Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft
File:                     838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft (raw, json)
Hash identifier:          euxlA2TY/wBrstGLu4z1FQi7wDBfZ+bG2iMpyxBqfT4=
Subject key identifier:   73:D5:B4:E4:1D:8D:A7:DD:DB:2C:21:9D:A3:9A:CB:0C:1F:36:28:12
Authority key identifier: 83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8
Certificate issuer:       /CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
Certificate serial:       33D9320B59C745936B37F264550C18BEA516900C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft
Manifest number:          0190
Signing time:             Fri 03 Nov 2023 10:45:21 +0000
Manifest this update:     Fri 03 Nov 2023 10:40:21 +0000
Manifest next update:     Sat 04 Nov 2023 12:13:21 +0000
Files and hashes:         1: 323830343a376433633a3a2f33362d3336203d3e20323731353438.roa (hash: yvpiMVXl9nwqKQVFucUwDihm7F2dWxDemYCFvgeO2j8=)
                          2: 3138312e3137342e3231342e302f32342d3234203d3e20323731353438.roa (hash: 2BYy9tV1q/PUB2et+4Lq9leodUIVn8Tueq2sgiIUSUE=)
                          3: 323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa (hash: 9FQqN5EoH9GU0qlfL5xTzVm5VnuY33kBosuLAFJgkFc=)
                          4: 3138312e3137342e3231332e302f32342d3234203d3e20323731353438.roa (hash: 98MAa4VLw4Qlbs2+MPxRtXHJhvJ5aUoik997mKVv1Dc=)
                          5: 3138312e3137342e3231322e302f32342d3234203d3e20323731353438.roa (hash: RfzZZWYpdG4GwRrT2DF3XXN28QxIUphYwbj8+WclhGo=)
                          6: 323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa (hash: mBrioWA3EiOJ6bzvmDGhIWiKVuv8ogLyLtRlxjQwRec=)
                          7: 838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.crl (hash: COegtj107I/rw0DMpRvoHztxt4r1cP9vGdt8vEvnpjY=)
                          8: 323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa (hash: FoQ83fRraOk/xAg1NkXbrcE73gekWR/Mb7j+YTlwW1U=)
                          9: 3138312e3137342e3231352e302f32342d3234203d3e20323731353438.roa (hash: i9qy3jGn+avaifRdbg9tt44wfI65C7WxZL6a6cv7LSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:32:0b:59:c7:45:93:6b:37:f2:64:55:0c:18:be:a5:16:90:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
        Validity
            Not Before: Nov  3 10:40:21 2023 GMT
            Not After : Nov  4 12:13:21 2023 GMT
        Subject: CN=73D5B4E41D8DA7DDDB2C219DA39ACB0C1F362812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:2d:f1:33:73:24:71:72:fa:00:ad:ff:b4:
                    98:45:51:a7:bc:de:f8:5c:e1:fb:e6:f1:f9:6d:82:
                    7a:82:49:d4:72:16:be:bb:46:dd:ac:57:2d:ba:8e:
                    76:c7:26:cf:6b:f5:c5:6d:9b:e5:18:b9:6a:f9:fd:
                    28:97:52:79:ff:0f:f0:64:90:13:0a:ed:bc:0e:30:
                    ca:59:b2:ec:d7:0a:c0:cb:cf:0f:40:63:fd:30:53:
                    09:71:7d:18:70:68:49:ca:e3:57:ef:37:b9:2b:74:
                    c5:5a:31:99:db:45:b4:5b:df:c9:2e:87:c8:7c:05:
                    04:22:f8:7e:b5:0c:87:47:ea:4d:10:94:cc:4a:01:
                    d7:b9:17:0d:d0:90:05:5d:7a:67:7c:0a:7e:99:98:
                    50:cd:a3:f6:b2:00:7f:73:6f:76:02:52:7c:2a:13:
