Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft
File:                     D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft (raw, json)
Hash identifier:          4xUFIQPzUmqtD5lnde5+vxxKFkdZiux18oX0SWrjzZs=
Subject key identifier:   16:E9:76:CD:7F:C3:26:06:CB:97:20:2C:31:3D:0C:0C:99:64:E0:02
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       583835E771497A6DD172D5FC0EF067F67240AA9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft
Manifest number:          AC
Signing time:             Wed 07 Feb 2024 14:24:05 +0000
Manifest this update:     Wed 07 Feb 2024 14:19:05 +0000
Manifest next update:     Thu 08 Feb 2024 15:10:05 +0000
Files and hashes:         1: 3139312e3234332e3138342e302f32322d3234203d3e20323633353039.roa (hash: Ha8mwOYhSKk2CndCcZ00bcrGRJk/Q+HDMoHwu4wr1jI=)
                          2: 3139312e3234332e3137362e302f32322d3234203d3e20323633353039.roa (hash: /xEjdjUyYj5vxmWa38/S14yheWluoKUluEAbzekiN9w=)
                          3: 3139312e3234332e3138382e302f32322d3234203d3e20323633353039.roa (hash: yRy8udZ/wqUbda66/jwbds0x62IXiL1Sjt4Bh8Mor3w=)
                          4: 3139312e3234332e3137362e302f32302d3230203d3e20323633353039.roa (hash: vfGcG45tL/dodpdxqj5l0mvsjQUeZXOuB3fvGKtnMXw=)
                          5: 3139312e3234332e3138342e302f32312d3231203d3e20323633353039.roa (hash: eAPP625jRz4yOTaQEQYKiXlnsUDgM9I7UaLmw7S1dxM=)
                          6: 3139312e3234332e3137362e302f32312d3231203d3e20323633353039.roa (hash: h+10OUmP896Osqg2tHYBYpb0Kmgy7u5HEmtGb0VcoWE=)
                          7: 3139312e3234332e3138302e302f32322d3234203d3e20323633353039.roa (hash: ogFI854q4roF6ibXQTpWC9Um7jrKjoyhVnRNxMpZkhc=)
                          8: D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl (hash: iGHXYJ6EfXq4KN4KazsZLzh+KgugtHuVYSwA2XHBgwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:38:35:e7:71:49:7a:6d:d1:72:d5:fc:0e:f0:67:f6:72:40:aa:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Feb  7 14:19:05 2024 GMT
            Not After : Feb  8 15:10:05 2024 GMT
        Subject: CN=16E976CD7FC32606CB97202C313D0C0C9964E002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:be:5f:a5:16:d9:2c:46:ac:d5:f2:b3:54:
                    5e:98:3c:d3:5c:93:03:39:37:67:7f:3a:74:97:6c:
                    c5:4f:eb:08:eb:e1:c3:32:bf:ef:dd:8b:f1:4d:5c:
                    a6:eb:a4:b6:0b:df:3e:3a:47:a1:43:77:1b:70:51:
                    fe:7a:25:0d:2e:95:fe:94:c5:e7:d7:cb:d5:b8:9d:
                    5b:77:3b:51:0e:57:0f:d4:12:84:61:a5:a2:5c:86:
                    30:fc:a7:04:f8:89:06:ad:47:d9:21:6c:18:6a:17:
                    79:23:cb:f3:a9:68:59:5c:87:f4:1e:78:e9:58:91:
                    ba:d3:32:15:ca:82:a6:02:56:4e:88:73:f2:c2:84:
                    44:8e:be:f2:8a:07:a2:76:4a:69:87:ba:d8:bf:bf:
                    ce:ae:6c:6b:5e:c6:8b:f3:df:62:cf:43:ec:a8:54:
                    3c:c9:4b:20:94:36:30:0f:ca:99:71:a3:c5:30:a2:
                    8b:2b:5f:cc:5c:8d:cb:13:ec:04:b4:14:f7:64:21:
                    83:42:00:7d:28:91:56:2c:b3:11:12:3d:9a:17:e0:
                    5b:43:6d:8a:9d:4a:2d:70:37:a8:f8:48:68:83:36:
                    c6:ce:b6:5f:00:67:81:4d:14:63:ea:a6:38:8c:3d:
                    39:8d:4c:ab:1c:94:2e:a6:49:5d:bf:cb:5a:8d:5c:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E9:76:CD:7F:C3:26:06:CB:97:20:2C:31:3D:0C:0C:99:64:E0:02
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:45:44:0f:cf:1e:6d:48:d6:04:fe:cf:21:55:a6:93:36:
         19:1d:20:f4:53:bf:f9:4d:bf:eb:7b:1b:b8:95:10:2b:28:04:
         37:ed:50:2b:5b:c0:70:17:cf:05:a5:d3:84:03:a9:2e:aa:9e:
         ed:2c:0d:9f:97:69:6c:42:65:c9:67:18:67:f3:61:cb:bc:fb:
         a6:9b:f6:03:51:a8:d6:cc:e3:3d:67:10:ae:0a:b1:db:dd:0d:
         8c:a7:5a:20:7e:53:33:85:c8:80:40:45:32:ee:10:d0:35:7b:
         78:29:c8:35:f3:04:7a:f0:b4:a5:c6:8b:1f:c9:89:ff:33:93:
         ac:db:dd:a8:6e:5c:e9:0e:33:3f:97:7e:ed:98:b0:b1:7b:b2:
         8e:36:88:e5:f6:15:55:8f:46:73:7b:81:20:ef:f0:14:1b:53:
         63:0f:0d:14:1b:d6:01:4e:97:06:61:4f:1c:18:f8:bc:0f:10:
         ae:01:33:f8:08:f1:24:ed:e2:cd:08:06:dc:b8:1a:c8:9e:bc:
         6b:93:cf:18:ec:72:c8:95:ea:60:5e:6c:32:3c:3f:ec:45:1c:
         e6:62:b3:f2:6d:1d:c7:84:5f:fb:17:f3:eb:a1:fc:43:59:97:
         0f:18:dd:7c:22:01:01:52:7d:22:b2:09:e2:41:b2:9d:9b:fb:
         d6:37:12:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWDg153FJem3RctX8DvBn9nJAqpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRGNjY3ODNCODE2MkU2RUVGNDlGQkJGMkIzOEQ5QTcz
REFEMzQyRDAeFw0yNDAyMDcxNDE5MDVaFw0yNDAyMDgxNTEwMDVaMDMxMTAvBgNV
BAMTKDE2RTk3NkNEN0ZDMzI2MDZDQjk3MjAyQzMxM0QwQzBDOTk2NEUwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEb5fpRbZLEas1fKzVF6YPNNc
kwM5N2d/OnSXbMVP6wjr4cMyv+/di/FNXKbrpLYL3z46R6FDdxtwUf56JQ0ulf6U
xefXy9W4nVt3O1EOVw/UEoRhpaJchjD8pwT4iQatR9khbBhqF3kjy/OpaFlch/Qe
eOlYkbrTMhXKgqYCVk6Ic/LChESOvvKKB6J2SmmHuti/v86ubGtexovz32LPQ+yo
VDzJSyCUNjAPyplxo8UwoosrX8xcjcsT7AS0FPdkIYNCAH0okVYssxESPZoX4FtD
bYqdSi1wN6j4SGiDNsbOtl8AZ4FNFGPqpjiMPTmNTKsclC6mSV2/y1qNXE13AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFul2zX/DJgbLlyAsMT0MDJlk4AIwHwYDVR0j
BBgwFoAU1PZng7gWLm7vSfu/KzjZpz2tNC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlI
VGkvMC9ENEY2Njc4M0I4MTYyRTZFRUY0OUZCQkYyQjM4RDlBNzNEQUQzNDJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0RjY2NzgzQjgxNjJFNkVF
RjQ5RkJCRjJCMzhEOUE3M0RBRDM0MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlIVGkvMC9E
NEY2Njc4M0I4MTYyRTZFRUY0OUZCQkYyQjM4RDlBNzNEQUQzNDJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjKpFRA/PHm1I1gT+zyFVppM2GR0g9FO/+U2/63sbuJUQKygEN+1QK1vAcBfP
BaXThAOpLqqe7SwNn5dpbEJlyWcYZ/Nhy7z7ppv2A1Go1szjPWcQrgqx290NjKda
IH5TM4XIgEBFMu4Q0DV7eCnINfMEevC0pcaLH8mJ/zOTrNvdqG5c6Q4zP5d+7Ziw
sXuyjjaI5fYVVY9Gc3uBIO/wFBtTYw8NFBvWAU6XBmFPHBj4vA8QrgEz+AjxJO3i
zQgG3LgayJ68a5PPGOxyyJXqYF5sMjw/7EUc5mKz8m0dx4Rf+xfz66H8Q1mXDxjd
fCIBAVJ9IrIJ4kGynZv71jcS2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org