Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.mft
File:                     91BD7202FAB43417486F1EFE400916E4F814FC10.mft (raw, json)
Hash identifier:          IbwpmD2KT3IsXFAHIVqj4l11zflvannqKU3ZuY9WJvY=
Subject key identifier:   1C:72:81:D4:FC:61:4E:00:AA:40:0E:B0:E2:3C:6E:7B:82:46:9C:AF
Authority key identifier: 91:BD:72:02:FA:B4:34:17:48:6F:1E:FE:40:09:16:E4:F8:14:FC:10
Certificate issuer:       /CN=91BD7202FAB43417486F1EFE400916E4F814FC10
Certificate serial:       626065EFEAD8985EFC6A1F51557B6FA5253707A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD7202FAB43417486F1EFE400916E4F814FC10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.mft
Manifest number:          4B
Signing time:             Mon 06 Feb 2023 04:57:05 +0000
Manifest this update:     Mon 06 Feb 2023 04:52:05 +0000
Manifest next update:     Tue 07 Feb 2023 06:32:05 +0000
Files and hashes:         1: 34352e3138362e35342e302f32332d3233203d3e20323639343131.roa (hash: 53btS5tmeE8hD9y1ERm1GJo1J7Pq/OaMhhQxfw62PBw=)
                          2: 323830343a363432633a3a2f33322d3332203d3e20323639343131.roa (hash: wZtJH4iY76UDRp5kDv3IVrPgv1vbEzdDoKf4LznlibU=)
                          3: 323830343a363432633a3a2f33332d3333203d3e20323639343131.roa (hash: Cb2Ak1mkllSO7M0G9gx3O9lQgw5yHda9pqwr1rV+D4c=)
                          4: 323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa (hash: vXxuCUb7KeoeAMAQ3aru88faZpzkhpZqaJ8uAp2yrDs=)
                          5: 34352e3138362e35322e302f32332d3233203d3e20323639343131.roa (hash: jXKjo4T4c425nNDC8iBIG6pRqc5eclvZJM/Dc4AdPDY=)
                          6: 34352e3138362e35322e302f32322d3232203d3e20323639343131.roa (hash: PHDIOq/RrxEdb91vtbaHT142bJ+4xy0AkPbSnkAANqU=)
                          7: 91BD7202FAB43417486F1EFE400916E4F814FC10.crl (hash: Ky3xMSrXWnzkYeb2lWie21akz1RginYlNroue9fViLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:65:ef:ea:d8:98:5e:fc:6a:1f:51:55:7b:6f:a5:25:37:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BD7202FAB43417486F1EFE400916E4F814FC10
        Validity
            Not Before: Feb  6 04:52:05 2023 GMT
            Not After : Feb  7 06:32:05 2023 GMT
        Subject: CN=1C7281D4FC614E00AA400EB0E23C6E7B82469CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:4e:4d:4a:e4:8a:81:59:5d:c9:6e:21:64:
                    37:30:66:ab:37:30:33:07:a8:35:29:ae:11:d2:c1:
                    38:fd:55:f3:cf:a4:b6:1c:1d:44:4f:15:ec:f2:8e:
                    b6:0d:3f:45:f2:71:9a:2a:a8:ed:2a:cc:d8:98:e8:
                    c3:a2:02:a5:24:b9:3f:4d:97:62:73:fd:fb:a5:e4:
                    e8:ab:a1:de:54:25:d6:7c:69:92:f6:bf:cf:98:44:
                    e0:bf:99:7e:0e:b6:bf:87:a2:a0:eb:75:23:d8:8b:
                    d1:39:4c:84:cf:52:2c:56:a0:85:d0:53:36:dc:54:
                    c5:d7:53:26:03:fb:96:d2:10:02:dd:91:b8:53:fe:
                    3a:0a:a9:0e:4b:fb:d8:80:31:dc:d7:19:f1:f8:70:
                    6a:4c:37:7c:9a:8f:a0:2c:d5:82:62:65:8b:ae:78:
                    62:d4:dd:40:a0:8e:02:4b:db:8c:71:0a:79:e6:af:
                    86:05:cc:1b:1c:03:51:b5:0c:37:86:a6:35:3e:c1:
                    82:c8:7f:66:06:65:b4:28:c7:b3:e5:cd:2a:d0:00:
                    8c:d8:9d:e0:4c:e0:cc:69:49:99:13:fa:66:68:d4:
                    b7:62:08:7c:d1:7c:75:60:2b:07:42:8d:32:3f:27:
                    3a:26:48:37:6e:51:81:26:31:04:54:43:99:e6:bb:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:81:D4:FC:61:4E:00:AA:40:0E:B0:E2:3C:6E:7B:82:46:9C:AF
            X509v3 Authority Key Identifier:
                keyid:91:BD:72:02:FA:B4:34:17:48:6F:1E:FE:40:09:16:E4:F8:14:FC:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD7202FAB43417486F1EFE400916E4F814FC10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91BD7202FAB43417486F1EFE400916E4F814FC10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:c9:82:ff:7d:30:39:40:ba:b9:72:c0:17:14:29:40:3a:
         79:30:70:45:8d:15:94:a8:e1:48:68:12:e0:72:0c:0c:1b:bb:
         e2:c4:b8:b5:7a:1f:10:b4:4b:e1:9a:53:ce:c4:96:e6:25:4f:
         44:ad:86:1b:c6:41:33:f1:a6:42:df:7a:9e:be:dd:25:ac:34:
         57:98:19:43:da:e6:6b:ca:f5:fc:e4:c0:d4:02:68:54:49:9d:
         58:72:6b:7c:57:3d:ef:cc:d5:d2:52:68:47:9a:05:7b:8b:10:
         3c:ec:a6:d7:8b:b3:d2:ed:67:c0:36:e4:50:f1:a8:a0:a1:59:
         ec:43:a5:8a:11:59:a8:20:fe:22:2b:55:6d:6d:fb:5c:7e:72:
         70:eb:6f:a7:b7:e4:0a:50:05:db:00:ed:eb:d6:44:b1:c6:9a:
         e3:86:a4:d0:70:a1:6e:4c:59:eb:fa:d0:a3:6a:e9:3a:29:52:
         7c:b0:f3:07:f9:03:9d:3a:e5:a7:62:90:6c:73:c1:f2:18:8f:
         c8:d5:a2:17:ce:9c:f5:a6:8d:23:9b:a1:7b:e7:4d:19:b0:f9:
         ce:32:d7:e3:43:72:59:74:0d:84:90:70:a3:a4:7d:67:fb:09:
         38:39:b5:8d:a2:cc:93:20:13:ef:cc:1e:38:13:69:01:7d:9f:
         75:e9:9b:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYmBl7+rYmF78ah9RVXtvpSU3B6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFCRDcyMDJGQUI0MzQxNzQ4NkYxRUZFNDAwOTE2RTRG
ODE0RkMxMDAeFw0yMzAyMDYwNDUyMDVaFw0yMzAyMDcwNjMyMDVaMDMxMTAvBgNV
BAMTKDFDNzI4MUQ0RkM2MTRFMDBBQTQwMEVCMEUyM0M2RTdCODI0NjlDQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Yk5NSuSKgVldyW4hZDcwZqs3
MDMHqDUprhHSwTj9VfPPpLYcHURPFezyjrYNP0XycZoqqO0qzNiY6MOiAqUkuT9N
l2Jz/ful5Oirod5UJdZ8aZL2v8+YROC/mX4Otr+HoqDrdSPYi9E5TITPUixWoIXQ
UzbcVMXXUyYD+5bSEALdkbhT/joKqQ5L+9iAMdzXGfH4cGpMN3yaj6As1YJiZYuu
eGLU3UCgjgJL24xxCnnmr4YFzBscA1G1DDeGpjU+wYLIf2YGZbQox7PlzSrQAIzY
neBM4MxpSZkT+mZo1LdiCHzRfHVgKwdCjTI/JzomSDduUYEmMQRUQ5nmu7wrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHHKB1PxhTgCqQA6w4jxue4JGnK8wHwYDVR0j
BBgwFoAUkb1yAvq0NBdIbx7+QAkW5PgU/BAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC85MUJENzIwMkZBQjQzNDE3NDg2RjFFRkU0MDA5MTZFNEY4MTRGQzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxQkQ3MjAyRkFCNDM0MTc0
ODZGMUVGRTQwMDkxNkU0RjgxNEZDMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhReEUvMC85
MUJENzIwMkZBQjQzNDE3NDg2RjFFRkU0MDA5MTZFNEY4MTRGQzEwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnz3Jgv99MDlAurlywBcUKUA6eTBwRY0VlKjhSGgS4HIMDBu74sS4tXofELRL
4ZpTzsSW5iVPRK2GG8ZBM/GmQt96nr7dJaw0V5gZQ9rma8r1/OTA1AJoVEmdWHJr
fFc978zV0lJoR5oFe4sQPOym14uz0u1nwDbkUPGooKFZ7EOlihFZqCD+IitVbW37
XH5ycOtvp7fkClAF2wDt69ZEscaa44ak0HChbkxZ6/rQo2rpOilSfLDzB/kDnTrl
p2KQbHPB8hiPyNWiF86c9aaNI5uhe+dNGbD5zjLX40NyWXQNhJBwo6R9Z/sJODm1
jaLMkyAT78weOBNpAX2fdembrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org