Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft
File:                     68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft (raw, json)
Hash identifier:          S7bmj4fOfstkvKqX1RuMwnP+zO8xhnNgzKc6bs5dpU8=
Subject key identifier:   E9:CA:B0:E0:8C:F9:21:C1:CC:A3:0B:21:B9:A6:DC:7C:0D:B3:26:C7
Authority key identifier: 68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08
Certificate issuer:       /CN=68CCA379DB57908B4DA691FC2C9431DE082C3C08
Certificate serial:       160DF72BBD28DE22317193D0A294C74ED8C0C705
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft
Manifest number:          B1
Signing time:             Thu 05 Sep 2024 13:14:44 +0000
Manifest this update:     Thu 05 Sep 2024 13:09:44 +0000
Manifest next update:     Fri 06 Sep 2024 16:51:44 +0000
Files and hashes:         1: 68CCA379DB57908B4DA691FC2C9431DE082C3C08.crl (hash: bPIRHSzcRmk2ua23Co9AuvpXsrCOZ067XBLbb/i1Xzg=)
                          2: 323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (hash: gHRFWx6AFvPGkozGuPoURLTxASoVxhPPE1IFJgqkQnU=)
                          3: 34352e352e3131322e302f32322d3234203d3e20323636303934.roa (hash: 8Esk5UhG0ajZedTA5rWY7ndlKWJwCMn5y3bTNafobfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:f7:2b:bd:28:de:22:31:71:93:d0:a2:94:c7:4e:d8:c0:c7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CCA379DB57908B4DA691FC2C9431DE082C3C08
        Validity
            Not Before: Sep  5 13:09:44 2024 GMT
            Not After : Sep  6 16:51:44 2024 GMT
        Subject: CN=E9CAB0E08CF921C1CCA30B21B9A6DC7C0DB326C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:ed:70:e8:63:3a:15:24:97:09:1c:fc:5d:
                    30:97:a3:a1:59:23:22:2c:36:0f:e7:09:d9:47:11:
                    76:e9:bb:b4:d6:f0:88:fd:d6:6e:33:29:e1:2b:c5:
                    d9:d8:26:3d:4e:4d:b8:0e:c2:a9:a4:fb:46:13:5d:
                    64:26:f1:67:9f:ae:4f:9b:53:f5:40:42:a7:03:bd:
                    a4:00:4c:96:61:06:a7:2d:d7:b3:34:2a:51:c1:c1:
                    14:a2:8a:f4:a2:f2:fe:98:5b:c8:1f:9d:f9:66:a8:
                    ff:8c:a3:12:67:6e:6f:32:cf:5c:02:f1:21:14:d8:
                    19:f5:19:e6:0d:25:9e:04:94:3f:f7:64:7f:1e:11:
                    ba:e0:a6:57:f4:d5:9f:22:d3:d2:ee:6d:5a:ff:56:
                    d3:33:c1:e1:28:9f:a5:24:2b:cd:ed:a0:02:68:e9:
                    8d:c8:c2:87:b0:f5:5b:e3:ff:c5:74:f3:e7:2d:e3:
                    ff:08:99:0d:3d:40:aa:87:90:c8:b7:6e:33:15:f2:
                    b6:39:c1:e9:48:66:b1:1b:24:79:e2:6b:8e:a6:c2:
                    4f:7c:04:bf:39:2f:45:84:ca:11:03:08:9d:78:7e:
                    08:9e:95:51:89:48:e1:8c:56:34:01:ef:13:9d:a6:
                    f7:27:df:5e:19:f9:ce:e9:62:b9:e0:b0:da:56:bc:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:B0:E0:8C:F9:21:C1:CC:A3:0B:21:B9:A6:DC:7C:0D:B3:26:C7
