Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.mft
File:                     12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.mft (raw, json)
Hash identifier:          bwMf6IIt0e7TwBWLLX3YOAZnoUaQ9iPXsbqjUrWfMpA=
Subject key identifier:   21:C5:0D:F1:44:50:53:30:29:D8:B4:5B:4F:16:82:AB:15:F0:41:D5
Authority key identifier: 12:CD:BC:A5:75:15:B6:4A:8B:C9:0C:B9:71:E3:EA:F3:0F:B0:ED:6E
Certificate issuer:       /CN=12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E
Certificate serial:       339A56614FCC8896337BA98078C65DF12D6DB0C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.mft
Manifest number:          9C
Signing time:             Tue 13 Feb 2024 18:04:52 +0000
Manifest this update:     Tue 13 Feb 2024 17:59:52 +0000
Manifest next update:     Wed 14 Feb 2024 21:46:52 +0000
Files and hashes:         1: 12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.crl (hash: hQuYXYxEZgmtaJTK/tIsG1leWhwOOuP4HfjGjXsFQR4=)
                          2: 323830343a3661633a3a2f33322d3332203d3e20323632363031.roa (hash: JFd9Rx/UWuFTS+4REVt9AtDlsde7L7npMJG/OFSSTEA=)
                          3: 3137372e37352e3234302e302f32302d3234203d3e20323632363031.roa (hash: NeRWOCEsmCcwm8zEt6GZbxvAvfHhdgUXQ3grTLKixiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9a:56:61:4f:cc:88:96:33:7b:a9:80:78:c6:5d:f1:2d:6d:b0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E
        Validity
            Not Before: Feb 13 17:59:52 2024 GMT
            Not After : Feb 14 21:46:52 2024 GMT
        Subject: CN=21C50DF14450533029D8B45B4F1682AB15F041D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:0d:7f:d5:cb:83:af:93:5b:31:14:fe:44:
                    a0:cb:2b:69:cb:86:4d:08:d5:6e:66:75:50:a4:d7:
                    5e:fb:41:93:26:73:d9:c5:d2:16:41:c7:c2:fa:09:
                    cf:d9:bf:bc:22:cd:75:72:2b:16:6e:01:c2:fa:2f:
                    36:05:9f:19:b6:dc:a8:4a:b7:ea:52:ef:af:0d:cf:
                    27:ec:bc:d1:1d:f9:12:7a:5a:c7:7c:a0:2c:f5:a6:
                    57:9d:8c:0f:59:2f:9a:52:b3:59:88:0f:14:ff:10:
                    9c:47:0a:2d:d0:82:35:df:00:31:e4:f6:a2:4b:cf:
                    88:1d:d9:d5:40:d3:39:24:e0:7a:7b:d8:23:7d:7d:
                    78:e1:ba:46:64:82:d8:43:4a:0d:46:da:a5:9c:b8:
                    8a:cc:e7:d4:29:d0:e0:1c:b6:0e:75:00:75:d4:41:
                    45:95:b8:93:59:95:27:63:29:d9:f8:ad:47:19:67:
                    c9:0d:a9:7b:f3:7a:cb:6e:12:75:2d:74:0c:65:4f:
                    fc:c6:a0:97:7d:e8:87:77:7e:8f:b3:da:79:f1:75:
                    ef:b2:ef:40:1b:30:d7:d5:ff:98:3c:c1:ae:c1:d6:
                    6f:8a:de:2f:a5:69:95:d6:61:ff:cd:67:ab:b9:7c:
                    4a:53:e2:70:08:85:5f:08:cf:2c:82:ad:04:56:f0:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:0D:F1:44:50:53:30:29:D8:B4:5B:4F:16:82:AB:15:F0:41:D5
