Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.mft
File:                     78C362024931EABCD22430437714D086537F64FD.mft (raw, json)
Hash identifier:          LXJw27bmQmH7oFMULOaPHYJ4S8OqYXBgWPY/78kOPg4=
Subject key identifier:   E8:0F:66:80:B8:A4:D2:C1:25:E4:3D:42:ED:A2:32:CA:F2:C9:0F:5F
Authority key identifier: 78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Certificate issuer:       /CN=78C362024931EABCD22430437714D086537F64FD
Certificate serial:       16295EC370B119835AF763508AB7FD1D2E68BDFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.mft
Manifest number:          028C
Signing time:             Mon 15 Apr 2024 04:36:22 +0000
Manifest this update:     Mon 15 Apr 2024 04:31:22 +0000
Manifest next update:     Tue 16 Apr 2024 06:01:22 +0000
Files and hashes:         1: 78C362024931EABCD22430437714D086537F64FD.crl (hash: x3j/v4mNG06VSMQ1W9OH5YibzcbXZUlbyFqLoTYBWkc=)
                          2: 3137302e38322e342e302f32322d3234203d3e20323636343333.roa (hash: EnjUswiHhaJnl7gtB3OCpvwVM6J4GiyByzibe96zZBo=)
                          3: 34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (hash: bnQ/H7ieSwg824qXdV9nXfJ1VzlT453kr0fKg9lI690=)
                          4: 323830343a333762633a3a2f33322d3438203d3e20323636343333.roa (hash: 1NirrVyHCFWPAxNrXAuZPSlY2OXjkNb+ATY/EZe86nU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:29:5e:c3:70:b1:19:83:5a:f7:63:50:8a:b7:fd:1d:2e:68:bd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C362024931EABCD22430437714D086537F64FD
        Validity
            Not Before: Apr 15 04:31:22 2024 GMT
            Not After : Apr 16 06:01:22 2024 GMT
        Subject: CN=E80F6680B8A4D2C125E43D42EDA232CAF2C90F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:c9:73:7f:ec:c9:4a:c2:ba:f8:59:f2:8d:
                    d5:c3:31:7d:9b:45:8f:5d:5d:9a:0c:d9:4c:d5:89:
                    5f:dd:02:15:b0:d0:f3:c5:70:bd:fe:26:5f:81:94:
                    fd:45:79:9f:9d:05:b5:4e:ef:1e:3b:a1:6d:5d:02:
                    5c:ed:d9:69:63:a5:4a:70:f9:5b:7d:c3:fe:a6:8d:
                    94:ed:e4:d0:21:fc:3f:fc:83:06:0e:20:03:4a:83:
                    c4:53:e5:d7:eb:fa:ad:88:ff:5a:78:80:0e:c7:11:
                    56:35:f4:5e:d0:51:c4:f0:c9:a8:99:be:01:d8:e1:
                    f6:c6:d5:a7:eb:2e:72:d6:6d:8b:dd:23:b4:36:99:
                    9e:9c:a1:92:d8:05:a8:a3:61:c3:f4:2d:21:0f:e9:
                    a6:4f:f0:04:c2:64:82:61:43:ba:5b:c7:25:a2:58:
                    84:a0:76:66:df:d1:97:16:d2:c5:82:87:64:84:a1:
                    e8:39:1b:ce:88:98:51:d4:7f:5e:dc:db:cf:0b:11:
                    9d:da:8a:50:d1:89:63:55:ac:e6:6b:22:fb:79:cd:
                    84:67:15:ca:5a:8a:fa:86:fb:2d:57:59:4a:bb:1a:
                    a6:fa:01:b0:0f:9e:f6:ba:28:4c:c3:dd:00:45:26:
