Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.mft
File:                     BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.mft (raw, json)
Hash identifier:          eak5414byDd9n6lXcBgvl60WmAHz6D9znqa2sb+XeOY=
Subject key identifier:   FA:06:A2:39:AE:A5:82:3E:97:61:DA:BA:9B:0E:8E:6A:66:49:EA:A5
Authority key identifier: BC:C3:B4:BD:85:E6:1D:FE:A7:BF:BC:38:5E:98:58:42:DD:00:06:CB
Certificate issuer:       /CN=BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB
Certificate serial:       01943353FFE14075512CF770A4D6969E60D64446
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.mft
Manifest number:          05E8
Signing time:             Mon 15 Apr 2024 09:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 09:50:00 +0000
Files and hashes:         1: BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.crl (hash: K45J2cVCjwRtYtIZ46K6h3c1oi32nqILeUCmfMkpHnQ=)
                          2: 323830343a376166383a3a2f33322d3438203d3e20323731343033.roa (hash: xwmKUnBW57uR/OGSMWpTgjS73YNfx4KeUTXWjYklHBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:33:53:ff:e1:40:75:51:2c:f7:70:a4:d6:96:9e:60:d6:44:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB
        Validity
            Not Before: Apr 15 09:45:00 2024 GMT
            Not After : Apr 22 09:50:00 2024 GMT
        Subject: CN=3082010A0282010100BE6F1E9A354761B45F6913347B3BC7AFE933ADB539493DEF12DF444D34DCEADCE6C490EFEF6DFEE804D460479094B86F527A256D4037D3CBF3861E2CD115C6CDA0A9FE916826D5DEA165F91D7F8ADC295CA3F359FBB4F584B06C6247700BC427173C85030A459A2F8A9FFED380A4C8DCD415BDCA0C100478EAC9101583742770FB9B80B9CFEA954432EA023DED7451E3C235109F2A8593FBCB2D0D7C719AD2B7D84FBC7DC7F7FA8688A49FE56B4974B20D0537E2E2AD0191890B2980CAA2921FC2F1CD39890DDF79488DABE9E0B057CE3F8B0B7D5FD5B8F06185A47EC57AE66CD3B23A9B2BB949A3A4E2B888001FF925E758981A9D83B3A40472DFD6AF3B198B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:1e:9a:35:47:61:b4:5f:69:13:34:7b:3b:
                    c7:af:e9:33:ad:b5:39:49:3d:ef:12:df:44:4d:34:
                    dc:ea:dc:e6:c4:90:ef:ef:6d:fe:e8:04:d4:60:47:
                    90:94:b8:6f:52:7a:25:6d:40:37:d3:cb:f3:86:1e:
                    2c:d1:15:c6:cd:a0:a9:fe:91:68:26:d5:de:a1:65:
                    f9:1d:7f:8a:dc:29:5c:a3:f3:59:fb:b4:f5:84:b0:
                    6c:62:47:70:0b:c4:27:17:3c:85:03:0a:45:9a:2f:
                    8a:9f:fe:d3:80:a4:c8:dc:d4:15:bd:ca:0c:10:04:
                    78:ea:c9:10:15:83:74:27:70:fb:9b:80:b9:cf:ea:
                    95:44:32:ea:02:3d:ed:74:51:e3:c2:35:10:9f:2a:
                    85:93:fb:cb:2d:0d:7c:71:9a:d2:b7:d8:4f:bc:7d:
                    c7:f7:fa:86:88:a4:9f:e5:6b:49:74:b2:0d:05:37:
                    e2:e2:ad:01:91:89:0b:29:80:ca:a2:92:1f:c2:f1:
                    cd:39:89:0d:df:79:48:8d:ab:e9:e0:b0:57:ce:3f:
                    8b:0b:7d:5f:d5:b8:f0:61:85:a4:7e:c5:7a:e6:6c:
                    d3:b2:3a:9b:2b:b9:49:a3:a4:e2:b8:88:00:1f:f9:
                    25:e7:58:98:1a:9d:83:b3:a4:04:72:df:d6:af:3b:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:A2:39:AE:A5:82:3E:97:61:DA:BA:9B:0E:8E:6A:66:49:EA:A5
            X509v3 Authority Key Identifier:
                keyid:BC:C3:B4:BD:85:E6:1D:FE:A7:BF:BC:38:5E:98:58:42:DD:00:06:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKPN5gjbzxagapGVKuNUjVAzyKgFxwgNB14mLATtJWRg/0/BCC3B4BD85E61DFEA7BFBC385E985842DD0006CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:51:35:a3:5c:1e:d9:d6:d1:25:5e:f8:40:a1:be:63:ef:
         6f:d8:96:f8:7b:ab:4a:7f:2a:23:59:09:f2:75:c7:08:ca:91:
         bb:47:77:e4:d7:5e:29:14:e9:31:60:16:9a:83:a5:4f:9b:f8:
         53:c4:07:2a:86:8a:cf:34:18:f6:cb:23:ad:05:6f:74:52:d4:
         4a:1e:16:1d:67:45:c5:11:57:09:92:eb:28:df:51:e5:86:fb:
         f5:ec:09:5b:fb:3a:63:4b:3d:25:e6:2e:e3:6c:29:94:2b:16:
         2c:ab:7d:2c:28:a4:01:60:af:88:d0:21:4d:89:20:9d:b6:fd:
         11:ef:85:a0:42:39:8c:8e:6a:01:10:ba:0d:99:13:d9:51:de:
         d0:d1:61:e7:8d:81:cf:80:f7:e1:85:3e:e1:56:c7:ab:9c:21:
         be:7f:a9:bf:30:cc:73:73:fe:bf:40:7a:2c:96:61:aa:40:80:
         a8:bd:22:95:35:ef:a7:33:20:bd:df:e1:f1:d0:ac:dc:13:ae:
         b6:1c:e5:aa:6c:ce:85:03:59:c9:0b:5b:c7:49:19:02:96:ca:
         a6:b7:b6:f0:19:01:1e:2d:47:c0:e4:2c:46:18:44:56:b1:5e:
         af:72:10:97:2c:17:eb:bb:aa:c6:83:c7:f6:6c:76:bc:59:0e:
         e8:c5:d1:cf
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUAZQzU//hQHVRLPdwpNaWnmDWREYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDM0I0QkQ4NUU2MURGRUE3QkZCQzM4NUU5ODU4NDJE
RDAwMDZDQjAeFw0yNDA0MTUwOTQ1MDBaFw0yNDA0MjIwOTUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU2RjFFOUEzNTQ3NjFCNDVG
NjkxMzM0N0IzQkM3QUZFOTMzQURCNTM5NDkzREVGMTJERjQ0NEQzNERDRUFEQ0U2
QzQ5MEVGRUY2REZFRTgwNEQ0NjA0NzkwOTRCODZGNTI3QTI1NkQ0MDM3RDNDQkYz
ODYxRTJDRDExNUM2Q0RBMEE5RkU5MTY4MjZENURFQTE2NUY5MUQ3RjhBREMyOTVD
QTNGMzU5RkJCNEY1ODRCMDZDNjI0NzcwMEJDNDI3MTczQzg1MDMwQTQ1OUEyRjhB
OUZGRUQzODBBNEM4RENENDE1QkRDQTBDMTAwNDc4RUFDOTEwMTU4Mzc0Mjc3MEZC
OUI4MEI5Q0ZFQTk1NDQzMkVBMDIzREVENzQ1MUUzQzIzNTEwOUYyQTg1OTNGQkNC
MkQwRDdDNzE5QUQyQjdEODRGQkM3REM3RjdGQTg2ODhBNDlGRTU2QjQ5NzRCMjBE
MDUzN0UyRTJBRDAxOTE4OTBCMjk4MENBQTI5MjFGQzJGMUNEMzk4OTBEREY3OTQ4
OERBQkU5RTBCMDU3Q0UzRjhCMEI3RDVGRDVCOEYwNjE4NUE0N0VDNTdBRTY2Q0Qz
QjIzQTlCMkJCOTQ5QTNBNEUyQjg4ODAwMUZGOTI1RTc1ODk4MUE5RDgzQjNBNDA0
NzJERkQ2QUYzQjE5OEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvm8emjVHYbRfaRM0ezvHr+kzrbU5ST3vEt9ETTTc6tzmxJDv723+
6ATUYEeQlLhvUnolbUA308vzhh4s0RXGzaCp/pFoJtXeoWX5HX+K3Clco/NZ+7T1
hLBsYkdwC8QnFzyFAwpFmi+Kn/7TgKTI3NQVvcoMEAR46skQFYN0J3D7m4C5z+qV
RDLqAj3tdFHjwjUQnyqFk/vLLQ18cZrSt9hPvH3H9/qGiKSf5WtJdLINBTfi4q0B
kYkLKYDKopIfwvHNOYkN33lIjavp4LBXzj+LC31f1bjwYYWkfsV65mzTsjqbK7lJ
o6TiuIgAH/kl51iYGp2Ds6QEct/WrzsZiwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FPoGojmupYI+l2HaupsOjmpmSeqlMB8GA1UdIwQYMBaAFLzDtL2F5h3+p7+8OF6Y
WELdAAbLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NLUE41Z2pienhhZ2Fw
R1ZLdU5ValZBenlLZ0Z4d2dOQjE0bUxBVHRKV1JnLzAvQkNDM0I0QkQ4NUU2MURG
RUE3QkZCQzM4NUU5ODU4NDJERDAwMDZDQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQ0MzQjRCRDg1RTYxREZFQTdCRkJDMzg1RTk4NTg0MkREMDAw
NkNCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NLUE41Z2pienhhZ2FwR1ZLdU5V
alZBenlLZ0Z4d2dOQjE0bUxBVHRKV1JnLzAvQkNDM0I0QkQ4NUU2MURGRUE3QkZC
QzM4NUU5ODU4NDJERDAwMDZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEm/UTWjXB7Z1tElXvhAob5j
72/Ylvh7q0p/KiNZCfJ1xwjKkbtHd+TXXikU6TFgFpqDpU+b+FPEByqGis80GPbL
I60Fb3RS1EoeFh1nRcURVwmS6yjfUeWG+/XsCVv7OmNLPSXmLuNsKZQrFiyrfSwo
pAFgr4jQIU2JIJ22/RHvhaBCOYyOagEQug2ZE9lR3tDRYeeNgc+A9+GFPuFWx6uc
Ib5/qb8wzHNz/r9AeiyWYapAgKi9IpU176czIL3f4fHQrNwTrrYc5apszoUDWckL
W8dJGQKWyqa3tvAZAR4tR8DkLEYYRFaxXq9yEJcsF+u7qsaDx/ZsdrxZDujF0c8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org