Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.mft
File:                     951AE056EA191708C1417B7F9956EA6704D459D0.mft (raw, json)
Hash identifier:          KaWDtE3acd/7NRyQV0w0a6OFHTIXPu5e33G1zvwdae4=
Subject key identifier:   7A:0B:54:01:08:41:72:F6:35:50:B0:7E:9D:C5:2D:C4:E8:47:EA:7F
Authority key identifier: 95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0
Certificate issuer:       /CN=951AE056EA191708C1417B7F9956EA6704D459D0
Certificate serial:       02EA0B19D42D6C84EA2581556789F7632E69BA5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.mft
Manifest number:          01E6
Signing time:             Sun 14 Apr 2024 22:38:37 +0000
Manifest this update:     Sun 14 Apr 2024 22:33:37 +0000
Manifest next update:     Tue 16 Apr 2024 00:56:37 +0000
Files and hashes:         1: 951AE056EA191708C1417B7F9956EA6704D459D0.crl (hash: Iwphc8Cfe+j1Fw3y9DP8jxTeDwDLb4q4KVhFZP8qk6Y=)
                          2: 3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (hash: vT4t92zXWeE3jo6yyybsaWCfYIvYJ0mD1mxcBzSgLkM=)
                          3: 323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (hash: Gp9Lf5Qy1AMKufCP8gxs188fDha23CMwdR9DToU9Zqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ea:0b:19:d4:2d:6c:84:ea:25:81:55:67:89:f7:63:2e:69:ba:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951AE056EA191708C1417B7F9956EA6704D459D0
        Validity
            Not Before: Apr 14 22:33:37 2024 GMT
            Not After : Apr 16 00:56:37 2024 GMT
        Subject: CN=7A0B5401084172F63550B07E9DC52DC4E847EA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:ee:95:3d:fb:1b:a5:ad:c2:09:a8:0f:a7:
                    05:39:6f:90:18:7a:83:94:29:bc:ff:c8:82:3f:13:
                    c0:9e:b8:89:8f:b6:2d:44:4d:fb:e7:5d:c0:21:db:
                    a1:5b:54:bd:55:f4:92:79:50:b0:2d:98:c4:b6:fe:
                    e3:e4:6e:e8:0c:c5:e9:af:e4:d6:d8:97:5b:09:7a:
                    f5:06:56:58:74:1d:0f:e8:a4:4b:f1:fa:9c:00:5e:
                    7c:65:02:f3:30:39:c6:66:ae:6c:e5:ec:03:37:e1:
                    a7:92:13:42:4f:be:b3:2a:7b:a9:cb:bc:96:04:c3:
                    ca:01:c4:05:e3:94:9c:56:e2:43:c0:04:89:d6:9c:
                    78:ce:84:f6:c5:f8:1f:84:d4:5e:d7:b6:39:3e:96:
                    8b:eb:46:6a:4c:d9:ef:37:5d:48:67:e1:a7:59:8d:
                    7b:04:4a:4c:f1:e9:12:a1:0e:7d:ff:50:75:65:ab:
                    22:8b:4a:28:ce:81:14:86:4e:4c:10:33:aa:f3:75:
                    96:c2:19:e0:4f:53:35:2f:79:ae:92:db:65:82:01:
                    0d:93:eb:03:1a:d9:37:e7:b7:76:11:08:fd:1d:f1:
                    18:60:7b:3e:57:6a:1f:43:39:7d:57:8b:d2:01:8f:
                    d6:5e:a2:89:b1:da:b4:48:81:82:87:dd:37:d3:96:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:54:01:08:41:72:F6:35:50:B0:7E:9D:C5:2D:C4:E8:47:EA:7F