            X509v3 Authority Key Identifier:
                keyid:68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:ff:19:fe:7a:06:09:8f:d4:ae:a1:8a:52:bd:fd:41:2b:
         22:9c:23:28:67:f3:09:a0:01:75:7f:95:f6:02:77:ea:db:ee:
         08:c9:e6:43:0e:27:1b:2a:81:80:26:fd:df:21:42:5e:38:49:
         51:96:ed:ae:e9:4d:bf:da:99:ad:01:0e:c5:5f:80:34:51:cf:
         c4:ed:ac:3f:5d:34:d0:0b:7b:9f:88:10:f5:43:4f:b7:13:a6:
         65:9d:2b:75:b1:79:d4:26:fa:55:f6:28:08:34:7c:01:26:43:
         1a:86:79:41:a8:fe:9e:a5:3f:4d:54:b5:fa:36:8d:6c:14:4c:
         26:cd:a8:9a:e5:7c:1e:c8:fc:69:96:17:af:82:22:72:8c:ad:
         52:f6:97:fd:60:b8:04:82:b3:d0:ca:56:9c:e6:8b:36:1e:75:
         0e:8e:8c:75:4c:d7:d7:64:90:39:90:08:34:f2:a8:c9:d9:8d:
         fc:48:43:50:81:e7:62:e2:93:ad:95:73:02:03:33:62:52:d0:
         cd:45:0e:64:a6:d5:93:29:64:b7:f4:fd:73:9d:ae:77:63:27:
         9e:1a:d6:37:f5:84:c0:3d:d3:c1:1d:76:61:db:65:64:61:b8:
         04:35:7b:af:dd:e5:51:9b:e1:dc:8d:f9:87:09:c9:b9:e3:51:
         43:aa:b5:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFg33K70o3iIxcZPQopTHTtjAxwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhDQ0EzNzlEQjU3OTA4QjREQTY5MUZDMkM5NDMxREUw
ODJDM0MwODAeFw0yNDA5MDUxMzA5NDRaFw0yNDA5MDYxNjUxNDRaMDMxMTAvBgNV
BAMTKEU5Q0FCMEUwOENGOTIxQzFDQ0EzMEIyMUI5QTZEQzdDMERCMzI2QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnB+1w6GM6FSSXCRz8XTCXo6FZ
IyIsNg/nCdlHEXbpu7TW8Ij91m4zKeErxdnYJj1OTbgOwqmk+0YTXWQm8Wefrk+b
U/VAQqcDvaQATJZhBqct17M0KlHBwRSiivSi8v6YW8gfnflmqP+MoxJnbm8yz1wC
8SEU2Bn1GeYNJZ4ElD/3ZH8eEbrgplf01Z8i09LubVr/VtMzweEon6UkK83toAJo
6Y3Iwoew9Vvj/8V08+ct4/8ImQ09QKqHkMi3bjMV8rY5welIZrEbJHnia46mwk98
BL85L0WEyhEDCJ14fgielVGJSOGMVjQB7xOdpvcn314Z+c7pYrngsNpWvP9vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6cqw4Iz5IcHMowshuabcfA2zJscwHwYDVR0j
BBgwFoAUaMyjedtXkItNppH8LJQx3ggsPAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1V1R0hjVnZYOFE0S3ZrZGppN1hHd2ZWMkpjTnJwRnZvMzFoN1ZZODNk
UG4vMC82OENDQTM3OURCNTc5MDhCNERBNjkxRkMyQzk0MzFERTA4MkMzQzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4Q0NBMzc5REI1NzkwOEI0
REE2OTFGQzJDOTQzMURFMDgyQzNDMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1V1R0hjVnZYOFE0S3ZrZGppN1hHd2ZWMkpjTnJwRnZvMzFoN1ZZODNkUG4vMC82
OENDQTM3OURCNTc5MDhCNERBNjkxRkMyQzk0MzFERTA4MkMzQzA4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaI//Gf56BgmP1K6hilK9/UErIpwjKGfzCaABdX+V9gJ36tvuCMnmQw4nGyqB
gCb93yFCXjhJUZbtrulNv9qZrQEOxV+ANFHPxO2sP1000At7n4gQ9UNPtxOmZZ0r
dbF51Cb6VfYoCDR8ASZDGoZ5Qaj+nqU/TVS1+jaNbBRMJs2omuV8Hsj8aZYXr4Ii
coytUvaX/WC4BIKz0MpWnOaLNh51Do6MdUzX12SQOZAINPKoydmN/EhDUIHnYuKT
rZVzAgMzYlLQzUUOZKbVkylkt/T9c52ud2MnnhrWN/WEwD3TwR12YdtlZGG4BDV7
r93lUZvh3I35hwnJueNRQ6q1rA==
-----END CERTIFICATE-----