            X509v3 Authority Key Identifier:
                keyid:12:CD:BC:A5:75:15:B6:4A:8B:C9:0C:B9:71:E3:EA:F3:0F:B0:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/12CDBCA57515B64A8BC90CB971E3EAF30FB0ED6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:f5:e5:bb:7f:6a:f8:07:15:34:4e:5c:66:f3:d9:5e:c2:
         4d:27:c9:ba:32:bc:2b:57:7e:ed:89:8b:03:3a:4f:b7:ed:f9:
         6b:d3:5f:1c:44:6a:ec:58:6c:73:00:c3:9d:07:00:2e:37:4a:
         19:34:45:d5:80:5a:cb:84:4e:5e:30:ba:4d:74:f8:8b:5a:35:
         e5:72:bc:29:97:6e:a0:32:72:e9:0f:3a:50:46:c1:86:2c:20:
         63:fd:f9:e8:60:ca:26:95:87:91:10:5f:cb:9c:b7:fd:80:a8:
         14:c6:9a:85:93:b0:03:bd:07:eb:a3:73:42:99:42:b0:02:a7:
         db:f6:23:68:05:2c:5a:6b:b7:2b:75:39:76:76:31:65:fb:ff:
         c8:70:c6:14:74:cd:e6:b5:35:88:41:d0:76:9c:b5:aa:b6:85:
         18:ef:19:70:80:3a:88:22:f2:75:c1:a9:72:5c:1e:e6:41:3a:
         a3:88:9b:0a:14:5f:ef:75:1e:84:12:c7:b4:36:73:97:5a:6d:
         f3:ca:c3:b4:6b:2a:ec:8b:97:57:52:39:4f:66:ce:9d:2e:d2:
         15:15:4a:21:66:d4:17:4e:f5:3d:57:23:5d:0b:48:88:e9:15:
         a8:d2:cd:9c:07:ab:9c:08:7a:b5:7f:0b:5a:63:d6:2b:05:1b:
         64:f7:34:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM5pWYU/MiJYze6mAeMZd8S1tsMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJDREJDQTU3NTE1QjY0QThCQzkwQ0I5NzFFM0VBRjMw
RkIwRUQ2RTAeFw0yNDAyMTMxNzU5NTJaFw0yNDAyMTQyMTQ2NTJaMDMxMTAvBgNV
BAMTKDIxQzUwREYxNDQ1MDUzMzAyOUQ4QjQ1QjRGMTY4MkFCMTVGMDQxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghA1/1cuDr5NbMRT+RKDLK2nL
hk0I1W5mdVCk1177QZMmc9nF0hZBx8L6Cc/Zv7wizXVyKxZuAcL6LzYFnxm23KhK
t+pS768NzyfsvNEd+RJ6Wsd8oCz1pledjA9ZL5pSs1mIDxT/EJxHCi3QgjXfADHk
9qJLz4gd2dVA0zkk4Hp72CN9fXjhukZkgthDSg1G2qWcuIrM59Qp0OActg51AHXU
QUWVuJNZlSdjKdn4rUcZZ8kNqXvzestuEnUtdAxlT/zGoJd96Id3fo+z2nnxde+y
70AbMNfV/5g8wa7B1m+K3i+laZXWYf/NZ6u5fEpT4nAIhV8IzyyCrQRW8Br1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIcUN8URQUzAp2LRbTxaCqxXwQdUwHwYDVR0j
BBgwFoAUEs28pXUVtkqLyQy5cePq8w+w7W4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4
TnAvMC8xMkNEQkNBNTc1MTVCNjRBOEJDOTBDQjk3MUUzRUFGMzBGQjBFRDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyQ0RCQ0E1NzUxNUI2NEE4
QkM5MENCOTcxRTNFQUYzMEZCMEVENkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4TnAvMC8x
MkNEQkNBNTc1MTVCNjRBOEJDOTBDQjk3MUUzRUFGMzBGQjBFRDZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg5f15bt/avgHFTROXGbz2V7CTSfJujK8K1d+7YmLAzpPt+35a9NfHERq7Fhs
cwDDnQcALjdKGTRF1YBay4ROXjC6TXT4i1o15XK8KZduoDJy6Q86UEbBhiwgY/35
6GDKJpWHkRBfy5y3/YCoFMaahZOwA70H66NzQplCsAKn2/YjaAUsWmu3K3U5dnYx
Zfv/yHDGFHTN5rU1iEHQdpy1qraFGO8ZcIA6iCLydcGpclwe5kE6o4ibChRf73Ue
hBLHtDZzl1pt88rDtGsq7IuXV1I5T2bOnS7SFRVKIWbUF071PVcjXQtIiOkVqNLN
nAernAh6tX8LWmPWKwUbZPc0Zg==
-----END CERTIFICATE-----