Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.mft
File:                     CEED3E4572246DAB1858B68FE5BBBD398AA559EC.mft (raw, json)
Hash identifier:          S+VUf7RiagrGz2ClSqvULrYvib9tvLwXJqBZH+0NnyQ=
Subject key identifier:   2A:5C:43:35:92:A5:18:5F:2A:DE:9A:10:CC:23:A4:DB:85:24:10:D3
Authority key identifier: CE:ED:3E:45:72:24:6D:AB:18:58:B6:8F:E5:BB:BD:39:8A:A5:59:EC
Certificate issuer:       /CN=CEED3E4572246DAB1858B68FE5BBBD398AA559EC
Certificate serial:       3E32332E2E26B0CF6281CB9BC2A884CB79DA9B1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.mft
Manifest number:          15
Signing time:             Wed 17 Apr 2024 03:28:00 +0000
Manifest this update:     Wed 17 Apr 2024 03:23:00 +0000
Manifest next update:     Thu 18 Apr 2024 03:28:00 +0000
Files and hashes:         1: CEED3E4572246DAB1858B68FE5BBBD398AA559EC.crl (hash: SOakVaR6gKjLB6t4ESFUS5ulR6EcLPoOqaVUUsMPTwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:32:33:2e:2e:26:b0:cf:62:81:cb:9b:c2:a8:84:cb:79:da:9b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEED3E4572246DAB1858B68FE5BBBD398AA559EC
        Validity
            Not Before: Apr 17 03:23:00 2024 GMT
            Not After : Apr 24 03:28:00 2024 GMT
        Subject: CN=3082010A0282010100AAD043E0C0E50ED79B38B1A9FE7E5C8A99F1ABACBBC6B84787242567FB3F98D84980D545B7479C5E195FC40D781D992121A5F521AAAC26303D64F89133AADE8A2874C519BD74F7969F1DFAA0235A5E8C4CCCC9ED16FB1042928D38F536EEDC20C0E7EC459D6ACC263971C96AB467E4A313EDF52A9E8AA7039461AC09B9058F047F3ACA3F2A92433253B0D9D6903DA11F97CD0E95509054313ABCA55B86A43924D59E84A8FDD1FA73D67C9F96ABB60C5213066F28BAE6CACC1C321F5B4EF0EC4F66D5FF80C675402ACB695CAA1139AECD6283FE0F618DB59394EB754462C9073A13136B6041A38BF0B14862162FC47F666ADAEA56A30CBC914E55AD259DC6C8650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:43:e0:c0:e5:0e:d7:9b:38:b1:a9:fe:7e:
                    5c:8a:99:f1:ab:ac:bb:c6:b8:47:87:24:25:67:fb:
                    3f:98:d8:49:80:d5:45:b7:47:9c:5e:19:5f:c4:0d:
                    78:1d:99:21:21:a5:f5:21:aa:ac:26:30:3d:64:f8:
                    91:33:aa:de:8a:28:74:c5:19:bd:74:f7:96:9f:1d:
                    fa:a0:23:5a:5e:8c:4c:cc:c9:ed:16:fb:10:42:92:
                    8d:38:f5:36:ee:dc:20:c0:e7:ec:45:9d:6a:cc:26:
                    39:71:c9:6a:b4:67:e4:a3:13:ed:f5:2a:9e:8a:a7:
                    03:94:61:ac:09:b9:05:8f:04:7f:3a:ca:3f:2a:92:
                    43:32:53:b0:d9:d6:90:3d:a1:1f:97:cd:0e:95:50:
                    90:54:31:3a:bc:a5:5b:86:a4:39:24:d5:9e:84:a8:
                    fd:d1:fa:73:d6:7c:9f:96:ab:b6:0c:52:13:06:6f:
                    28:ba:e6:ca:cc:1c:32:1f:5b:4e:f0:ec:4f:66:d5:
                    ff:80:c6:75:40:2a:cb:69:5c:aa:11:39:ae:cd:62:
                    83:fe:0f:61:8d:b5:93:94:eb:75:44:62:c9:07:3a:
                    13:13:6b:60:41:a3:8b:f0:b1:48:62:16:2f:c4:7f:
                    66:6a:da:ea:56:a3:0c:bc:91:4e:55:ad:25:9d:c6:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5C:43:35:92:A5:18:5F:2A:DE:9A:10:CC:23:A4:DB:85:24:10:D3
            X509v3 Authority Key Identifier:
                keyid:CE:ED:3E:45:72:24:6D:AB:18:58:B6:8F:E5:BB:BD:39:8A:A5:59:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/1/CEED3E4572246DAB1858B68FE5BBBD398AA559EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:94:57:73:96:13:25:30:ad:7d:88:aa:c0:6d:3d:15:59:
         38:79:ab:01:5e:07:ee:4b:a7:b8:8f:84:b2:33:ea:8e:17:02:
         4a:4c:c2:e0:89:4d:b1:4a:b5:05:cd:7d:39:96:05:66:58:96:
         f7:f7:7f:0d:ab:bf:e7:d5:09:75:68:94:80:72:48:17:73:de:
         0a:83:b0:c3:f9:ac:af:82:e3:e4:3f:ed:11:12:10:77:17:75:
         ba:c8:58:85:69:5f:84:63:34:b5:c7:14:15:99:2e:57:52:ec:
         db:9e:2c:46:83:1c:15:aa:29:28:fa:30:03:27:5e:b0:ec:b1:
         84:9c:3f:9d:7e:2e:36:a2:44:99:9a:0c:ca:1c:f2:ff:8a:d5:
         db:8d:87:17:f5:a1:48:a2:93:bd:ca:8b:84:16:cf:40:b4:92:
         6b:58:f7:61:74:42:23:f9:02:1e:85:24:07:34:a6:c1:03:4a:
         22:c0:83:ec:46:97:75:f5:92:3e:7d:1c:5d:93:45:65:47:9b:
         d5:b8:06:36:2f:02:64:b6:19:b9:c2:61:d4:43:5c:01:00:c2:
         9a:99:9f:f0:95:d3:96:0c:8f:43:42:13:43:fb:9e:d6:d7:75:
         9d:31:76:79:93:a0:9d:ad:03:62:27:b3:c5:1f:c4:ff:5a:7b:
         ba:87:6d:45
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUPjIzLi4msM9igcubwqiEy3namx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFRDNFNDU3MjI0NkRBQjE4NThCNjhGRTVCQkJEMzk4
QUE1NTlFQzAeFw0yNDA0MTcwMzIzMDBaFw0yNDA0MjQwMzI4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUFEMDQzRTBDMEU1MEVENzlC
MzhCMUE5RkU3RTVDOEE5OUYxQUJBQ0JCQzZCODQ3ODcyNDI1NjdGQjNGOThEODQ5
ODBENTQ1Qjc0NzlDNUUxOTVGQzQwRDc4MUQ5OTIxMjFBNUY1MjFBQUFDMjYzMDNE
NjRGODkxMzNBQURFOEEyODc0QzUxOUJENzRGNzk2OUYxREZBQTAyMzVBNUU4QzRD
Q0NDOUVEMTZGQjEwNDI5MjhEMzhGNTM2RUVEQzIwQzBFN0VDNDU5RDZBQ0MyNjM5
NzFDOTZBQjQ2N0U0QTMxM0VERjUyQTlFOEFBNzAzOTQ2MUFDMDlCOTA1OEYwNDdG
M0FDQTNGMkE5MjQzMzI1M0IwRDlENjkwM0RBMTFGOTdDRDBFOTU1MDkwNTQzMTNB
QkNBNTVCODZBNDM5MjRENTlFODRBOEZERDFGQTczRDY3QzlGOTZBQkI2MEM1MjEz
MDY2RjI4QkFFNkNBQ0MxQzMyMUY1QjRFRjBFQzRGNjZENUZGODBDNjc1NDAyQUNC
Njk1Q0FBMTEzOUFFQ0Q2MjgzRkUwRjYxOERCNTkzOTRFQjc1NDQ2MkM5MDczQTEz
MTM2QjYwNDFBMzhCRjBCMTQ4NjIxNjJGQzQ3RjY2NkFEQUVBNTZBMzBDQkM5MTRF
NTVBRDI1OURDNkM4NjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqtBD4MDlDtebOLGp/n5cipnxq6y7xrhHhyQlZ/s/mNhJgNVFt0ec
XhlfxA14HZkhIaX1IaqsJjA9ZPiRM6reiih0xRm9dPeWnx36oCNaXoxMzMntFvsQ
QpKNOPU27twgwOfsRZ1qzCY5cclqtGfkoxPt9SqeiqcDlGGsCbkFjwR/Oso/KpJD
MlOw2daQPaEfl80OlVCQVDE6vKVbhqQ5JNWehKj90fpz1nyflqu2DFITBm8ouubK
zBwyH1tO8OxPZtX/gMZ1QCrLaVyqETmuzWKD/g9hjbWTlOt1RGLJBzoTE2tgQaOL
8LFIYhYvxH9matrqVqMMvJFOVa0lncbIZQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FCpcQzWSpRhfKt6aEMwjpNuFJBDTMB8GA1UdIwQYMBaAFM7tPkVyJG2rGFi2j+W7
vTmKpVnsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JtVHM3UmJ4Nk5tNUpv
c2ZXSlp6dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzEvQ0VFRDNFNDU3MjI0NkRB
QjE4NThCNjhGRTVCQkJEMzk4QUE1NTlFQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DRUVEM0U0NTcyMjQ2REFCMTg1OEI2OEZFNUJCQkQzOThBQTU1
OUVDLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JtVHM3UmJ4Nk5tNUpvc2ZXSlp6
dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzEvQ0VFRDNFNDU3MjI0NkRBQjE4NThC
NjhGRTVCQkJEMzk4QUE1NTlFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIOblFdzlhMlMK19iKrAbT0V
WTh5qwFeB+5Lp7iPhLIz6o4XAkpMwuCJTbFKtQXNfTmWBWZYlvf3fw2rv+fVCXVo
lIBySBdz3gqDsMP5rK+C4+Q/7RESEHcXdbrIWIVpX4RjNLXHFBWZLldS7NueLEaD
HBWqKSj6MAMnXrDssYScP51+LjaiRJmaDMoc8v+K1duNhxf1oUiik73Ki4QWz0C0
kmtY92F0QiP5Ah6FJAc0psEDSiLAg+xGl3X1kj59HF2TRWVHm9W4BjYvAmS2GbnC
YdRDXAEAwpqZn/CV05YMj0NCE0P7ntbXdZ0xdnmToJ2tA2Ins8UfxP9ae7qHbUU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org