Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.mft
File:                     91BA894BC4C9FD65599785CF3EE4DECB1FF82238.mft (raw, json)
Hash identifier:          Cgy1WyRnv7qty6Wu7PMaOafHiMXqDPtG5m/YTQsCjbc=
Subject key identifier:   6B:04:CA:29:80:79:13:7B:66:EA:F0:AB:16:B6:2E:A2:56:AF:13:0D
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       1AF34FA4E9752E1B2FBB7FEECE32EECC98F0C13B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.mft
Manifest number:          0182
Signing time:             Fri 24 Nov 2023 03:36:45 +0000
Manifest this update:     Fri 24 Nov 2023 03:31:45 +0000
Manifest next update:     Sat 25 Nov 2023 03:56:45 +0000
Files and hashes:         1: 3138392e33362e3133302e302f32332d3233203d3e20323730363030.roa (hash: P0EpgNMMOEf4pU7bNdA4i5uK6d92PsspUPuB3UpSh9o=)
                          2: 3138392e33362e3132382e302f32322d3232203d3e20323730363030.roa (hash: FalmDMdHFc/q8YvcWLLQlJCSNNpRtXfZSY9b327RuCg=)
                          3: 323830343a366537633a383030303a3a2f33332d3333203d3e20323730363030.roa (hash: jCNTcmUNnuPq3UqjOLecPeYURmvPKxUmRMsTQSKJtXA=)
                          4: 323830343a366537633a3a2f33332d3333203d3e20323730363030.roa (hash: eoTpyzQIDU8TKvjR5ML+2/vRwYjz1DBliwC/H6vTzxk=)
                          5: 91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl (hash: wq+8UopamoMdEhV8JTZSOqoy0XPo5iHk4TQ00ZnordM=)
                          6: 3138392e33362e3132382e302f32332d3233203d3e20323730363030.roa (hash: mcYvdoe/rlMnGC5O6NpQlSuVEp2SSXNRFM4ps2eH+jA=)
                          7: 323830343a366537633a3a2f33322d3332203d3e20323730363030.roa (hash: jOPLvbt7kt9pTAJ/+q8oQ57Gq77valGFy8AoTIzm1SI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:4f:a4:e9:75:2e:1b:2f:bb:7f:ee:ce:32:ee:cc:98:f0:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Nov 24 03:31:45 2023 GMT
            Not After : Nov 25 03:56:45 2023 GMT
        Subject: CN=6B04CA298079137B66EAF0AB16B62EA256AF130D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:51:e2:e4:89:aa:4c:d0:7a:e5:00:22:08:
                    8c:5f:8a:a9:20:7f:4f:6b:c3:63:85:15:b6:36:dc:
                    63:a3:a6:da:11:df:9c:2e:db:f8:65:43:c1:9d:f2:
                    06:39:c0:0b:83:cb:02:83:4b:74:45:0f:60:d1:38:
                    d5:29:fd:63:e1:f4:2e:9b:58:b6:97:bb:a5:31:e5:
                    cd:41:8b:6c:f3:85:a1:09:ca:93:50:39:37:1d:2e:
                    89:e4:b3:24:5d:ec:b9:a6:82:cd:0d:eb:a3:37:50:
                    82:d0:c8:52:09:b4:72:a3:73:6e:db:92:1a:42:7f:
                    a4:48:f6:b4:64:ab:3c:20:81:6b:05:c7:50:04:05:
                    a4:41:0c:ba:c5:fc:79:32:2d:ea:6e:a8:43:81:30:
                    67:87:af:be:43:69:69:cb:81:d4:23:78:fb:f4:3e:
                    20:2f:3a:55:38:e2:8b:6e:6f:d5:43:36:b0:90:f0:
                    34:eb:13:b5:f0:f1:c1:79:fd:58:92:0d:f4:b7:04:
                    48:b8:47:c3:5a:7c:b0:6b:39:4e:da:1c:bb:c7:17:
                    37:0e:e5:54:d3:de:5b:d4:66:b8:cf:b1:d5:ca:55:
                    db:a1:f7:8a:3c:62:bf:2c:0d:e0:50:d8:a9:05:a7:
                    d3:b5:97:cd:c6:d7:61:2f:d1:99:36:ad:56:12:32:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:CA:29:80:79:13:7B:66:EA:F0:AB:16:B6:2E:A2:56:AF:13:0D
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:70:d0:b9:33:03:dd:7b:f0:6b:b2:3a:72:fb:3f:e2:1a:ce:
         de:a5:0b:2f:53:ab:17:c9:b6:c1:01:63:b3:46:dd:12:31:58:
         9e:10:a9:81:aa:d9:e2:d1:6f:0a:16:55:fc:40:07:69:23:c2:
         a4:a7:47:77:22:da:9d:09:4b:a7:0c:aa:1d:4e:d5:97:c0:22:
         51:05:8f:34:0d:22:fc:e1:29:c0:1a:88:81:47:9a:87:67:bc:
         98:01:f9:6c:ff:2a:1b:ec:48:7f:67:e8:0d:f9:bb:7d:55:11:
         90:2c:7b:d1:2c:8d:1f:d6:bb:6e:38:f1:a9:18:a8:44:c7:24:
         f3:3f:03:ef:37:bc:01:7d:94:c1:04:fd:c3:93:4c:db:f6:ec:
         2b:91:eb:65:4f:1a:fa:b4:b0:e0:95:de:e1:97:67:95:c1:70:
         3a:a1:bc:77:b0:c4:0d:cc:bb:d3:5c:63:0e:2d:94:2f:83:c8:
         eb:68:80:23:d4:da:d3:d9:74:e6:25:1c:0d:d7:93:a3:62:4d:
         ec:f4:5a:4a:bc:d2:be:3f:b2:da:da:c8:5e:f6:0b:52:f6:94:
         43:5b:cc:d4:4f:0a:fa:ee:eb:c0:64:4a:46:45:6b:3d:14:07:
         1a:a1:c9:ef:57:f1:c0:3b:51:24:0b:72:4a:c9:35:60:ef:6a:
         6d:c4:fc:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGvNPpOl1Lhsvu3/uzjLuzJjwwTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFCQTg5NEJDNEM5RkQ2NTU5OTc4NUNGM0VFNERFQ0Ix
RkY4MjIzODAeFw0yMzExMjQwMzMxNDVaFw0yMzExMjUwMzU2NDVaMDMxMTAvBgNV
BAMTKDZCMDRDQTI5ODA3OTEzN0I2NkVBRjBBQjE2QjYyRUEyNTZBRjEzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZVHi5ImqTNB65QAiCIxfiqkg
f09rw2OFFbY23GOjptoR35wu2/hlQ8Gd8gY5wAuDywKDS3RFD2DRONUp/WPh9C6b
WLaXu6Ux5c1Bi2zzhaEJypNQOTcdLonksyRd7Lmmgs0N66M3UILQyFIJtHKjc27b
khpCf6RI9rRkqzwggWsFx1AEBaRBDLrF/HkyLepuqEOBMGeHr75DaWnLgdQjePv0
PiAvOlU44otub9VDNrCQ8DTrE7Xw8cF5/ViSDfS3BEi4R8NafLBrOU7aHLvHFzcO
5VTT3lvUZrjPsdXKVduh94o8Yr8sDeBQ2KkFp9O1l83G12Ev0Zk2rVYSMvXHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUawTKKYB5E3tm6vCrFrYuolavEw0wHwYDVR0j
BBgwFoAUkbqJS8TJ/WVZl4XPPuTeyx/4IjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC85MUJBODk0QkM0QzlGRDY1NTk5Nzg1Q0YzRUU0REVDQjFGRjgyMjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxQkE4OTRCQzRDOUZENjU1
OTk3ODVDRjNFRTRERUNCMUZGODIyMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdFczgvMC85
MUJBODk0QkM0QzlGRDY1NTk5Nzg1Q0YzRUU0REVDQjFGRjgyMjM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaXDQuTMD3Xvwa7I6cvs/4hrO3qULL1OrF8m2wQFjs0bdEjFYnhCpgarZ4tFv
ChZV/EAHaSPCpKdHdyLanQlLpwyqHU7Vl8AiUQWPNA0i/OEpwBqIgUeah2e8mAH5
bP8qG+xIf2foDfm7fVURkCx70SyNH9a7bjjxqRioRMck8z8D7ze8AX2UwQT9w5NM
2/bsK5HrZU8a+rSw4JXe4ZdnlcFwOqG8d7DEDcy701xjDi2UL4PI62iAI9Ta09l0
5iUcDdeTo2JN7PRaSrzSvj+y2trIXvYLUvaUQ1vM1E8K+u7rwGRKRkVrPRQHGqHJ
71fxwDtRJAtySsk1YO9qbcT8dg==
-----END CERTIFICATE-----