Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.mft
File:                     1A631EACEB568194FA26B00FCBE133626298AF8A.mft (raw, json)
Hash identifier:          dhTw9O+hRVbJs0BWcnTe51LKC+v/8YeNZZl02xfmRFw=
Subject key identifier:   00:90:3D:D6:8C:8F:D6:B9:C0:4D:76:9A:26:3B:08:19:A5:1D:74:38
Authority key identifier: 1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A
Certificate issuer:       /CN=1A631EACEB568194FA26B00FCBE133626298AF8A
Certificate serial:       378E87219827D40BBDEB5056C2517852111137D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A631EACEB568194FA26B00FCBE133626298AF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.mft
Manifest number:          0159
Signing time:             Sun 14 Apr 2024 21:14:43 +0000
Manifest this update:     Sun 14 Apr 2024 21:09:43 +0000
Manifest next update:     Mon 15 Apr 2024 23:50:43 +0000
Files and hashes:         1: 34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa (hash: QD16PgNWtuXdLS/2n4EhoVYYpvuLqFxHPNiZ5zXJpiY=)
                          2: 1A631EACEB568194FA26B00FCBE133626298AF8A.crl (hash: SEeTNPYIfrTeu/QqRVSxFN6LaEzmITatqn0dbH1PSBw=)
                          3: 323830343a343839303a3a2f33322d313238203d3e20323637313239.roa (hash: zU5FqM9kiL/U2xPy9pWJTqnHyG3G2UXPXf//eoWKJ/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:87:21:98:27:d4:0b:bd:eb:50:56:c2:51:78:52:11:11:37:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A631EACEB568194FA26B00FCBE133626298AF8A
        Validity
            Not Before: Apr 14 21:09:43 2024 GMT
            Not After : Apr 15 23:50:43 2024 GMT
        Subject: CN=00903DD68C8FD6B9C04D769A263B0819A51D7438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:6e:56:9b:79:03:51:58:dc:eb:c2:44:5f:
                    2e:e8:81:54:b6:2a:9e:d1:db:ab:1c:7f:b8:45:aa:
                    e6:c8:c0:6b:d6:a5:02:51:b5:0c:ef:03:38:0a:0e:
                    a0:79:bf:18:54:4f:d7:c9:df:a5:c0:83:af:b9:a4:
                    ca:37:aa:db:51:d9:ef:46:46:e1:c8:2f:86:8a:57:
                    6b:c8:5c:aa:82:2d:e1:bd:88:13:75:f7:de:0e:1d:
                    23:12:74:52:b9:27:d2:15:f8:75:81:b9:5e:99:0e:
                    0a:86:d6:e7:89:a5:28:c9:54:4e:13:a8:95:33:9c:
                    2e:d2:d6:e7:ca:2e:61:ab:79:53:a3:e3:e0:6a:45:
                    d4:e8:eb:10:bc:4a:33:1e:9f:bd:46:61:de:af:bf:
                    9e:2f:ff:3f:cb:1c:64:7d:9f:47:73:f5:f0:8e:5f:
                    f8:ca:01:83:25:30:8e:9b:47:73:b1:94:0b:4f:ef:
                    8a:9e:0a:52:45:70:9f:df:e4:b1:b0:5a:b3:4f:69:
                    d1:e6:01:74:e3:35:17:43:af:85:c7:4a:70:94:5d:
                    46:bd:10:23:dd:d0:df:e4:ff:bc:d9:ea:d2:f6:b0:
                    91:ab:21:88:60:b5:66:26:b9:ba:8f:8c:6d:a3:05:
                    14:5b:99:6e:77:66:22:1d:cd:db:42:9f:e4:7d:49:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:3D:D6:8C:8F:D6:B9:C0:4D:76:9A:26:3B:08:19:A5:1D:74:38
