C5
Authority key identifier: 8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8
Certificate issuer:       /CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
Certificate serial:       57F35FD0E39ADEE253CFF76852E57B1B83EC525D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.mft
Manifest number:          11
Signing time:             Sat 10 Feb 2024 10:50:02 +0000
Manifest this update:     Sat 10 Feb 2024 10:45:02 +0000
Manifest next update:     Sun 11 Feb 2024 11:46:02 +0000
Files and hashes:         1: 8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.crl (hash: gxQXcrDYeiDKIlZX56fa9nCCWxElW9A6rld+DyiCUd4=)
                          2: 323830343a356335383a3a2f33322d313238203d3e20323638393033.roa (hash: 20LQ/Eh+qBYE21a8B4Ekj06Nfszi35cJ43sT0Tu3CVs=)
                          3: 34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa (hash: bF5FHNCqWIpcQh8M1QgZkRCTK7H/mfNHW8g1XemUjrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f3:5f:d0:e3:9a:de:e2:53:cf:f7:68:52:e5:7b:1b:83:ec:52:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2560C554C1178E2CF5C57F4B74A54A6C826DC8
        Validity
            Not Before: Feb 10 10:45:02 2024 GMT
            Not After : Feb 11 11:46:02 2024 GMT
        Subject: CN=B989DFCF07AAF7DA6D6553AF522DF3236F9177C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:31:36:85:54:bf:72:10:e4:84:dc:e4:a4:
                    24:06:8e:52:9b:a3:ff:cb:2d:0b:da:cf:66:86:a5:
                    00:59:3f:a7:9c:8e:48:14:f7:34:f8:c2:4d:33:9f:
                    04:31:62:44:e0:8e:6d:11:c4:c9:d3:3a:04:84:70:
                    16:98:44:97:d5:48:5e:c8:11:ad:89:24:cf:2d:94:
                    c9:7d:f7:67:8a:b7:2c:d7:1e:92:7b:e5:cd:2b:16:
                    55:40:8a:37:66:50:c9:0e:49:7a:b3:04:2e:29:18:
                    05:aa:98:e1:ec:60:76:00:f7:24:aa:7d:f6:d4:da:
                    87:7d:66:9f:82:1e:0a:d1:5b:f8:8c:e4:25:ab:31:
                    e5:95:97:90:00:95:dd:f6:84:c7:31:b1:c7:6b:b7:
                    f7:e1:76:40:23:4c:ad:16:ab:10:78:76:d4:d1:58:
                    61:eb:d6:16:23:61:44:4d:5b:4b:39:96:6f:84:24:
                    0d:bf:5d:d2:89:f3:eb:6c:64:da:a7:d2:c4:97:75:
                    7e:34:f2:64:a7:51:d2:cc:7b:e7:27:6b:38:42:ac:
                    fb:0d:6d:75:a8:fc:46:4b:33:17:09:a6:c5:7d:b0:
                    a1:98:72:0c:9b:2e:e4:90:30:82:e9:e7:21:d1:d4:
                    47:54:40:41:75:67:36:2f:89:0e:ae:ad:ab:12:3b:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:DF:CF:07:AA:F7:DA:6D:65:53:AF:52:2D:F3:23:6F:91:77:C5
            X509v3 Authority Key Identifier:
                keyid:8F:25:60:C5:54:C1:17:8E:2C:F5:C5:7F:4B:74:A5:4A:6C:82:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/8F2560C554C1178E2CF5C57F4B74A54A6C826DC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:e8:26:54:13:cd:e6:d0:6a:b0:d5:ff:4c:c2:1a:f8:98:
         37:e5:33:65:7b:e5:db:dd:7b:b9:79:8d:ab:86:3a:81:65:33:
         c6:f5:9d:d8:1a:5b:ed:54:e5:17:b5:c6:a6:81:22:df:73:d6:
         09:cc:bf:29:2a:3d:62:2b:c9:24:cf:60:63:07:3d:92:f3:da:
         65:a5:b6:c0:c9:85:ae:54:85:c1:31:76:55:16:bf:ae:2d:7f:
         c7:d2:26:73:cd:36:0f:fc:57:58:44:85:65:9e:d1:d3:f5:f3:
         a7:f5:71:56:4b:db:2d:58:c4:49:a0:cd:10:7e:ed:f6:e0:34:
         19:b7:62:cf:ca:c6:ee:a8:56:3a:42:9c:16:73:50:9e:e3:12:
         d6:08:8a:fb:76:bf:ba:03:28:e4:7b:82:f3:51:73:87:67:61:
         6d:10:59:f8:62:ea:6a:11:dd:be:51:d6:9c:a8:13:f1:65:ae:
         f7:4c:96:c1:37:6c:94:8b:55:10:9f:e6:07:2a:fa:b4:da:61:
         01:0d:19:e3:7c:c0:73:f6:33:3b:60:25:43:57:c9:d3:b4:fe:
         92:9d:5d:ff:70:2c:18:a8:a1:d4:e6:13:bb:57:cf:be:54:05:
         72:cf:e6:d6:dd:59:88:d8:be:0e:c5:e6:97:cd:3c:dc:72:bf:
         6c:44:7e:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV/Nf0OOa3uJTz/doUuV7G4PsUl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYyNTYwQzU1NEMxMTc4RTJDRjVDNTdGNEI3NEE1NEE2
QzgyNkRDODAeFw0yNDAyMTAxMDQ1MDJaFw0yNDAyMTExMTQ2MDJaMDMxMTAvBgNV
BAMTKEI5ODlERkNGMDdBQUY3REE2RDY1NTNBRjUyMkRGMzIzNkY5MTc3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5jE2hVS/chDkhNzkpCQGjlKb
o//LLQvaz2aGpQBZP6ecjkgU9zT4wk0znwQxYkTgjm0RxMnTOgSEcBaYRJfVSF7I
Ea2JJM8tlMl992eKtyzXHpJ75c0rFlVAijdmUMkOSXqzBC4pGAWqmOHsYHYA9ySq
ffbU2od9Zp+CHgrRW/iM5CWrMeWVl5AAld32hMcxscdrt/fhdkAjTK0WqxB4dtTR
WGHr1hYjYURNW0s5lm+EJA2/XdKJ8+tsZNqn0sSXdX408mSnUdLMe+cnazhCrPsN
bXWo/EZLMxcJpsV9sKGYcgybLuSQMILp5yHR1EdUQEF1ZzYviQ6urasSO8JlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuYnfzweq99ptZVOvUi3zI2+Rd8UwHwYDVR0j
BBgwFoAUjyVgxVTBF44s9cV/S3SlSmyCbcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5
NnkvMC84RjI1NjBDNTU0QzExNzhFMkNGNUM1N0Y0Qjc0QTU0QTZDODI2REM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGMjU2MEM1NTRDMTE3OEUy
Q0Y1QzU3RjRCNzRBNTRBNkM4MjZEQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5NnkvMC84
RjI1NjBDNTU0QzExNzhFMkNGNUM1N0Y0Qjc0QTU0QTZDODI2REM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACxroJlQTzebQarDV/0zCGviYN+UzZXvl2917uXmNq4Y6gWUzxvWd2Bpb7VTl
F7XGpoEi33PWCcy/KSo9YivJJM9gYwc9kvPaZaW2wMmFrlSFwTF2VRa/ri1/x9Im
c802D/xXWESFZZ7R0/Xzp/VxVkvbLVjESaDNEH7t9uA0Gbdiz8rG7qhWOkKcFnNQ
nuMS1giK+3a/ugMo5HuC81Fzh2dhbRBZ+GLqahHdvlHWnKgT8WWu90yWwTdslItV
EJ/mByr6tNphAQ0Z43zAc/YzO2AlQ1fJ07T+kp1d/3AsGKih1OYTu1fPvlQFcs/m
1t1ZiNi+DsXml8083HK/bER+XA==
-----END CERTIFICATE-----