                    41:33:12:92:e1:00:dc:08:ae:e2:d1:d0:40:37:73:
                    24:f5:02:05:be:cb:3b:93:f8:4d:c1:80:ae:09:3a:
                    87:8d:73:7f:83:8a:a9:2f:f9:4d:fe:8c:3e:3c:03:
                    27:b4:24:61:a9:c6:88:63:f7:b1:11:89:56:a9:19:
                    84:45:0b:9c:bd:3c:4a:33:08:0b:64:71:d1:b4:27:
                    33:1b:21:59:c9:4a:4c:47:4e:eb:28:3a:11:40:5a:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:B4:E4:1D:8D:A7:DD:DB:2C:21:9D:A3:9A:CB:0C:1F:36:28:12
            X509v3 Authority Key Identifier:
                keyid:83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:35:fb:3f:c3:86:31:49:56:db:93:e5:aa:e7:e5:b6:c3:
         e7:2c:33:fc:ea:6c:8e:5d:60:12:c5:d3:d9:87:df:87:15:c8:
         a3:bd:89:db:80:3b:97:40:ea:57:ba:77:44:95:ba:ca:7c:d1:
         0f:fe:f4:64:94:95:cd:39:78:bb:7a:0c:68:a3:90:92:33:09:
         e8:ce:8e:29:e5:18:ca:26:e7:a8:98:b0:20:aa:19:20:a6:dd:
         32:d7:d4:26:72:c6:e3:04:3a:47:ed:ae:37:45:7a:aa:0a:18:
         57:09:95:4b:bb:00:bf:82:ea:71:f7:2e:fb:db:95:44:e1:e7:
         24:a8:10:63:c0:d2:42:28:c9:fa:df:ae:6a:74:c9:21:01:39:
         8c:3b:30:73:28:8c:67:62:ac:b4:50:5a:2a:ec:96:08:03:f6:
         f5:78:e9:10:aa:77:69:26:4e:65:10:a2:b9:2f:27:38:b1:24:
         db:ca:99:53:35:26:18:3f:43:4d:d1:3f:32:0c:4a:a9:42:a8:
         fc:e7:f7:36:ff:18:b3:01:14:4c:29:c8:a2:1d:1f:c0:1e:68:
         22:ff:1c:f5:61:e2:da:d3:f6:62:6f:74:65:00:c2:f0:44:cb:
         2e:cf:9b:b9:22:ce:27:ae:2a:3d:37:ef:b8:e6:ca:2e:b3:66:
         7c:a7:fd:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM9kyC1nHRZNrN/JkVQwYvqUWkAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4RThDN0RGMzNDMEYxMDcwQkUxQkMwQzBFOTYyOTM0
QzY0RkFGODAeFw0yMzExMDMxMDQwMjFaFw0yMzExMDQxMjEzMjFaMDMxMTAvBgNV
BAMTKDczRDVCNEU0MUQ4REE3REREQjJDMjE5REEzOUFDQjBDMUYzNjI4MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMi3xM3MkcXL6AK3/tJhFUae8
3vhc4fvm8fltgnqCSdRyFr67Rt2sVy26jnbHJs9r9cVtm+UYuWr5/SiXUnn/D/Bk
kBMK7bwOMMpZsuzXCsDLzw9AY/0wUwlxfRhwaEnK41fvN7krdMVaMZnbRbRb38ku
h8h8BQQi+H61DIdH6k0QlMxKAde5Fw3QkAVdemd8Cn6ZmFDNo/ayAH9zb3YCUnwq
E0EzEpLhANwIruLR0EA3cyT1AgW+yzuT+E3BgK4JOoeNc3+Diqkv+U3+jD48Aye0
JGGpxohj97ERiVapGYRFC5y9PEozCAtkcdG0JzMbIVnJSkxHTusoOhFAWlaTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc9W05B2Np93bLCGdo5rLDB82KBIwHwYDVR0j
BBgwFoAUg46MffM8DxBwvhvAwOlik0xk+vgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhk
aUovMC84MzhFOEM3REYzM0MwRjEwNzBCRTFCQzBDMEU5NjI5MzRDNjRGQUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzOEU4QzdERjMzQzBGMTA3
MEJFMUJDMEMwRTk2MjkzNEM2NEZBRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhkaUovMC84
MzhFOEM3REYzM0MwRjEwNzBCRTFCQzBDMEU5NjI5MzRDNjRGQUY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5w1+z/DhjFJVtuT5arn5bbD5ywz/Opsjl1gEsXT2YffhxXIo72J24A7l0Dq
V7p3RJW6ynzRD/70ZJSVzTl4u3oMaKOQkjMJ6M6OKeUYyibnqJiwIKoZIKbdMtfU
JnLG4wQ6R+2uN0V6qgoYVwmVS7sAv4Lqcfcu+9uVROHnJKgQY8DSQijJ+t+uanTJ
IQE5jDswcyiMZ2KstFBaKuyWCAP29XjpEKp3aSZOZRCiuS8nOLEk28qZUzUmGD9D
TdE/MgxKqUKo/Of3Nv8YswEUTCnIoh0fwB5oIv8c9WHi2tP2Ym90ZQDC8ETLLs+b
uSLOJ64qPTfvuObKLrNmfKf9PQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:28 2025 by rpki-client