            X509v3 Authority Key Identifier:
                keyid:1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A631EACEB568194FA26B00FCBE133626298AF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:05:08:cb:8c:80:f5:8a:17:90:df:dc:dc:01:62:39:d2:0f:
         d4:cd:cc:82:92:c3:c2:7d:9a:d6:16:3f:33:42:de:f5:3b:df:
         64:66:bb:0d:84:35:e7:26:df:58:19:01:83:d7:e2:a0:43:da:
         16:5f:88:eb:86:d0:0f:08:78:a0:2b:62:33:ce:2c:f8:42:6a:
         57:2e:76:aa:7e:4f:6a:a6:10:86:13:d3:ea:8c:f7:1d:86:c1:
         b6:ce:3a:bb:fd:ad:3c:98:e6:cb:a0:f8:3f:1e:38:04:b9:80:
         3c:25:d3:57:e7:62:03:06:8f:67:0c:6c:78:21:a1:7a:1d:9c:
         e3:38:f2:2c:d2:eb:1f:c6:3c:a4:83:de:70:c1:4e:ea:eb:a2:
         69:3b:3e:c2:41:bd:13:74:32:b5:95:21:1c:93:7e:2c:3d:d2:
         fe:b3:e0:35:26:b3:30:04:d2:38:de:c0:69:01:c0:c7:3b:73:
         b8:d5:64:9f:bc:e5:07:75:60:14:c3:d6:b4:31:b6:3b:1f:5b:
         f0:3b:e1:5a:56:85:83:d5:db:86:75:a1:0e:80:75:be:a5:75:
         7f:69:31:54:bb:93:0c:43:ab:db:f3:49:f3:c4:b4:28:07:2c:
         39:ab:4e:35:e0:4f:33:5d:47:93:b6:89:33:d9:e3:c3:e4:aa:
         28:f4:5e:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN46HIZgn1Au961BWwlF4UhERN9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE2MzFFQUNFQjU2ODE5NEZBMjZCMDBGQ0JFMTMzNjI2
Mjk4QUY4QTAeFw0yNDA0MTQyMTA5NDNaFw0yNDA0MTUyMzUwNDNaMDMxMTAvBgNV
BAMTKDAwOTAzREQ2OEM4RkQ2QjlDMDRENzY5QTI2M0IwODE5QTUxRDc0MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncW5Wm3kDUVjc68JEXy7ogVS2
Kp7R26scf7hFqubIwGvWpQJRtQzvAzgKDqB5vxhUT9fJ36XAg6+5pMo3qttR2e9G
RuHIL4aKV2vIXKqCLeG9iBN1994OHSMSdFK5J9IV+HWBuV6ZDgqG1ueJpSjJVE4T
qJUznC7S1ufKLmGreVOj4+BqRdTo6xC8SjMen71GYd6vv54v/z/LHGR9n0dz9fCO
X/jKAYMlMI6bR3OxlAtP74qeClJFcJ/f5LGwWrNPadHmAXTjNRdDr4XHSnCUXUa9
ECPd0N/k/7zZ6tL2sJGrIYhgtWYmubqPjG2jBRRbmW53ZiIdzdtCn+R9STT7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAJA91oyP1rnATXaaJjsIGaUddDgwHwYDVR0j
BBgwFoAUGmMerOtWgZT6JrAPy+EzYmKYr4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0F0cHB6a3hEaFBwcVNZNFo3RWZvQUpRdjl2VkVjWWFtakpHMlFacmVw
cFgvMC8xQTYzMUVBQ0VCNTY4MTk0RkEyNkIwMEZDQkUxMzM2MjYyOThBRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBNjMxRUFDRUI1NjgxOTRG
QTI2QjAwRkNCRTEzMzYyNjI5OEFGOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0F0cHB6a3hEaFBwcVNZNFo3RWZvQUpRdjl2VkVjWWFtakpHMlFacmVwcFgvMC8x
QTYzMUVBQ0VCNTY4MTk0RkEyNkIwMEZDQkUxMzM2MjYyOThBRjhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUQUIy4yA9YoXkN/c3AFiOdIP1M3MgpLDwn2a1hY/M0Le9TvfZGa7DYQ15ybf
WBkBg9fioEPaFl+I64bQDwh4oCtiM84s+EJqVy52qn5PaqYQhhPT6oz3HYbBts46
u/2tPJjmy6D4Px44BLmAPCXTV+diAwaPZwxseCGheh2c4zjyLNLrH8Y8pIPecMFO
6uuiaTs+wkG9E3QytZUhHJN+LD3S/rPgNSazMATSON7AaQHAxztzuNVkn7zlB3Vg
FMPWtDG2Ox9b8DvhWlaFg9XbhnWhDoB1vqV1f2kxVLuTDEOr2/NJ88S0KAcsOatO
NeBPM11Hk7aJM9njw+SqKPRe7Q==
-----END CERTIFICATE-----