            X509v3 Authority Key Identifier:
                keyid:95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:36:0b:7b:b7:92:3a:9d:b8:96:8f:3a:15:38:08:e6:eb:0d:
         07:e9:c3:c3:ea:6a:21:1f:8c:0f:fb:07:5d:2a:6c:27:5f:86:
         88:85:9c:63:24:e7:58:2d:b4:15:61:56:7f:b6:0d:3f:d0:05:
         d9:ff:48:c4:8d:c9:40:e5:ed:02:e4:d4:6a:b7:6a:ff:38:bf:
         e7:cb:d8:7a:1e:75:2f:82:65:84:46:09:e6:4e:3b:9d:c1:19:
         c6:1e:45:a2:1e:d9:f0:3e:ab:41:7a:4d:d7:16:f3:d4:45:6c:
         e7:23:75:1a:89:b7:9a:01:0d:5f:02:d6:5d:44:1c:01:93:6f:
         0b:19:4b:31:29:0e:46:fb:f7:90:e2:01:b4:db:36:48:a7:9b:
         0a:37:d3:9c:a8:f9:2b:b7:e8:45:6f:ca:49:7f:18:df:fa:b7:
         b1:cc:e7:59:d8:03:bd:e8:2f:87:62:a8:b5:51:1b:b1:16:86:
         85:2e:be:84:2b:2e:d6:f5:f4:7c:78:21:26:5e:13:6b:d4:c2:
         1f:b8:85:57:da:87:21:57:22:ee:65:91:bb:8f:0a:e6:38:3d:
         78:f3:e6:86:f7:b2:29:41:57:e5:d7:df:e7:d5:db:ff:a8:06:
         de:89:e0:c0:b8:eb:c7:67:c1:fb:a7:58:82:c3:f6:30:fc:53:
         bb:af:3d:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAuoLGdQtbITqJYFVZ4n3Yy5pulwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUxQUUwNTZFQTE5MTcwOEMxNDE3QjdGOTk1NkVBNjcw
NEQ0NTlEMDAeFw0yNDA0MTQyMjMzMzdaFw0yNDA0MTYwMDU2MzdaMDMxMTAvBgNV
BAMTKDdBMEI1NDAxMDg0MTcyRjYzNTUwQjA3RTlEQzUyREM0RTg0N0VBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0e6VPfsbpa3CCagPpwU5b5AY
eoOUKbz/yII/E8CeuImPti1ETfvnXcAh26FbVL1V9JJ5ULAtmMS2/uPkbugMxemv
5NbYl1sJevUGVlh0HQ/opEvx+pwAXnxlAvMwOcZmrmzl7AM34aeSE0JPvrMqe6nL
vJYEw8oBxAXjlJxW4kPABInWnHjOhPbF+B+E1F7Xtjk+lovrRmpM2e83XUhn4adZ
jXsESkzx6RKhDn3/UHVlqyKLSijOgRSGTkwQM6rzdZbCGeBPUzUvea6S22WCAQ2T
6wMa2Tfnt3YRCP0d8Rhgez5Xah9DOX1Xi9IBj9Zeoomx2rRIgYKH3TfTluu3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUegtUAQhBcvY1ULB+ncUtxOhH6n8wHwYDVR0j
BBgwFoAUlRrgVuoZFwjBQXt/mVbqZwTUWdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFB
TlAvMC85NTFBRTA1NkVBMTkxNzA4QzE0MTdCN0Y5OTU2RUE2NzA0RDQ1OUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MUFFMDU2RUExOTE3MDhD
MTQxN0I3Rjk5NTZFQTY3MDRENDU5RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1pLaU1VSmgyWE1DampNNjdVVlE1VDZ3QnFyQnU1YTZSdXIxTFFlUTFBTlAvMC85
NTFBRTA1NkVBMTkxNzA4QzE0MTdCN0Y5OTU2RUE2NzA0RDQ1OUQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJjYLe7eSOp24lo86FTgI5usNB+nDw+pqIR+MD/sHXSpsJ1+GiIWcYyTnWC20
FWFWf7YNP9AF2f9IxI3JQOXtAuTUardq/zi/58vYeh51L4JlhEYJ5k47ncEZxh5F
oh7Z8D6rQXpN1xbz1EVs5yN1Gom3mgENXwLWXUQcAZNvCxlLMSkORvv3kOIBtNs2
SKebCjfTnKj5K7foRW/KSX8Y3/q3scznWdgDvegvh2KotVEbsRaGhS6+hCsu1vX0
fHghJl4Ta9TCH7iFV9qHIVci7mWRu48K5jg9ePPmhveyKUFX5dff59Xb/6gG3ong
wLjrx2fB+6dYgsP2MPxTu6891w==
-----END CERTIFICATE-----