                    51:19:e6:4a:98:36:70:5f:d3:52:d5:ff:de:a9:b0:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:66:80:B8:A4:D2:C1:25:E4:3D:42:ED:A2:32:CA:F2:C9:0F:5F
            X509v3 Authority Key Identifier:
                keyid:78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:10:ce:37:21:6e:61:3c:29:c9:32:ee:21:1b:7f:9f:d7:
         5c:be:73:9a:2d:d9:d3:95:6b:d5:94:e3:a9:01:3f:54:ca:19:
         93:0d:f2:95:2f:d8:6c:10:32:e1:d5:fb:62:5c:30:04:7b:37:
         c4:15:f8:fc:ad:88:5e:5e:2d:bd:a6:cd:9e:c7:d9:f4:79:05:
         33:9c:c1:56:f8:af:ff:04:9c:d5:a0:d4:01:53:f5:95:15:47:
         a0:1d:56:fc:18:db:6e:e6:10:e9:ba:60:ac:ea:c2:a6:00:ac:
         f1:e0:40:d6:ef:19:44:ec:14:4f:e7:7e:94:30:82:bc:52:c1:
         bd:07:a1:13:ed:da:9b:2d:ca:3d:5e:06:80:a8:20:6c:3b:db:
         6e:d6:47:c0:43:ec:ac:a7:22:f6:07:3f:1a:87:c8:97:90:2d:
         b1:7c:88:13:e3:d9:c6:ee:80:f2:ac:eb:71:8c:e4:05:ff:a5:
         b9:d0:b8:7a:d0:92:70:80:99:2b:92:b7:4e:f5:fa:6e:dc:bb:
         8b:bd:42:29:ed:ca:3f:50:5e:18:a7:47:61:25:b7:21:77:b4:
         33:e9:7b:8b:b5:bc:6d:17:ea:a4:98:9d:33:e8:c0:46:71:de:
         9e:cd:1d:f3:e1:e9:cf:15:0b:d1:1c:af:d3:75:9b:75:77:53:
         7d:43:96:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFilew3CxGYNa92NQirf9HS5ovfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhDMzYyMDI0OTMxRUFCQ0QyMjQzMDQzNzcxNEQwODY1
MzdGNjRGRDAeFw0yNDA0MTUwNDMxMjJaFw0yNDA0MTYwNjAxMjJaMDMxMTAvBgNV
BAMTKEU4MEY2NjgwQjhBNEQyQzEyNUU0M0Q0MkVEQTIzMkNBRjJDOTBGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+clzf+zJSsK6+FnyjdXDMX2b
RY9dXZoM2UzViV/dAhWw0PPFcL3+Jl+BlP1FeZ+dBbVO7x47oW1dAlzt2WljpUpw
+Vt9w/6mjZTt5NAh/D/8gwYOIANKg8RT5dfr+q2I/1p4gA7HEVY19F7QUcTwyaiZ
vgHY4fbG1afrLnLWbYvdI7Q2mZ6coZLYBaijYcP0LSEP6aZP8ATCZIJhQ7pbxyWi
WISgdmbf0ZcW0sWCh2SEoeg5G86ImFHUf17c288LEZ3ailDRiWNVrOZrIvt5zYRn
FcpaivqG+y1XWUq7Gqb6AbAPnva6KEzD3QBFJlEZ5kqYNnBf01LV/96psGqdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6A9mgLik0sEl5D1C7aIyyvLJD18wHwYDVR0j
BBgwFoAUeMNiAkkx6rzSJDBDdxTQhlN/ZP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC83OEMzNjIwMjQ5MzFFQUJDRDIyNDMwNDM3NzE0RDA4NjUzN0Y2NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4QzM2MjAyNDkzMUVBQkNE
MjI0MzA0Mzc3MTREMDg2NTM3RjY0RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5VWYvMC83
OEMzNjIwMjQ5MzFFQUJDRDIyNDMwNDM3NzE0RDA4NjUzN0Y2NEZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABAsQzjchbmE8Kcky7iEbf5/XXL5zmi3Z05Vr1ZTjqQE/VMoZkw3ylS/YbBAy
4dX7YlwwBHs3xBX4/K2IXl4tvabNnsfZ9HkFM5zBVviv/wSc1aDUAVP1lRVHoB1W
/BjbbuYQ6bpgrOrCpgCs8eBA1u8ZROwUT+d+lDCCvFLBvQehE+3amy3KPV4GgKgg
bDvbbtZHwEPsrKci9gc/GofIl5AtsXyIE+PZxu6A8qzrcYzkBf+ludC4etCScICZ
K5K3TvX6bty7i71CKe3KP1BeGKdHYSW3IXe0M+l7i7W8bRfqpJidM+jARnHens0d
8+HpzxUL0Ryv03WbdXdTfUOWig==
-----END CERTIFICATE-----