Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.mft
File:                     529515031490959891D741C128697E9213EE57D3.mft (raw, json)
Hash identifier:          2kavMxFjH3AldWjs7oAZFiZk01i1vsZBJhK8gZfE+5M=
Subject key identifier:   16:67:71:1B:54:34:B0:7D:67:A4:A3:46:0A:81:35:5B:B1:5C:CA:D2
Authority key identifier: 52:95:15:03:14:90:95:98:91:D7:41:C1:28:69:7E:92:13:EE:57:D3
Certificate issuer:       /CN=529515031490959891D741C128697E9213EE57D3
Certificate serial:       631062E2672121A2D3F784B701E82E279CE61BDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529515031490959891D741C128697E9213EE57D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.mft
Manifest number:          03D1
Signing time:             Mon 15 Apr 2024 00:28:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:23:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:28:00 +0000
Files and hashes:         1: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (hash: OLo9RBc4Pg6tjiaowEpbObqQjF8K2dVMgid2uALUGC4=)
                          2: 323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (hash: sT/Tb9Ni8ST9tkyNgcXPgnj3z6Ncxztol30uP+TUUzA=)
                          3: 323830343a373530383a3a2f33322d3332203d3e20323731303139.roa (hash: uTJ4IwBAZGGAkiuuU438xDicn4d/sMEt7BaWnCXGmuE=)
                          4: 3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (hash: SrUvEZEkFdsXmxnEQU5+zPAHeJPEZCkBjd5nN54RN+s=)
                          5: 3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (hash: 7F5GVSWaQZCELcETYIsAiYEOhaKToyUhnuu1ryCuWl8=)
                          6: 529515031490959891D741C128697E9213EE57D3.crl (hash: dPMjaGpNC/q3Vt5fADINYMvr/fpq0kC/1PN4R8p3rk8=)
                          7: 323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (hash: olunvjIxn8esvM4SO85w37FGg8dckiSMDcMLSwLEg2A=)
                          8: 3230302e35322e3233322e302f32342d3234203d3e20323731303139.roa (hash: a1ytrzw0LsOw/2TkOxz/q6+EG9tqqAfmnGcjg/LMcxg=)
                          9: 3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (hash: pSJMVz5bF6gf6c7XvsPI5rDEjrxaoIrO0k1GLwBDIAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:10:62:e2:67:21:21:a2:d3:f7:84:b7:01:e8:2e:27:9c:e6:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529515031490959891D741C128697E9213EE57D3
        Validity
            Not Before: Apr 15 00:23:00 2024 GMT
            Not After : Apr 22 00:28:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:2f:d2:51:04:e5:c5:7f:44:a7:55:fb:8a:
                    aa:ff:4c:d4:ce:64:04:70:ac:93:1c:83:18:ec:5d:
                    0e:3a:af:f4:c5:92:d8:e2:de:4b:38:d3:6e:d7:52:
                    f9:a1:d9:b8:d5:31:21:1a:38:86:3a:30:ba:bc:05:
                    90:fe:d5:f2:00:91:98:07:47:66:6e:64:86:a8:de:
                    76:6d:81:65:46:c2:7c:e1:eb:28:3c:20:4f:3c:df:
                    e7:b2:69:f3:63:3f:98:ca:fe:ff:a3:dd:79:b0:fb:
                    6c:67:9c:8d:5e:95:ee:2b:07:c0:16:ec:99:ba:bc:
                    a7:08:e9:c0:e0:c4:70:56:c0:eb:94:3f:3a:03:51:
                    9c:37:47:4d:35:0b:23:5a:9e:69:79:c1:69:af:b0:
                    c3:44:ad:83:54:9a:fe:92:33:09:50:52:ca:70:84:
                    a2:b5:45:7d:a8:15:a1:fb:7c:11:5d:5e:37:6f:c1:
                    60:08:1f:2f:3f:b5:dd:67:e5:4a:82:81:9d:ee:a1:
                    0d:85:78:f8:45:e1:bd:b0:66:e2:66:9f:96:40:48:
                    2f:3e:a9:89:a8:6e:52:9d:6c:1a:60:0c:db:c3:01:
                    be:c4:85:8a:dc:77:a8:f8:7d:06:46:4d:16:b7:c8:
                    a7:87:28:f2:6a:a6:88:c0:9d:d7:f5:18:dc:9e:08:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:71:1B:54:34:B0:7D:67:A4:A3:46:0A:81:35:5B:B1:5C:CA:D2
            X509v3 Authority Key Identifier:
                keyid:52:95:15:03:14:90:95:98:91:D7:41:C1:28:69:7E:92:13:EE:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/529515031490959891D741C128697E9213EE57D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:1f:36:15:82:74:9e:38:46:78:4a:60:e4:98:1c:63:3b:
         d1:16:07:37:c0:1f:aa:46:06:2d:32:f6:3d:8c:16:86:d6:f6:
         32:11:0a:47:ba:b5:3b:f1:ac:69:80:30:50:5e:08:ff:19:22:
         59:1f:eb:1f:04:89:ba:d3:be:48:1b:b5:b6:37:11:e0:a0:7c:
         0b:1e:81:c9:ec:8d:0a:c4:8c:fa:18:44:33:69:fc:5b:e3:51:
         e3:51:e8:1c:19:65:4f:59:b2:01:63:6c:69:e4:a0:bf:65:11:
         59:d9:bc:86:b8:73:a3:a4:74:fe:9b:42:98:3f:df:ee:44:a4:
         c3:cc:b8:94:1a:8f:d4:86:8c:18:ae:09:28:f6:64:93:4f:f5:
         cb:e5:a4:28:0c:1e:3e:ec:de:42:6d:d2:12:c4:22:08:46:91:
         43:a7:f1:4b:9b:70:cf:31:1f:a8:1a:72:5b:ae:61:1f:03:0e:
         17:ab:37:d7:a3:98:b7:28:5e:bf:82:da:f0:ed:84:2f:93:8c:
         2e:f7:57:91:51:dc:4e:2b:07:f9:8e:15:ca:e6:4a:d5:cf:60:
         3d:0e:b0:c5:0f:d0:af:51:d8:57:d9:9b:25:12:8b:69:c6:c5:
         0a:44:dd:ac:7f:b7:64:81:df:45:37:b6:ab:4d:b9:09:10:f3:
         a7:30:54:67
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUYxBi4mchIaLT94S3AeguJ5zmG9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5NTE1MDMxNDkwOTU5ODkxRDc0MUMxMjg2OTdFOTIx
M0VFNTdEMzAeFw0yNDA0MTUwMDIzMDBaFw0yNDA0MjIwMDI4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJDQTJGRDI1MTA0RTVDNTdG
NDRBNzU1RkI4QUFBRkY0Q0Q0Q0U2NDA0NzBBQzkzMUM4MzE4RUM1RDBFM0FBRkY0
QzU5MkQ4RTJERTRCMzhEMzZFRDc1MkY5QTFEOUI4RDUzMTIxMUEzODg2M0EzMEJB
QkMwNTkwRkVENUYyMDA5MTk4MDc0NzY2NkU2NDg2QThERTc2NkQ4MTY1NDZDMjdD
RTFFQjI4M0MyMDRGM0NERkU3QjI2OUYzNjMzRjk4Q0FGRUZGQTNERDc5QjBGQjZD
Njc5QzhENUU5NUVFMkIwN0MwMTZFQzk5QkFCQ0E3MDhFOUMwRTBDNDcwNTZDMEVC
OTQzRjNBMDM1MTlDMzc0NzREMzUwQjIzNUE5RTY5NzlDMTY5QUZCMEMzNDRBRDgz
NTQ5QUZFOTIzMzA5NTA1MkNBNzA4NEEyQjU0NTdEQTgxNUExRkI3QzExNUQ1RTM3
NkZDMTYwMDgxRjJGM0ZCNURENjdFNTRBODI4MTlERUVBMTBEODU3OEY4NDVFMUJE
QjA2NkUyNjY5Rjk2NDA0ODJGM0VBOTg5QTg2RTUyOUQ2QzFBNjAwQ0RCQzMwMUJF
QzQ4NThBREM3N0E4Rjg3RDA2NDY0RDE2QjdDOEE3ODcyOEYyNkFBNjg4QzA5REQ3
RjUxOERDOUUwOENBODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0sov0lEE5cV/RKdV+4qq/0zUzmQEcKyTHIMY7F0OOq/0xZLY4t5L
ONNu11L5odm41TEhGjiGOjC6vAWQ/tXyAJGYB0dmbmSGqN52bYFlRsJ84esoPCBP
PN/nsmnzYz+Yyv7/o915sPtsZ5yNXpXuKwfAFuyZurynCOnA4MRwVsDrlD86A1Gc
N0dNNQsjWp5pecFpr7DDRK2DVJr+kjMJUFLKcISitUV9qBWh+3wRXV43b8FgCB8v
P7XdZ+VKgoGd7qENhXj4ReG9sGbiZp+WQEgvPqmJqG5SnWwaYAzbwwG+xIWK3Heo
+H0GRk0Wt8inhyjyaqaIwJ3X9RjcngjKgQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FBZncRtUNLB9Z6SjRgqBNVuxXMrSMB8GA1UdIwQYMBaAFFKVFQMUkJWYkddBwShp
fpIT7lfTMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NURXRhOU1BY0xNUVlK
Q1RSYmIzODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAvNTI5NTE1MDMxNDkwOTU5
ODkxRDc0MUMxMjg2OTdFOTIxM0VFNTdEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81Mjk1MTUwMzE0OTA5NTk4OTFENzQxQzEyODY5N0U5MjEzRUU1
N0QzLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NURXRhOU1BY0xNUVlKQ1RSYmIz
ODJMd1FxVW41N2lvQ3RvVHB5cXdHYlo1LzAvNTI5NTE1MDMxNDkwOTU5ODkxRDc0
MUMxMjg2OTdFOTIxM0VFNTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAI6HzYVgnSeOEZ4SmDkmBxj
O9EWBzfAH6pGBi0y9j2MFobW9jIRCke6tTvxrGmAMFBeCP8ZIlkf6x8EibrTvkgb
tbY3EeCgfAsegcnsjQrEjPoYRDNp/FvjUeNR6BwZZU9ZsgFjbGnkoL9lEVnZvIa4
c6OkdP6bQpg/3+5EpMPMuJQaj9SGjBiuCSj2ZJNP9cvlpCgMHj7s3kJt0hLEIghG
kUOn8UubcM8xH6gacluuYR8DDherN9ejmLcoXr+C2vDthC+TjC73V5FR3E4rB/mO
FcrmStXPYD0OsMUP0K9R2FfZmyUSi2nGxQpE3ax/t2SB30U3tqtNuQkQ86cwVGc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org